last executing test programs:

33m44.418074548s ago: executing program 2 (id=777):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00')
preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x2, 0x8)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, 0x0, 0x1e0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=<r2=>0x0, 0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1})
syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x3c}}, 0x0)
close(r4)

33m40.188197964s ago: executing program 2 (id=786):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c1", 0x23}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

33m38.608417023s ago: executing program 2 (id=790):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=\f', @ANYRESHEX])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258", 0x22}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

33m37.004728458s ago: executing program 2 (id=797):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb5", 0x6a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc", 0x69}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

33m35.091500783s ago: executing program 2 (id=802):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
process_vm_writev(r1, &(0x7f0000000740)=[{0x0}, {&(0x7f00000006c0)=""/107, 0x6b}], 0x2, &(0x7f0000001bc0)=[{&(0x7f0000000840)=""/23, 0x17}, {&(0x7f0000000880)=""/19, 0x13}, {0x0}, {&(0x7f0000000a00)=""/40, 0x28}, {&(0x7f0000000a40)=""/31, 0x1f}, {&(0x7f0000000a80)=""/125, 0x7d}, {&(0x7f0000000b00)=""/162, 0xa2}], 0x7, 0x0)

33m33.766239222s ago: executing program 2 (id=804):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r3 = dup3(r2, r1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)

33m18.438115172s ago: executing program 32 (id=804):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r3 = dup3(r2, r1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000080)={0x0, 0x4, 0x40, 0xa01})
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)

4m21.309758831s ago: executing program 3 (id=9281):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfb, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x82000, 0x0)
r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x0, 0x5})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001)
connect$x25(r2, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3, 0x2}}, 0x12)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/snmp6\x00')
ioctl(r5, 0xec, &(0x7f0000000380)="da2173f3378b1bdfb9f15bb5276234460a82c4ca36dc247c13df2952f257ed8ec3b2a35e8f044f6d12d6f83f254753cddea441629341c78c15c25cd304315501bdb435edb6693bf49764473456a242e8d8047eea5482de5d0b7a7b301642e5b8d3177583c71f87321d751fb3f1931b29944ad363d237e4baecec47b049f117fa13644e089000a4715d3bd1e6e3eca9b769fd9fdefc6a0aacade53dad203d1f7b780dc1b0bf448fb04cbe67a66397c05e12177583c41d5be5743485a6ff7cec498d0ad431d7fde5067b500cbf4680544f5700006674dc8dd06ef331e2")
ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000000)={0x7ff, 0xb2a, 0x5})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', &(0x7f0000000140)={0x0, 0x121, 0x26}, 0x18)
r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x7e, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x9}, @IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
recvfrom$unix(r6, &(0x7f0000000200)=""/253, 0xfd, 0x2105, &(0x7f0000000300)=@file={0x1, './sys\x00'}, 0x6e)
write(r6, 0x0, 0x0)

4m17.282058474s ago: executing program 3 (id=9297):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) (fail_nth: 1)

4m16.959973642s ago: executing program 3 (id=9300):
r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0x40045613, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3})
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x0, 0x7, 0x4, "a5d3f9ef"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

4m15.844303714s ago: executing program 4 (id=9303):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4562f117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180), 0x0)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
write$char_usb(r3, &(0x7f0000000080)="424c62bb2da25c9252c2e9bbc75fbb8b32362aa641a0acb5e3b422b5b9beeca0b9a4d4b68eb95ad0c6b0be800ff7f7feef49ea8ede6a7db65791a1b824bb95016c317ee963797e57614b23ae9d68af9c402f9be9c14fd1ce60faa06fb36a4b26279f37ab9fa83390b2d8a0680d3a00aa58b5019679fe45b835ed4c5bb112dc4d2f729c1dbd41df6c6b88bd950493a8a4ca968bee3cde02d6235653367d84f8bfafdc0f5fdb52016ab5d1a1be1bee44868ac54258c4263b755dfbcc75f43f13546ca2a47ea539d6b80a844e463cbd64df095b0bd3f541aa52fc1373082d5d737bfac7782cf41cfc84ed16216e6b9ab0396861df", 0xf3)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @local=@item_012={0x1, 0x2, 0x4, "01"}, @main=@item_4={0x3, 0x0, 0xa, "413defbc"}, @global=@item_012={0x0, 0x1, 0x7}, @global=@item_012={0x1, 0x1, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, '0'}, @main=@item_012={0x1, 0x0, 0xb, "02"}]}}, 0x0}, 0x0)

4m12.355907409s ago: executing program 3 (id=9312):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000100040000000000000002030000fffc4e2202000000000000000000380000000100"/56, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f00000000000000000800030011"], 0x54}}, 0x200040c4)
syz_extract_tcp_res(&(0x7f0000000000)={<r2=>0x41424344}, 0x3, 0x4)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000340), &(0x7f0000000380)=0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000002680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f050000000500000000eaffff03000000002e00000030"], 0x0, 0x37, 0x0, 0xa, 0x7e8}, 0x28)
ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000440)=0x6)
syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, <r4=>0x41424344}, 0x10000, 0x8001)
syz_emit_ethernet(0xf2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa370800470b00e400640000ff069078640101020000000094040100000000004e224e23", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="70c200039078416000fe071eb8b407c095ab22845d03000000c68af35b0131c039a93cc5db9bb4293d8a82295e33b025866aa8062d665356d13d4d7a824884ab403e2d3068397cb2c7185be1c6973b624fa4b1585568df151442432a0c619e38e39957dbb7b643bcd24c03e9d4cf367fd1d2e8b7c12bfa6bbbb82bbd71721fbf344f0209a63203f3ce23a7e261150e0fb2e37bacc3d7aa329f0e3a7605b5a9a44539f671ba36bddd586d2076f5cbb0a518c5cc4722ddd156bd7a6a50"], 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='\b@\x00\x00', @ANYRES32=0x0, @ANYBLOB="4980020009d00000200012800b00010065727370616e000010000280080004000000010004001200"], 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r5 = semget(0x1, 0x4, 0x39c)
semop(r5, &(0x7f0000000080)=[{0x1, 0x7ffe, 0x1000}], 0x1)
semop(r5, &(0x7f00000021c0)=[{0x1, 0x2, 0x1000}], 0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0)
read(r7, &(0x7f00000000c0)=""/9, 0x9)
fchown(r6, 0x0, 0x0)

4m12.029109296s ago: executing program 0 (id=9314):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3", 0x52}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2", 0x3a}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e", 0x2c}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m11.932033002s ago: executing program 4 (id=9315):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c00048068"], 0x10c}}, 0x0) (fail_nth: 1)

4m11.913225154s ago: executing program 3 (id=9316):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r0, &(0x7f0000001940), &(0x7f00000002c0)=""/187, 0x4}, 0x20)

4m11.25211515s ago: executing program 4 (id=9317):
msgctl$IPC_RMID(0x0, 0x0)
r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffa000/0x4000)=nil)
shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x5000)
shmctl$SHM_LOCK(r0, 0xb)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001a00)={'sit0\x00', &(0x7f0000001880)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x5, 0x3, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x16}}}}})
shmctl$SHM_UNLOCK(r0, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x48)

4m10.971036497s ago: executing program 3 (id=9318):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0xf, 0x3, 0xd53})
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x7, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
eventfd2(0x800, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x9, 0x2, 0x1000, 0x5})
socket(0x1e, 0xa, 0x80000000)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100))
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000500)="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"/265, 0x109)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

4m10.433661498s ago: executing program 4 (id=9320):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0xa24ccde4ea5f33ae, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20000001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x4)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000008000000004d51000040014000d"], 0x3c}, 0x1, 0x0, 0x0, 0x460c9}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x7, 0x2, 0x2}]}, 0x10)
getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f00000000c0)=0xa)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0xfffffffc)

4m9.816724483s ago: executing program 4 (id=9323):
bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100000000000000040000001811", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b702"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4m7.768591835s ago: executing program 4 (id=9328):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x7ffffffe, 0x0, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x8, 0xb}, {0xffee, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0xffffffec, 0x1, 0x6, 0xc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004044}, 0xb32019a74e55d2de)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20004080}, 0x40c0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
close(r2)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000030001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e43f02a70a702af361be6e780e000000000000000000000008005c13aa00000000000000e59374f4aa36be303fa0fb8d30a0962c"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r10}, 0xc)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r9}, './file0\x00'})
r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000005, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x5, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x46590})
ioctl$KVM_RUN(r12, 0xae80, 0x0)

4m3.779838732s ago: executing program 0 (id=9344):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0xa24ccde4ea5f33ae, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20000001)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x4)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000008000000004d51000040014000d"], 0x3c}, 0x1, 0x0, 0x0, 0x460c9}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x6, 0x7, 0x2, 0x2}]}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0xfffffffc)

4m3.410169484s ago: executing program 0 (id=9347):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x8000)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000001c0)={0x20000001, 0xffffffffffffffff, 'id1\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000), 0x0)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
accept4$unix(r2, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e, 0x800)
write(r2, 0x0, 0x0)

4m2.74109757s ago: executing program 0 (id=9350):
r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x121400, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = getpid()
kcmp(r1, r1, 0x5, 0xffffffffffffffff, r0)

4m1.885364979s ago: executing program 0 (id=9353):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
fchdir(r0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
r2 = socket(0xe, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0xa, 0x1, 0x1}, 0x1c)
r3 = epoll_create(0x800)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xfffe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000140))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x10000005})
r5 = fsopen(&(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0x1)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000180)='rw\x00', 0x0, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r7 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0, r1)
listen(r6, 0x8)
accept4(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0, 0x80800)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1ff, 0x7e, 0x8, 0x4, 0x2, 0x5})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r8, &(0x7f00000006c0)="98e59145389934dff405d7e00d4afa1382f0a204b2deaf1b89b652ff93f530fae3cd253a3dc132c78f4a05344107aba6bfe13ae9bcbe0dca51ba6a101cf603003c75585a3168014bc0c47833c0d8b8e10ba9b5f79e2f3a8c9f14a2a69317ff9e09d9c2074bfabf5f9d3beafd11cee65d266045bf3e5f22e9af5f9f09a4b3c6320c5e624f11e76e25893acde9ea77a090b65bf7abc04d1af9342260911ab149770eba67a2d0ed55a2fd37a6cab39fcde8fbdd10cca28bb6d5708eca5a9a0ccc9835b3b7c7931cfd1d0ad115b8d940a9f2bd26328ecf90f4e367c3983637df76eee10480b83063e5de4d1a6313d3508ef2313ccca27133690beb344a28b6240b8ed9fd4fc2920db73871475d29d6178261f5d5c948c4e09a2420b5c91271a84c78ecf4d1c472df3107fa03bb00cef19cf181781f890168cc23ad91e19c5668f86c1503c4ee4e67c7f1138fb3dd2f52e0d4b45ebb07623c664d5bdf0afc88f9d9be7adbf50b63ecccae61add94755095d15545de618a85d5311eb60566d2891299626e4f266e2ad9b331f6cfd6af4c700"/409, 0x199)

4m0.166611044s ago: executing program 0 (id=9364):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90", 0x12}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3m55.285234133s ago: executing program 33 (id=9318):
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000100)={0xf, 0x3, 0xd53})
setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x7, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
eventfd2(0x800, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000080)={0x9, 0x2, 0x1000, 0x5})
socket(0x1e, 0xa, 0x80000000)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000100))
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000500)="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"/265, 0x109)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

3m52.435559894s ago: executing program 34 (id=9328):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a000106"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1ea74798, 0x7ffffffe, 0x0, 0x7fffffff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x8170b922, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0x8, 0xb}, {0xffee, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0xffffffec, 0x1, 0x6, 0xc}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004044}, 0xb32019a74e55d2de)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x20004080}, 0x40c0)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
close(r2)
futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000030001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000e43f02a70a702af361be6e780e000000000000000000000008005c13aa00000000000000e59374f4aa36be303fa0fb8d30a0962c"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r10}, 0xc)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r11, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r9}, './file0\x00'})
r12 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000005, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x5, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x46590})
ioctl$KVM_RUN(r12, 0xae80, 0x0)

3m45.134232485s ago: executing program 35 (id=9364):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90", 0x12}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m38.626834983s ago: executing program 1 (id=9648):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xd4}}, 0x20040040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30042101}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
preadv(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5)
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "3edea8", 0x1}}}, 0xd)
mount_setattr(0xffffffffffffffff, 0x0, 0x1100, 0xfffffffffffffffe, 0x20)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r6, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xee}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xfb}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0)

2m37.587543379s ago: executing program 1 (id=9649):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x45, 0x0, 0x0, 0xfffffffc}, {0x5, 0xf7}, {0x6, 0x0, 0x6, 0x5635}]})
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
socket(0x40000000015, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0)

2m36.821674789s ago: executing program 1 (id=9650):
bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf09000000000000550901"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m36.356356174s ago: executing program 1 (id=9651):
bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ff"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYBLOB="0000000000000000b708000000", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m35.440095261s ago: executing program 1 (id=9653):
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x0, 0x2006, 0x1})
socket$kcm(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x9b7f, 0x4)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x480642, 0x5d)
r5 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x40840, 0x153)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
readv(r5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x1e, 0x0, 0x8)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
clock_gettime(0x3, 0x0)

2m34.899419135s ago: executing program 1 (id=9654):
unshare(0x22020600)
unshare(0x8020800) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x2cf7) (async)
write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYRES8=<r1=>r0, @ANYRESHEX], 0xffdd) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r1, @ANYBLOB="73144b12e57b09c761004f62c14e10e0d898e7a8e9eb5cf5e95cac57a4d028d29e0a7adebcc23c3df347410d4fc339c6cae3ee6352a9cde8f919b77ce2a7ea50e4ea1a85dfcf223bff5f0191edf610da6dc78a1f4aaf1a24", @ANYBLOB="81b3f893e26f000000000000000000000000003286d5f100"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24000040)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x18000000, 0x101080)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x4, @multicast1}}}, 0x88) (async)
getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, &(0x7f0000000180)=[0x2], 0x0, 0x0, 0x1}}, 0x40) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000640)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) (async)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000001080)={0x33, &(0x7f0000001180)=[{0x37, '\x00', @st={0x4, [{0x3}, {0x0, @uvalue=0x4}, {0x2, @uvalue=0x4}, {0x0, @svalue=0x33}]}, 0x1ff}, {0x33, '\x00', @st={0x4, [{0x0, @uvalue=0x200}, {0x0, @svalue=0x63}, {0x1, @uvalue=0x2a71}, {0x2, @uvalue=0x8000000000000000}]}, 0x55b}]})

2m19.485661139s ago: executing program 36 (id=9654):
unshare(0x22020600)
unshare(0x8020800) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x2cf7) (async)
write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYRES8=<r1=>r0, @ANYRESHEX], 0xffdd) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r1, @ANYBLOB="73144b12e57b09c761004f62c14e10e0d898e7a8e9eb5cf5e95cac57a4d028d29e0a7adebcc23c3df347410d4fc339c6cae3ee6352a9cde8f919b77ce2a7ea50e4ea1a85dfcf223bff5f0191edf610da6dc78a1f4aaf1a24", @ANYBLOB="81b3f893e26f000000000000000000000000003286d5f100"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x24000040)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x18000000, 0x101080)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x5, {{0x2, 0x4, @multicast1}}}, 0x88) (async)
getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x104)
r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
write$P9_RVERSION(r7, &(0x7f0000000c40)=ANY=[], 0x13) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, &(0x7f0000000180)=[0x2], 0x0, 0x0, 0x1}}, 0x40) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) (async)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000640)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) (async)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000001080)={0x33, &(0x7f0000001180)=[{0x37, '\x00', @st={0x4, [{0x3}, {0x0, @uvalue=0x4}, {0x2, @uvalue=0x4}, {0x0, @svalue=0x33}]}, 0x1ff}, {0x33, '\x00', @st={0x4, [{0x0, @uvalue=0x200}, {0x0, @svalue=0x63}, {0x1, @uvalue=0x2a71}, {0x2, @uvalue=0x8000000000000000}]}, 0x55b}]})

6.081760838s ago: executing program 5 (id=9866):
mmap(&(0x7f00004ad000/0x2000)=nil, 0x2000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_clone3(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8)
landlock_create_ruleset(0x0, 0x0, 0x0)

5.145936748s ago: executing program 5 (id=9867):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x800a}})
r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000000)={r6})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x103000, 0x152)
fanotify_init(0x40, 0x8000)
pipe2(&(0x7f00000001c0), 0x80080)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfcbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "95d2a9741c03fbb9ce"}]}, 0x24}, 0x1, 0x0, 0x0, 0x24002054}, 0x44000)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003f0007012bbd700000000000017d00000400fc8024000180"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

4.396732086s ago: executing program 5 (id=9868):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x7, 0x95d, 0x6, 0xf})
unshare(0x22020600)
pread64(r0, &(0x7f00000001c0)=""/155, 0x9b, 0xfff)
syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

3.415676521s ago: executing program 5 (id=9869):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x1, 0xfffffffd})
mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001e140100000000000000000009000200", @ANYRES64], 0x38}}, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00", <r3=>0xffffffffffffffff})
dup3(r3, r2, 0x0)
r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = getpgrp(0x0)
syz_open_procfs(r9, 0x0)
r10 = semget$private(0x0, 0x20000000102, 0x0)
semop(r10, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x8, 0x1800}, {0x1, 0xe65b}], 0x3)
semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000000)=[0x7, 0x6, 0x1, 0x100])
bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r8, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
r11 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r11, 0x84, 0x85, &(0x7f0000000000), 0x90)
r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8081, 0x0)
openat(r12, &(0x7f0000004100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x40001, 0x0)

2.333630738s ago: executing program 5 (id=9870):
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x8200, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x3}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5ba}]}, 0x24}}, 0x4c004) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\x00\r', 0x8, 0x2b, 0x0, @empty, @local, {[], {0x4e21, 0x4e21, 0x8}}}}}}, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async)
syz_open_pts(0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000005fc0)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000080)="303030303a303073075585bf323f7c7f2553a6cf", 0x14) (async)
close(0xffffffffffffffff) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00', 0x1ff)
rmdir(&(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/obex.usb1\x00')
munlock(&(0x7f00000ef000/0x1000)=nil, 0x1000)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902"], 0x0) (async)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

0s ago: executing program 5 (id=9871):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
mkdirat(r1, &(0x7f0000000100)='./file1/file4/file7\x00', 0xcc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000}, 0x30, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x200000, 0x1a2)
mknodat(r3, &(0x7f0000000180)='./file1/file4/file7\x00', 0x100, 0x8)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000002380)=[{0xcba9}, {0x4, 0x7, 0x7}], 0x2, 0x37, 0x8, 0x2, 0x0, 0x2})
landlock_restrict_self(r2, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x20, @private1}, 0x1c, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x9, 0x9, 0x1, 0x3}, 0x14)
r6 = socket(0x15, 0x5, 0x0)
recvmsg(r6, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4)
close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110014a696d4003041060410100f602010902240001000000820904"], 0x0)

kernel console output (not intermixed with test programs):

  T581] Use struct sctp_assoc_value instead
[ 2307.308112][T20748] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 2307.465837][T20748] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2307.465866][T20748] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2307.465886][T20748] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2307.465933][T20748] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2307.465959][T20748] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2307.469671][T20748] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2307.469699][T20748] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2307.469718][T20748] usb 4-1: Product: syz
[ 2307.469733][T20748] usb 4-1: Manufacturer: syz
[ 2307.523681][T20748] cdc_wdm 4-1:1.0: skipping garbage
[ 2307.523701][T20748] cdc_wdm 4-1:1.0: skipping garbage
[ 2307.937717][  T635] FAULT_INJECTION: forcing a failure.
[ 2307.937717][  T635] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2307.937744][  T635] CPU: 1 UID: 0 PID: 635 Comm: syz.0.9245 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2307.937761][  T635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2307.937769][  T635] Call Trace:
[ 2307.937775][  T635]  <TASK>
[ 2307.937781][  T635]  dump_stack_lvl+0xe8/0x150
[ 2307.937810][  T635]  should_fail_ex+0x467/0x600
[ 2307.937838][  T635]  _copy_from_user+0x2d/0xb0
[ 2307.937856][  T635]  do_sock_getsockopt+0x200/0x7e0
[ 2307.937880][  T635]  ? __pfx_vfs_write+0x10/0x10
[ 2307.937899][  T635]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2307.937917][  T635]  ? do_sys_openat2+0x14e/0x200
[ 2307.937929][  T635]  ? kmem_cache_free+0x187/0x6c0
[ 2307.937957][  T635]  ? ksys_write+0x202/0x270
[ 2307.937979][  T635]  __x64_sys_getsockopt+0x1aa/0x250
[ 2307.938001][  T635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2307.938016][  T635]  do_syscall_64+0x174/0x580
[ 2307.938037][  T635]  ? trace_irq_disable+0x3b/0x140
[ 2307.938053][  T635]  ? clear_bhb_loop+0x40/0x90
[ 2307.938070][  T635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2307.938084][  T635] RIP: 0033:0x7f5ede4ee0d9
[ 2307.938098][  T635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2307.938109][  T635] RSP: 002b:00007f5edc746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 2307.938126][  T635] RAX: ffffffffffffffda RBX: 00007f5ede775fa0 RCX: 00007f5ede4ee0d9
[ 2307.938136][  T635] RDX: 000000000000001c RSI: 0000000000000006 RDI: 0000000000000003
[ 2307.938144][  T635] RBP: 00007f5edc746090 R08: 00002000000000c0 R09: 0000000000000000
[ 2307.938153][  T635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2307.938161][  T635] R13: 00007f5ede776038 R14: 00007f5ede775fa0 R15: 00007ffe2cf255b8
[ 2307.938185][  T635]  </TASK>
[ 2307.995467][T20748] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 2307.995537][T20748] cdc_wdm 4-1:1.0: Unknown control protocol
[ 2308.773363][  T651] FAULT_INJECTION: forcing a failure.
[ 2308.773363][  T651] name failslab, interval 1, probability 0, space 0, times 0
[ 2308.773393][  T651] CPU: 0 UID: 0 PID: 651 Comm: syz.1.9252 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2308.773411][  T651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2308.773420][  T651] Call Trace:
[ 2308.773426][  T651]  <TASK>
[ 2308.773433][  T651]  dump_stack_lvl+0xe8/0x150
[ 2308.773465][  T651]  should_fail_ex+0x467/0x600
[ 2308.773494][  T651]  should_failslab+0xa8/0x100
[ 2308.773516][  T651]  kmem_cache_alloc_noprof+0xa4/0x650
[ 2308.773533][  T651]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2308.773556][  T651]  ? ima_inode_get+0xea/0x4c0
[ 2308.773692][  T651]  ? ima_inode_get+0xea/0x4c0
[ 2308.773714][  T651]  ima_inode_get+0xea/0x4c0
[ 2308.773736][  T651]  process_measurement+0x462/0x1c20
[ 2308.773767][  T651]  ? __pfx_process_measurement+0x10/0x10
[ 2308.773785][  T651]  ? _parse_integer_limit+0x192/0x1e0
[ 2308.773829][  T651]  ? get_pid_task+0x20/0x1f0
[ 2308.773853][  T651]  ? get_pid_task+0x20/0x1f0
[ 2308.773886][  T651]  ima_file_mmap+0x1b0/0x200
[ 2308.773918][  T651]  ? __pfx_ima_file_mmap+0x10/0x10
[ 2308.773942][  T651]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2308.773963][  T651]  security_mmap_file+0x773/0xa20
[ 2308.773981][  T651]  vm_mmap_pgoff+0x134/0x4e0
[ 2308.774008][  T651]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 2308.774032][  T651]  ? __fget_files+0x2a/0x420
[ 2308.774047][  T651]  ? __fget_files+0x3a8/0x420
[ 2308.774060][  T651]  ? __fget_files+0x2a/0x420
[ 2308.774078][  T651]  ksys_mmap_pgoff+0x4a6/0x720
[ 2308.774141][  T651]  ? __x64_sys_mmap+0x7f/0x140
[ 2308.774157][  T651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2308.774172][  T651]  do_syscall_64+0x174/0x580
[ 2308.774193][  T651]  ? clear_bhb_loop+0x40/0x90
[ 2308.774210][  T651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2308.774224][  T651] RIP: 0033:0x7fa4d153e0d9
[ 2308.774238][  T651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2308.774250][  T651] RSP: 002b:00007fa4cf796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2308.774269][  T651] RAX: ffffffffffffffda RBX: 00007fa4d17c5fa0 RCX: 00007fa4d153e0d9
[ 2308.774283][  T651] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000
[ 2308.774293][  T651] RBP: 00007fa4cf796090 R08: 0000000000000004 R09: 0000000000000000
[ 2308.774304][  T651] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000001
[ 2308.774315][  T651] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2308.774344][  T651]  </TASK>
[ 2308.933030][ T5707] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 2309.278907][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2309.278949][ T5707] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2309.278989][ T5707] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 2309.279013][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2309.288106][ T5707] usb 6-1: config 0 descriptor??
[ 2310.043458][ T5707] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[ 2310.128640][T20748] usb 4-1: USB disconnect, device number 56
[ 2310.159315][ T5723] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 2310.293343][  T631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2310.293965][  T631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2310.328254][ T5723] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2310.328286][ T5723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.364855][ T5723] usb 1-1: config 0 descriptor??
[ 2310.418842][ T5723] cp210x 1-1:0.0: cp210x converter detected
[ 2310.503979][ T5707] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected
[ 2310.602212][  T658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9254'.
[ 2310.602234][  T658] tc_dump_action: action bad kind
[ 2310.647098][  T658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2310.649423][  T658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2310.675278][ T5723] usb 1-1: cp210x converter now attached to ttyUSB0
[ 2310.726872][  T671] FAULT_INJECTION: forcing a failure.
[ 2310.726872][  T671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2310.726903][  T671] CPU: 1 UID: 0 PID: 671 Comm: syz.1.9259 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2310.726926][  T671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2310.726938][  T671] Call Trace:
[ 2310.726946][  T671]  <TASK>
[ 2310.726955][  T671]  dump_stack_lvl+0xe8/0x150
[ 2310.726990][  T671]  should_fail_ex+0x467/0x600
[ 2310.727025][  T671]  _copy_to_user+0x31/0xb0
[ 2310.727052][  T671]  simple_read_from_buffer+0xe1/0x170
[ 2310.727079][  T671]  proc_fail_nth_read+0x1be/0x230
[ 2310.727106][  T671]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2310.727130][  T671]  ? rw_verify_area+0x250/0x4d0
[ 2310.727156][  T671]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2310.727175][  T671]  vfs_read+0x219/0xa90
[ 2310.727205][  T671]  ? __pfx_vfs_read+0x10/0x10
[ 2310.727231][  T671]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2310.727256][  T671]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2310.727282][  T671]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2310.727306][  T671]  ? mutex_lock_nested+0x152/0x1d0
[ 2310.727325][  T671]  ? fdget_pos+0x252/0x320
[ 2310.727352][  T671]  ksys_read+0x156/0x270
[ 2310.727377][  T671]  ? __pfx_ksys_read+0x10/0x10
[ 2310.727409][  T671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2310.727430][  T671]  do_syscall_64+0x174/0x580
[ 2310.727458][  T671]  ? trace_irq_disable+0x3b/0x140
[ 2310.727478][  T671]  ? clear_bhb_loop+0x40/0x90
[ 2310.727503][  T671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2310.727522][  T671] RIP: 0033:0x7fa4d14fe90e
[ 2310.727540][  T671] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2310.727556][  T671] RSP: 002b:00007fa4cf795fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2310.727574][  T671] RAX: ffffffffffffffda RBX: 00007fa4cf7966c0 RCX: 00007fa4d14fe90e
[ 2310.727587][  T671] RDX: 000000000000000f RSI: 00007fa4cf7960a0 RDI: 0000000000000004
[ 2310.727599][  T671] RBP: 00007fa4cf796090 R08: 0000000000000000 R09: 0000000000000000
[ 2310.727611][  T671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2310.727623][  T671] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2310.727652][  T671]  </TASK>
[ 2310.730260][  T673] FAULT_INJECTION: forcing a failure.
[ 2310.730260][  T673] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2310.730284][  T673] CPU: 0 UID: 0 PID: 673 Comm: syz.3.9260 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2310.730300][  T673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2310.730308][  T673] Call Trace:
[ 2310.730315][  T673]  <TASK>
[ 2310.730321][  T673]  dump_stack_lvl+0xe8/0x150
[ 2310.730375][  T673]  should_fail_ex+0x467/0x600
[ 2310.730404][  T673]  _copy_from_user+0x2d/0xb0
[ 2310.730424][  T673]  __sys_bpf+0x2e7/0xd90
[ 2310.730452][  T673]  ? __pfx___sys_bpf+0x10/0x10
[ 2310.730468][  T673]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2310.730496][  T673]  ? rt_mutex_slowunlock+0x219/0x460
[ 2310.730531][  T673]  ? ksys_write+0x248/0x270
[ 2310.730558][  T673]  ? __pfx_ksys_write+0x10/0x10
[ 2310.730584][  T673]  __x64_sys_bpf+0xba/0xd0
[ 2310.730605][  T673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2310.730621][  T673]  do_syscall_64+0x174/0x580
[ 2310.730639][  T673]  ? trace_irq_disable+0x3b/0x140
[ 2310.730653][  T673]  ? clear_bhb_loop+0x40/0x90
[ 2310.730671][  T673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2310.730684][  T673] RIP: 0033:0x7f39692de0d9
[ 2310.730699][  T673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2310.730711][  T673] RSP: 002b:00007f3967536028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2310.730726][  T673] RAX: ffffffffffffffda RBX: 00007f3969565fa0 RCX: 00007f39692de0d9
[ 2310.730736][  T673] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012
[ 2310.730745][  T673] RBP: 00007f3967536090 R08: 0000000000000000 R09: 0000000000000000
[ 2310.730753][  T673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2310.730762][  T673] R13: 00007f3969566038 R14: 00007f3969565fa0 R15: 00007fffab2a9b18
[ 2310.730784][  T673]  </TASK>
[ 2310.972714][   T31] usb 1-1: USB disconnect, device number 29
[ 2311.248412][   T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2311.252536][   T31] cp210x 1-1:0.0: device disconnected
[ 2312.031487][  T694] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9266'.
[ 2312.581743][ T5707] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0
[ 2312.639906][  T705] FAULT_INJECTION: forcing a failure.
[ 2312.639906][  T705] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2312.639939][  T705] CPU: 1 UID: 0 PID: 705 Comm: syz.1.9268 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2312.639961][  T705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2312.639974][  T705] Call Trace:
[ 2312.639981][  T705]  <TASK>
[ 2312.639991][  T705]  dump_stack_lvl+0xe8/0x150
[ 2312.640024][  T705]  should_fail_ex+0x467/0x600
[ 2312.640059][  T705]  _copy_from_user+0x2d/0xb0
[ 2312.640083][  T705]  ___sys_sendmsg+0x1c6/0x360
[ 2312.640108][  T705]  ? __lock_acquire+0x683/0x2ce0
[ 2312.640132][  T705]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2312.640197][  T705]  ? __fget_files+0x2a/0x420
[ 2312.640219][  T705]  ? __fget_files+0x3a8/0x420
[ 2312.640250][  T705]  __x64_sys_sendmsg+0x1b7/0x290
[ 2312.640278][  T705]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2312.640320][  T705]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2312.640342][  T705]  do_syscall_64+0x174/0x580
[ 2312.640368][  T705]  ? trace_irq_disable+0x3b/0x140
[ 2312.640388][  T705]  ? clear_bhb_loop+0x40/0x90
[ 2312.640411][  T705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2312.640431][  T705] RIP: 0033:0x7fa4d153e0d9
[ 2312.640449][  T705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2312.640466][  T705] RSP: 002b:00007fa4cf796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2312.640487][  T705] RAX: ffffffffffffffda RBX: 00007fa4d17c5fa0 RCX: 00007fa4d153e0d9
[ 2312.640502][  T705] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 2312.640514][  T705] RBP: 00007fa4cf796090 R08: 0000000000000000 R09: 0000000000000000
[ 2312.640526][  T705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2312.640538][  T705] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2312.640570][  T705]  </TASK>
[ 2312.711288][  T694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2313.028902][  T694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2313.156174][  T694] bond0 (unregistering): Released all slaves
[ 2313.303929][ T5707] usb 6-1: USB disconnect, device number 18
[ 2314.280137][ T5707] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected
[ 2314.517213][T16263] Bluetooth: hci0: Frame reassembly failed (-84)
[ 2314.643035][T20748] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[ 2314.813081][T20748] usb 4-1: device descriptor read/64, error -71
[ 2314.837584][T25970] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 2315.016932][T25970] usb 5-1: Using ep0 maxpacket: 8
[ 2315.034847][T25970] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 2315.034874][T25970] usb 5-1: config 179 has no interface number 0
[ 2315.034927][T25970] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 2315.034954][T25970] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 2315.034981][T25970] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2315.035007][T25970] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 2315.035033][T25970] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2315.035072][T25970] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 2315.035095][T25970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2315.097493][T20748] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[ 2315.147027][  T730] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2315.254434][T20748] usb 4-1: device descriptor read/64, error -71
[ 2315.370266][T20748] usb usb4-port1: attempt power cycle
[ 2315.763748][T20748] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[ 2315.833648][T20748] usb 4-1: device descriptor read/8, error -71
[ 2316.073956][ T5610] Bluetooth: hci2: command 0x0406 tx timeout
[ 2316.084525][T20748] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[ 2316.561280][T18444] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 2316.864305][  T749] FAULT_INJECTION: forcing a failure.
[ 2316.864305][  T749] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2316.864337][  T749] CPU: 1 UID: 0 PID: 749 Comm: syz.5.9277 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2316.864359][  T749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2316.864372][  T749] Call Trace:
[ 2316.864380][  T749]  <TASK>
[ 2316.864389][  T749]  dump_stack_lvl+0xe8/0x150
[ 2316.864424][  T749]  should_fail_ex+0x467/0x600
[ 2316.864459][  T749]  _copy_from_user+0x2d/0xb0
[ 2316.864485][  T749]  ___sys_recvmsg+0x173/0x5a0
[ 2316.864517][  T749]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2316.864548][  T749]  ? __fget_files+0x2a/0x420
[ 2316.864586][  T749]  ? __fget_files+0x3a8/0x420
[ 2316.864616][  T749]  do_recvmmsg+0x320/0x7f0
[ 2316.864650][  T749]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2316.864676][  T749]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2316.864712][  T749]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2316.864746][  T749]  __x64_sys_recvmmsg+0x198/0x250
[ 2316.864775][  T749]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 2316.864811][  T749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2316.864839][  T749]  do_syscall_64+0x174/0x580
[ 2316.864864][  T749]  ? trace_irq_disable+0x3b/0x140
[ 2316.864885][  T749]  ? clear_bhb_loop+0x40/0x90
[ 2316.864908][  T749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2316.864928][  T749] RIP: 0033:0x7f24d6fee0d9
[ 2316.864946][  T749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2316.864962][  T749] RSP: 002b:00007f24d5225028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 2316.864983][  T749] RAX: ffffffffffffffda RBX: 00007f24d7276090 RCX: 00007f24d6fee0d9
[ 2316.864997][  T749] RDX: 0000000000000004 RSI: 0000200000004480 RDI: 0000000000000003
[ 2316.865010][  T749] RBP: 00007f24d5225090 R08: 0000000000000000 R09: 0000000000000000
[ 2316.865022][  T749] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001
[ 2316.865034][  T749] R13: 00007f24d7276128 R14: 00007f24d7276090 R15: 00007ffe4621ed18
[ 2316.865065][  T749]  </TASK>
[ 2317.694496][T25970] usb 5-1: USB disconnect, device number 37
[ 2317.705152][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 2318.074189][T20748] usb 4-1: device not accepting address 60, error -71
[ 2318.177007][T20748] usb usb4-port1: unable to enumerate USB device
[ 2319.582408][  T764] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[ 2320.358212][  T764] bond1 (unregistering): Released all slaves
[ 2321.282649][  T792] FAULT_INJECTION: forcing a failure.
[ 2321.282649][  T792] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2321.282680][  T792] CPU: 0 UID: 0 PID: 792 Comm: syz.1.9289 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2321.282703][  T792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2321.282716][  T792] Call Trace:
[ 2321.282725][  T792]  <TASK>
[ 2321.282734][  T792]  dump_stack_lvl+0xe8/0x150
[ 2321.282768][  T792]  should_fail_ex+0x467/0x600
[ 2321.282805][  T792]  _copy_from_user+0x2d/0xb0
[ 2321.282830][  T792]  __sys_bpf+0x2e7/0xd90
[ 2321.282860][  T792]  ? __pfx___sys_bpf+0x10/0x10
[ 2321.282884][  T792]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2321.282914][  T792]  ? rt_mutex_slowunlock+0x219/0x460
[ 2321.282950][  T792]  ? ksys_write+0x248/0x270
[ 2321.282976][  T792]  ? __pfx_ksys_write+0x10/0x10
[ 2321.283004][  T792]  __x64_sys_bpf+0xba/0xd0
[ 2321.283032][  T792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2321.283053][  T792]  do_syscall_64+0x174/0x580
[ 2321.283079][  T792]  ? trace_irq_disable+0x3b/0x140
[ 2321.283098][  T792]  ? clear_bhb_loop+0x40/0x90
[ 2321.283122][  T792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2321.283141][  T792] RIP: 0033:0x7fa4d153e0d9
[ 2321.283159][  T792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2321.283174][  T792] RSP: 002b:00007fa4cf796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2321.283195][  T792] RAX: ffffffffffffffda RBX: 00007fa4d17c5fa0 RCX: 00007fa4d153e0d9
[ 2321.283209][  T792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008
[ 2321.283221][  T792] RBP: 00007fa4cf796090 R08: 0000000000000000 R09: 0000000000000000
[ 2321.283234][  T792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2321.283245][  T792] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2321.283277][  T792]  </TASK>
[ 2322.556184][ T5610] Bluetooth: hci3: command tx timeout
[ 2322.759784][  T764] syz.3.9281 (764) used greatest stack depth: 18272 bytes left
[ 2322.976217][  T816] FAULT_INJECTION: forcing a failure.
[ 2322.976217][  T816] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2322.976249][  T816] CPU: 1 UID: 0 PID: 816 Comm: syz.3.9297 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2322.976271][  T816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2322.976283][  T816] Call Trace:
[ 2322.976291][  T816]  <TASK>
[ 2322.976299][  T816]  dump_stack_lvl+0xe8/0x150
[ 2322.976334][  T816]  should_fail_ex+0x467/0x600
[ 2322.976369][  T816]  _copy_from_user+0x2d/0xb0
[ 2322.976393][  T816]  ___sys_sendmsg+0x1c6/0x360
[ 2322.976418][  T816]  ? __lock_acquire+0x683/0x2ce0
[ 2322.976445][  T816]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2322.976503][  T816]  ? __fget_files+0x2a/0x420
[ 2322.976524][  T816]  ? __fget_files+0x3a8/0x420
[ 2322.976557][  T816]  __x64_sys_sendmsg+0x1b7/0x290
[ 2322.976587][  T816]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2322.976629][  T816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2322.976650][  T816]  do_syscall_64+0x174/0x580
[ 2322.976675][  T816]  ? trace_irq_disable+0x3b/0x140
[ 2322.976695][  T816]  ? clear_bhb_loop+0x40/0x90
[ 2322.976719][  T816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2322.976738][  T816] RIP: 0033:0x7f39692de0d9
[ 2322.976757][  T816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2322.976772][  T816] RSP: 002b:00007f3967536028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2322.976793][  T816] RAX: ffffffffffffffda RBX: 00007f3969565fa0 RCX: 00007f39692de0d9
[ 2322.976808][  T816] RDX: 0000000004000052 RSI: 0000200000000100 RDI: 0000000000000003
[ 2322.976820][  T816] RBP: 00007f3967536090 R08: 0000000000000000 R09: 0000000000000000
[ 2322.976833][  T816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2322.976845][  T816] R13: 00007f3969566038 R14: 00007f3969565fa0 R15: 00007fffab2a9b18
[ 2322.976876][  T816]  </TASK>
[ 2324.323038][T20748] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 2324.585078][   T36] kauditd_printk_skb: 2 callbacks suppressed
[ 2324.585096][   T36] audit: type=1800 audit(1785947130.898:494): pid=828 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.9303" name="idVendor" dev="configfs" ino=205475 res=0 errno=0
[ 2324.871150][T20748] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 2324.871182][T20748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2324.871201][T20748] usb 4-1: Product: syz
[ 2324.871216][T20748] usb 4-1: Manufacturer: syz
[ 2324.871231][T20748] usb 4-1: SerialNumber: syz
[ 2325.543646][T25969] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 2325.716707][T25969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2325.716740][T25969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2325.716763][T25969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2325.716902][T25969] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2325.716927][T25969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2325.798632][T25969] usb 5-1: config 0 descriptor??
[ 2326.124881][  T843] FAULT_INJECTION: forcing a failure.
[ 2326.124881][  T843] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2326.124911][  T843] CPU: 1 UID: 0 PID: 843 Comm: syz.1.9308 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2326.124931][  T843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2326.124942][  T843] Call Trace:
[ 2326.124949][  T843]  <TASK>
[ 2326.124956][  T843]  dump_stack_lvl+0xe8/0x150
[ 2326.124984][  T843]  should_fail_ex+0x467/0x600
[ 2326.125010][  T843]  _copy_from_user+0x2d/0xb0
[ 2326.125028][  T843]  ___sys_sendmsg+0x1c6/0x360
[ 2326.125047][  T843]  ? __lock_acquire+0x683/0x2ce0
[ 2326.125066][  T843]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2326.125108][  T843]  ? __fget_files+0x2a/0x420
[ 2326.125124][  T843]  ? __fget_files+0x3a8/0x420
[ 2326.125147][  T843]  __x64_sys_sendmsg+0x1b7/0x290
[ 2326.125170][  T843]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2326.125200][  T843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.125216][  T843]  do_syscall_64+0x174/0x580
[ 2326.125236][  T843]  ? trace_irq_disable+0x3b/0x140
[ 2326.125250][  T843]  ? clear_bhb_loop+0x40/0x90
[ 2326.125267][  T843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.125283][  T843] RIP: 0033:0x7fa4d153e0d9
[ 2326.125297][  T843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2326.125309][  T843] RSP: 002b:00007fa4cf796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2326.125326][  T843] RAX: ffffffffffffffda RBX: 00007fa4d17c5fa0 RCX: 00007fa4d153e0d9
[ 2326.125337][  T843] RDX: 0000000000000044 RSI: 00002000000007c0 RDI: 0000000000000003
[ 2326.125347][  T843] RBP: 00007fa4cf796090 R08: 0000000000000000 R09: 0000000000000000
[ 2326.125357][  T843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2326.125367][  T843] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2326.125394][  T843]  </TASK>
[ 2327.452866][T20748] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 2327.453067][T20748] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[ 2327.455380][T20748] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 2327.455429][T20748] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 2327.457371][T20748] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 2327.475047][T25969] plantronics 0003:047F:FFFF.0003: unbalanced collection at end of report description
[ 2327.475845][T25969] plantronics 0003:047F:FFFF.0003: parse failed
[ 2327.534984][T25969] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22
[ 2327.838306][T25969] usb 5-1: USB disconnect, device number 38
[ 2328.031799][T20748] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[ 2328.099882][  T859] FAULT_INJECTION: forcing a failure.
[ 2328.099882][  T859] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2328.099915][  T859] CPU: 1 UID: 0 PID: 859 Comm: syz.1.9313 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2328.099937][  T859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2328.099949][  T859] Call Trace:
[ 2328.099958][  T859]  <TASK>
[ 2328.099966][  T859]  dump_stack_lvl+0xe8/0x150
[ 2328.100004][  T859]  should_fail_ex+0x467/0x600
[ 2328.100046][  T859]  _copy_from_user+0x2d/0xb0
[ 2328.100070][  T859]  ___sys_sendmsg+0x1c6/0x360
[ 2328.100096][  T859]  ? __lock_acquire+0x683/0x2ce0
[ 2328.100122][  T859]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2328.100181][  T859]  ? __fget_files+0x2a/0x420
[ 2328.100202][  T859]  ? __fget_files+0x3a8/0x420
[ 2328.100233][  T859]  __x64_sys_sendmsg+0x1b7/0x290
[ 2328.100260][  T859]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2328.100301][  T859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2328.100323][  T859]  do_syscall_64+0x174/0x580
[ 2328.100349][  T859]  ? trace_irq_disable+0x3b/0x140
[ 2328.100369][  T859]  ? clear_bhb_loop+0x40/0x90
[ 2328.100393][  T859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2328.100412][  T859] RIP: 0033:0x7fa4d153e0d9
[ 2328.100430][  T859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2328.100446][  T859] RSP: 002b:00007fa4cf775028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2328.100468][  T859] RAX: ffffffffffffffda RBX: 00007fa4d17c6090 RCX: 00007fa4d153e0d9
[ 2328.100482][  T859] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[ 2328.100494][  T859] RBP: 00007fa4cf775090 R08: 0000000000000000 R09: 0000000000000000
[ 2328.100506][  T859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2328.100517][  T859] R13: 00007fa4d17c6128 R14: 00007fa4d17c6090 R15: 00007fffdd814568
[ 2328.100543][  T859]  </TASK>
[ 2328.144463][T20748] usb 4-1: USB disconnect, device number 61
[ 2328.621337][  T865] FAULT_INJECTION: forcing a failure.
[ 2328.621337][  T865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2328.621371][  T865] CPU: 1 UID: 0 PID: 865 Comm: syz.4.9315 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2328.621394][  T865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2328.621406][  T865] Call Trace:
[ 2328.621413][  T865]  <TASK>
[ 2328.621422][  T865]  dump_stack_lvl+0xe8/0x150
[ 2328.621456][  T865]  should_fail_ex+0x467/0x600
[ 2328.621491][  T865]  _copy_from_user+0x2d/0xb0
[ 2328.621516][  T865]  ___sys_sendmsg+0x1c6/0x360
[ 2328.621541][  T865]  ? __lock_acquire+0x683/0x2ce0
[ 2328.621567][  T865]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2328.621626][  T865]  ? __fget_files+0x2a/0x420
[ 2328.621647][  T865]  ? __fget_files+0x3a8/0x420
[ 2328.621677][  T865]  __x64_sys_sendmsg+0x1b7/0x290
[ 2328.621706][  T865]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2328.621749][  T865]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2328.621770][  T865]  do_syscall_64+0x174/0x580
[ 2328.621797][  T865]  ? trace_irq_disable+0x3b/0x140
[ 2328.621817][  T865]  ? clear_bhb_loop+0x40/0x90
[ 2328.621841][  T865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2328.621860][  T865] RIP: 0033:0x7fa8db2ce0d9
[ 2328.621878][  T865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2328.621894][  T865] RSP: 002b:00007fa8d9526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2328.621915][  T865] RAX: ffffffffffffffda RBX: 00007fa8db555fa0 RCX: 00007fa8db2ce0d9
[ 2328.621929][  T865] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 2328.621942][  T865] RBP: 00007fa8d9526090 R08: 0000000000000000 R09: 0000000000000000
[ 2328.621954][  T865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2328.621966][  T865] R13: 00007fa8db556038 R14: 00007fa8db555fa0 R15: 00007ffedcdf4238
[ 2328.622003][  T865]  </TASK>
[ 2329.775910][  T871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9318'.
[ 2332.029350][  T893] FAULT_INJECTION: forcing a failure.
[ 2332.029350][  T893] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2332.029387][  T893] CPU: 1 UID: 0 PID: 893 Comm: syz.5.9326 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2332.029410][  T893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2332.029422][  T893] Call Trace:
[ 2332.029430][  T893]  <TASK>
[ 2332.029439][  T893]  dump_stack_lvl+0xe8/0x150
[ 2332.029472][  T893]  should_fail_ex+0x467/0x600
[ 2332.029506][  T893]  _copy_from_user+0x2d/0xb0
[ 2332.029532][  T893]  ___sys_sendmsg+0x1c6/0x360
[ 2332.029557][  T893]  ? __lock_acquire+0x683/0x2ce0
[ 2332.029581][  T893]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2332.029636][  T893]  ? __fget_files+0x2a/0x420
[ 2332.029655][  T893]  ? __fget_files+0x3a8/0x420
[ 2332.029684][  T893]  __x64_sys_sendmsg+0x1b7/0x290
[ 2332.029711][  T893]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2332.029753][  T893]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2332.029774][  T893]  do_syscall_64+0x174/0x580
[ 2332.029807][  T893]  ? trace_irq_disable+0x3b/0x140
[ 2332.029827][  T893]  ? clear_bhb_loop+0x40/0x90
[ 2332.029850][  T893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2332.029873][  T893] RIP: 0033:0x7f24d6fee0d9
[ 2332.029891][  T893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2332.029906][  T893] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2332.029926][  T893] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2332.029940][  T893] RDX: 0000000024004804 RSI: 0000200000000080 RDI: 0000000000000005
[ 2332.029953][  T893] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2332.029965][  T893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2332.029977][  T893] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2332.030017][  T893]  </TASK>
[ 2333.669254][  T907] FAULT_INJECTION: forcing a failure.
[ 2333.669254][  T907] name failslab, interval 1, probability 0, space 0, times 0
[ 2333.669287][  T907] CPU: 1 UID: 0 PID: 907 Comm: syz.5.9332 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2333.669311][  T907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2333.669323][  T907] Call Trace:
[ 2333.669331][  T907]  <TASK>
[ 2333.669339][  T907]  dump_stack_lvl+0xe8/0x150
[ 2333.669374][  T907]  should_fail_ex+0x467/0x600
[ 2333.669411][  T907]  should_failslab+0xa8/0x100
[ 2333.669437][  T907]  __kmalloc_cache_noprof+0xa0/0x6b0
[ 2333.669460][  T907]  ? configfs_write_iter+0xf2/0x430
[ 2333.669563][  T907]  ? configfs_write_iter+0xf2/0x430
[ 2333.669585][  T907]  ? configfs_write_iter+0x81/0x430
[ 2333.669612][  T907]  configfs_write_iter+0xf2/0x430
[ 2333.669639][  T907]  vfs_write+0x61e/0xbb0
[ 2333.669673][  T907]  ? __pfx_vfs_write+0x10/0x10
[ 2333.669701][  T907]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2333.669732][  T907]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2333.669760][  T907]  ? mutex_lock_nested+0x152/0x1d0
[ 2333.669779][  T907]  ? fdget_pos+0x252/0x320
[ 2333.669809][  T907]  ksys_write+0x156/0x270
[ 2333.669837][  T907]  ? __pfx_ksys_write+0x10/0x10
[ 2333.669870][  T907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2333.669892][  T907]  do_syscall_64+0x174/0x580
[ 2333.669917][  T907]  ? trace_irq_disable+0x3b/0x140
[ 2333.669937][  T907]  ? clear_bhb_loop+0x40/0x90
[ 2333.669961][  T907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2333.669981][  T907] RIP: 0033:0x7f24d6fee0d9
[ 2333.670000][  T907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2333.670016][  T907] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2333.670037][  T907] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2333.670052][  T907] RDX: 000000000000000b RSI: 0000200000000380 RDI: 0000000000000003
[ 2333.670064][  T907] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2333.670077][  T907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2333.670089][  T907] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2333.670121][  T907]  </TASK>
[ 2344.556280][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.556349][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 2346.268244][T18444] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2346.314534][T18444] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2346.321955][T18444] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2346.365135][T18444] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2346.366900][T18444] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2348.648526][ T5610] Bluetooth: hci0: command tx timeout
[ 2350.906824][ T5610] Bluetooth: hci0: command tx timeout
[ 2352.961797][T18444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2352.973004][T28943] Bluetooth: hci0: command tx timeout
[ 2353.051718][T18444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2353.060548][T18444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2353.086424][T18444] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2353.088814][T18444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2355.033078][T18444] Bluetooth: hci0: command tx timeout
[ 2355.513106][T18444] Bluetooth: hci2: command tx timeout
[ 2356.738242][T28943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2356.785328][T28943] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2356.807477][T28943] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2356.829499][T28943] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2356.840612][T28943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2356.883350][T18444] Bluetooth: hci4: command 0x0406 tx timeout
[ 2357.596877][T18444] Bluetooth: hci2: command tx timeout
[ 2359.101614][ T1167] capability: warning: `syz.1.9424' uses deprecated v2 capabilities in a way that may be insecure
[ 2359.745642][ T5610] Bluetooth: hci6: command tx timeout
[ 2359.746010][ T5610] Bluetooth: hci2: command tx timeout
[ 2360.412438][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2360.479947][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2360.480223][ T1043] bridge_slave_0: entered allmulticast mode
[ 2360.501473][ T1043] bridge_slave_0: entered promiscuous mode
[ 2360.653331][ T1043] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2360.653452][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2360.654471][ T1043] bridge_slave_1: entered allmulticast mode
[ 2360.704555][ T1043] bridge_slave_1: entered promiscuous mode
[ 2361.710214][ T1043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2361.773742][ T5610] Bluetooth: hci6: command tx timeout
[ 2361.773830][T18444] Bluetooth: hci2: command tx timeout
[ 2361.927639][ T1043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2363.559006][ T1043] team0: Port device team_slave_0 added
[ 2363.827991][ T1043] team0: Port device team_slave_1 added
[ 2363.859580][T18444] Bluetooth: hci6: command tx timeout
[ 2364.803313][T16717] page_pool_release_retry() stalled pool shutdown: id 128, 1 inflight 60 sec
[ 2364.916907][ T1238] FAULT_INJECTION: forcing a failure.
[ 2364.916907][ T1238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2364.916939][ T1238] CPU: 0 UID: 0 PID: 1238 Comm: syz.5.9451 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2364.916961][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2364.916973][ T1238] Call Trace:
[ 2364.916980][ T1238]  <TASK>
[ 2364.916989][ T1238]  dump_stack_lvl+0xe8/0x150
[ 2364.917024][ T1238]  should_fail_ex+0x467/0x600
[ 2364.917060][ T1238]  _copy_from_user+0x2d/0xb0
[ 2364.917084][ T1238]  ___sys_sendmsg+0x1c6/0x360
[ 2364.917109][ T1238]  ? __lock_acquire+0x683/0x2ce0
[ 2364.917133][ T1238]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2364.917190][ T1238]  ? __fget_files+0x2a/0x420
[ 2364.917210][ T1238]  ? __fget_files+0x3a8/0x420
[ 2364.917239][ T1238]  __x64_sys_sendmsg+0x1b7/0x290
[ 2364.917266][ T1238]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2364.917312][ T1238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2364.917332][ T1238]  do_syscall_64+0x174/0x580
[ 2364.917357][ T1238]  ? trace_irq_disable+0x3b/0x140
[ 2364.917380][ T1238]  ? clear_bhb_loop+0x40/0x90
[ 2364.917404][ T1238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2364.917422][ T1238] RIP: 0033:0x7f24d6fee0d9
[ 2364.917440][ T1238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2364.917456][ T1238] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2364.917476][ T1238] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2364.917491][ T1238] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[ 2364.917507][ T1238] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2364.917517][ T1238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2364.917529][ T1238] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2364.917566][ T1238]  </TASK>
[ 2365.913309][T18444] Bluetooth: hci6: command tx timeout
[ 2366.539241][ T1248] FAULT_INJECTION: forcing a failure.
[ 2366.539241][ T1248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2366.539274][ T1248] CPU: 1 UID: 0 PID: 1248 Comm: syz.1.9456 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2366.539297][ T1248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2366.539309][ T1248] Call Trace:
[ 2366.539316][ T1248]  <TASK>
[ 2366.539325][ T1248]  dump_stack_lvl+0xe8/0x150
[ 2366.539359][ T1248]  should_fail_ex+0x467/0x600
[ 2366.539404][ T1248]  _copy_from_user+0x2d/0xb0
[ 2366.539429][ T1248]  __sys_sendto+0x2b5/0x5d0
[ 2366.539459][ T1248]  ? __pfx___sys_sendto+0x10/0x10
[ 2366.539508][ T1248]  ? __pfx_ksys_write+0x10/0x10
[ 2366.539539][ T1248]  __x64_sys_sendto+0xde/0x100
[ 2366.539563][ T1248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2366.539585][ T1248]  do_syscall_64+0x174/0x580
[ 2366.539611][ T1248]  ? trace_irq_disable+0x3b/0x140
[ 2366.539631][ T1248]  ? clear_bhb_loop+0x40/0x90
[ 2366.539655][ T1248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2366.539674][ T1248] RIP: 0033:0x7fa4d153e0d9
[ 2366.539693][ T1248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2366.539709][ T1248] RSP: 002b:00007fa4cf796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 2366.539730][ T1248] RAX: ffffffffffffffda RBX: 00007fa4d17c5fa0 RCX: 00007fa4d153e0d9
[ 2366.539744][ T1248] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003
[ 2366.539757][ T1248] RBP: 00007fa4cf796090 R08: 0000200000000200 R09: 0000000000000014
[ 2366.539773][ T1248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2366.539785][ T1248] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2366.539816][ T1248]  </TASK>
[ 2368.303749][ T1043] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2368.303765][ T1043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2368.303792][ T1043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2368.471602][ T1043] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2368.471619][ T1043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2368.471654][ T1043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2369.259771][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2369.259899][ T1074] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2369.260141][ T1074] bridge_slave_0: entered allmulticast mode
[ 2369.293220][ T1074] bridge_slave_0: entered promiscuous mode
[ 2369.391793][ T1268] FAULT_INJECTION: forcing a failure.
[ 2369.391793][ T1268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2369.391831][ T1268] CPU: 1 UID: 0 PID: 1268 Comm: syz.5.9463 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2369.391854][ T1268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2369.391866][ T1268] Call Trace:
[ 2369.391874][ T1268]  <TASK>
[ 2369.391884][ T1268]  dump_stack_lvl+0xe8/0x150
[ 2369.391919][ T1268]  should_fail_ex+0x467/0x600
[ 2369.391954][ T1268]  _copy_to_iter+0x1e4/0x1810
[ 2369.391975][ T1268]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2369.392003][ T1268]  ? rt_mutex_slowunlock+0x4ee/0xa20
[ 2369.392030][ T1268]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2369.392053][ T1268]  ? __pfx__copy_to_iter+0x10/0x10
[ 2369.392077][ T1268]  ? rt_spin_unlock+0x157/0x200
[ 2369.392102][ T1268]  ? rt_spin_unlock+0x163/0x200
[ 2369.392125][ T1268]  timerfd_read_iter+0x644/0x790
[ 2369.392245][ T1268]  ? __pfx_timerfd_read_iter+0x10/0x10
[ 2369.392269][ T1268]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2369.392300][ T1268]  ? bpf_lsm_file_permission+0x9/0x20
[ 2369.392328][ T1268]  ? security_file_permission+0x75/0x260
[ 2369.392358][ T1268]  vfs_read+0x59e/0xa90
[ 2369.392391][ T1268]  ? __pfx_vfs_read+0x10/0x10
[ 2369.392423][ T1268]  ? __fget_files+0x2a/0x420
[ 2369.392451][ T1268]  ksys_read+0x156/0x270
[ 2369.392477][ T1268]  ? __pfx_ksys_read+0x10/0x10
[ 2369.392507][ T1268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2369.392538][ T1268]  do_syscall_64+0x174/0x580
[ 2369.392563][ T1268]  ? trace_irq_disable+0x3b/0x140
[ 2369.392584][ T1268]  ? clear_bhb_loop+0x40/0x90
[ 2369.392608][ T1268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2369.392627][ T1268] RIP: 0033:0x7f24d6fee0d9
[ 2369.392646][ T1268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2369.392662][ T1268] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2369.392683][ T1268] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2369.392698][ T1268] RDX: 0000000000000106 RSI: 0000200000002180 RDI: 0000000000000003
[ 2369.392711][ T1268] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2369.392731][ T1268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2369.392743][ T1268] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2369.392775][ T1268]  </TASK>
[ 2370.079653][ T1275] FAULT_INJECTION: forcing a failure.
[ 2370.079653][ T1275] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2370.079686][ T1275] CPU: 0 UID: 0 PID: 1275 Comm: syz.1.9465 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2370.079709][ T1275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2370.079722][ T1275] Call Trace:
[ 2370.079730][ T1275]  <TASK>
[ 2370.079739][ T1275]  dump_stack_lvl+0xe8/0x150
[ 2370.079774][ T1275]  should_fail_ex+0x467/0x600
[ 2370.079809][ T1275]  _copy_from_user+0x2d/0xb0
[ 2370.079834][ T1275]  ___sys_sendmsg+0x1c6/0x360
[ 2370.079860][ T1275]  ? __lock_acquire+0x683/0x2ce0
[ 2370.079885][ T1275]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2370.079916][ T1275]  ? kstrtouint+0x6e/0xe0
[ 2370.079969][ T1275]  ? __fget_files+0x2a/0x420
[ 2370.079989][ T1275]  ? __fget_files+0x3a8/0x420
[ 2370.080019][ T1275]  __sys_sendmmsg+0x279/0x4d0
[ 2370.080051][ T1275]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2370.080085][ T1275]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2370.080118][ T1275]  ? ksys_write+0x248/0x270
[ 2370.080145][ T1275]  ? __pfx_ksys_write+0x10/0x10
[ 2370.080175][ T1275]  __x64_sys_sendmmsg+0xa0/0xc0
[ 2370.080201][ T1275]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2370.080225][ T1275]  do_syscall_64+0x174/0x580
[ 2370.080249][ T1275]  ? trace_irq_disable+0x3b/0x140
[ 2370.080271][ T1275]  ? clear_bhb_loop+0x40/0x90
[ 2370.080294][ T1275]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2370.080313][ T1275] RIP: 0033:0x7fa4d153e0d9
[ 2370.080332][ T1275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2370.080349][ T1275] RSP: 002b:00007fa4cf796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2370.080369][ T1275] RAX: ffffffffffffffda RBX: 00007fa4d17c5fa0 RCX: 00007fa4d153e0d9
[ 2370.080384][ T1275] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[ 2370.080397][ T1275] RBP: 00007fa4cf796090 R08: 0000000000000000 R09: 0000000000000000
[ 2370.080410][ T1275] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001
[ 2370.080422][ T1275] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2370.080453][ T1275]  </TASK>
[ 2370.083366][ T1074] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2370.083497][ T1074] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2370.083725][ T1074] bridge_slave_1: entered allmulticast mode
[ 2370.097633][ T1074] bridge_slave_1: entered promiscuous mode
[ 2370.780681][ T1043] hsr_slave_0: entered promiscuous mode
[ 2370.789447][ T1043] hsr_slave_1: entered promiscuous mode
[ 2370.790426][ T1043] debugfs: 'hsr0' already exists in 'hsr'
[ 2370.790449][ T1043] Cannot create hsr debugfs directory
[ 2371.238584][ T1074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2371.362102][ T1074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2372.413925][ T1074] team0: Port device team_slave_0 added
[ 2372.544487][ T1074] team0: Port device team_slave_1 added
[ 2373.939160][ T1074] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2373.939176][ T1074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2373.939200][ T1074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2374.041712][ T1074] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2374.041728][ T1074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2374.041754][ T1074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2374.157811][ T1318] FAULT_INJECTION: forcing a failure.
[ 2374.157811][ T1318] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2374.157841][ T1318] CPU: 0 UID: 0 PID: 1318 Comm: syz.5.9482 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2374.157863][ T1318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2374.157876][ T1318] Call Trace:
[ 2374.157884][ T1318]  <TASK>
[ 2374.157892][ T1318]  dump_stack_lvl+0xe8/0x150
[ 2374.157927][ T1318]  should_fail_ex+0x467/0x600
[ 2374.157962][ T1318]  _copy_from_user+0x2d/0xb0
[ 2374.157988][ T1318]  mptcp_setsockopt+0x256e/0x3570
[ 2374.158179][ T1318]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2374.158206][ T1318]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2374.158235][ T1318]  ? __pfx_mptcp_setsockopt+0x10/0x10
[ 2374.158266][ T1318]  ? __fget_files+0x2a/0x420
[ 2374.158291][ T1318]  ? sock_common_setsockopt+0x36/0xc0
[ 2374.158312][ T1318]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 2374.158335][ T1318]  do_sock_setsockopt+0x17c/0x1b0
[ 2374.158364][ T1318]  __x64_sys_setsockopt+0x143/0x1b0
[ 2374.158391][ T1318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2374.158412][ T1318]  do_syscall_64+0x174/0x580
[ 2374.158436][ T1318]  ? trace_irq_disable+0x3b/0x140
[ 2374.158456][ T1318]  ? clear_bhb_loop+0x40/0x90
[ 2374.158479][ T1318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2374.158499][ T1318] RIP: 0033:0x7f24d6fee0d9
[ 2374.158517][ T1318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2374.158534][ T1318] RSP: 002b:00007f24d5225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2374.158555][ T1318] RAX: ffffffffffffffda RBX: 00007f24d7276090 RCX: 00007f24d6fee0d9
[ 2374.158569][ T1318] RDX: 000000000000000d RSI: 0000000000000001 RDI: 0000000000000003
[ 2374.158581][ T1318] RBP: 00007f24d5225090 R08: 000000000000fe11 R09: 0000000000000000
[ 2374.158594][ T1318] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[ 2374.158607][ T1318] R13: 00007f24d7276128 R14: 00007f24d7276090 R15: 00007ffe4621ed18
[ 2374.158638][ T1318]  </TASK>
[ 2375.420769][ T1074] hsr_slave_0: entered promiscuous mode
[ 2375.422047][ T1074] hsr_slave_1: entered promiscuous mode
[ 2375.452073][ T1074] debugfs: 'hsr0' already exists in 'hsr'
[ 2375.452108][ T1074] Cannot create hsr debugfs directory
[ 2377.040515][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2377.040639][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2377.040897][ T1133] bridge_slave_0: entered allmulticast mode
[ 2377.086329][ T1133] bridge_slave_0: entered promiscuous mode
[ 2377.234887][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2377.235006][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2377.235209][ T1133] bridge_slave_1: entered allmulticast mode
[ 2377.265317][ T1133] bridge_slave_1: entered promiscuous mode
[ 2378.471019][ T1374] FAULT_INJECTION: forcing a failure.
[ 2378.471019][ T1374] name failslab, interval 1, probability 0, space 0, times 0
[ 2378.471071][ T1374] CPU: 1 UID: 0 PID: 1374 Comm: syz.5.9503 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2378.471093][ T1374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2378.471105][ T1374] Call Trace:
[ 2378.471113][ T1374]  <TASK>
[ 2378.471122][ T1374]  dump_stack_lvl+0xe8/0x150
[ 2378.471156][ T1374]  should_fail_ex+0x467/0x600
[ 2378.471192][ T1374]  should_failslab+0xa8/0x100
[ 2378.471218][ T1374]  __kvmalloc_node_noprof+0x17a/0x8a0
[ 2378.471245][ T1374]  ? file_tty_write+0x2ac/0x980
[ 2378.471270][ T1374]  ? file_tty_write+0x2ac/0x980
[ 2378.471298][ T1374]  file_tty_write+0x2ac/0x980
[ 2378.471320][ T1374]  ? security_file_permission+0x75/0x260
[ 2378.471351][ T1374]  vfs_write+0x61e/0xbb0
[ 2378.471385][ T1374]  ? __pfx_vfs_write+0x10/0x10
[ 2378.471427][ T1374]  ? __fget_files+0x2a/0x420
[ 2378.471459][ T1374]  ksys_write+0x156/0x270
[ 2378.471486][ T1374]  ? __pfx_ksys_write+0x10/0x10
[ 2378.471520][ T1374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2378.471542][ T1374]  do_syscall_64+0x174/0x580
[ 2378.471567][ T1374]  ? trace_irq_disable+0x3b/0x140
[ 2378.471587][ T1374]  ? clear_bhb_loop+0x40/0x90
[ 2378.471611][ T1374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2378.471631][ T1374] RIP: 0033:0x7f24d6fee0d9
[ 2378.471650][ T1374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2378.471666][ T1374] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2378.471687][ T1374] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2378.471702][ T1374] RDX: 00000000000001b7 RSI: 0000200000001040 RDI: 0000000000000004
[ 2378.471715][ T1374] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2378.471727][ T1374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2378.471739][ T1374] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2378.471775][ T1374]  </TASK>
[ 2379.702454][ T1133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2379.796748][ T1133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2382.741422][ T1133] team0: Port device team_slave_0 added
[ 2383.657197][ T1133] team0: Port device team_slave_1 added
[ 2384.443449][ T1413] 9p: Bad value for 'rfdno'
[ 2385.727858][ T1427] FAULT_INJECTION: forcing a failure.
[ 2385.727858][ T1427] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2385.727891][ T1427] CPU: 0 UID: 0 PID: 1427 Comm: syz.5.9526 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2385.727914][ T1427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2385.727925][ T1427] Call Trace:
[ 2385.727933][ T1427]  <TASK>
[ 2385.727942][ T1427]  dump_stack_lvl+0xe8/0x150
[ 2385.727976][ T1427]  should_fail_ex+0x467/0x600
[ 2385.728011][ T1427]  _copy_from_user+0x2d/0xb0
[ 2385.728037][ T1427]  ___sys_sendmsg+0x1c6/0x360
[ 2385.728062][ T1427]  ? __lock_acquire+0x683/0x2ce0
[ 2385.728088][ T1427]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2385.728156][ T1427]  ? __fget_files+0x2a/0x420
[ 2385.728179][ T1427]  ? __fget_files+0x3a8/0x420
[ 2385.728210][ T1427]  __x64_sys_sendmsg+0x1b7/0x290
[ 2385.728238][ T1427]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2385.728281][ T1427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2385.728300][ T1427]  do_syscall_64+0x174/0x580
[ 2385.728327][ T1427]  ? trace_irq_disable+0x3b/0x140
[ 2385.728354][ T1427]  ? clear_bhb_loop+0x40/0x90
[ 2385.728435][ T1427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2385.728455][ T1427] RIP: 0033:0x7f24d6fee0d9
[ 2385.728473][ T1427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2385.728489][ T1427] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2385.728510][ T1427] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2385.728524][ T1427] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 2385.728536][ T1427] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2385.728548][ T1427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2385.728560][ T1427] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2385.728591][ T1427]  </TASK>
[ 2392.660642][ T1474] FAULT_INJECTION: forcing a failure.
[ 2392.660642][ T1474] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2392.660676][ T1474] CPU: 1 UID: 0 PID: 1474 Comm: syz.1.9549 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2392.660698][ T1474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2392.660710][ T1474] Call Trace:
[ 2392.660718][ T1474]  <TASK>
[ 2392.660727][ T1474]  dump_stack_lvl+0xe8/0x150
[ 2392.660762][ T1474]  should_fail_ex+0x467/0x600
[ 2392.660798][ T1474]  _copy_from_user+0x2d/0xb0
[ 2392.660823][ T1474]  ___sys_sendmsg+0x1c6/0x360
[ 2392.660848][ T1474]  ? __lock_acquire+0x683/0x2ce0
[ 2392.660874][ T1474]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2392.660933][ T1474]  ? __fget_files+0x2a/0x420
[ 2392.660954][ T1474]  ? __fget_files+0x3a8/0x420
[ 2392.660985][ T1474]  __x64_sys_sendmsg+0x1b7/0x290
[ 2392.661048][ T1474]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2392.661104][ T1474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2392.661133][ T1474]  do_syscall_64+0x174/0x580
[ 2392.661160][ T1474]  ? trace_irq_disable+0x3b/0x140
[ 2392.661180][ T1474]  ? clear_bhb_loop+0x40/0x90
[ 2392.661207][ T1474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2392.661226][ T1474] RIP: 0033:0x7fa4d153e0d9
[ 2392.661245][ T1474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2392.661261][ T1474] RSP: 002b:00007fa4cf796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2392.661282][ T1474] RAX: ffffffffffffffda RBX: 00007fa4d17c5fa0 RCX: 00007fa4d153e0d9
[ 2392.661297][ T1474] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[ 2392.661310][ T1474] RBP: 00007fa4cf796090 R08: 0000000000000000 R09: 0000000000000000
[ 2392.661329][ T1474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2392.661341][ T1474] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2392.661372][ T1474]  </TASK>
[ 2393.212594][T16263] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2394.267471][ T1492] FAULT_INJECTION: forcing a failure.
[ 2394.267471][ T1492] name failslab, interval 1, probability 0, space 0, times 0
[ 2394.267503][ T1492] CPU: 1 UID: 0 PID: 1492 Comm: syz.5.9557 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2394.267526][ T1492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2394.267537][ T1492] Call Trace:
[ 2394.267546][ T1492]  <TASK>
[ 2394.267555][ T1492]  dump_stack_lvl+0xe8/0x150
[ 2394.267590][ T1492]  should_fail_ex+0x467/0x600
[ 2394.267625][ T1492]  should_failslab+0xa8/0x100
[ 2394.267651][ T1492]  __kmalloc_noprof+0xfe/0x780
[ 2394.267671][ T1492]  ? vfs_write+0x231/0xbb0
[ 2394.267696][ T1492]  ? kernfs_fop_write_iter+0x158/0x540
[ 2394.267730][ T1492]  ? kernfs_fop_write_iter+0x158/0x540
[ 2394.267763][ T1492]  kernfs_fop_write_iter+0x158/0x540
[ 2394.267795][ T1492]  vfs_write+0x61e/0xbb0
[ 2394.267829][ T1492]  ? __pfx_vfs_write+0x10/0x10
[ 2394.267856][ T1492]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2394.267882][ T1492]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2394.267911][ T1492]  ? mutex_lock_nested+0x152/0x1d0
[ 2394.267930][ T1492]  ? fdget_pos+0x252/0x320
[ 2394.267960][ T1492]  ksys_write+0x156/0x270
[ 2394.267988][ T1492]  ? __pfx_ksys_write+0x10/0x10
[ 2394.268021][ T1492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2394.268043][ T1492]  do_syscall_64+0x174/0x580
[ 2394.268068][ T1492]  ? trace_irq_disable+0x3b/0x140
[ 2394.268089][ T1492]  ? clear_bhb_loop+0x40/0x90
[ 2394.268114][ T1492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2394.268133][ T1492] RIP: 0033:0x7f24d6fee0d9
[ 2394.268152][ T1492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2394.268169][ T1492] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2394.268190][ T1492] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2394.268204][ T1492] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003
[ 2394.268216][ T1492] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2394.268229][ T1492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2394.268241][ T1492] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2394.268273][ T1492]  </TASK>
[ 2394.574932][ T1497] FAULT_INJECTION: forcing a failure.
[ 2394.574932][ T1497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2394.574965][ T1497] CPU: 0 UID: 0 PID: 1497 Comm: syz.5.9559 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2394.574993][ T1497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2394.575005][ T1497] Call Trace:
[ 2394.575013][ T1497]  <TASK>
[ 2394.575022][ T1497]  dump_stack_lvl+0xe8/0x150
[ 2394.575056][ T1497]  should_fail_ex+0x467/0x600
[ 2394.575092][ T1497]  _copy_from_user+0x2d/0xb0
[ 2394.575118][ T1497]  ___sys_sendmsg+0x1c6/0x360
[ 2394.575144][ T1497]  ? __lock_acquire+0x683/0x2ce0
[ 2394.575169][ T1497]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2394.575226][ T1497]  ? __fget_files+0x2a/0x420
[ 2394.575247][ T1497]  ? __fget_files+0x3a8/0x420
[ 2394.575278][ T1497]  __x64_sys_sendmsg+0x1b7/0x290
[ 2394.575316][ T1497]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2394.575360][ T1497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2394.575379][ T1497]  do_syscall_64+0x174/0x580
[ 2394.575405][ T1497]  ? trace_irq_disable+0x3b/0x140
[ 2394.575425][ T1497]  ? clear_bhb_loop+0x40/0x90
[ 2394.575449][ T1497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2394.575484][ T1497] RIP: 0033:0x7f24d6fee0d9
[ 2394.575503][ T1497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2394.575522][ T1497] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2394.575543][ T1497] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2394.575557][ T1497] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003
[ 2394.575570][ T1497] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2394.575582][ T1497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2394.575594][ T1497] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2394.575625][ T1497]  </TASK>
[ 2394.991972][ T1502] FAULT_INJECTION: forcing a failure.
[ 2394.991972][ T1502] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2394.992004][ T1502] CPU: 0 UID: 0 PID: 1502 Comm: syz.1.9561 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2394.992025][ T1502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2394.992037][ T1502] Call Trace:
[ 2394.992045][ T1502]  <TASK>
[ 2394.992052][ T1502]  dump_stack_lvl+0xe8/0x150
[ 2394.992087][ T1502]  should_fail_ex+0x467/0x600
[ 2394.992121][ T1502]  _copy_from_user+0x2d/0xb0
[ 2394.992145][ T1502]  do_sock_getsockopt+0x200/0x7e0
[ 2394.992176][ T1502]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2394.992215][ T1502]  ? __fget_files+0x3a8/0x420
[ 2394.992235][ T1502]  ? __fget_files+0x2a/0x420
[ 2394.992268][ T1502]  __x64_sys_getsockopt+0x1aa/0x250
[ 2394.992298][ T1502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2394.992318][ T1502]  do_syscall_64+0x174/0x580
[ 2394.992343][ T1502]  ? trace_irq_disable+0x3b/0x140
[ 2394.992362][ T1502]  ? clear_bhb_loop+0x40/0x90
[ 2394.992386][ T1502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2394.992404][ T1502] RIP: 0033:0x7fa4d153e0d9
[ 2394.992423][ T1502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2394.992437][ T1502] RSP: 002b:00007fa4cf775028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 2394.992458][ T1502] RAX: ffffffffffffffda RBX: 00007fa4d17c6090 RCX: 00007fa4d153e0d9
[ 2394.992472][ T1502] RDX: 0000000000000066 RSI: 0000000000000084 RDI: 0000000000000003
[ 2394.992484][ T1502] RBP: 00007fa4cf775090 R08: 00002000000000c0 R09: 0000000000000000
[ 2394.992497][ T1502] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[ 2394.992509][ T1502] R13: 00007fa4d17c6128 R14: 00007fa4d17c6090 R15: 00007fffdd814568
[ 2394.992539][ T1502]  </TASK>
[ 2398.286953][ T1133] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2398.286970][ T1133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2398.287005][ T1133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2398.336312][ T1133] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2398.336328][ T1133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2398.336354][ T1133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2398.340828][ T1043] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 2398.512009][ T1043] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2398.548447][ T1518] FAULT_INJECTION: forcing a failure.
[ 2398.548447][ T1518] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2398.548481][ T1518] CPU: 0 UID: 0 PID: 1518 Comm: syz.5.9569 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2398.548503][ T1518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2398.548516][ T1518] Call Trace:
[ 2398.548524][ T1518]  <TASK>
[ 2398.548533][ T1518]  dump_stack_lvl+0xe8/0x150
[ 2398.548569][ T1518]  should_fail_ex+0x467/0x600
[ 2398.548604][ T1518]  _copy_from_user+0x2d/0xb0
[ 2398.548630][ T1518]  do_ipv6_setsockopt+0x249/0x3180
[ 2398.548789][ T1518]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[ 2398.548815][ T1518]  ? get_pid_task+0x20/0x1f0
[ 2398.548853][ T1518]  ? __lock_acquire+0x683/0x2ce0
[ 2398.548890][ T1518]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2398.548917][ T1518]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2398.548946][ T1518]  ? __fget_files+0x2a/0x420
[ 2398.548978][ T1518]  ? __fget_files+0x2a/0x420
[ 2398.549003][ T1518]  ipv6_setsockopt+0x59/0x170
[ 2398.549028][ T1518]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 2398.549052][ T1518]  do_sock_setsockopt+0x17c/0x1b0
[ 2398.549082][ T1518]  __x64_sys_setsockopt+0x143/0x1b0
[ 2398.549115][ T1518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2398.549137][ T1518]  do_syscall_64+0x174/0x580
[ 2398.549162][ T1518]  ? trace_irq_disable+0x3b/0x140
[ 2398.549182][ T1518]  ? clear_bhb_loop+0x40/0x90
[ 2398.549209][ T1518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2398.549229][ T1518] RIP: 0033:0x7f24d6fee0d9
[ 2398.549247][ T1518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2398.549263][ T1518] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 2398.549285][ T1518] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2398.549299][ T1518] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003
[ 2398.549311][ T1518] RBP: 00007f24d5246090 R08: 0000000000000020 R09: 0000000000000000
[ 2398.549324][ T1518] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[ 2398.549337][ T1518] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2398.549367][ T1518]  </TASK>
[ 2398.967506][ T1043] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 2399.372728][ T1043] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2399.384807][ T1043] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 2399.471525][ T1043] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2399.493788][ T1043] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 2399.819586][ T1043] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2401.073574][ T1133] hsr_slave_0: entered promiscuous mode
[ 2401.074974][ T1133] hsr_slave_1: entered promiscuous mode
[ 2401.075941][ T1133] debugfs: 'hsr0' already exists in 'hsr'
[ 2401.075964][ T1133] Cannot create hsr debugfs directory
[ 2406.003470][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.003537][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 2407.108288][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2407.279476][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2407.294739][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2407.312138][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2407.322735][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2407.436672][ T1598] ALSA: mixer_oss: invalid OSS volume 'OGADá¿CaptuOª'.â‹L*8ŒP88�re'
[ 2407.565940][ T1598] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[ 2407.566220][ T1598] FAULT_INJECTION: forcing a failure.
[ 2407.566220][ T1598] name failslab, interval 1, probability 0, space 0, times 0
[ 2407.566250][ T1598] CPU: 1 UID: 0 PID: 1598 Comm: syz.5.9603 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2407.566271][ T1598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2407.566283][ T1598] Call Trace:
[ 2407.566292][ T1598]  <TASK>
[ 2407.566301][ T1598]  dump_stack_lvl+0xe8/0x150
[ 2407.566336][ T1598]  should_fail_ex+0x467/0x600
[ 2407.566373][ T1598]  should_failslab+0xa8/0x100
[ 2407.566399][ T1598]  __kmalloc_cache_noprof+0xa0/0x6b0
[ 2407.566422][ T1598]  ? snd_mixer_oss_proc_write+0x4db/0x760
[ 2407.566584][ T1598]  ? snd_mixer_oss_proc_write+0x4db/0x760
[ 2407.566613][ T1598]  ? snd_mixer_oss_proc_write+0x2c7/0x760
[ 2407.566646][ T1598]  snd_mixer_oss_proc_write+0x4db/0x760
[ 2407.566683][ T1598]  ? __pfx_snd_mixer_oss_proc_write+0x10/0x10
[ 2407.566739][ T1598]  ? rt_spin_unlock+0x157/0x200
[ 2407.566771][ T1598]  ? __pfx_snd_mixer_oss_proc_write+0x10/0x10
[ 2407.566801][ T1598]  snd_info_text_entry_release+0xdc/0x1c0
[ 2407.566858][ T1598]  ? __pfx_snd_info_text_entry_release+0x10/0x10
[ 2407.566880][ T1598]  close_pdeo+0x217/0x3f0
[ 2407.566940][ T1598]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2407.566967][ T1598]  ? __pfx_close_pdeo+0x10/0x10
[ 2407.566987][ T1598]  ? preempt_count_add+0x91/0x190
[ 2407.567011][ T1598]  ? rt_spin_lock+0x2ce/0x400
[ 2407.567034][ T1598]  ? __pfx_rt_spin_lock+0x10/0x10
[ 2407.567067][ T1598]  proc_reg_release+0x151/0x190
[ 2407.567094][ T1598]  ? __pfx_proc_reg_release+0x10/0x10
[ 2407.567117][ T1598]  __fput+0x42a/0xa80
[ 2407.567147][ T1598]  fput_close_sync+0x11f/0x240
[ 2407.567168][ T1598]  ? __pfx_fput_close_sync+0x10/0x10
[ 2407.567194][ T1598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2407.567217][ T1598]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2407.567238][ T1598]  __x64_sys_close+0x7e/0x110
[ 2407.567260][ T1598]  do_syscall_64+0x174/0x580
[ 2407.567284][ T1598]  ? trace_irq_disable+0x3b/0x140
[ 2407.567302][ T1598]  ? clear_bhb_loop+0x40/0x90
[ 2407.567323][ T1598]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2407.567342][ T1598] RIP: 0033:0x7f24d6fee0d9
[ 2407.567360][ T1598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2407.567375][ T1598] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 2407.567396][ T1598] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2407.567411][ T1598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2407.567423][ T1598] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2407.567435][ T1598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2407.567447][ T1598] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2407.567479][ T1598]  </TASK>
[ 2407.966031][ T1074] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 2408.064291][ T1074] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2409.593064][T18444] Bluetooth: hci3: command tx timeout
[ 2410.937210][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2410.991592][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2411.031656][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2411.223052][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2411.243095][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2411.683112][ T5610] Bluetooth: hci3: command tx timeout
[ 2413.756288][ T5610] Bluetooth: hci3: command tx timeout
[ 2414.073176][ T5610] Bluetooth: hci5: command tx timeout
[ 2415.732693][ T1666] FAULT_INJECTION: forcing a failure.
[ 2415.732693][ T1666] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2415.732726][ T1666] CPU: 0 UID: 0 PID: 1666 Comm: syz.5.9625 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2415.732750][ T1666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2415.732762][ T1666] Call Trace:
[ 2415.732769][ T1666]  <TASK>
[ 2415.732777][ T1666]  dump_stack_lvl+0xe8/0x150
[ 2415.732812][ T1666]  should_fail_ex+0x467/0x600
[ 2415.732847][ T1666]  _copy_from_user+0x2d/0xb0
[ 2415.732872][ T1666]  ___sys_sendmsg+0x1c6/0x360
[ 2415.732894][ T1666]  ? __lock_acquire+0x683/0x2ce0
[ 2415.732917][ T1666]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2415.732944][ T1666]  ? kstrtouint+0x6e/0xe0
[ 2415.732992][ T1666]  ? __fget_files+0x2a/0x420
[ 2415.733012][ T1666]  ? __fget_files+0x3a8/0x420
[ 2415.733039][ T1666]  __sys_sendmmsg+0x279/0x4d0
[ 2415.733069][ T1666]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 2415.733100][ T1666]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2415.733135][ T1666]  ? ksys_write+0x248/0x270
[ 2415.733160][ T1666]  ? __pfx_ksys_write+0x10/0x10
[ 2415.733188][ T1666]  __x64_sys_sendmmsg+0xa0/0xc0
[ 2415.733213][ T1666]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2415.733234][ T1666]  do_syscall_64+0x174/0x580
[ 2415.733257][ T1666]  ? trace_irq_disable+0x3b/0x140
[ 2415.733277][ T1666]  ? clear_bhb_loop+0x40/0x90
[ 2415.733301][ T1666]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2415.733320][ T1666] RIP: 0033:0x7f24d6fee0d9
[ 2415.733339][ T1666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2415.733355][ T1666] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 2415.733375][ T1666] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2415.733389][ T1666] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003
[ 2415.733403][ T1666] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2415.733416][ T1666] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001
[ 2415.733427][ T1666] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2415.733458][ T1666]  </TASK>
[ 2415.833007][ T5610] Bluetooth: hci3: command tx timeout
[ 2416.163890][T18444] Bluetooth: hci5: command tx timeout
[ 2416.220504][T28943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2416.283517][T28943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2416.326537][T28943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2416.344257][T28943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2416.353116][T28943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2418.233015][T28943] Bluetooth: hci5: command tx timeout
[ 2418.481570][T28943] Bluetooth: hci0: command tx timeout
[ 2419.065470][ T1697] FAULT_INJECTION: forcing a failure.
[ 2419.065470][ T1697] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2419.065504][ T1697] CPU: 1 UID: 0 PID: 1697 Comm: syz.5.9638 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2419.065528][ T1697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2419.065540][ T1697] Call Trace:
[ 2419.065548][ T1697]  <TASK>
[ 2419.065557][ T1697]  dump_stack_lvl+0xe8/0x150
[ 2419.065593][ T1697]  should_fail_ex+0x467/0x600
[ 2419.065629][ T1697]  _copy_from_user+0x2d/0xb0
[ 2419.065653][ T1697]  __se_sys_landlock_add_rule+0x156/0x9f0
[ 2419.065682][ T1697]  ? fput+0xa0/0xd0
[ 2419.065702][ T1697]  ? __pfx___se_sys_landlock_add_rule+0x10/0x10
[ 2419.065726][ T1697]  ? ksys_write+0x248/0x270
[ 2419.065753][ T1697]  ? __pfx_ksys_write+0x10/0x10
[ 2419.065785][ T1697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2419.065808][ T1697]  do_syscall_64+0x174/0x580
[ 2419.065834][ T1697]  ? trace_irq_disable+0x3b/0x140
[ 2419.065853][ T1697]  ? clear_bhb_loop+0x40/0x90
[ 2419.065878][ T1697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2419.065897][ T1697] RIP: 0033:0x7f24d6fee0d9
[ 2419.065925][ T1697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2419.065942][ T1697] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bd
[ 2419.065962][ T1697] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2419.065977][ T1697] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003
[ 2419.065988][ T1697] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2419.066001][ T1697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2419.066012][ T1697] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2419.066043][ T1697]  </TASK>
[ 2420.050495][ T1704] FAULT_INJECTION: forcing a failure.
[ 2420.050495][ T1704] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2420.050527][ T1704] CPU: 1 UID: 0 PID: 1704 Comm: syz.1.9641 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2420.050550][ T1704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2420.050562][ T1704] Call Trace:
[ 2420.050570][ T1704]  <TASK>
[ 2420.050580][ T1704]  dump_stack_lvl+0xe8/0x150
[ 2420.050615][ T1704]  should_fail_ex+0x467/0x600
[ 2420.050650][ T1704]  _copy_from_user+0x2d/0xb0
[ 2420.050676][ T1704]  __sys_bpf+0x2e7/0xd90
[ 2420.050706][ T1704]  ? __pfx___sys_bpf+0x10/0x10
[ 2420.050730][ T1704]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2420.050762][ T1704]  ? rt_mutex_slowunlock+0x219/0x460
[ 2420.050801][ T1704]  ? ksys_write+0x248/0x270
[ 2420.050828][ T1704]  ? __pfx_ksys_write+0x10/0x10
[ 2420.050856][ T1704]  __x64_sys_bpf+0xba/0xd0
[ 2420.050886][ T1704]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2420.050907][ T1704]  do_syscall_64+0x174/0x580
[ 2420.050932][ T1704]  ? trace_irq_disable+0x3b/0x140
[ 2420.050952][ T1704]  ? clear_bhb_loop+0x40/0x90
[ 2420.050976][ T1704]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2420.050996][ T1704] RIP: 0033:0x7fa4d153e0d9
[ 2420.051014][ T1704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2420.051030][ T1704] RSP: 002b:00007fa4cf796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2420.051051][ T1704] RAX: ffffffffffffffda RBX: 00007fa4d17c5fa0 RCX: 00007fa4d153e0d9
[ 2420.051066][ T1704] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[ 2420.051079][ T1704] RBP: 00007fa4cf796090 R08: 0000000000000000 R09: 0000000000000000
[ 2420.051091][ T1704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2420.051104][ T1704] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2420.051135][ T1704]  </TASK>
[ 2420.313060][T28943] Bluetooth: hci5: command tx timeout
[ 2420.553183][T28943] Bluetooth: hci0: command tx timeout
[ 2421.101283][ T1713] tipc: Started in network mode
[ 2421.101315][ T1713] tipc: Node identity 2e21b197a5cd, cluster identity 4711
[ 2421.101735][ T1713] tipc: Enabled bearer <eth:hsr0>, priority 10
[ 2421.189577][ T1717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2421.190117][ T1717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2421.364266][   T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 2421.513546][   T31] usb 6-1: device descriptor read/64, error -71
[ 2422.673036][T28943] Bluetooth: hci0: command tx timeout
[ 2422.697638][   T31] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 2423.585307][   T31] usb 6-1: device descriptor read/64, error -71
[ 2423.663719][ T5707] tipc: Node number set to 2347544983
[ 2423.706165][   T31] usb usb6-port1: attempt power cycle
[ 2424.113022][   T31] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 2424.233762][   T31] usb 6-1: device descriptor read/8, error -71
[ 2424.713057][T28943] Bluetooth: hci0: command tx timeout
[ 2436.857668][ T1804] FAULT_INJECTION: forcing a failure.
[ 2436.857668][ T1804] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2436.857701][ T1804] CPU: 1 UID: 0 PID: 1804 Comm: syz.5.9677 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2436.857724][ T1804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2436.857737][ T1804] Call Trace:
[ 2436.857745][ T1804]  <TASK>
[ 2436.857755][ T1804]  dump_stack_lvl+0xe8/0x150
[ 2436.857792][ T1804]  should_fail_ex+0x467/0x600
[ 2436.857829][ T1804]  _copy_from_user+0x2d/0xb0
[ 2436.857855][ T1804]  ___sys_recvmsg+0x173/0x5a0
[ 2436.857890][ T1804]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2436.857930][ T1804]  ? __fget_files+0x2a/0x420
[ 2436.857969][ T1804]  ? __fget_files+0x3a8/0x420
[ 2436.858000][ T1804]  do_recvmmsg+0x320/0x7f0
[ 2436.858034][ T1804]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2436.858060][ T1804]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2436.858099][ T1804]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2436.858140][ T1804]  __x64_sys_recvmmsg+0x198/0x250
[ 2436.858170][ T1804]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 2436.858205][ T1804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2436.858228][ T1804]  do_syscall_64+0x174/0x580
[ 2436.858254][ T1804]  ? trace_irq_disable+0x3b/0x140
[ 2436.858276][ T1804]  ? clear_bhb_loop+0x40/0x90
[ 2436.858300][ T1804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2436.858320][ T1804] RIP: 0033:0x7f24d6fee0d9
[ 2436.858339][ T1804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2436.858355][ T1804] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 2436.858377][ T1804] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2436.858392][ T1804] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000003
[ 2436.858405][ T1804] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2436.858418][ T1804] R10: 0000000000002003 R11: 0000000000000246 R12: 0000000000000001
[ 2436.858430][ T1804] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2436.858461][ T1804]  </TASK>
[ 2441.470926][ T1592] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2441.471098][ T1592] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2441.471302][ T1592] bridge_slave_0: entered allmulticast mode
[ 2441.537441][ T1592] bridge_slave_0: entered promiscuous mode
[ 2441.593100][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2441.593234][ T1620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2441.593472][ T1620] bridge_slave_0: entered allmulticast mode
[ 2441.625007][ T1620] bridge_slave_0: entered promiscuous mode
[ 2441.631391][ T1592] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2441.631585][ T1592] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2441.631803][ T1592] bridge_slave_1: entered allmulticast mode
[ 2441.670247][ T1592] bridge_slave_1: entered promiscuous mode
[ 2441.789747][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2441.842050][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2441.865672][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2441.890820][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2441.977504][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2441.977622][ T1620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2441.977824][ T1620] bridge_slave_1: entered allmulticast mode
[ 2441.982326][ T1620] bridge_slave_1: entered promiscuous mode
[ 2442.010468][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2442.940121][ T1592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2443.012420][ T1620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2443.034988][ T1592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2443.158220][ T1620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2444.173093][T28943] Bluetooth: hci2: command tx timeout
[ 2446.232958][T28943] Bluetooth: hci2: command tx timeout
[ 2447.447546][ T1671] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2447.451599][ T1671] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2447.451880][ T1671] bridge_slave_0: entered allmulticast mode
[ 2447.460586][ T1671] bridge_slave_0: entered promiscuous mode
[ 2448.292015][ T1592] team0: Port device team_slave_0 added
[ 2448.313353][T28943] Bluetooth: hci2: command tx timeout
[ 2448.318134][ T1671] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2448.318253][ T1671] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2448.318556][ T1671] bridge_slave_1: entered allmulticast mode
[ 2448.350338][ T1671] bridge_slave_1: entered promiscuous mode
[ 2448.371992][ T1620] team0: Port device team_slave_0 added
[ 2448.382232][ T1592] team0: Port device team_slave_1 added
[ 2448.803125][   T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 2450.035770][ T1620] team0: Port device team_slave_1 added
[ 2450.074674][   T31] usb 6-1: Using ep0 maxpacket: 32
[ 2450.077269][   T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2450.077293][   T31] usb 6-1: config 0 has no interface number 0
[ 2450.080250][   T31] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 2450.080277][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2450.080298][   T31] usb 6-1: Product: syz
[ 2450.080313][   T31] usb 6-1: Manufacturer: syz
[ 2450.080328][   T31] usb 6-1: SerialNumber: syz
[ 2450.175854][   T31] usb 6-1: config 0 descriptor??
[ 2450.215594][   T31] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 2450.215710][   T31] usb 6-1: selecting invalid altsetting 1
[ 2450.215727][   T31] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 2450.393097][T28943] Bluetooth: hci2: command tx timeout
[ 2450.554246][ T1868] FAULT_INJECTION: forcing a failure.
[ 2450.554246][ T1868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2450.554283][ T1868] CPU: 0 UID: 0 PID: 1868 Comm: syz.5.9693 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2450.554337][ T1868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2450.554363][ T1868] Call Trace:
[ 2450.554380][ T1868]  <TASK>
[ 2450.554391][ T1868]  dump_stack_lvl+0xe8/0x150
[ 2450.554424][ T1868]  should_fail_ex+0x467/0x600
[ 2450.554461][ T1868]  _copy_to_user+0x31/0xb0
[ 2450.554488][ T1868]  simple_read_from_buffer+0xe1/0x170
[ 2450.554516][ T1868]  proc_fail_nth_read+0x1be/0x230
[ 2450.554542][ T1868]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2450.554568][ T1868]  ? rw_verify_area+0x250/0x4d0
[ 2450.554593][ T1868]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2450.554615][ T1868]  vfs_read+0x219/0xa90
[ 2450.554647][ T1868]  ? __pfx_vfs_read+0x10/0x10
[ 2450.554674][ T1868]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2450.554701][ T1868]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2450.554726][ T1868]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2450.554752][ T1868]  ? mutex_lock_nested+0x152/0x1d0
[ 2450.554771][ T1868]  ? fdget_pos+0x252/0x320
[ 2450.554805][ T1868]  ksys_read+0x156/0x270
[ 2450.554832][ T1868]  ? __pfx_ksys_read+0x10/0x10
[ 2450.554865][ T1868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2450.554890][ T1868]  do_syscall_64+0x174/0x580
[ 2450.554916][ T1868]  ? trace_irq_disable+0x3b/0x140
[ 2450.554937][ T1868]  ? clear_bhb_loop+0x40/0x90
[ 2450.554962][ T1868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2450.554982][ T1868] RIP: 0033:0x7f24d6fae90e
[ 2450.555000][ T1868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2450.555017][ T1868] RSP: 002b:00007f24d5245fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2450.555039][ T1868] RAX: ffffffffffffffda RBX: 00007f24d52466c0 RCX: 00007f24d6fae90e
[ 2450.555054][ T1868] RDX: 000000000000000f RSI: 00007f24d52460a0 RDI: 0000000000000004
[ 2450.555067][ T1868] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2450.555079][ T1868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2450.555091][ T1868] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2450.555123][ T1868]  </TASK>
[ 2451.685717][ T1671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2451.689337][ T1592] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2451.689352][ T1592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2451.689376][ T1592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2451.953910][   T31] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2451.954909][   T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 2451.955041][   T31] usb 6-1: media controller created
[ 2452.027755][ T1671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2452.029210][ T1592] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2452.029224][ T1592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2452.029249][ T1592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2452.033842][ T1620] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2452.033856][ T1620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2452.033880][ T1620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2452.511315][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2452.865752][ T1620] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2452.865769][ T1620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2452.865796][ T1620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2453.062028][ T1671] team0: Port device team_slave_0 added
[ 2453.171202][   T31] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 2453.171345][   T31] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 2453.212603][   T31] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 2453.439491][ T1671] team0: Port device team_slave_1 added
[ 2456.003084][   T31] usb 6-1: USB disconnect, device number 23
[ 2457.395111][ T1592] hsr_slave_0: entered promiscuous mode
[ 2457.396500][ T1592] hsr_slave_1: entered promiscuous mode
[ 2457.397459][ T1592] debugfs: 'hsr0' already exists in 'hsr'
[ 2457.397482][ T1592] Cannot create hsr debugfs directory
[ 2458.170335][ T1671] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2458.170352][ T1671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2458.170377][ T1671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2458.303335][ T1620] hsr_slave_0: entered promiscuous mode
[ 2458.304820][ T1620] hsr_slave_1: entered promiscuous mode
[ 2458.307469][ T1620] debugfs: 'hsr0' already exists in 'hsr'
[ 2458.307493][ T1620] Cannot create hsr debugfs directory
[ 2458.830465][ T1671] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2458.830485][ T1671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2458.830513][ T1671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2462.529929][ T1671] hsr_slave_0: entered promiscuous mode
[ 2462.534741][ T1671] hsr_slave_1: entered promiscuous mode
[ 2462.539015][ T1671] debugfs: 'hsr0' already exists in 'hsr'
[ 2462.539038][ T1671] Cannot create hsr debugfs directory
[ 2466.608686][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2466.664428][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2466.702479][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2466.719939][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2466.770370][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2467.435614][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 2467.435682][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 2469.433300][ T5610] Bluetooth: hci4: command tx timeout
[ 2471.142835][T28943] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2471.190344][T28943] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2471.218272][T28943] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2471.235968][T28943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2471.242554][T28943] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2471.629604][ T5610] Bluetooth: hci4: command tx timeout
[ 2474.053052][ T5610] Bluetooth: hci7: command tx timeout
[ 2474.053412][ T5610] Bluetooth: hci4: command tx timeout
[ 2476.072992][ T5610] Bluetooth: hci7: command tx timeout
[ 2476.157772][ T5610] Bluetooth: hci4: command tx timeout
[ 2478.163334][ T5610] Bluetooth: hci7: command tx timeout
[ 2478.891566][T18444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2478.980827][T18444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2479.000413][T18444] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2479.018622][T18444] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2479.024315][T18444] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2479.765388][ T5610] Bluetooth: hci6: command 0x0406 tx timeout
[ 2480.509919][ T5610] Bluetooth: hci7: command tx timeout
[ 2481.203066][T28943] Bluetooth: hci3: command tx timeout
[ 2483.275889][T28943] Bluetooth: hci3: command tx timeout
[ 2483.627262][ T2006] FAULT_INJECTION: forcing a failure.
[ 2483.627262][ T2006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2483.627296][ T2006] CPU: 0 UID: 0 PID: 2006 Comm: syz.5.9736 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2483.627318][ T2006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2483.627329][ T2006] Call Trace:
[ 2483.627336][ T2006]  <TASK>
[ 2483.627345][ T2006]  dump_stack_lvl+0xe8/0x150
[ 2483.627379][ T2006]  should_fail_ex+0x467/0x600
[ 2483.627415][ T2006]  _copy_from_user+0x2d/0xb0
[ 2483.627441][ T2006]  __sys_bind+0x1cc/0x410
[ 2483.627466][ T2006]  ? __pfx___sys_bind+0x10/0x10
[ 2483.627502][ T2006]  ? __pfx_ksys_write+0x10/0x10
[ 2483.627532][ T2006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2483.627554][ T2006]  __x64_sys_bind+0x7a/0x90
[ 2483.627577][ T2006]  do_syscall_64+0x174/0x580
[ 2483.627602][ T2006]  ? trace_irq_disable+0x3b/0x140
[ 2483.627623][ T2006]  ? clear_bhb_loop+0x40/0x90
[ 2483.627647][ T2006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2483.627667][ T2006] RIP: 0033:0x7f24d6fee0d9
[ 2483.627685][ T2006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2483.627702][ T2006] RSP: 002b:00007f24d5225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 2483.627724][ T2006] RAX: ffffffffffffffda RBX: 00007f24d7276090 RCX: 00007f24d6fee0d9
[ 2483.627742][ T2006] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003
[ 2483.627755][ T2006] RBP: 00007f24d5225090 R08: 0000000000000000 R09: 0000000000000000
[ 2483.627768][ T2006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2483.627781][ T2006] R13: 00007f24d7276128 R14: 00007f24d7276090 R15: 00007ffe4621ed18
[ 2483.627812][ T2006]  </TASK>
[ 2483.934010][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2483.980908][ T1833] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2483.981232][ T1833] bridge_slave_0: entered allmulticast mode
[ 2484.011041][ T1833] bridge_slave_0: entered promiscuous mode
[ 2484.735046][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2484.756745][ T1833] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2484.757060][ T1833] bridge_slave_1: entered allmulticast mode
[ 2484.831674][ T1833] bridge_slave_1: entered promiscuous mode
[ 2485.353754][T28943] Bluetooth: hci3: command tx timeout
[ 2486.696632][ T1833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2486.743670][ T1833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2487.304308][ T2018] FAULT_INJECTION: forcing a failure.
[ 2487.304308][ T2018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2487.304350][ T2018] CPU: 0 UID: 0 PID: 2018 Comm: syz.5.9739 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2487.304372][ T2018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2487.304384][ T2018] Call Trace:
[ 2487.304392][ T2018]  <TASK>
[ 2487.304401][ T2018]  dump_stack_lvl+0xe8/0x150
[ 2487.304436][ T2018]  should_fail_ex+0x467/0x600
[ 2487.304470][ T2018]  _copy_to_user+0x31/0xb0
[ 2487.304497][ T2018]  simple_read_from_buffer+0xe1/0x170
[ 2487.304524][ T2018]  proc_fail_nth_read+0x1be/0x230
[ 2487.304551][ T2018]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2487.304576][ T2018]  ? rw_verify_area+0x250/0x4d0
[ 2487.304603][ T2018]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2487.304625][ T2018]  vfs_read+0x219/0xa90
[ 2487.304657][ T2018]  ? __pfx_vfs_read+0x10/0x10
[ 2487.304684][ T2018]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2487.304711][ T2018]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2487.304736][ T2018]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2487.304762][ T2018]  ? mutex_lock_nested+0x152/0x1d0
[ 2487.304782][ T2018]  ? fdget_pos+0x252/0x320
[ 2487.304812][ T2018]  ksys_read+0x156/0x270
[ 2487.304839][ T2018]  ? __pfx_ksys_read+0x10/0x10
[ 2487.304872][ T2018]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2487.304894][ T2018]  do_syscall_64+0x174/0x580
[ 2487.304919][ T2018]  ? trace_irq_disable+0x3b/0x140
[ 2487.304939][ T2018]  ? clear_bhb_loop+0x40/0x90
[ 2487.304963][ T2018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2487.304989][ T2018] RIP: 0033:0x7f24d6fae90e
[ 2487.305007][ T2018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2487.305023][ T2018] RSP: 002b:00007f24d5245fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2487.305044][ T2018] RAX: ffffffffffffffda RBX: 00007f24d52466c0 RCX: 00007f24d6fae90e
[ 2487.305058][ T2018] RDX: 000000000000000f RSI: 00007f24d52460a0 RDI: 0000000000000003
[ 2487.305071][ T2018] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2487.305083][ T2018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2487.305095][ T2018] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2487.305128][ T2018]  </TASK>
[ 2487.437439][T28943] Bluetooth: hci3: command tx timeout
[ 2488.690944][ T1043] syz-executor (1043) used greatest stack depth: 18016 bytes left
[ 2493.055089][ T1833] team0: Port device team_slave_0 added
[ 2495.586142][T16263] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2495.754443][ T1833] team0: Port device team_slave_1 added
[ 2497.274638][ T1833] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2497.274655][ T1833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2497.274681][ T1833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2497.452576][ T1833] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2497.452593][ T1833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2497.452619][ T1833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2499.130581][ T1833] hsr_slave_0: entered promiscuous mode
[ 2499.143491][ T1833] hsr_slave_1: entered promiscuous mode
[ 2499.144791][ T1833] debugfs: 'hsr0' already exists in 'hsr'
[ 2499.144814][ T1833] Cannot create hsr debugfs directory
[ 2503.227121][T18444] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2503.313478][T18444] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2503.317201][T18444] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2503.337358][T18444] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2503.341585][T18444] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2505.513004][T18444] Bluetooth: hci5: command tx timeout
[ 2506.852206][ T1930] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2506.860639][ T1930] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2506.861020][ T1930] bridge_slave_0: entered allmulticast mode
[ 2506.895029][ T1930] bridge_slave_0: entered promiscuous mode
[ 2507.592991][T18444] Bluetooth: hci5: command tx timeout
[ 2508.143109][ T1930] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2508.143182][ T1930] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2508.143456][ T1930] bridge_slave_1: entered allmulticast mode
[ 2508.155665][ T1930] bridge_slave_1: entered promiscuous mode
[ 2510.033124][T18444] Bluetooth: hci5: command tx timeout
[ 2512.073094][T28943] Bluetooth: hci5: command tx timeout
[ 2517.060574][ T1930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2517.300390][ T1930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2520.623496][ T1930] team0: Port device team_slave_0 added
[ 2521.429726][ T1978] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2521.429959][ T1978] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2521.430257][ T1978] bridge_slave_0: entered allmulticast mode
[ 2521.468944][ T1978] bridge_slave_0: entered promiscuous mode
[ 2521.624470][ T1930] team0: Port device team_slave_1 added
[ 2521.841084][ T1978] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2521.841205][ T1978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2521.841478][ T1978] bridge_slave_1: entered allmulticast mode
[ 2521.879536][ T1978] bridge_slave_1: entered promiscuous mode
[ 2522.758082][ T1951] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2522.758205][ T1951] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2522.758489][ T1951] bridge_slave_0: entered allmulticast mode
[ 2522.788248][ T1951] bridge_slave_0: entered promiscuous mode
[ 2523.190317][ T1951] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2523.190448][ T1951] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2523.190671][ T1951] bridge_slave_1: entered allmulticast mode
[ 2523.226613][ T1951] bridge_slave_1: entered promiscuous mode
[ 2523.253531][ T1930] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2523.253548][ T1930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2523.253573][ T1930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2523.560478][ T1978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2523.672516][ T2176] FAULT_INJECTION: forcing a failure.
[ 2523.672516][ T2176] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2523.672549][ T2176] CPU: 1 UID: 0 PID: 2176 Comm: syz.5.9794 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2523.672572][ T2176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2523.672584][ T2176] Call Trace:
[ 2523.672592][ T2176]  <TASK>
[ 2523.672601][ T2176]  dump_stack_lvl+0xe8/0x150
[ 2523.672637][ T2176]  should_fail_ex+0x467/0x600
[ 2523.672672][ T2176]  _copy_from_user+0x2d/0xb0
[ 2523.672697][ T2176]  ___sys_sendmsg+0x1c6/0x360
[ 2523.672723][ T2176]  ? __lock_acquire+0x683/0x2ce0
[ 2523.672750][ T2176]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2523.672809][ T2176]  ? __fget_files+0x2a/0x420
[ 2523.672832][ T2176]  ? __fget_files+0x3a8/0x420
[ 2523.672859][ T2176]  __x64_sys_sendmsg+0x1b7/0x290
[ 2523.672895][ T2176]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2523.672938][ T2176]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2523.672959][ T2176]  do_syscall_64+0x174/0x580
[ 2523.672986][ T2176]  ? trace_irq_disable+0x3b/0x140
[ 2523.673006][ T2176]  ? clear_bhb_loop+0x40/0x90
[ 2523.673030][ T2176]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2523.673049][ T2176] RIP: 0033:0x7f24d6fee0d9
[ 2523.673067][ T2176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2523.673085][ T2176] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2523.673106][ T2176] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2523.673121][ T2176] RDX: 0000000024040000 RSI: 0000200000000000 RDI: 0000000000000003
[ 2523.673134][ T2176] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2523.673147][ T2176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2523.673159][ T2176] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2523.673190][ T2176]  </TASK>
[ 2526.063389][ T1930] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2526.063404][ T1930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2526.063424][ T1930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2526.118198][T18444] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2526.205431][T18444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2526.206978][T18444] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2526.211641][T18444] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2526.215379][ T1978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2526.247140][T18444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2526.649575][ T1951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2526.868323][ T1951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2526.910643][ T1978] team0: Port device team_slave_0 added
[ 2527.363851][ T1978] team0: Port device team_slave_1 added
[ 2528.584922][T18444] Bluetooth: hci2: command tx timeout
[ 2528.876467][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 2528.876527][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 2529.473880][ T1951] team0: Port device team_slave_0 added
[ 2529.486038][ T1978] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2529.486054][ T1978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2529.486079][ T1978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2529.769953][ T1978] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2529.769969][ T1978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2529.769996][ T1978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2530.644824][T18444] Bluetooth: hci2: command tx timeout
[ 2531.154429][T28943] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 2531.285559][T28943] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 2531.290486][T28943] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 2531.292103][T28943] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 2531.316029][T28943] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 2532.829228][T28943] Bluetooth: hci2: command tx timeout
[ 2533.513176][T28943] Bluetooth: hci8: command tx timeout
[ 2533.777596][ T2243] FAULT_INJECTION: forcing a failure.
[ 2533.777596][ T2243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2533.777629][ T2243] CPU: 0 UID: 0 PID: 2243 Comm: syz.5.9815 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2533.777652][ T2243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2533.777663][ T2243] Call Trace:
[ 2533.777670][ T2243]  <TASK>
[ 2533.777679][ T2243]  dump_stack_lvl+0xe8/0x150
[ 2533.777713][ T2243]  should_fail_ex+0x467/0x600
[ 2533.777748][ T2243]  _copy_from_user+0x2d/0xb0
[ 2533.777773][ T2243]  ___sys_recvmsg+0x173/0x5a0
[ 2533.777805][ T2243]  ? __pfx____sys_recvmsg+0x10/0x10
[ 2533.777835][ T2243]  ? __fget_files+0x2a/0x420
[ 2533.777873][ T2243]  ? __fget_files+0x3a8/0x420
[ 2533.777903][ T2243]  do_recvmmsg+0x320/0x7f0
[ 2533.777935][ T2243]  ? __pfx_do_recvmmsg+0x10/0x10
[ 2533.777960][ T2243]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2533.777995][ T2243]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2533.778029][ T2243]  __x64_sys_recvmmsg+0x198/0x250
[ 2533.778058][ T2243]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 2533.778093][ T2243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2533.778122][ T2243]  do_syscall_64+0x174/0x580
[ 2533.778147][ T2243]  ? trace_irq_disable+0x3b/0x140
[ 2533.778167][ T2243]  ? clear_bhb_loop+0x40/0x90
[ 2533.778191][ T2243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2533.778210][ T2243] RIP: 0033:0x7f24d6fee0d9
[ 2533.778229][ T2243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2533.778246][ T2243] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 2533.778267][ T2243] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2533.778282][ T2243] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003
[ 2533.778295][ T2243] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2533.778307][ T2243] R10: 0000000040000002 R11: 0000000000000246 R12: 0000000000000001
[ 2533.778320][ T2243] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2533.778371][ T2243]  </TASK>
[ 2534.483197][T16717] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 2534.795441][T16717] usb 6-1: Using ep0 maxpacket: 16
[ 2534.872951][T28943] Bluetooth: hci2: command tx timeout
[ 2535.582087][T16717] usb 6-1: config 0 has no interfaces?
[ 2535.589524][T16717] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 2535.589552][T16717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2535.589573][T16717] usb 6-1: Product: syz
[ 2535.589588][T16717] usb 6-1: Manufacturer: syz
[ 2535.589602][T16717] usb 6-1: SerialNumber: syz
[ 2535.593030][T28943] Bluetooth: hci8: command tx timeout
[ 2535.649118][T16717] r8152-cfgselector 6-1: Unknown version 0x0000
[ 2535.649144][T16717] r8152-cfgselector 6-1: config 0 descriptor??
[ 2535.820266][ T1978] hsr_slave_0: entered promiscuous mode
[ 2535.903831][ T1978] hsr_slave_1: entered promiscuous mode
[ 2535.904820][ T1978] debugfs: 'hsr0' already exists in 'hsr'
[ 2535.904842][ T1978] Cannot create hsr debugfs directory
[ 2535.931971][ T2249] FAULT_INJECTION: forcing a failure.
[ 2535.931971][ T2249] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2535.932005][ T2249] CPU: 0 UID: 0 PID: 2249 Comm: syz.5.9818 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2535.932028][ T2249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2535.932039][ T2249] Call Trace:
[ 2535.932047][ T2249]  <TASK>
[ 2535.932055][ T2249]  dump_stack_lvl+0xe8/0x150
[ 2535.932095][ T2249]  should_fail_ex+0x467/0x600
[ 2535.932130][ T2249]  _copy_from_user+0x2d/0xb0
[ 2535.932155][ T2249]  __sys_bpf+0x2e7/0xd90
[ 2535.932185][ T2249]  ? __pfx___sys_bpf+0x10/0x10
[ 2535.932209][ T2249]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2535.932240][ T2249]  ? rt_mutex_slowunlock+0x219/0x460
[ 2535.932278][ T2249]  ? ksys_write+0x248/0x270
[ 2535.932306][ T2249]  ? __pfx_ksys_write+0x10/0x10
[ 2535.932336][ T2249]  __x64_sys_bpf+0xba/0xd0
[ 2535.932365][ T2249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2535.932387][ T2249]  do_syscall_64+0x174/0x580
[ 2535.932412][ T2249]  ? trace_irq_disable+0x3b/0x140
[ 2535.932440][ T2249]  ? clear_bhb_loop+0x40/0x90
[ 2535.932464][ T2249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2535.932483][ T2249] RIP: 0033:0x7f24d6fee0d9
[ 2535.932502][ T2249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2535.932519][ T2249] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2535.932539][ T2249] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2535.932554][ T2249] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000f
[ 2535.932567][ T2249] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2535.932580][ T2249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2535.932592][ T2249] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2535.932622][ T2249]  </TASK>
[ 2536.235470][T16717] r8152-cfgselector 6-1: USB disconnect, device number 25
[ 2537.702062][T28943] Bluetooth: hci8: command tx timeout
[ 2539.820424][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 2539.847211][ T5610] Bluetooth: hci8: command tx timeout
[ 2539.866518][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 2539.869033][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 2539.907429][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 2539.912285][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 2541.192945][ T5610] Bluetooth: hci0: command 0x0406 tx timeout
[ 2541.993101][ T5610] Bluetooth: hci4: command tx timeout
[ 2544.073069][T28943] Bluetooth: hci4: command tx timeout
[ 2544.759778][ T2088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2544.759907][ T2088] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2544.760263][ T2088] bridge_slave_0: entered allmulticast mode
[ 2544.801292][ T2088] bridge_slave_0: entered promiscuous mode
[ 2546.232955][ T5610] Bluetooth: hci4: command tx timeout
[ 2546.276033][ T2088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2546.283036][ T2088] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2546.283370][ T2088] bridge_slave_1: entered allmulticast mode
[ 2546.286486][ T2088] bridge_slave_1: entered promiscuous mode
[ 2548.312990][T28943] Bluetooth: hci4: command tx timeout
[ 2549.912560][ T2088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2550.052589][ T2088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2551.979788][ T2088] team0: Port device team_slave_0 added
[ 2552.140647][ T2088] team0: Port device team_slave_1 added
[ 2555.178858][ T2088] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2555.178874][ T2088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2555.178899][ T2088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2555.191152][ T2184] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2555.191271][ T2184] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2555.191516][ T2184] bridge_slave_0: entered allmulticast mode
[ 2555.926247][ T2184] bridge_slave_0: entered promiscuous mode
[ 2555.939038][ T2088] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2555.939053][ T2088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2555.939086][ T2088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2555.973129][ T2184] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2555.973253][ T2184] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2555.973840][ T2184] bridge_slave_1: entered allmulticast mode
[ 2555.988486][ T2184] bridge_slave_1: entered promiscuous mode
[ 2558.017569][ T2184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2558.298937][ T2184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2558.427027][ T2088] hsr_slave_0: entered promiscuous mode
[ 2558.430389][ T2088] hsr_slave_1: entered promiscuous mode
[ 2558.433707][ T2088] debugfs: 'hsr0' already exists in 'hsr'
[ 2558.433731][ T2088] Cannot create hsr debugfs directory
[ 2559.417105][ T2184] team0: Port device team_slave_0 added
[ 2560.665518][ T2184] team0: Port device team_slave_1 added
[ 2567.709335][ T2184] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2567.709351][ T2184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2567.709377][ T2184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2567.868741][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2567.922631][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2567.938855][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2567.983311][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2567.988793][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2568.279576][ T2184] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2568.279607][ T2184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2568.279635][ T2184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2568.547123][ T2383] FAULT_INJECTION: forcing a failure.
[ 2568.547123][ T2383] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2568.547161][ T2383] CPU: 1 UID: 0 PID: 2383 Comm: syz.5.9856 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2568.547212][ T2383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2568.547225][ T2383] Call Trace:
[ 2568.547233][ T2383]  <TASK>
[ 2568.547242][ T2383]  dump_stack_lvl+0xe8/0x150
[ 2568.547280][ T2383]  should_fail_ex+0x467/0x600
[ 2568.547317][ T2383]  _copy_from_user+0x2d/0xb0
[ 2568.547342][ T2383]  ___sys_sendmsg+0x1c6/0x360
[ 2568.547370][ T2383]  ? __lock_acquire+0x683/0x2ce0
[ 2568.547397][ T2383]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2568.547456][ T2383]  ? __fget_files+0x2a/0x420
[ 2568.547478][ T2383]  ? __fget_files+0x3a8/0x420
[ 2568.547508][ T2383]  __x64_sys_sendmsg+0x1b7/0x290
[ 2568.547537][ T2383]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2568.547579][ T2383]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2568.547602][ T2383]  do_syscall_64+0x174/0x580
[ 2568.547631][ T2383]  ? clear_bhb_loop+0x40/0x90
[ 2568.547654][ T2383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2568.547674][ T2383] RIP: 0033:0x7f24d6fee0d9
[ 2568.547692][ T2383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2568.547708][ T2383] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2568.547729][ T2383] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2568.547743][ T2383] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[ 2568.547756][ T2383] RBP: 00007f24d5246090 R08: 0000000000000000 R09: 0000000000000000
[ 2568.547768][ T2383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2568.547780][ T2383] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2568.547812][ T2383]  </TASK>
[ 2570.113060][T28943] Bluetooth: hci3: command tx timeout
[ 2572.303147][T28943] Bluetooth: hci3: command tx timeout
[ 2573.618063][ T2184] hsr_slave_0: entered promiscuous mode
[ 2573.630495][ T2184] hsr_slave_1: entered promiscuous mode
[ 2573.638707][ T2184] debugfs: 'hsr0' already exists in 'hsr'
[ 2573.638740][ T2184] Cannot create hsr debugfs directory
[ 2573.790257][ T2217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2573.790456][ T2217] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2573.790688][ T2217] bridge_slave_0: entered allmulticast mode
[ 2573.805983][ T2217] bridge_slave_0: entered promiscuous mode
[ 2573.969824][ T2217] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2573.969978][ T2217] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2573.970234][ T2217] bridge_slave_1: entered allmulticast mode
[ 2573.979719][ T2217] bridge_slave_1: entered promiscuous mode
[ 2574.316090][T28943] Bluetooth: hci3: command tx timeout
[ 2576.393972][T28943] Bluetooth: hci3: command tx timeout
[ 2576.574909][ T2217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2578.029866][ T2217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2580.713178][   T37] INFO: task syz-executor:1133 blocked for more than 143 seconds.
[ 2580.713202][   T37]       Not tainted syzkaller #0
[ 2580.713213][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2580.713223][   T37] task:syz-executor    state:D stack:18088 pid:1133  tgid:1133  ppid:1      task_flags:0x400140 flags:0x00080002
[ 2580.713270][   T37] Call Trace:
[ 2580.713279][   T37]  <TASK>
[ 2580.713292][   T37]  __schedule+0x16dc/0x5500
[ 2580.713409][   T37]  ? check_noncircular+0xda/0x150
[ 2580.713457][   T37]  ? __pfx___schedule+0x10/0x10
[ 2580.713496][   T37]  rt_mutex_schedule+0x76/0xf0
[ 2580.713519][   T37]  rt_mutex_slowlock_block+0x55c/0x680
[ 2580.713557][   T37]  rt_mutex_slowlock+0x2d4/0x780
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2580.713581][   T37]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2580.713603][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 2580.713637][   T37]  ? rcu_barrier+0x4c/0x530
[ 2580.713669][   T37]  ? rcu_barrier+0x4c/0x530
[ 2580.713701][   T37]  ? rcu_barrier+0x4c/0x530
[ 2580.713724][   T37]  mutex_lock_nested+0x168/[ 2580.713724][   T37]  mutex_lock_nested+0x168/0x1d0
[ 2580.713744][   T37]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2580.713771][   T37]  rcu_barrier+0x4c/0x530
[ 2580.713805][   T37]  netdev_run_todo+0x2ff/0x10d0
[ 2580.713877][   T37]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2580.713902][   T37]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2580.713924][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2580.713955][   T37]  ? kfree+0x1c5/0x6c0
[ 2580.713973][   T37]  ? nsim_create+0xf53/0x1160
[ 2580.714030][   T37]  nsim_create+0xf77/0x1160
[ 2580.714059][   T37]  __nsim_dev_port_add+0x7f8/0xcd0
[ 2580.714132][   T37]  ? do_raw_spin_unlock+0xf5/0x210
[ 2580.714169][   T37]  ? __pfx___nsim_dev_port_add+0x10/0x10
[ 2580.714200][   T37]  ? __mod_timer+0xb8f/0xf10
[ 2580.714233][   T37]  ? queue_delayed_work_on+0x171/0x1e0
[ 2580.714308][   T37]  nsim_dev_port_add_all+0x37/0xf0
[ 2580.714333][   T37]  nsim_drv_probe+0x8d6/0xc00
[ 2580.714365][   T37]  ? __pfx_nsim_drv_probe+0x10/0x10
[ 2580.714416][   T37]  ? kernfs_put+0x7bc/0x820
[ 2580.714448][   T37]  ? sysfs_do_create_link_sd+0xe0/0x110
[ 2580.714471][   T37]  ? driver_sysfs_add+0x1fe/0x210
[ 2580.714556][   T37]  ? __pfx_nsim_bus_probe+0x10/0x10
[ 2580.714573][   T37]  really_probe+0x254/0xae0
[ 2580.714605][   T37]  __driver_probe_device+0x1e8/0x360
[ 2580.714636][   T37]  driver_probe_device+0x4f/0x240
[ 2580.714667][   T37]  __device_attach_driver+0x270/0x410
[ 2580.714700][   T37]  bus_for_each_drv+0x25b/0x2f0
[ 2580.714724][   T37]  ? __pfx___device_attach_driver+0x10/0x10
[ 2580.714753][   T37]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 2580.714774][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2580.714799][   T37]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2580.714833][   T37]  __device_attach+0x2c7/0x450
[ 2580.714864][   T37]  ? __pfx___device_attach+0x10/0x10
[ 2580.714903][   T37]  device_initial_probe+0xa1/0xd0
[ 2580.714933][   T37]  bus_probe_device+0x12d/0x220
[ 2580.714978][   T37]  device_add+0x7d7/0xb80
[ 2580.715037][   T37]  new_device_store+0x37b/0x710
[ 2580.715061][   T37]  ? __pfx_new_device_store+0x10/0x10
[ 2580.715082][   T37]  ? sysfs_file_kobj+0x1a/0x230
[ 2580.715112][   T37]  ? sysfs_file_kobj+0x1e4/0x230
[ 2580.715142][   T37]  ? sysfs_kf_write+0x166/0x260
[ 2580.715165][   T37]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2580.715183][   T37]  kernfs_fop_write_iter+0x3a5/0x540
[ 2580.715215][   T37]  vfs_write+0x61e/0xbb0
[ 2580.715250][   T37]  ? __pfx_vfs_write+0x10/0x10
[ 2580.715277][   T37]  ? do_sys_openat2+0x14e/0x200
[ 2580.715295][   T37]  ? kmem_cache_free+0x187/0x6c0
[ 2580.715342][   T37]  ksys_write+0x156/0x270
[ 2580.715369][   T37]  ? __pfx_ksys_write+0x10/0x10
[ 2580.715403][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2580.715426][   T37]  do_syscall_64+0x174/0x580
[ 2580.715452][   T37]  ? trace_irq_disable+0x3b/0x140
[ 2580.715473][   T37]  ? clear_bhb_loop+0x40/0x90
[ 2580.715498][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2580.715519][   T37] RIP: 0033:0x7f40f895e90e
[ 2580.715538][   T37] RSP: 002b:00007ffccffbd928 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2580.715560][   T37] RAX: ffffffffffffffda RBX: 000055557879d500 RCX: 00007f40f895e90e
[ 2580.715575][   T37] RDX: 0000000000000003 RSI: 00007ffccffbd9b0 RDI: 0000000000000005
[ 2580.715588][   T37] RBP: 00007f40f8a358cb R08: 0000000000000000 R09: 0000000000000000
[ 2580.715602][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 2580.715615][   T37] R13: 00007ffccffbd9b0 R14: 00007f40f9754620 R15: 0000000000000003
[ 2580.715647][   T37]  </TASK>
[ 2580.715672][   T37] INFO: task syz.1.9654:1743 blocked for more than 143 seconds.
[ 2580.715687][   T37]       Not tainted syzkaller #0
[ 2580.715698][   T37]       Blocked by coredump.
[ 2580.715704][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2580.715715][   T37] task:syz.1.9654      state:D stack:21104 pid:1743  tgid:1741  ppid:31423  task_flags:0x40054c flags:0x00080001
[ 2580.715762][   T37] Call Trace:
[ 2580.715770][   T37]  <TASK>
[ 2580.715782][   T37]  __schedule+0x16dc/0x5500
[ 2580.715833][   T37]  ? __pfx___schedule+0x10/0x10
[ 2580.715872][   T37]  rt_mutex_schedule+0x76/0xf0
[ 2580.715895][   T37]  rt_mutex_slowlock_block+0x55c/0x680
[ 2580.715931][   T37]  rt_mutex_slowlock+0x2d4/0x780
[ 2580.715955][   T37]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2580.715977][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 2580.716010][   T37]  ? rcu_barrier+0x4c/0x530
[ 2580.716041][   T37]  ? rcu_barrier+0x4c/0x530
[ 2580.716073][   T37]  ? rcu_barrier+0x4c/0x530
[ 2580.716096][   T37]  mutex_lock_nested+0x168/0x1d0
[ 2580.716116][   T37]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2580.716140][   T37]  rcu_barrier+0x4c/0x530
[ 2580.716172][   T37]  netdev_run_todo+0x2ff/0x10d0
[ 2580.716201][   T37]  ? __pfx_netif_state_change+0x10/0x10
[ 2580.716254][   T37]  ? __pfx_netdev_run_todo+0x10/0x10
[ 2580.716278][   T37]  ? kasan_quarantine_put+0xbb/0x1f0
[ 2580.716298][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2580.716337][   T37]  ? netdev_state_change+0x1bc/0x210
[ 2580.716388][   T37]  tun_chr_close+0x13f/0x1c0
[ 2580.716460][   T37]  ? __pfx_tun_chr_close+0x10/0x10
[ 2580.716479][   T37]  __fput+0x42a/0xa80
[ 2580.716509][   T37]  task_work_run+0x1d9/0x270
[ 2580.716533][   T37]  ? __pfx_task_work_run+0x10/0x10
[ 2580.716554][   T37]  ? do_exit+0x735/0x2360
[ 2580.716571][   T37]  ? kmem_cache_free+0x187/0x6c0
[ 2580.716592][   T37]  ? put_net+0x191/0x260
[ 2580.716641][   T37]  ? do_exit+0x735/0x2360
[ 2580.716664][   T37]  do_exit+0x73a/0x2360
[ 2580.716682][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2580.716707][   T37]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2580.716739][   T37]  ? __pfx_do_exit+0x10/0x10
[ 2580.716792][   T37]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 2580.716812][   T37]  ? rt_spin_lock+0x1e0/0x400
[ 2580.716840][   T37]  ? rt_spin_unlock+0x157/0x200
[ 2580.716864][   T37]  do_group_exit+0x22d/0x2f0
[ 2580.716883][   T37]  ? rt_spin_unlock+0x163/0x200
[ 2580.716906][   T37]  get_signal+0x121b/0x12c0
[ 2580.716953][   T37]  arch_do_signal_or_restart+0xbb/0x860
[ 2580.716984][   T37]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2580.717030][   T37]  exit_to_user_mode_loop+0x104/0x730
[ 2580.717051][   T37]  ? rcu_is_watching+0x15/0xb0
[ 2580.717076][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2580.717099][   T37]  do_syscall_64+0x353/0x580
[ 2580.717124][   T37]  ? trace_irq_disable+0x3b/0x140
[ 2580.717144][   T37]  ? clear_bhb_loop+0x40/0x90
[ 2580.717168][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2580.717189][   T37] RIP: 0033:0x7fa4d153e0d9
[ 2580.717206][   T37] RSP: 002b:00007fa4cf796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2580.717227][   T37] RAX: 0000000000000000 RBX: 00007fa4d17c5fa0 RCX: 00007fa4d153e0d9
[ 2580.717241][   T37] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003
[ 2580.717254][   T37] RBP: 00007fa4d15d5024 R08: 0000000000000000 R09: 0000000000000000
[ 2580.717267][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2580.717279][   T37] R13: 00007fa4d17c6038 R14: 00007fa4d17c5fa0 R15: 00007fffdd814568
[ 2580.717318][   T37]  </TASK>
[ 2580.717374][   T37] 
[ 2580.717374][   T37] Showing all locks held in the system:
[ 2580.717388][   T37] 2 locks held by rcuc/0/20:
[ 2580.717401][   T37] 5 locks held by ksoftirqd/1/30:
[ 2580.717412][   T37] 1 lock held by khungtaskd/37:
[ 2580.717423][   T37]  #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2580.717489][   T37] 4 locks held by kworker/u8:4/67:
[ 2580.717504][   T37] 6 locks held by kworker/u8:6/158:
[ 2580.717538][   T37] 2 locks held by getty/5349:
[ 2580.717548][   T37]  #0: ffff8880357960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2580.717600][   T37]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 2580.717653][   T37] 3 locks held by kworker/u8:16/5846:
[ 2580.717664][   T37]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 2580.717714][   T37]  #1: ffffc9000544fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 2580.717762][   T37]  #2: ffffffff8f5b25f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 2580.717870][   T37] 6 locks held by kworker/u8:3/16263:
[ 2580.717882][   T37]  #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 2580.717931][   T37]  #1: ffffc90006507c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 2580.717979][   T37]  #2: ffffffff8f5a3a40 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[ 2580.718052][   T37]  #3: ffff8880346f1160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[ 2580.718168][   T37]  #4: ffff8880359a2310 (&devlink->lock_key#19){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[ 2580.718229][   T37]  #5: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.718278][   T37] 9 locks held by kworker/u8:20/16329:
[ 2580.718297][   T37] 1 lock held by syz-executor/31423:
[ 2580.718316][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.718366][   T37] 1 lock held by syz-executor/1074:
[ 2580.718378][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.718424][   T37] 7 locks held by syz-executor/1133:
[ 2580.718434][   T37]  #0: ffff88803461c500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2580.718484][   T37]  #1: ffff888061454878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2580.718533][   T37]  #2: ffff88802903db48 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2580.718586][   T37]  #3: ffffffff8ee27338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710
[ 2580.718630][   T37]  #4: ffff888029f4c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 2580.718679][   T37]  #5: ffff888026e1c310 (&devlink->lock_key#24){+.+.}-{4:4}, at: nsim_drv_probe+0xfc/0xc00
[ 2580.718729][   T37]  #6: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.718780][   T37] 1 lock held by syz-executor/1592:
[ 2580.718791][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.718838][   T37] 1 lock held by syz-executor/1620:
[ 2580.718850][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.718900][   T37] 4 locks held by syz-executor/1671:
[ 2580.718909][   T37]  #0: ffff88803461c500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2580.718960][   T37]  #1: ffff888031f2bc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2580.719010][   T37]  #2: ffff88802903da58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2580.719064][   T37]  #3: ffffffff8ee27338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2580.719110][   T37] 1 lock held by syz.1.9654/1743:
[ 2580.719121][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.719171][   T37] 1 lock held by syz-executor/1833:
[ 2580.719183][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.719232][   T37] 1 lock held by syz-executor/1930:
[ 2580.719244][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.719293][   T37] 1 lock held by syz-executor/1951:
[ 2580.719311][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.719360][   T37] 1 lock held by syz-executor/1978:
[ 2580.719371][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.719422][   T37] 1 lock held by syz-executor/2088:
[ 2580.719434][   T37]  #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[ 2580.719485][   T37] 2 locks held by syz-executor/2184:
[ 2580.719497][   T37]  #0: ffffffff8ecedb48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 2580.719550][   T37]  #1: ffffffff8f5b25f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[ 2580.719596][   T37] 3 locks held by syz-executor/2217:
[ 2580.719609][   T37] 2 locks held by syz-executor/2259:
[ 2580.719620][   T37]  #0: ffffffff8fafc0a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 2580.719672][   T37]  #1: ffffffff8f5b25f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[ 2580.719719][   T37] 2 locks held by syz-executor/2373:
[ 2580.719729][   T37]  #0: ffffffff8f5a3a40 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[ 2580.719774][   T37]  #1: ffffffff8f5b25f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820
[ 2580.719863][   T37] 1 lock held by syz.5.9871/2436:
[ 2580.719874][   T37] 
[ 2580.719880][   T37] =============================================
[ 2580.719880][   T37] 
[ 2580.719889][   T37] NMI backtrace for cpu 0
[ 2580.719904][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2580.719925][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2580.719935][   T37] Call Trace:
[ 2580.719943][   T37]  <TASK>
[ 2580.719951][   T37]  dump_stack_lvl+0xe8/0x150
[ 2580.719982][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[ 2580.720047][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2580.720105][   T37]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 2580.720130][   T37]  sys_info+0x135/0x170
[ 2580.720149][   T37]  watchdog+0xfd7/0x1030
[ 2580.720173][   T37]  ? watchdog+0x1c7/0x1030
[ 2580.720195][   T37]  kthread+0x388/0x470
[ 2580.720222][   T37]  ? __pfx_watchdog+0x10/0x10
[ 2580.720238][   T37]  ? __pfx_kthread+0x10/0x10
[ 2580.720264][   T37]  ret_from_fork+0x514/0xb70
[ 2580.720294][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 2580.720330][   T37]  ? __switch_to+0xc89/0x1420
[ 2580.720358][   T37]  ? __pfx_kthread+0x10/0x10
[ 2580.720387][   T37]  ret_from_fork_asm+0x1a/0x30
[ 2580.720422][   T37]  </TASK>
[ 2580.720435][   T37] Sending NMI from CPU 0 to CPUs 1:
[ 2580.720468][    C1] NMI backtrace for cpu 1
[ 2580.720483][    C1] CPU: 1 UID: 0 PID: 2436 Comm: syz.5.9871 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2580.720502][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2580.720512][    C1] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40
[ 2580.720537][    C1] Code: 8d 67 48 0f b9 3a 90 eb ca cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d a3 99 6b 04 00 <74> 1d 83 3d ba ab 6b 04 00 74 14 65 48 8b 0d 38 15 5a 07 31 c0 83
[ 2580.720550][    C1] RSP: 0018:ffffc90004317608 EFLAGS: 00000202
[ 2580.720565][    C1] RAX: 0000000000000000 RBX: ffffffff823675ba RCX: ffff88802c2c5d00
[ 2580.720577][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2580.720587][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2580.720597][    C1] R10: 0000000000000000 R11: ffffffff8e1c30c0 R12: dffffc0000000000
[ 2580.720609][    C1] R13: 0000000000000008 R14: 000000000006e5d1 R15: ffff88813ffe31a0
[ 2580.720620][    C1] FS:  00007f24d52466c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000
[ 2580.720634][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2580.720646][    C1] CR2: 00007fdaab3a82b0 CR3: 000000007c21a000 CR4: 00000000003526f0
[ 2580.720660][    C1] Call Trace:
[ 2580.720667][    C1]  <TASK>
[ 2580.720673][    C1]  pfn_valid+0x32a/0x480
[ 2580.720749][    C1]  page_table_check_set+0x25/0x530
[ 2580.720770][    C1]  set_pte_range+0x7ef/0x840
[ 2580.720804][    C1]  finish_fault+0xd4b/0xff0
[ 2580.720834][    C1]  do_pte_missing+0x1850/0x28f0
[ 2580.720858][    C1]  ? handle_mm_fault+0xe8/0x13f0
[ 2580.720876][    C1]  handle_mm_fault+0xd28/0x13f0
[ 2580.720896][    C1]  ? handle_mm_fault+0xe8/0x13f0
[ 2580.720913][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2580.720930][    C1]  ? follow_page_pte+0xaf1/0xe80
[ 2580.720976][    C1]  ? __pfx_follow_page_pte+0x10/0x10
[ 2580.720997][    C1]  __get_user_pages+0x166b/0x2590
[ 2580.721061][    C1]  populate_vma_page_range+0x2be/0x3c0
[ 2580.721086][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 2580.721109][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2580.721128][    C1]  ? userfaultfd_unmap_complete+0x292/0x310
[ 2580.721174][    C1]  ? rt_mutex_slowunlock+0x4ee/0xa20
[ 2580.721199][    C1]  __mm_populate+0x25f/0x390
[ 2580.721222][    C1]  ? __pfx___mm_populate+0x10/0x10
[ 2580.721244][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 2580.721264][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2580.721284][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2580.721305][    C1]  ? up_write+0x5a/0x190
[ 2580.721353][    C1]  vm_mmap_pgoff+0x356/0x4e0
[ 2580.721381][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 2580.721404][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2580.721426][    C1]  ? __x64_sys_mmap+0x7f/0x140
[ 2580.721442][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2580.721459][    C1]  do_syscall_64+0x174/0x580
[ 2580.721480][    C1]  ? trace_irq_disable+0x3b/0x140
[ 2580.721496][    C1]  ? clear_bhb_loop+0x40/0x90
[ 2580.721515][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2580.721530][    C1] RIP: 0033:0x7f24d6fee0d9
[ 2580.721545][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2580.721559][    C1] RSP: 002b:00007f24d5246028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2580.721575][    C1] RAX: ffffffffffffffda RBX: 00007f24d7275fa0 RCX: 00007f24d6fee0d9
[ 2580.721587][    C1] RDX: 0000000002000001 RSI: 0000000000600000 RDI: 00002000009fd000
[ 2580.721598][    C1] RBP: 00007f24d7085024 R08: ffffffffffffffff R09: 0000000000000000
[ 2580.721609][    C1] R10: 0000000000006031 R11: 0000000000000246 R12: 0000000000000000
[ 2580.721621][    C1] R13: 00007f24d7276038 R14: 00007f24d7275fa0 R15: 00007ffe4621ed18
[ 2580.721642][    C1]  </TASK>
[ 2581.173613][ T2217] team0: Port device team_slave_0 added
[ 2581.374989][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[ 2581.375012][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 2581.375037][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2581.375049][   T37] Call Trace:
[ 2581.375058][   T37]  <TASK>
[ 2581.375067][   T37]  vpanic+0x56c/0xa60
[ 2581.375093][   T37]  ? __pfx___schedule+0x10/0x10
[ 2581.375119][   T37]  ? __pfx_vpanic+0x10/0x10
[ 2581.375154][   T37]  panic+0xc5/0xd0
[ 2581.375173][   T37]  ? __pfx_panic+0x10/0x10
[ 2581.375190][   T37]  ? preempt_schedule_common+0x82/0xd0
[ 2581.375216][   T37]  ? preempt_schedule_thunk+0x16/0x40
[ 2581.375242][   T37]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[ 2581.375268][   T37]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[ 2581.375302][   T37]  watchdog+0x1030/0x1030
[ 2581.375330][   T37]  ? watchdog+0x1c7/0x1030
[ 2581.375354][   T37]  kthread+0x388/0x470
[ 2581.375382][   T37]  ? __pfx_watchdog+0x10/0x10
[ 2581.375398][   T37]  ? __pfx_kthread+0x10/0x10
[ 2581.375428][   T37]  ret_from_fork+0x514/0xb70
[ 2581.375460][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 2581.375488][   T37]  ? __switch_to+0xc89/0x1420
[ 2581.375516][   T37]  ? __pfx_kthread+0x10/0x10
[ 2581.375545][   T37]  ret_from_fork_asm+0x1a/0x30
[ 2581.375579][   T37]  </TASK>
[ 2581.375849][   T37] Kernel Offset: disabled