last executing test programs:

1m52.252707862s ago: executing program 0 (id=517):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
socket(0x5, 0x5, 0x6)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1, 0x80)
open$dir(&(0x7f0000000100)='./file0\x00', 0x6400, 0x100)
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000001340)={0x1, 0x0, <r1=>r0})
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000001380)={0xa, [0x10000, 0x9a1, 0x9, 0x6, 0x5, 0x9, 0x1, 0x1, 0x8, 0x3]})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0xda, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x10)
pipe2$watch_queue(&(0x7f00000012c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0x5, 0x4)
set_mempolicy(0x1, &(0x7f0000000180)=0x1, 0x8001)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000001300)=@generic={0x0, 0x9, 0x2})
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r6, @ANYRES32=r5], 0x1c}}, 0x0)

1m51.259064076s ago: executing program 0 (id=521):
r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0)
vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="b30d7d45c4b88bb4bf5ff521acba2edba66ac1e16826f977f23ac9423a02934a9dd78bc68e571442240f82e30767da37afc6898ceec0268f378f9031731052edbd8ed0dfdae8078f48d11a400bb9ff552ef116fa6f3f1e6e854a295c63a0bda4c6f562972847dd7bd323723c4d7c1b112ddbec707608ab351eb220228a89341dcfcb81a8ad356e13126391d0e2a82807469846ec31330d9cf51fac5c42675ba8120858c743b1b46d4bb3567d08be56761c932823588b06d2", 0xb8}, {&(0x7f0000000180)="f5ab50e7cfd5140f7f9778c98f0aae25ba544367233df15488877a12c9bf1cc88d4f8c6ce55ffc1fc7ca2e79b0424a0091091db07f67971cd2ff5c52885b5e9314", 0x41}, {&(0x7f0000000240)="cbae8465ef53d2b5d91eb1002038666074758539379bc70d4f", 0x19}], 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040"], 0x50)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r4, 0x0, 0x16b8}, 0x38)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x81, @loopback, 0xa}, 0x1c)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000003680)=ANY=[@ANYBLOB="600600000000ae4a159f1b0986e9b253120ca9646d18c46fc3ef6b6d8178d13b219d674a47c4480ceda9b833dc15ce6cd1b9a4d12180871d50252a19b167116e9a678cd2f427df46390dd5555e9b122cfff302ad3b50a8cbdc6577bb8b69c0976e58dbba40f58666809c695b3fb3a42c6a94842f289eb4544c1bb278ba8090283c6355d6d8f2545deddc2638c6315cc18d13528dbf0d"], 0x0, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1f, 0x8000})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea)
connect$x25(r1, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
clock_gettime(0x0, &(0x7f0000003600)={<r7=>0x0, <r8=>0x0})
recvmmsg(r1, &(0x7f0000003480)=[{{&(0x7f00000002c0)=@x25, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/16, 0x10}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000600)=""/151, 0x97}, {&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000700)=""/223, 0xdf}, {&(0x7f0000000800)=""/3, 0x3}, {&(0x7f0000000840)=""/41, 0x29}, {&(0x7f0000000880)=""/28, 0x1c}], 0x9}, 0xfffffffc}, {{&(0x7f0000000980)=@tipc=@name, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/249, 0xf9}], 0x1}, 0x1}, {{&(0x7f0000000b40)=@nfc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000bc0)=""/97, 0x61}, {&(0x7f0000000c40)=""/154, 0x9a}, {&(0x7f0000000d00)}], 0x3, &(0x7f0000000d80)=""/1, 0x1}, 0x10001}, {{&(0x7f0000000dc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000e40)=""/61, 0x3d}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/104, 0x68}], 0x3, &(0x7f0000001f40)=""/176, 0xb0}, 0x1}, {{&(0x7f0000002000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003100)=""/215, 0xd7}, 0x8}, {{&(0x7f0000003200)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/123, 0x7b}, {&(0x7f0000003300)=""/2, 0x2}, {&(0x7f0000003340)=""/49, 0x31}], 0x3, &(0x7f00000033c0)=""/186, 0xba}, 0x341}], 0x6, 0x40, &(0x7f0000003640)={r7, r8+60000000})

1m48.23931175s ago: executing program 0 (id=532):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xd6, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000005c0)={{0xa, 0x6, 0x1, 0x4432, 'syz1\x00', 0x2}, 0x0, [0x1, 0x3ff, 0x4, 0x6, 0xcf08, 0xfffffffffffffff2, 0x8, 0x7, 0x1000, 0xf68f, 0xc, 0x1, 0x7, 0xfffffffffffffffd, 0x1, 0xe4e, 0x8001, 0x8, 0x0, 0xf3f, 0x7, 0x4, 0xfffffffffffffffc, 0x6, 0x7, 0x2c57e62b, 0x8, 0x3, 0x6, 0xfffffffffffffffc, 0x4, 0x3, 0x7fff, 0x6, 0x1, 0x7e, 0x4, 0xd9, 0x100, 0x6, 0x1, 0x2dc, 0x9, 0x1, 0xc166, 0x64f0459d, 0xffff, 0x6974415c, 0xd7fa, 0xef45, 0x8000000000000000, 0x1ff, 0x9, 0x0, 0x1ff, 0xdd50, 0xffffffffffffffff, 0x8000, 0x4, 0x9, 0x2, 0xae3, 0x44a2c814, 0x7, 0x4, 0x8, 0x3, 0xbdda, 0x7fffffffffffffff, 0x6, 0x3, 0x8, 0x1, 0x8, 0x6, 0x8, 0x2, 0x0, 0xdf, 0xb, 0x9, 0x0, 0x3, 0x2, 0xffff, 0x8, 0x80, 0x1, 0x0, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0x5, 0x7fff, 0xffffffff, 0x8001, 0x0, 0xff, 0x9, 0x7, 0x2, 0xe95, 0x7, 0x5, 0x3, 0x0, 0x0, 0x8, 0x7, 0x0, 0x7, 0x1, 0x3, 0x5bd1, 0x8, 0x6fc, 0x2, 0xf, 0x75, 0x1, 0x0, 0x2fa, 0x24a, 0x3, 0x7, 0x1000, 0x7fffffff, 0x1]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4007, 0x20000400)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000010000000040e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000000)={0xd, 0x3f})
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtaction={0x60, 0x30, 0xb, 0x5, 0x0, {}, [{0x4c, 0x1, [@m_ct={0x48, 0x1, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8890}, 0x40)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000022da00cf2d0000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0xd6, 0x0) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000005c0)={{0xa, 0x6, 0x1, 0x4432, 'syz1\x00', 0x2}, 0x0, [0x1, 0x3ff, 0x4, 0x6, 0xcf08, 0xfffffffffffffff2, 0x8, 0x7, 0x1000, 0xf68f, 0xc, 0x1, 0x7, 0xfffffffffffffffd, 0x1, 0xe4e, 0x8001, 0x8, 0x0, 0xf3f, 0x7, 0x4, 0xfffffffffffffffc, 0x6, 0x7, 0x2c57e62b, 0x8, 0x3, 0x6, 0xfffffffffffffffc, 0x4, 0x3, 0x7fff, 0x6, 0x1, 0x7e, 0x4, 0xd9, 0x100, 0x6, 0x1, 0x2dc, 0x9, 0x1, 0xc166, 0x64f0459d, 0xffff, 0x6974415c, 0xd7fa, 0xef45, 0x8000000000000000, 0x1ff, 0x9, 0x0, 0x1ff, 0xdd50, 0xffffffffffffffff, 0x8000, 0x4, 0x9, 0x2, 0xae3, 0x44a2c814, 0x7, 0x4, 0x8, 0x3, 0xbdda, 0x7fffffffffffffff, 0x6, 0x3, 0x8, 0x1, 0x8, 0x6, 0x8, 0x2, 0x0, 0xdf, 0xb, 0x9, 0x0, 0x3, 0x2, 0xffff, 0x8, 0x80, 0x1, 0x0, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0x5, 0x7fff, 0xffffffff, 0x8001, 0x0, 0xff, 0x9, 0x7, 0x2, 0xe95, 0x7, 0x5, 0x3, 0x0, 0x0, 0x8, 0x7, 0x0, 0x7, 0x1, 0x3, 0x5bd1, 0x8, 0x6fc, 0x2, 0xf, 0x75, 0x1, 0x0, 0x2fa, 0x24a, 0x3, 0x7, 0x1000, 0x7fffffff, 0x1]}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async)
sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) (async)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4007, 0x20000400) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000010000000040e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000000)={0xd, 0x3f}) (async)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newtaction={0x60, 0x30, 0xb, 0x5, 0x0, {}, [{0x4c, 0x1, [@m_ct={0x48, 0x1, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000022da00cf2d0000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async)
getsockopt$bt_hci(r2, 0x11a, 0x3, 0x0, 0x0) (async)

1m45.670811717s ago: executing program 0 (id=536):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0xf, 0x400822)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x80000000, 0x0, @ofdm={0x0, 0x8, 0x1c, 0x13, 0x3, 0xa, 0x2}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$phonet(0x23, 0x2, 0x1)
close_range(r1, r2, 0x2)
fcntl$setsig(r0, 0xa, 0x38)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x800, 0x2}, 0x8)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x420102, 0x0)
ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000100)={'geneve0\x00', 0x1ff, 0x6})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)

1m44.87966248s ago: executing program 0 (id=540):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, 0x0, 0x0)

1m43.100382545s ago: executing program 0 (id=544):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xe000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x2000, 0x25000, 0xd, 0x8, 0x70, 0x81, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xf}, {0x1, 0xeeef0000, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0x0, 0x10000, 0xf, 0x6, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0x6, 0xc, 0x0, 0xe, 0x0, 0x2}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x50000, 0x10, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]})
ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100))

1m31.604987768s ago: executing program 2 (id=563):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_CQ_RING(0x0, 0x2000, 0xa, 0x11, 0xffffffffffffffff, 0x8000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000b0102000000000100000003000000080002400000000008000340000000010b0001006d616e676c65"], 0x30}}, 0x20004084) (fail_nth: 2)

1m31.291790202s ago: executing program 2 (id=564):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0xf, 0x400822)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000040)={0x80000000, 0x0, @ofdm={0x0, 0x8, 0x1c, 0x13, 0x3, 0xa, 0x2}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$phonet(0x23, 0x2, 0x1)
close_range(r1, r2, 0x2)
fcntl$setsig(r0, 0xa, 0x38)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x800, 0x2}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)

1m30.780393725s ago: executing program 2 (id=567):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x200, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m29.197205326s ago: executing program 2 (id=568):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'sit0\x00'}}, 0x1e)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0xffffffffffffffff}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
writev(r2, 0x0, 0x0)

1m27.487958825s ago: executing program 32 (id=544):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xe000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x2000, 0x25000, 0xd, 0x8, 0x70, 0x81, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xf}, {0x1, 0xeeef0000, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0x0, 0x10000, 0xf, 0x6, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0x6, 0xc, 0x0, 0xe, 0x0, 0x2}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x50000, 0x10, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]})
ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100))

1m27.424382819s ago: executing program 2 (id=571):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) (async)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xff6c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
socket(0x200000000000011, 0x2, 0xd) (async)
r4 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x23) (async)
bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x23)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
r8 = accept4$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0xa0881)
ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x8, 0x0, 0xfffffff7, 0x0})
poll(&(0x7f00000003c0)=[{r3}, {r2, 0x8010}, {r7, 0x110}, {r2, 0x2001}, {0xffffffffffffffff, 0x191}, {r6}, {r8, 0xf108}, {r6, 0x8082}], 0x8, 0x10001)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', <r10=>0x0})
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000140))
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x8000) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a060}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x8000)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x0, 0x100, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x24}, 0x2, 0x34005, 0x0, 0x480}, 0x0)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r11, 0x0, 0xd0, &(0x7f0000000340)=0x8, 0x4) (async)
setsockopt$MRT_FLUSH(r11, 0x0, 0xd0, &(0x7f0000000340)=0x8, 0x4)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x2e, 0x80, 0x9, 0x5, 0x1, 0x10b0, 0xffff9342, 0x8}}) (async)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x2e, 0x80, 0x9, 0x5, 0x1, 0x10b0, 0xffff9342, 0x8}})

1m27.305596783s ago: executing program 4 (id=572):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0x2, 0x3}})
socket$kcm(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000240)=0x8)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
dup2(r1, r3)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x10, @empty, 0x4}], 0x1c)
sendto$inet6(r3, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x43}, 0x8)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x3, 0xf98, 0x80, 0x0, 0xd})

1m26.532051866s ago: executing program 2 (id=574):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', <r0=>0x0, 0x7, 0x40, 0x7fffffff, 0xffffffff, {{0x67, 0x4, 0x0, 0x2, 0x19c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0x8, "fae4acce1768"}, @rr={0x7, 0xf, 0xb5, [@empty, @remote, @multicast1]}, @cipso={0x86, 0x28, 0x1, [{0x2, 0x7, "c7e683baaf"}, {0x0, 0x12, "ba1c31f869bd04d1cfc35b3bf3737191"}, {0x2, 0x9, "e1e81a6618ae05"}]}, @cipso={0x86, 0x4d, 0x3, [{0x6, 0xa, "4acea59d8705a4a8"}, {0x5, 0x8, "7e4f3c13ad62"}, {0x1, 0x2}, {0x0, 0x4, "b80f"}, {0x5, 0xd, "85a5f56e03eba53438e809"}, {0x6, 0x12, "d2668689ad2854f1d3b42463a6ccc932"}, {0x7, 0x10, "88d35fdb61d798dc143b9541448d"}]}, @cipso={0x86, 0x51, 0x0, [{0x0, 0x12, "46a64380966089b57eee5402115a227d"}, {0xf51f7d887c78ed95, 0xf, "f4223aed0a1db86fa9b79abd1e"}, {0x2, 0xb, "a666390ef2ece082cf"}, {0x7, 0xf, "cbd73ebd4b71d91c142ba8295c"}, {0x1, 0x8, "c8f972068b5e"}, {0x2, 0x8, "fdc5b26efab5"}]}, @timestamp_addr={0x44, 0x44, 0x72, 0x1, 0x5, [{@remote, 0xffffffff}, {@remote, 0xd}, {@multicast2, 0x1b9f}, {@rand_addr=0x64010100, 0x8}, {@empty, 0x5}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0x4c, 0x77, 0x3, 0x6, [{@empty, 0x1eb9}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x41}, {@multicast2, 0x3}, {@rand_addr=0x64010102}, {@private=0xa010101, 0xd5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9ae}, {@loopback, 0x1}]}, @timestamp_addr={0x44, 0x14, 0xba, 0x1, 0x9, [{@remote, 0x1ff}, {@remote, 0x8001}]}]}}}}})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@initdev, <r3=>0x0}, &(0x7f0000000340)=0x14)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xb}}]}}]}, 0x3c}}, 0x44800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000380)={'erspan0\x00', <r6=>0x0, 0x8, 0x7800, 0x6d5c, 0x10000, {{0x11, 0x4, 0x2, 0x0, 0x44, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@end, @timestamp={0x44, 0x20, 0x40, 0x0, 0x8, [0x9, 0x1, 0x8, 0x6, 0x8, 0x4, 0x5]}, @generic={0x83, 0xc, "47816a02a8d65df52967"}]}}}}})
syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
io_setup(0x8, &(0x7f0000004200)=<r7=>0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}])
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf2516000000050002000100000005000400010000005c00018008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="14000200748f2e40066e9965060000000000008008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468305f6d61637674617000000008000100", @ANYRES32=r6, @ANYBLOB="050004000000000005000200000000000500040001000000"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/meminfo\x00', 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x1000003a, [0x8000, 0xc95a, 0xc, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x800003, 0xf, 0x2, 0xffff2d31, 0xffffff01, 0x6, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x7, 0x3c5a, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8008, 0x4c74, 0x80000000, 0x2000, 0x5, 0xe, 0x8, 0x8000806a, 0x7, 0x17, 0x0, 0x7, 0x1fd, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfbfffffa, 0x3, 0x3, 0x0, 0x5, 0x2f, 0xe, 0x5, 0x2000077, 0xea4, 0xd2f5, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x79c, 0x1, 0xff, 0x5, 0x7fff, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0x1b, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xfffc, 0x2, 0x4, 0x9, 0x3, 0x6, 0x9, 0x1, 0x3, 0x3, 0xbc47, 0x48c93690, 0x43, 0x20000009], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x5, 0x8000005, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x106, 0x5, 0x1, 0x82, 0x6, 0x303c, 0x3e9, 0x8, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x7, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x4, 0x6, 0xac8, 0xc2, 0x0, 0xfffffffb, 0x7fd, 0x10012b, 0x4, 0x1, 0x1000000a, 0x0, 0xf, 0x1c, 0x120000, 0x3, 0x802006, 0x80a2f0, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x40, 0x40, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x13ffe, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x1, 0xc8, 0x1, 0x7, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0xff, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf42, 0x7, 0x1, 0x6c3b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m23.346655938s ago: executing program 4 (id=577):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x278f7e69158f976c}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0)

1m22.567217485s ago: executing program 4 (id=580):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'sit0\x00'}}, 0x1e)
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0xffffffffffffffff}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
writev(r2, 0x0, 0x0)

1m22.021914307s ago: executing program 4 (id=582):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x9c, 0x20, 0xe5, 0x8, 0x10c4, 0x817c, 0x8ce0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf, 0x2, 0x20, 0x2f, "", [{{0x9, 0x4, 0xa2, 0x52, 0x1, 0x4b, 0x7f, 0xa3, 0x0, [], [{{0x9, 0x5, 0x87, 0xb, 0x10, 0xc0, 0xf9, 0x14}}]}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1503, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x4, 0x0, 0x7e, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x11}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x4, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa, 0x5, 0x1001}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x6, 0x8, "db7460a833"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x66, 0x2911}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xb3, 0x4, 0x10, 0x37, '\f'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6f, 0x3, 0x8, {0x7, 0x25, 0x1, 0x8, 0x4, 0x7f}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xfb, 0x1, 0x4, 0xff, 0x4}, 0x32, &(0x7f0000000100)={0x5, 0xf, 0x32, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x7, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0xc8, 0x5, 0x8, 0xff00, 0xc5, [0x0, 0xffd1, 0xffc0cf, 0x3fc0, 0xff00f0]}]}, 0x7, [{0x17, &(0x7f0000000140)=@string={0x17, 0x3, "a12858d748e918e9f30daf9f5134eb2a19d082dc00"}}, {0x27, &(0x7f0000000180)=@string={0x27, 0x3, "7935cb0139d14142bb1a467216d94b2ca4bd700bb153585ed02b14af02c4899c9003203444"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x83e}}, {0x8b, &(0x7f0000000240)=@string={0x8b, 0x3, "ceea83a9274bd9d9ef1782a2931986649df6d83747ab9a2ead0f23135c2a878645a48c609bdb2d22b94ec05f83f867d9272e9bd87491ce4211172cd1ca40344723684a22020bcfd35f76ef0a3b90e62404881a8a0f7873c55d5b6f207fe94dc54bcef0d0d0346b59b26748a2f988c0c255754fe1800bfa45d9e60ac000aad6b376ebcbcc06c340a09a"}}, {0x7e, &(0x7f0000000300)=@string={0x7e, 0x3, "fc01bed2727709b71fc2492e7a46a2334c115fef50a8c4f2fd86c62d20716bd2c45f23cfec5161be92641d6ece91f9599320a4ecafc034b52d3b0c3a50b252b19dfd675bfbb974084bfdf77489db65eead03632fc9c1d890f46e89d675e573850ff3fb50e5e20fbd9b20f8ef94a26dc02ccc658013cb920b11e997d0"}}, {0xf3, &(0x7f0000000380)=@string={0xf3, 0x3, "f0ac5b2e7b91604f7a083ac2aa8fc8c3f4f2f0f06f7b769558e9c70ce9a9e3fc202e2bdba3c14e636601e5a43aa87588c9e6e6541df23e6482c89bf5c834561981b5864eda16cbade0d34e5e9f12a50d2c277fc1bbe6ec02668e1712c8af86b7fd1c937b736f9bf119e14c21225f2bbab70f267a8c216ebd467ac342474ad8acd4785b2c7a65af26782ca6aa8acc2dc9de76c32448cfbf987ea7980e27c359a9edb218b5e700f74272897ed2a0d1cfcbcdec5b42988ac48f61767bb7ef009d23ee78cd34b4bbd97bc0cbbb52d7357276e14e932d19bab30f6ab598d628b93a3fe627d182d8c44ba8740da326cb876030a9"}}]})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0)
ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000ac0)={'\x00', 0x6, 0x2, 0xfe, 0x0, 0x0, 0x2000, 0x80a0000, '\x00', 0xfffffffa})
syz_usb_connect$midi(0x4, 0x74, &(0x7f0000000500)=ANY=[@ANYBLOB="13010102000000ff30144b47400001020301090262000101f96df909040000030103000107240108000700072401f30007000624020006090905800340000b070507250103360cfd09050b0320008809091025010c7e20cf3dc27e2e86348385d809050b180800f900020a2501060a6848813cb8"], &(0x7f0000000a00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x1, 0xc, 0x5, 0x10, 0x5}, 0x4f, &(0x7f00000005c0)={0x5, 0xf, 0x4f, 0x5, [@generic={0x1d, 0x10, 0xa, "a22d15929e4bc05378e805338a4240939d48ba3915d7b6bdf0c3"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x102, 0xc, 0x3, 0x4, 0x7f}, @ssp_cap={0x1c, 0x10, 0xa, 0xe, 0x4, 0x4, 0x0, 0x7, [0xc000, 0x3f00, 0xff00, 0x3f0f]}]}, 0x9, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44b}}, {0x42, &(0x7f0000000680)=@string={0x42, 0x3, "d90577829bd352ef573b287e4cb565b203bf900bdd551aa490ebc83ac8f12d8172796a536ec963a100d6558b9d95fa331556d34cbcc48a29df794d274c3420c3"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2009}}, {0xc7, &(0x7f0000000800)=@string={0xc7, 0x3, "e44aa148bdc85e3261cb842b8ac9869146abcaf606be00ea9e74a6bc6d0e76d2d40feaf8d809daf569581df1a658a2d305f3ffb68b5f7b3f0c345aec74cee7616a18adafbb808ff819a4b70f5437bad738c52f8b2578cba72daca7833e63b3812035ff63e9076a671aae636bcff89e14c27ffcba90ddeb2a02242348500a614d17faf7634ae6701ad3f7f80096d71b2c3ba63d4341ed31f927583bc5a83c02887f420977819daf70b0fab0b74c4eeb523f5ac961a2dd2ada9a4fa2faf0e3dddb07178c1957"}}, {0x44, &(0x7f0000000900)=@string={0x44, 0x3, "8af5ba6d52b2aacb6d938f9c5e088f9ce8285c84caef37886c0f8600c386a0d10cacc43e755d94d403790531b3b53c721fc5385ad39e21c5b1e57b4e66f4dfb8edd3"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x3401}}, {0x24, &(0x7f00000009c0)=@string={0x24, 0x3, "4fe330292ac0975105b116e88d753444356d2462c36e53292924a2767b460bca1d7a"}}]})

1m19.318299436s ago: executing program 4 (id=584):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000002bc0)={0x9, @capture={0x0, 0x0, {0x236f, 0x9}, 0xffff, 0x20000000}}) (fail_nth: 1)

1m18.651832811s ago: executing program 4 (id=586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f0000000400000006000000070000008013", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x10000, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x4, 0x2, 0x89, 0x800000b, 0x44, "00ffff00000400", 0x40fff, 0xa8})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xba\xf2\xa7*\xb7b\xa8\xe6\xee\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x932[\xcb~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0'}]}, 0x87)
r3 = socket(0x23, 0x5, 0x0)
listen(r3, 0x0)
connect$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
execveat(r0, 0x0, 0x0, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r4)
r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000400)="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", 0x158, r4)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x5b)

1m5.429639884s ago: executing program 33 (id=574):
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', <r0=>0x0, 0x7, 0x40, 0x7fffffff, 0xffffffff, {{0x67, 0x4, 0x0, 0x2, 0x19c, 0x65, 0x0, 0x4, 0x2f, 0x0, @loopback, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0x8, "fae4acce1768"}, @rr={0x7, 0xf, 0xb5, [@empty, @remote, @multicast1]}, @cipso={0x86, 0x28, 0x1, [{0x2, 0x7, "c7e683baaf"}, {0x0, 0x12, "ba1c31f869bd04d1cfc35b3bf3737191"}, {0x2, 0x9, "e1e81a6618ae05"}]}, @cipso={0x86, 0x4d, 0x3, [{0x6, 0xa, "4acea59d8705a4a8"}, {0x5, 0x8, "7e4f3c13ad62"}, {0x1, 0x2}, {0x0, 0x4, "b80f"}, {0x5, 0xd, "85a5f56e03eba53438e809"}, {0x6, 0x12, "d2668689ad2854f1d3b42463a6ccc932"}, {0x7, 0x10, "88d35fdb61d798dc143b9541448d"}]}, @cipso={0x86, 0x51, 0x0, [{0x0, 0x12, "46a64380966089b57eee5402115a227d"}, {0xf51f7d887c78ed95, 0xf, "f4223aed0a1db86fa9b79abd1e"}, {0x2, 0xb, "a666390ef2ece082cf"}, {0x7, 0xf, "cbd73ebd4b71d91c142ba8295c"}, {0x1, 0x8, "c8f972068b5e"}, {0x2, 0x8, "fdc5b26efab5"}]}, @timestamp_addr={0x44, 0x44, 0x72, 0x1, 0x5, [{@remote, 0xffffffff}, {@remote, 0xd}, {@multicast2, 0x1b9f}, {@rand_addr=0x64010100, 0x8}, {@empty, 0x5}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x8}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0x4c, 0x77, 0x3, 0x6, [{@empty, 0x1eb9}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x41}, {@multicast2, 0x3}, {@rand_addr=0x64010102}, {@private=0xa010101, 0xd5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9ae}, {@loopback, 0x1}]}, @timestamp_addr={0x44, 0x14, 0xba, 0x1, 0x9, [{@remote, 0x1ff}, {@remote, 0x8001}]}]}}}}})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@initdev, <r3=>0x0}, &(0x7f0000000340)=0x14)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xb}}]}}]}, 0x3c}}, 0x44800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000380)={'erspan0\x00', <r6=>0x0, 0x8, 0x7800, 0x6d5c, 0x10000, {{0x11, 0x4, 0x2, 0x0, 0x44, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast1, @local, {[@end, @timestamp={0x44, 0x20, 0x40, 0x0, 0x8, [0x9, 0x1, 0x8, 0x6, 0x8, 0x4, 0x5]}, @generic={0x83, 0xc, "47816a02a8d65df52967"}]}}}}})
syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
io_setup(0x8, &(0x7f0000004200)=<r7=>0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r7, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}])
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf2516000000050002000100000005000400010000005c00018008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="14000200748f2e40066e9965060000000000008008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="1400020076657468305f6d61637674617000000008000100", @ANYRES32=r6, @ANYBLOB="050004000000000005000200000000000500040001000000"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/meminfo\x00', 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x1000003a, [0x8000, 0xc95a, 0xc, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x800003, 0xf, 0x2, 0xffff2d31, 0xffffff01, 0x6, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x7, 0x3c5a, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8008, 0x4c74, 0x80000000, 0x2000, 0x5, 0xe, 0x8, 0x8000806a, 0x7, 0x17, 0x0, 0x7, 0x1fd, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfbfffffa, 0x3, 0x3, 0x0, 0x5, 0x2f, 0xe, 0x5, 0x2000077, 0xea4, 0xd2f5, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x79c, 0x1, 0xff, 0x5, 0x7fff, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0x1b, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xfffc, 0x2, 0x4, 0x9, 0x3, 0x6, 0x9, 0x1, 0x3, 0x3, 0xbc47, 0x48c93690, 0x43, 0x20000009], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x5, 0x8000005, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x106, 0x5, 0x1, 0x82, 0x6, 0x303c, 0x3e9, 0x8, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x7, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x4, 0x6, 0xac8, 0xc2, 0x0, 0xfffffffb, 0x7fd, 0x10012b, 0x4, 0x1, 0x1000000a, 0x0, 0xf, 0x1c, 0x120000, 0x3, 0x802006, 0x80a2f0, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x40, 0x40, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x13ffe, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x1, 0xc8, 0x1, 0x7, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0xff, 0x226, 0x5, 0x5, 0xf, 0x30b1d693, 0xa1f, 0xf42, 0x7, 0x1, 0x6c3b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m3.860758106s ago: executing program 3 (id=594):
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, 0x0, 0x0, 0x40800)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xe8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r3 = socket(0x10, 0x803, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m3.265251502s ago: executing program 34 (id=586):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1f0000000400000006000000070000008013", @ANYRES32, @ANYRESOCT=0x0, @ANYRES32], 0x50)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[], 0x0)
syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x10000, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000000)={0x4, 0x2, 0x89, 0x800000b, 0x44, "00ffff00000400", 0x40fff, 0xa8})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0xff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xba\xf2\xa7*\xb7b\xa8\xe6\xee\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x932[\xcb~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0'}]}, 0x87)
r3 = socket(0x23, 0x5, 0x0)
listen(r3, 0x0)
connect$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
execveat(r0, 0x0, 0x0, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(&(0x7f00000002c0), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r4)
r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000400)="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", 0x158, r4)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x5b)

1m2.439666016s ago: executing program 3 (id=597):
chroot(&(0x7f0000000000)='./file0\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, 0xffffffffffffffff, 0x33, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0xe}}, 0x30)

1m1.606739524s ago: executing program 3 (id=599):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$inet6(r1, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1", 0x1}, {&(0x7f00000062c0)=')w', 0x2}], 0x2}}], 0x1, 0x44051)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2]}, 0x94)

1m0.753640599s ago: executing program 3 (id=600):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}}, 0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xff, {}, 0x0, 0x0, 0x4b})
syz_usb_connect$cdc_ecm(0x4, 0x117, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105, 0x1, 0x1, 0x8, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x8d, {{0xb, 0x24, 0x6, 0x0, 0x0, "c1529b6fa9d9"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0xc08, 0x0, 0xc}, [@country_functional={0xe, 0x24, 0x7, 0xa2, 0x3, [0xac92, 0x8001, 0x200, 0x4]}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x5, 0x19, 0x4, 0x9, 0x2}, @mdlm_detail={0x35, 0x24, 0x13, 0x81, "5fa1527b5b61f5d0e8b678205005aee399cafc377fb693978b551b10b823e382cd020c3cdf78a4b537a4b69201ee218a28"}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x8, 0x9, 0x7}, @mdlm_detail={0x65, 0x24, 0x13, 0x3c, "07639424cc53a0d350dbed9e04124394d634822ddbf334de2153b912cc5de509689c547793c03f59828de511c7d8f023612bd7c123fb635765b497006ca79c56bec0f0d77c31cfc0ff9e46b4c6d8df4066a90e3c0cd0a7e0408f9ce0b5c99620b7"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xbe, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x47, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0xf, 0x7f}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x3, 0x87, 0x9, 0x20, 0x2}, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]})
syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x20, 0x11, 0x3b, {0x3b, 0x8, "b8a8d0cdb7f8aeb8984f371b265ebd7277769b71d962ec3460d25a40519e8d89ecc5a3dab552132fbd35f06a2dfc60ee208ec428bf7de41835"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x20, 0x8, 0x15, "228dbcc438935fef7f2a5ef5ef525b6b9394ae035a"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x81, 0x1, "18"}, &(0x7f0000000400)={0x20, 0x82, 0x2, "69b6"}, &(0x7f0000000480)={0x20, 0x83, 0x3, 'Y`,'}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "427792"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "daed45"}})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=@allocspi={0x128, 0x16, 0x1, 0x70bd27, 0x25dfdbfb, {{{@in=@rand_addr=0x64010102, @in=@multicast2, 0x4e22, 0x0, 0x4e20, 0x1ff, 0xe, 0xa0, 0x20, 0x62, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x4d6, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0xfffffffffffff801, 0x5, 0x9, 0x1, 0x6, 0x2, 0x1, 0x10001}, {0x4, 0xd05, 0xb, 0x5}, {0x9, 0x5, 0x1}, 0x70bd28, 0x3507, 0xa, 0x2, 0x2, 0x425f6b5a515837c7}, 0x200, 0x10000}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd23, 0x70bd2b, 0x70bd2c, 0x70bd2d, 0x8}}, @srcaddr={0x14, 0xd, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x824)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000180)='{.\x00', 0x3, 0x1)
creat(&(0x7f0000000040)='./cgroup\x00', 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0xb4}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff2c00048005000300050000000500030002000000050003000200000005000300000000000500030080ff07000800020002"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x13e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20008000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000003300070100000000000000000c7c00000c0006"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0xc010)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000780)={0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x140)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000000000)={0x8c6, @random="608c5ea36662"})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

57.44280035s ago: executing program 3 (id=602):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f00000002c0)=0x10)

54.074720732s ago: executing program 3 (id=603):
unshare(0x62040200)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r2 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r2, 0x0, 0x0, 0x0)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4)
socket(0x23, 0x6, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
prctl$PR_GET_NAME(0x10, &(0x7f0000000b00))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="90000000000101040000000000000000070000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c0002800500010000000000380002802c00018014000300fc02000000000000000000007e6a35b914000400fe8000000000000000000000000000aa46000340000e00000800074000000000"], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = fcntl$dupfd(r5, 0x406, r3)
read$alg(r6, &(0x7f0000000940)=""/245, 0xf5)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x44892}, 0x4040050)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x4, 0x9, 0x3}, 0x17, [0x5, 0x0, 0x0, 0x8, 0xd, 0x9, 0x7fff, 0x6, 0x9774, 0x9, 0xffffffff, 0x0, 0x0, 0x7df57aef, 0xcc6, 0x95, 0xee, 0x0, 0x7, 0x3, 0x0, 0x8e, 0xa6, 0xa9, 0x5, 0x9, 0xa, 0xfcb, 0x5, 0x5, 0x7, 0x4, 0x3ff, 0x6, 0x1, 0xf79, 0xa142, 0x1, 0xfffffffd, 0x8, 0x9, 0x0, 0x1, 0x8, 0x9, 0x7, 0x40, 0x5, 0x7, 0xffffffcb, 0x6, 0x9e, 0x6, 0xffffff01, 0x0, 0xb60, 0x7, 0x2, 0x9, 0x10000, 0x7, 0x0, 0x0, 0xfffffffa], [0x5, 0xfffffffe, 0xff, 0x8000, 0x223, 0xfffffffc, 0x8, 0x400, 0x2, 0x5, 0x1, 0x4, 0x80, 0x3, 0x7, 0x8, 0xc8, 0x7f6c7e12, 0x4, 0x401, 0x6, 0x3, 0x7, 0x6, 0x9, 0x7f, 0x1, 0x7, 0x6, 0x9, 0x0, 0x6, 0x5, 0x6, 0x655, 0x0, 0xec, 0x8, 0x7fff, 0x4, 0x5, 0xd, 0x7fffffff, 0x9, 0xab8, 0xfff, 0x1, 0x8, 0x4, 0x800, 0x1, 0x8, 0x5, 0xd, 0x10001, 0x6, 0x8, 0x7, 0x2, 0x9, 0x3, 0xff, 0x10000, 0x7], [0x8000, 0x800000, 0x37a8a384, 0xc98, 0x80000000, 0x1, 0x1000, 0xffff310d, 0x3, 0x8, 0x9f3, 0x8, 0x101, 0x7f, 0x0, 0x9, 0x26eedf86, 0x4, 0x4, 0x4, 0x4, 0xe, 0x7, 0x3, 0x2, 0x400, 0x2, 0x3, 0x4, 0x3, 0x1, 0x5, 0x8000000, 0x5, 0xa7, 0x7ff, 0x7, 0x7, 0x7fff, 0x9fa, 0xc, 0xb53, 0x8, 0x5, 0x80000000, 0x1800000, 0x8, 0x3, 0x10001, 0xa0a5, 0x2, 0x8, 0x429ac96e, 0x2, 0x6, 0x345, 0x7, 0x2d1, 0x0, 0x3, 0x8, 0x8, 0x4, 0x7], [0x1fa9, 0x7, 0xa, 0x1, 0x3, 0x9, 0x2400, 0x8, 0xf2bc, 0x7, 0x0, 0x8, 0x6, 0x3, 0x2, 0x9, 0xd2f2, 0x1, 0xb, 0xc099, 0x0, 0x3, 0x6, 0x1e33908a, 0xa357, 0xffffff01, 0x3de842c8, 0x0, 0x34, 0x10001, 0x4, 0x2, 0xa, 0x1, 0x1, 0x80000000, 0xf, 0x80000001, 0x4, 0x12, 0x6e, 0x3, 0x3, 0x0, 0x28b, 0xfffffff8, 0x1, 0x2, 0x0, 0x2, 0x4, 0xffffffff, 0x2, 0x2, 0x0, 0x8000, 0x1ff, 0x800, 0x0, 0x200, 0x0, 0x7, 0xfffffff1, 0x6]}, 0x45c)
r8 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000, 0x400001)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1)
connect$phonet_pipe(r8, &(0x7f0000000080)={0x23, 0x4b, 0x66, 0x7}, 0x10)

38.509425391s ago: executing program 35 (id=603):
unshare(0x62040200)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r2 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r2, 0x0, 0x0, 0x0)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4)
socket(0x23, 0x6, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff)
prctl$PR_GET_NAME(0x10, &(0x7f0000000b00))
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="90000000000101040000000000000000070000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c0002800500010000000000380002802c00018014000300fc02000000000000000000007e6a35b914000400fe8000000000000000000000000000aa46000340000e00000800074000000000"], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = fcntl$dupfd(r5, 0x406, r3)
read$alg(r6, &(0x7f0000000940)=""/245, 0xf5)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x44892}, 0x4040050)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz1\x00', {0x7, 0x4, 0x9, 0x3}, 0x17, [0x5, 0x0, 0x0, 0x8, 0xd, 0x9, 0x7fff, 0x6, 0x9774, 0x9, 0xffffffff, 0x0, 0x0, 0x7df57aef, 0xcc6, 0x95, 0xee, 0x0, 0x7, 0x3, 0x0, 0x8e, 0xa6, 0xa9, 0x5, 0x9, 0xa, 0xfcb, 0x5, 0x5, 0x7, 0x4, 0x3ff, 0x6, 0x1, 0xf79, 0xa142, 0x1, 0xfffffffd, 0x8, 0x9, 0x0, 0x1, 0x8, 0x9, 0x7, 0x40, 0x5, 0x7, 0xffffffcb, 0x6, 0x9e, 0x6, 0xffffff01, 0x0, 0xb60, 0x7, 0x2, 0x9, 0x10000, 0x7, 0x0, 0x0, 0xfffffffa], [0x5, 0xfffffffe, 0xff, 0x8000, 0x223, 0xfffffffc, 0x8, 0x400, 0x2, 0x5, 0x1, 0x4, 0x80, 0x3, 0x7, 0x8, 0xc8, 0x7f6c7e12, 0x4, 0x401, 0x6, 0x3, 0x7, 0x6, 0x9, 0x7f, 0x1, 0x7, 0x6, 0x9, 0x0, 0x6, 0x5, 0x6, 0x655, 0x0, 0xec, 0x8, 0x7fff, 0x4, 0x5, 0xd, 0x7fffffff, 0x9, 0xab8, 0xfff, 0x1, 0x8, 0x4, 0x800, 0x1, 0x8, 0x5, 0xd, 0x10001, 0x6, 0x8, 0x7, 0x2, 0x9, 0x3, 0xff, 0x10000, 0x7], [0x8000, 0x800000, 0x37a8a384, 0xc98, 0x80000000, 0x1, 0x1000, 0xffff310d, 0x3, 0x8, 0x9f3, 0x8, 0x101, 0x7f, 0x0, 0x9, 0x26eedf86, 0x4, 0x4, 0x4, 0x4, 0xe, 0x7, 0x3, 0x2, 0x400, 0x2, 0x3, 0x4, 0x3, 0x1, 0x5, 0x8000000, 0x5, 0xa7, 0x7ff, 0x7, 0x7, 0x7fff, 0x9fa, 0xc, 0xb53, 0x8, 0x5, 0x80000000, 0x1800000, 0x8, 0x3, 0x10001, 0xa0a5, 0x2, 0x8, 0x429ac96e, 0x2, 0x6, 0x345, 0x7, 0x2d1, 0x0, 0x3, 0x8, 0x8, 0x4, 0x7], [0x1fa9, 0x7, 0xa, 0x1, 0x3, 0x9, 0x2400, 0x8, 0xf2bc, 0x7, 0x0, 0x8, 0x6, 0x3, 0x2, 0x9, 0xd2f2, 0x1, 0xb, 0xc099, 0x0, 0x3, 0x6, 0x1e33908a, 0xa357, 0xffffff01, 0x3de842c8, 0x0, 0x34, 0x10001, 0x4, 0x2, 0xa, 0x1, 0x1, 0x80000000, 0xf, 0x80000001, 0x4, 0x12, 0x6e, 0x3, 0x3, 0x0, 0x28b, 0xfffffff8, 0x1, 0x2, 0x0, 0x2, 0x4, 0xffffffff, 0x2, 0x2, 0x0, 0x8000, 0x1ff, 0x800, 0x0, 0x200, 0x0, 0x7, 0xfffffff1, 0x6]}, 0x45c)
r8 = syz_open_dev$mouse(&(0x7f0000000000), 0x100000000, 0x400001)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1)
connect$phonet_pipe(r8, &(0x7f0000000080)={0x23, 0x4b, 0x66, 0x7}, 0x10)

30.523667578s ago: executing program 1 (id=615):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r2, 0x890c, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x74, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x9d}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x74}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
mmap$xdp(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x2000004, 0x12, r5, 0x180000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_RATE={0x6, 0x5, {0x7f}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000bf0000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70a00000800000018210000", @ANYRES32=r4, @ANYRES16=r5], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0xff6, &(0x7f0000002e00)=""/4086, 0x0, 0xe, '\x00', r7}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = ioctl$KVM_GET_STATS_FD_vm(r4, 0xaece)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="10002cbd7000ffdbdf2506000000080002006765459b66b1cad507b62c06001c000800020004000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc0c4)
r11 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r11, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1854000000000000000000000000fe0061111800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
r12 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010000000008cb06a78100000000000109022400010000e020090400fc010300010009210000000122280009058103"], 0x0)
syz_usb_control_io$hid(r12, 0x0, 0x0)
syz_usb_control_io(r12, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0021280000000203f70ba38140db2252a3d5"], 0x0, 0x0, 0x0, 0x0}, 0x0)
timerfd_create(0x6, 0x800)
pipe(&(0x7f0000001640))

24.844061609s ago: executing program 1 (id=616):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x9c, 0x20, 0xe5, 0x8, 0x10c4, 0x817c, 0x8ce0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xf, 0x2, 0x20, 0x2f, "", [{{0x9, 0x4, 0xa2, 0x52, 0x1, 0x4b, 0x7f, 0xa3, 0x0, [], [{{0x9, 0x5, 0x87, 0xb, 0x10, 0xc0, 0xf9, 0x14}}]}}]}}]}}, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1503, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x3, 0x1, 0x4, 0x0, 0x7e, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x11}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x4, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa, 0x5, 0x1001}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x6, 0x8, "db7460a833"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x66, 0x2911}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0xfbe, 0x3, "02f2"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xb3, 0x4, 0x10, 0x37, '\f'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6f, 0x3, 0x8, {0x7, 0x25, 0x1, 0x8, 0x4, 0x7f}}}}}}}}]}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', 0x0, 0x1000080, 0x0)
ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000ac0)={'\x00', 0x6, 0x2, 0xfe, 0x0, 0x0, 0x2000, 0x80a0000, '\x00', 0xfffffffa})
syz_usb_connect$midi(0x4, 0x74, &(0x7f0000000500)=ANY=[@ANYBLOB="13010102000000ff30144b47400001020301090262000101f96df909040000030103000107240108000700072401f30007000624020006090905800340000b070507250103360cfd09050b0320008809091025010c7e20cf3dc27e2e86348385d809050b180800f900020a2501060a6848813cb8"], &(0x7f0000000a00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x110, 0x1, 0xc, 0x5, 0x10, 0x5}, 0x4f, &(0x7f00000005c0)={0x5, 0xf, 0x4f, 0x5, [@generic={0x1d, 0x10, 0xa, "a22d15929e4bc05378e805338a4240939d48ba3915d7b6bdf0c3"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x102, 0xc, 0x3, 0x4, 0x7f}, @ssp_cap={0x1c, 0x10, 0xa, 0xe, 0x4, 0x4, 0x0, 0x7, [0xc000, 0x3f00, 0xff00, 0x3f0f]}]}, 0x9, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44b}}, {0x42, &(0x7f0000000680)=@string={0x42, 0x3, "d90577829bd352ef573b287e4cb565b203bf900bdd551aa490ebc83ac8f12d8172796a536ec963a100d6558b9d95fa331556d34cbcc48a29df794d274c3420c3"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2009}}, {0xc7, &(0x7f0000000800)=@string={0xc7, 0x3, "e44aa148bdc85e3261cb842b8ac9869146abcaf606be00ea9e74a6bc6d0e76d2d40feaf8d809daf569581df1a658a2d305f3ffb68b5f7b3f0c345aec74cee7616a18adafbb808ff819a4b70f5437bad738c52f8b2578cba72daca7833e63b3812035ff63e9076a671aae636bcff89e14c27ffcba90ddeb2a02242348500a614d17faf7634ae6701ad3f7f80096d71b2c3ba63d4341ed31f927583bc5a83c02887f420977819daf70b0fab0b74c4eeb523f5ac961a2dd2ada9a4fa2faf0e3dddb07178c1957"}}, {0x44, &(0x7f0000000900)=@string={0x44, 0x3, "8af5ba6d52b2aacb6d938f9c5e088f9ce8285c84caef37886c0f8600c386a0d10cacc43e755d94d403790531b3b53c721fc5385ad39e21c5b1e57b4e66f4dfb8edd3"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x3401}}, {0x24, &(0x7f00000009c0)=@string={0x24, 0x3, "4fe330292ac0975105b116e88d753444356d2462c36e53292924a2767b460bca1d7a"}}]})

21.657961201s ago: executing program 1 (id=617):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xfff, @empty, 0x10000}}}, 0x32)
getsockopt(r2, 0x111, 0x5, 0x0, &(0x7f00000000c0))
r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000440)=0x60, 0x80000)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840)
bind$nfc_llcp(r3, &(0x7f0000000500)={0x27, r7, 0x0, 0x1, 0x5, 0xa, "caa8a4102fe794a3402446b732d526853a4dcc1b3bfdf783e883b16ece563abcf560e9c18365384684a237d3bacb1c5b0f7d1d8f7311add23e719425868c6e", 0x28}, 0x60)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x105042, 0x106)
r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0)
r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r12, &(0x7f0000000040)={0x1f, @none, 0x3}, 0xa)
recvmmsg(r12, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/114, 0x72}, 0x1}], 0x1, 0x10102, 0x0)
shutdown(r12, 0x1)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r13=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, 0x0)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000580)={0x1, &(0x7f0000000680)}, 0xf)
r15 = dup(r14)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
syz_ublk_setup_queues(r15, r13, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r15}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

16.86799561s ago: executing program 1 (id=618):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00"], 0x20}}, 0x0)

16.502322403s ago: executing program 1 (id=619):
r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401", @ANYRES64=0x0, @ANYRESOCT=0x0], 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f0000000140)=[{0x1e, 0x8611, 0x45, &(0x7f00000000c0)="253ae1ff09423e082b90f40900000000000000fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3404aa4063169b921fe2c0b93c0e66e21421bd29fcb0c"}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x5, 0x40642)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000640)={&(0x7f00000005c0)=[{0xffff, 0xa000, 0x5a, &(0x7f0000000180)="4d18c525589ea32d6d2d56a509303bc638fb19b3ed719027e58f4b3e209c1d907b22c214c86f819c96c512c6704d8875854b99863017b859ec114569ea3a8ca860d94747f0dda285b2e8e1cef254080d1723686e44b91524fb08"}, {0xc2, 0x10, 0xf3, &(0x7f0000000200)="ae0d8ea2019f8cebc80810568cbe924d598dfe344447636dbfe681f59942f6337b3812fa668bb54340268ba92c46febc97dc39036c314f69c16f56c538d18cae91811f6f30100973c2db9925b45852f27213b1b8b53bbd972ddd90c7b0f78a65ad116e5155c63263739c64fa88e26e979ddd9b647965e3bf515d8b64d48e139dba056b5b6abd13d270a5ce2e99d56e5482d6cdb1dafdbfad038a195786a9b7a1ad8f2f78c50e56beb8e4eb55c7045a3a53bbfdeb1740c5ee054eb7b19593d717b694504be49099b3253ce50b11e750736df343f8597c62f1a8838fc63dd0b92a969eb3f394dc4d5af3f0f666d866b2ee431e28"}, {0x8, 0xc00, 0xa3, &(0x7f0000000300)="79f3a1fbc1ebcdd2fd622813438abb37c7c2f0918b303c9596b409dbd08919adb06fe2e19d369015a6bcf4d709d2f462967ba4be12a04c20ce0b20a7c0b1e40b16e9ce4c49a787bc394700562d53fc2d81f266c566dbefd382f15b09fa2557a9db5df938b6e6419a9c075f2133fb223eaf90b9a2a4fa9e6506cea98be630dfaf6de92b23ff9760c2d713c7cd1f246f21430b17103a67f5dc4597dd1cc5c71e1af974d3"}, {0x6, 0x1000, 0x1d, &(0x7f00000003c0)="79ec6d1e9a56e044b6f68a929255960415a1a45a782cac272da866a767"}, {0xe2, 0xd400, 0x1, &(0x7f0000000440)="f0"}, {0x5, 0x211, 0x3f, &(0x7f0000000480)="37db109f6cfc19d9239726b0a244793072b74262229857b1e0986eb0b189c9d654bef8d9a8eb784281fe81ee9683316261f4a04c84664f1e71e39811fde520"}, {0x4, 0x4000, 0xeb, &(0x7f00000004c0)="8a5ec896f09f69455510c31482d91845f4053ae19f2e217f528d6fec455f4183a96287248bed22c066f89c673733defe929d6b0e1da43b45fce3ca8647914dcd6623c26ae31c9f3895e46fee26fba8a0755fa143df5154158ad315001a909de9cf8fd879d7d034316bd8080076df54be9db7eb81fa733f1fd19236badacc9864212f70f1fa7e7a8463acd5b711fcbcbc03626c7534faf553e67470817ddd5bfa2ce4bae25c86bb5c5dddf4301435331aa29ea3a72729e7a3f13860b3760fa0cb43f534242a4f1cd68d714bd08ab82bfdc858d8c97b5648dc1648d43dbcf180be231e7c0cceae3b5acb506e"}], 0x7})
syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401", @ANYRES64=0x0, @ANYRESOCT=0x0], 0x0) (async)
syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) (async)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000400)={&(0x7f0000000140)=[{0x1e, 0x8611, 0x45, &(0x7f00000000c0)="253ae1ff09423e082b90f40900000000000000fae52c8745ffb6c9b07820ba0a7da757dc4f648ed7aed50713c965c3404aa4063169b921fe2c0b93c0e66e21421bd29fcb0c"}], 0x1}) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_open_dev$I2C(&(0x7f0000000080), 0x5, 0x40642) (async)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000640)={&(0x7f00000005c0)=[{0xffff, 0xa000, 0x5a, &(0x7f0000000180)="4d18c525589ea32d6d2d56a509303bc638fb19b3ed719027e58f4b3e209c1d907b22c214c86f819c96c512c6704d8875854b99863017b859ec114569ea3a8ca860d94747f0dda285b2e8e1cef254080d1723686e44b91524fb08"}, {0xc2, 0x10, 0xf3, &(0x7f0000000200)="ae0d8ea2019f8cebc80810568cbe924d598dfe344447636dbfe681f59942f6337b3812fa668bb54340268ba92c46febc97dc39036c314f69c16f56c538d18cae91811f6f30100973c2db9925b45852f27213b1b8b53bbd972ddd90c7b0f78a65ad116e5155c63263739c64fa88e26e979ddd9b647965e3bf515d8b64d48e139dba056b5b6abd13d270a5ce2e99d56e5482d6cdb1dafdbfad038a195786a9b7a1ad8f2f78c50e56beb8e4eb55c7045a3a53bbfdeb1740c5ee054eb7b19593d717b694504be49099b3253ce50b11e750736df343f8597c62f1a8838fc63dd0b92a969eb3f394dc4d5af3f0f666d866b2ee431e28"}, {0x8, 0xc00, 0xa3, &(0x7f0000000300)="79f3a1fbc1ebcdd2fd622813438abb37c7c2f0918b303c9596b409dbd08919adb06fe2e19d369015a6bcf4d709d2f462967ba4be12a04c20ce0b20a7c0b1e40b16e9ce4c49a787bc394700562d53fc2d81f266c566dbefd382f15b09fa2557a9db5df938b6e6419a9c075f2133fb223eaf90b9a2a4fa9e6506cea98be630dfaf6de92b23ff9760c2d713c7cd1f246f21430b17103a67f5dc4597dd1cc5c71e1af974d3"}, {0x6, 0x1000, 0x1d, &(0x7f00000003c0)="79ec6d1e9a56e044b6f68a929255960415a1a45a782cac272da866a767"}, {0xe2, 0xd400, 0x1, &(0x7f0000000440)="f0"}, {0x5, 0x211, 0x3f, &(0x7f0000000480)="37db109f6cfc19d9239726b0a244793072b74262229857b1e0986eb0b189c9d654bef8d9a8eb784281fe81ee9683316261f4a04c84664f1e71e39811fde520"}, {0x4, 0x4000, 0xeb, &(0x7f00000004c0)="8a5ec896f09f69455510c31482d91845f4053ae19f2e217f528d6fec455f4183a96287248bed22c066f89c673733defe929d6b0e1da43b45fce3ca8647914dcd6623c26ae31c9f3895e46fee26fba8a0755fa143df5154158ad315001a909de9cf8fd879d7d034316bd8080076df54be9db7eb81fa733f1fd19236badacc9864212f70f1fa7e7a8463acd5b711fcbcbc03626c7534faf553e67470817ddd5bfa2ce4bae25c86bb5c5dddf4301435331aa29ea3a72729e7a3f13860b3760fa0cb43f534242a4f1cd68d714bd08ab82bfdc858d8c97b5648dc1648d43dbcf180be231e7c0cceae3b5acb506e"}], 0x7}) (async)

15.609768446s ago: executing program 1 (id=620):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902240001"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00"], 0x48)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x1)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001f80)={0x6, 0xc, 0x7fffffff, 0x3, <r3=>0x0}, &(0x7f0000002840)=0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002880)={r3, 0x4}, &(0x7f00000028c0)=0x8)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
r5 = syz_usb_connect(0x0, 0x7a9, &(0x7f0000001780)={{0x12, 0x1, 0x201, 0xd8, 0x4a, 0x7c, 0x10, 0x403, 0xf44c, 0x32e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x797, 0x3, 0x6, 0x8, 0xd0, 0x52, "", [{{0x9, 0x4, 0x83, 0x3e, 0x5, 0xd, 0x43, 0xc, 0x6, [@generic={0xb9, 0x24, "f78e51e2e4c740d28c155fa0e07862ef1be65629bb64ecfdebc995c974b6662d66f428549e11f7f95c6cfe33e472083db64505e650ee93f39eb85532d3dfcd64d4e5b057f91337fea76c39232b84538c798bea700d80708794f7fa22b420704c49f2b70fbe79ca484694a95da7e65972ad453f5ab6e6764dc9ee961e03bdc6801306a2c1a07f7ba443253b36e403a2189b04f96a2848f49d722462280a720d1a690af80995af740c25779ddf0e39873d2780ae66437092"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0xa6, 0xffff, 0xb, 0x64}, {0x6, 0x24, 0x1a, 0x401, 0x2}, [@mdlm_detail={0xe0, 0x24, 0x13, 0x96, "d9af4ef5dbe00d9c4c5d461554a2656b12dca0273149f35cc9e8445b89b26939a98324ee01239054bf5838b581eb638c618b4629934cb4dfc99ee92ab6e7eb25c6930869b4348f90345f968e6e1c7a9256d8bbbbba0155eae5074fc6d09290e57c419e92d70a2bdede2759a93d2497a25de8af8112565a1e749700a3faada4a1695e9b6bfd0f4e16e64eb526181c7dbe74edb4f773255d2916fc462fc0553f9aa1f06881b03021c96457469e5fb1c4706011ac2f57c6d46956037aff99d9cc5c4e708673b6fc730693eefdf661a0145cecfd420e8806ce0ab9cd83c2"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0xff, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xee}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x8, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x2b4}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x10, 0x6, 0xcd, [@generic={0xb2, 0x23, "3ad87b51b42001d2999d91be5ee472c94382701fec69ccbe578a49c5237bc05dc2d5ac6ddceb24922afe2e0aeed6f8407b5694c76a0e81fb5857f2dd5e22630f6380a8952b7b90fcf6caaa03a5069793b42866281c6944f5e9aad317ea9c357de18233c44ec0f71d7674c6488b90dc1bc73bcfb94aa6d0ad7a476fa3a7e06e12d27490d7779dec0d769304d69512c6837acc36d9090be4e52e6e150294161992fc8e3eefda6b670f354c338e8145e4b9"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0xfc, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2}]}}, {{0x9, 0x5, 0x9, 0x11, 0x10, 0xf8, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0xba8}, @generic={0xfd, 0x22, "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"}]}}]}}, {{0x9, 0x4, 0xa6, 0x2, 0x6, 0x36, 0x5e, 0x46, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x32}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x1, 0x4, "66ecdb21b9"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x4, 0x9, 'm'}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x1, 0x4], 0xfc}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x1, 0x1, 0x4}]}, @hid_hid={0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0xec8}}], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x1b, 0x4, 0xff, [@generic={0x16, 0x6, "2d5b7b9a5c315119aaa757a5e259c57d7946ecb0"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x3, 0x4, 0xc8, [@generic={0xac, 0x1, "1e33343ab50ff580662095b6417f79891e46d1a5e1441531ab8a3070e0bac35eb413683ae2cc927c3c1ec6141c0bb500b4d7ffee5d22a291aefb43f8dd36162d0445afab01cd81bb4fbb8ea65cd3f12c2b047cb443631a71e672b5599c14529d3069edce3c62d5b027bf40d618194b29925de9664e3b3d85e285f5afdec3789417ac17eccef693445b1aafbc41fc0ea1f94b80524dc46b9e9772b18fcaefc79b2007a04fb4743f8738be"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x4, 0x8, 0x6, [@generic={0xd8, 0x5, "91b74e9b5d3e217be0350cefd1da63213d313adb631d5dd3c87182bafa6e14251f521eca3f3c00dc5aba5521acfca8f2b7b36b17cfe7cc229c0856fd27c0c7c03c21ded367d380e7cba6d5485f830bd647b9a4e75fa97072a02049dda39beef115d396b982f4cfb31de963081911d38d052513b54c8f1d8f90fa65cdc5658e90074ac13c093203e59dff225af8f91262d342fa172fff8dcf0657036cf2ba4727022d592be4a0cbd8a87fa13bdad2864707e339128c92c8e1475c43daa8df9715ca9f994db6a2af44d969022e170e898cb27250a259d9"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x1, 0x8, 0x7b, [@generic={0x22, 0xc, "a11e2f890c34800427673c53d51d5673b0d43c8f9eed7d6c064b62ea235cd019"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x0, 0xe4, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x0, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x3ff}]}}]}}, {{0x9, 0x4, 0x4, 0x6, 0x8, 0xba, 0x7e, 0x57, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xc, 0x6, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8, 0x5, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0x15, 0x2}]}, @uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9e, 0x4, 0xb1, 0x3, "c7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xd}, @as_header={0x7, 0x24, 0x1, 0x0, 0x8}, @as_header={0x7, 0x24, 0x1, 0x4, 0x4, 0x1002}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0xa, 0x7}]}], [{{0x9, 0x5, 0xe, 0x1, 0x40, 0x6, 0xaa, 0xbf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x76, 0x2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x1, 0x2, [@generic={0x3a, 0x9, "b3b8b066c4c6fb84824b8044c0ea594781f22e15a6298c54b0d5821a646164d2a081cf2dd5d1d67cf4b610bee4a02f0b80e5e9a6d0a4ab31"}]}}, {{0x9, 0x5, 0x6, 0x979916129f554a1a, 0x10, 0x5, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x81}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x0, 0x2, 0x3, [@generic={0x6f, 0x22, "9e34625c9720e3b46599b73beff79e0da7de9c7e79d52cd58164f8fe7b28b4e7188c4178afbc5d277ff856f573f239dfa72ede1991a93b2d733235e5ca87ae617f6604fb276155352b0ee37034552b6ca380e3330da28526f28b96d25aeb265191ae15c439fcbc8fdafa43d1b6"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x81, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb5, 0xfa}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x30, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xe47}]}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0x3, 0xe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x7, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xfff}]}}]}}]}}]}}, &(0x7f0000002280)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x111, 0xf, 0x1, 0x17, 0x40, 0x8}, 0x1c, &(0x7f0000002740)=ANY=[@ANYBLOB="050f1c000303100b0a100300000007027f000a10030203000803d400b5d81700c403056ed60564dc21119de27a829d1c6e36ea972424e8a21678c71072508ebcf3932d00f7f318c6a8c25d909a3c2afe38c1bb271de5a2127d604a90415801a1daee8a647dd83a19df85aa634810130d37b78793673af154bb645ad18a7d049aea9ee35c6018bf2de80050bac87451218510eb6579fd4343b4eaa50bacd7fc2531933a61b15d91897b420fbf23a78bcc469c97d17aa1ccb1e12c9c8a010913dc050008e6a9744ebeb29f48dd7ab5d27a33cfe2e3fc5e2d8f8c649a3ee43ddcad8b"], 0x6, [{0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x40c}}, {0xcf, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"]}, {0xb4, &(0x7f0000002900)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x402}}]})
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000002480)={0x14, &(0x7f0000002300)={0x40, 0xb, 0xfd, {0xfd, 0xb, "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"}}, &(0x7f0000002440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000026c0)={0x44, &(0x7f00000024c0)={0x0, 0x18, 0x38, "8a0b9f61867c8c2f8010cedd5ed53a5ee530d2e55303d3f5017ec8e14695b0a644d168615d9b4594531245fcb1d87736a9e86c38a79fb7b3"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002580)={0x20, 0x80, 0x1c, {0x8000, 0xf, 0x100, 0x8, 0x1, 0x1, 0xfe11, 0xcebd, 0x7fff, 0x7, 0x5, 0x4}}, &(0x7f00000025c0)={0x20, 0x85, 0x4, 0xfffffffe}, &(0x7f0000002600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002640)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000002680)={0x20, 0x89, 0x2}})
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000016c0))
socket(0x27, 0x1, 0x40b)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20443, 0x0)
ioctl$COMEDI_INSNLIST(r6, 0x8010640b, &(0x7f00000000c0)={0x0, 0x0})

0s ago: executing program 36 (id=620):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902240001"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00"], 0x48)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="200004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x1)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001f80)={0x6, 0xc, 0x7fffffff, 0x3, <r3=>0x0}, &(0x7f0000002840)=0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002880)={r3, 0x4}, &(0x7f00000028c0)=0x8)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
r5 = syz_usb_connect(0x0, 0x7a9, &(0x7f0000001780)={{0x12, 0x1, 0x201, 0xd8, 0x4a, 0x7c, 0x10, 0x403, 0xf44c, 0x32e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x797, 0x3, 0x6, 0x8, 0xd0, 0x52, "", [{{0x9, 0x4, 0x83, 0x3e, 0x5, 0xd, 0x43, 0xc, 0x6, [@generic={0xb9, 0x24, "f78e51e2e4c740d28c155fa0e07862ef1be65629bb64ecfdebc995c974b6662d66f428549e11f7f95c6cfe33e472083db64505e650ee93f39eb85532d3dfcd64d4e5b057f91337fea76c39232b84538c798bea700d80708794f7fa22b420704c49f2b70fbe79ca484694a95da7e65972ad453f5ab6e6764dc9ee961e03bdc6801306a2c1a07f7ba443253b36e403a2189b04f96a2848f49d722462280a720d1a690af80995af740c25779ddf0e39873d2780ae66437092"}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0xa6, 0xffff, 0xb, 0x64}, {0x6, 0x24, 0x1a, 0x401, 0x2}, [@mdlm_detail={0xe0, 0x24, 0x13, 0x96, "d9af4ef5dbe00d9c4c5d461554a2656b12dca0273149f35cc9e8445b89b26939a98324ee01239054bf5838b581eb638c618b4629934cb4dfc99ee92ab6e7eb25c6930869b4348f90345f968e6e1c7a9256d8bbbbba0155eae5074fc6d09290e57c419e92d70a2bdede2759a93d2497a25de8af8112565a1e749700a3faada4a1695e9b6bfd0f4e16e64eb526181c7dbe74edb4f773255d2916fc462fc0553f9aa1f06881b03021c96457469e5fb1c4706011ac2f57c6d46956037aff99d9cc5c4e708673b6fc730693eefdf661a0145cecfd420e8806ce0ab9cd83c2"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0xff, 0x0, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xee}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x8, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x2b4}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x10, 0x6, 0xcd, [@generic={0xb2, 0x23, "3ad87b51b42001d2999d91be5ee472c94382701fec69ccbe578a49c5237bc05dc2d5ac6ddceb24922afe2e0aeed6f8407b5694c76a0e81fb5857f2dd5e22630f6380a8952b7b90fcf6caaa03a5069793b42866281c6944f5e9aad317ea9c357de18233c44ec0f71d7674c6488b90dc1bc73bcfb94aa6d0ad7a476fa3a7e06e12d27490d7779dec0d769304d69512c6837acc36d9090be4e52e6e150294161992fc8e3eefda6b670f354c338e8145e4b9"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x1}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0xfc, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2}]}}, {{0x9, 0x5, 0x9, 0x11, 0x10, 0xf8, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0xba8}, @generic={0xfd, 0x22, "3bca1e3ba9eb1661974cbc9a3c938b82d83147ff7154fa476c4f93e7f7ae8cf91e2d63948a1e6d348f1e1a6e74ed2df93bb73339df07618d1f62a1608c2066545cc7cae7b535a0b3e953a65459152fb3b7ebfb7d66fad3703b2bcccdc6c604772a3e2be504c443c16b8935e50c5bde93554006efeb1790340b787a7a03f309730ebebb5b0ab153a6faf6b44f74ab5ff0705ed8fc4a29792c40433f0d804c0fbe754e03306e8aa5b649a04bac1596e0c8f9627520063a2a5e40639fcdbfdc34abf710be813518d35acde066793a1dd18bdcf30d78e8195db497b81ea032d7c33c16694b982913ab0e04ec53399c31a09ea83d83bb766e08ea04fa11"}]}}]}}, {{0x9, 0x4, 0xa6, 0x2, 0x6, 0x36, 0x5e, 0x46, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x32}, [@processing_unit={0xc, 0x24, 0x7, 0x2, 0x1, 0x4, "66ecdb21b9"}, @processing_unit={0x8, 0x24, 0x7, 0x4, 0x4, 0x9, 'm'}, @feature_unit={0xb, 0x24, 0x6, 0x5, 0x6, 0x2, [0x1, 0x4], 0xfc}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x1, 0x1, 0x4}]}, @hid_hid={0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0xec8}}], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x1b, 0x4, 0xff, [@generic={0x16, 0x6, "2d5b7b9a5c315119aaa757a5e259c57d7946ecb0"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x3, 0x4, 0xc8, [@generic={0xac, 0x1, "1e33343ab50ff580662095b6417f79891e46d1a5e1441531ab8a3070e0bac35eb413683ae2cc927c3c1ec6141c0bb500b4d7ffee5d22a291aefb43f8dd36162d0445afab01cd81bb4fbb8ea65cd3f12c2b047cb443631a71e672b5599c14529d3069edce3c62d5b027bf40d618194b29925de9664e3b3d85e285f5afdec3789417ac17eccef693445b1aafbc41fc0ea1f94b80524dc46b9e9772b18fcaefc79b2007a04fb4743f8738be"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x4, 0x8, 0x6, [@generic={0xd8, 0x5, "91b74e9b5d3e217be0350cefd1da63213d313adb631d5dd3c87182bafa6e14251f521eca3f3c00dc5aba5521acfca8f2b7b36b17cfe7cc229c0856fd27c0c7c03c21ded367d380e7cba6d5485f830bd647b9a4e75fa97072a02049dda39beef115d396b982f4cfb31de963081911d38d052513b54c8f1d8f90fa65cdc5658e90074ac13c093203e59dff225af8f91262d342fa172fff8dcf0657036cf2ba4727022d592be4a0cbd8a87fa13bdad2864707e339128c92c8e1475c43daa8df9715ca9f994db6a2af44d969022e170e898cb27250a259d9"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x3ff, 0x1, 0x8, 0x7b, [@generic={0x22, 0xc, "a11e2f890c34800427673c53d51d5673b0d43c8f9eed7d6c064b62ea235cd019"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x0, 0xe4, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x0, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x3ff}]}}]}}, {{0x9, 0x4, 0x4, 0x6, 0x8, 0xba, 0x7e, 0x57, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0xc, 0x6, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x8, 0x5, 0x5}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9, 0x15, 0x2}]}, @uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9e, 0x4, 0xb1, 0x3, "c7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0xd}, @as_header={0x7, 0x24, 0x1, 0x0, 0x8}, @as_header={0x7, 0x24, 0x1, 0x4, 0x4, 0x1002}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0xa, 0x7}]}], [{{0x9, 0x5, 0xe, 0x1, 0x40, 0x6, 0xaa, 0xbf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x76, 0x2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7, 0x1, 0x2, [@generic={0x3a, 0x9, "b3b8b066c4c6fb84824b8044c0ea594781f22e15a6298c54b0d5821a646164d2a081cf2dd5d1d67cf4b610bee4a02f0b80e5e9a6d0a4ab31"}]}}, {{0x9, 0x5, 0x6, 0x979916129f554a1a, 0x10, 0x5, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x81}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x0, 0x2, 0x3, [@generic={0x6f, 0x22, "9e34625c9720e3b46599b73beff79e0da7de9c7e79d52cd58164f8fe7b28b4e7188c4178afbc5d277ff856f573f239dfa72ede1991a93b2d733235e5ca87ae617f6604fb276155352b0ee37034552b6ca380e3330da28526f28b96d25aeb265191ae15c439fcbc8fdafa43d1b6"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x81, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb5, 0xfa}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x30, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xe47}]}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0x3, 0xe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x9}]}}, {{0x9, 0x5, 0x5, 0x4, 0x40, 0x7, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xfff}]}}]}}]}}]}}, &(0x7f0000002280)={0xa, &(0x7f0000001f40)={0xa, 0x6, 0x111, 0xf, 0x1, 0x17, 0x40, 0x8}, 0x1c, &(0x7f0000002740)=ANY=[@ANYBLOB="050f1c000303100b0a100300000007027f000a10030203000803d400b5d81700c403056ed60564dc21119de27a829d1c6e36ea972424e8a21678c71072508ebcf3932d00f7f318c6a8c25d909a3c2afe38c1bb271de5a2127d604a90415801a1daee8a647dd83a19df85aa634810130d37b78793673af154bb645ad18a7d049aea9ee35c6018bf2de80050bac87451218510eb6579fd4343b4eaa50bacd7fc2531933a61b15d91897b420fbf23a78bcc469c97d17aa1ccb1e12c9c8a010913dc050008e6a9744ebeb29f48dd7ab5d27a33cfe2e3fc5e2d8f8c649a3ee43ddcad8b"], 0x6, [{0x4, &(0x7f0000001fc0)=@lang_id={0x4, 0x3, 0x40c}}, {0xcf, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"]}, {0xb4, &(0x7f0000002900)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f00000021c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000002200)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0x402}}]})
syz_usb_control_io$cdc_ncm(r5, &(0x7f0000002480)={0x14, &(0x7f0000002300)={0x40, 0xb, 0xfd, {0xfd, 0xb, "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"}}, &(0x7f0000002440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000026c0)={0x44, &(0x7f00000024c0)={0x0, 0x18, 0x38, "8a0b9f61867c8c2f8010cedd5ed53a5ee530d2e55303d3f5017ec8e14695b0a644d168615d9b4594531245fcb1d87736a9e86c38a79fb7b3"}, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000002580)={0x20, 0x80, 0x1c, {0x8000, 0xf, 0x100, 0x8, 0x1, 0x1, 0xfe11, 0xcebd, 0x7fff, 0x7, 0x5, 0x4}}, &(0x7f00000025c0)={0x20, 0x85, 0x4, 0xfffffffe}, &(0x7f0000002600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002640)={0x20, 0x87, 0x2, 0xb}, &(0x7f0000002680)={0x20, 0x89, 0x2}})
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f00000016c0))
socket(0x27, 0x1, 0x40b)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20443, 0x0)
ioctl$COMEDI_INSNLIST(r6, 0x8010640b, &(0x7f00000000c0)={0x0, 0x0})

kernel console output (not intermixed with test programs):

96.621959][ T6818] fuse: Bad value for 'fd'
[  196.702191][ T5589] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  196.724910][  T820] usb 4-1: config 0 descriptor??
[  196.990468][   T36] usb 2-1: USB disconnect, device number 17
[  197.179900][   T36] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  197.198516][   T36] cyberjack 2-1:0.69: device disconnected
[  197.298961][ T6825] syz_tun: entered promiscuous mode
[  197.338289][ T6825] syz_tun: left promiscuous mode
[  197.736482][ T6842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.358'.
[  197.815296][ T5589] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  197.982043][ T5589] usb 2-1: device descriptor read/64, error -71
[  198.215339][ T5589] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  198.238823][ T6845] 9p: Bad value for 'wfdno'
[  198.345512][ T5589] usb 2-1: device descriptor read/64, error -71
[  198.462593][ T5589] usb usb2-port1: attempt power cycle
[  198.537520][ T6855] netlink: 156 bytes leftover after parsing attributes in process `syz.2.364'.
[  198.806205][ T6857] netlink: 'syz.2.365': attribute type 33 has an invalid length.
[  198.808497][ T6857] netlink: 156 bytes leftover after parsing attributes in process `syz.2.365'.
[  198.835368][ T5589] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  198.856015][ T5589] usb 2-1: device descriptor read/8, error -71
[  199.089378][  T820] usbhid 4-1:0.0: can't add hid device: -71
[  199.089509][  T820] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  199.096966][ T5589] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  199.119091][ T5589] usb 2-1: device descriptor read/8, error -71
[  199.177048][  T820] usb 4-1: USB disconnect, device number 14
[  199.225944][ T5589] usb usb2-port1: unable to enumerate USB device
[  199.888734][ T6886] FAULT_INJECTION: forcing a failure.
[  199.888734][ T6886] name failslab, interval 1, probability 0, space 0, times 0
[  199.888771][ T6886] CPU: 0 UID: 0 PID: 6886 Comm: syz.4.375 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  199.888796][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  199.888809][ T6886] Call Trace:
[  199.888817][ T6886]  <TASK>
[  199.888826][ T6886]  dump_stack_lvl+0xe8/0x150
[  199.888859][ T6886]  should_fail_ex+0x467/0x600
[  199.888893][ T6886]  should_failslab+0xa8/0x100
[  199.888927][ T6886]  __kmalloc_noprof+0xfe/0x780
[  199.888956][ T6886]  ? trace_kmalloc+0x2a/0xf0
[  199.888980][ T6886]  ? tomoyo_encode+0x2ad/0x570
[  199.889000][ T6886]  ? tomoyo_encode+0x2ad/0x570
[  199.889028][ T6886]  tomoyo_encode+0x2ad/0x570
[  199.889058][ T6886]  tomoyo_realpath_from_path+0x5fa/0x640
[  199.889090][ T6886]  ? tomoyo_path_number_perm+0x219/0x5f0
[  199.889124][ T6886]  tomoyo_path_number_perm+0x246/0x5f0
[  199.889160][ T6886]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  199.889205][ T6886]  ? __lock_acquire+0x683/0x2ce0
[  199.889251][ T6886]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  199.889276][ T6886]  ? hook_file_ioctl+0x1f3/0x600
[  199.889302][ T6886]  ? lockdep_hardirqs_on+0x7a/0x110
[  199.889348][ T6886]  ? __fget_files+0x2a/0x420
[  199.889380][ T6886]  ? __fget_files+0x2a/0x420
[  199.889407][ T6886]  ? __fget_files+0x3a8/0x420
[  199.889434][ T6886]  ? __fget_files+0x2a/0x420
[  199.889465][ T6886]  security_file_ioctl+0xc3/0x2a0
[  199.889499][ T6886]  __se_sys_ioctl+0x47/0x170
[  199.889534][ T6886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.889556][ T6886]  do_syscall_64+0x174/0x580
[  199.889594][ T6886]  ? trace_irq_disable+0x3b/0x140
[  199.889621][ T6886]  ? clear_bhb_loop+0x40/0x90
[  199.889647][ T6886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.889668][ T6886] RIP: 0033:0x7f83176fce59
[  199.889688][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.889707][ T6886] RSP: 002b:00007f8315956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.889731][ T6886] RAX: ffffffffffffffda RBX: 00007f8317975fa0 RCX: 00007f83176fce59
[  199.889746][ T6886] RDX: 0000000000000000 RSI: 0000000000009362 RDI: 0000000000000007
[  199.889759][ T6886] RBP: 00007f8315956090 R08: 0000000000000000 R09: 0000000000000000
[  199.889772][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.889784][ T6886] R13: 00007f8317976038 R14: 00007f8317975fa0 R15: 00007ffd84a8af98
[  199.889817][ T6886]  </TASK>
[  199.889861][ T6886] ERROR: Out of memory at tomoyo_realpath_from_path.
[  199.926865][ T6890] netlink: 380 bytes leftover after parsing attributes in process `syz.0.376'.
[  200.335324][   T36] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  200.338612][ T6895] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  200.487840][   T36] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  200.487871][   T36] usb 1-1: config 0 has no interface number 0
[  200.487917][   T36] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  200.487944][   T36] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  200.491126][   T36] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  200.491390][   T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.491413][   T36] usb 1-1: Product: syz
[  200.491429][   T36] usb 1-1: Manufacturer: syz
[  200.491444][   T36] usb 1-1: SerialNumber: syz
[  200.524914][   T36] usb 1-1: config 0 descriptor??
[  200.601687][ T6890] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  200.615989][   T36] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  200.679530][   T36] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  200.828495][ T6890] fuse: Bad value for 'fd'
[  200.843202][ T6907] warning: `syz.3.383' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  201.034782][ T5589] usb 1-1: USB disconnect, device number 11
[  201.091794][ T5589] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  201.093751][ T5589] cyberjack 1-1:0.69: device disconnected
[  201.176144][ T6912] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  201.176174][ T6912] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  201.176189][ T6912] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  201.843251][ T6925] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.094910][ T6927] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.388'.
[  202.252344][ T6931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.390'.
[  203.015305][ T5618] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  203.105319][ T5589] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  203.171932][ T5618] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.171999][ T5618] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  203.172026][ T5618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.225764][ T5618] usb 1-1: config 0 descriptor??
[  203.243141][ T5618] pwc: Askey VC010 type 2 USB webcam detected.
[  203.289657][ T5589] usb 4-1: Using ep0 maxpacket: 32
[  203.301859][ T5589] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.301885][ T5589] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  203.304457][ T5589] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  203.304486][ T5589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.366562][ T5589] usb 4-1: config 0 descriptor??
[  203.383225][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.397'.
[  203.438557][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.397'.
[  203.631793][ T5618] pwc: recv_control_msg error -71 req 02 val 2b00
[  203.649567][ T5618] pwc: recv_control_msg error -71 req 02 val 2700
[  203.650621][ T5618] pwc: recv_control_msg error -71 req 02 val 2c00
[  203.653054][ T5618] pwc: recv_control_msg error -71 req 04 val 1000
[  203.679378][ T5618] pwc: recv_control_msg error -71 req 04 val 1300
[  203.692165][ T5618] pwc: recv_control_msg error -71 req 04 val 1400
[  203.693477][ T5618] pwc: recv_control_msg error -71 req 02 val 2000
[  203.703247][ T5618] pwc: recv_control_msg error -71 req 02 val 2100
[  203.704246][ T5618] pwc: recv_control_msg error -71 req 04 val 1500
[  203.705837][ T5618] pwc: recv_control_msg error -71 req 02 val 2500
[  203.759251][ T5618] pwc: recv_control_msg error -71 req 02 val 2400
[  203.759898][ T5618] pwc: recv_control_msg error -71 req 02 val 2600
[  203.762844][ T5618] pwc: recv_control_msg error -71 req 02 val 2900
[  203.764505][ T5618] pwc: recv_control_msg error -71 req 02 val 2800
[  203.796321][ T5618] pwc: recv_control_msg error -71 req 04 val 1100
[  203.801358][ T5618] pwc: recv_control_msg error -71 req 04 val 1200
[  203.818559][ T6944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.819794][ T6944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.950431][ T5618] pwc: Registered as video103.
[  204.089366][ T5618] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8
[  204.308746][ T5618] usb 1-1: USB disconnect, device number 12
[  205.673119][ T2388] pvrusb2: request_firmware fatal error with code=-110
[  205.673154][ T2388] pvrusb2: Failure uploading firmware1
[  205.673167][ T2388] pvrusb2: Device initialization was not successful.
[  205.673177][ T2388] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  205.673187][ T2388] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  205.673798][ T2388] pvrusb2: Failed to submit write-control URB status=-19
[  205.674604][ T2388] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  205.674629][ T2388] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  205.772982][ T5589] usb 4-1: string descriptor 0 read error: -71
[  205.789459][  T821] pvrusb2: Device being rendered inoperable
[  205.820013][ T5589] usb 4-1: USB disconnect, device number 15
[  206.966680][ T5621] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  207.116583][ T5621] usb 2-1: Using ep0 maxpacket: 16
[  207.124392][ T5621] usb 2-1: config 6 has an invalid interface number: 131 but max is 2
[  207.124424][ T5621] usb 2-1: config 6 has an invalid interface number: 166 but max is 2
[  207.124446][ T5621] usb 2-1: config 6 contains an unexpected descriptor of type 0x1, skipping
[  207.124464][ T5621] usb 2-1: config 6 has an invalid interface number: 4 but max is 2
[  207.124486][ T5621] usb 2-1: config 6 has no interface number 0
[  207.124502][ T5621] usb 2-1: config 6 has no interface number 1
[  207.124518][ T5621] usb 2-1: config 6 has no interface number 2
[  207.124587][ T5621] usb 2-1: config 6 interface 131 altsetting 62 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  207.124617][ T5621] usb 2-1: config 6 interface 131 altsetting 62 endpoint 0x7 has an invalid bInterval 252, changing to 11
[  207.124646][ T5621] usb 2-1: config 6 interface 131 altsetting 62 endpoint 0x9 has an invalid bInterval 248, changing to 7
[  207.124688][ T5621] usb 2-1: config 6 interface 166 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 8
[  207.124711][ T5621] usb 2-1: config 6 interface 166 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  207.124735][ T5621] usb 2-1: config 6 interface 166 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  207.124756][ T5621] usb 2-1: config 6 interface 166 altsetting 2 has an endpoint descriptor with address 0x91, changing to 0x81
[  207.124782][ T5621] usb 2-1: config 6 interface 166 altsetting 2 endpoint 0x81 has an invalid bInterval 93, changing to 10
[  207.124808][ T5621] usb 2-1: config 6 interface 166 altsetting 2 endpoint 0x81 has invalid maxpacket 33614, setting to 1024
[  207.124837][ T5621] usb 2-1: config 6 interface 166 altsetting 2 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  207.124864][ T5621] usb 2-1: config 6 interface 166 altsetting 2 has a duplicate endpoint with address 0xC, skipping
[  207.124886][ T5621] usb 2-1: config 6 interface 166 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  207.124928][ T5621] usb 2-1: config 6 interface 4 altsetting 6 has a duplicate endpoint with address 0x2, skipping
[  207.124952][ T5621] usb 2-1: config 6 interface 4 altsetting 6 bulk endpoint 0x6 has invalid maxpacket 16
[  207.124977][ T5621] usb 2-1: config 6 interface 4 altsetting 6 has a duplicate endpoint with address 0x5, skipping
[  207.125000][ T5621] usb 2-1: config 6 interface 4 altsetting 6 has a duplicate endpoint with address 0x7, skipping
[  207.125022][ T5621] usb 2-1: config 6 interface 4 altsetting 6 has a duplicate endpoint with address 0x5, skipping
[  207.125045][ T5621] usb 2-1: config 6 interface 4 altsetting 6 has a duplicate endpoint with address 0x5, skipping
[  207.125075][ T5621] usb 2-1: config 6 interface 131 has no altsetting 0
[  207.125109][ T5621] usb 2-1: config 6 interface 166 has no altsetting 0
[  207.125128][ T5621] usb 2-1: config 6 interface 4 has no altsetting 0
[  207.182938][ T5621] usb 2-1: Dual-Role OTG device on HNP port
[  207.185936][ T5621] usb 2-1: New USB device found, idVendor=0403, idProduct=f44c, bcdDevice=32.e1
[  207.186008][ T5621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.186054][ T5621] usb 2-1: Product: ि⦽䨚晃ⲋ䢔添싇潹긕ퟻ冈鼢ᘿ�黽藚겯�㎈�쩭Ⴘ麅媷帷�ᛊ梞��㴎鸴䅧₧�食ᬞ嫣ꚇ�读৥ﴹ�漠봚��춴㵙䃻慲牫뮹�譫�苤봃�譼ꩊූ찟�评摈䒃㨦ް추幱ᛒ墪�﷫몊譬⠩�
[  207.186141][ T5621] usb 2-1: Manufacturer: 旬�ᨎ婧㶒ᙈ�᪗청쟑�걳��炷燱丱麱᷺ֆ�쩽뛨황輷స�ꛌ鋯去툤ህ䬴郔䈴戢导ᙑ턳巖ާ阬룗ꀿ�إ亸窇㲽�嘌걻醛쌳栕ḓ⪲﬘瓢郵ᠡ쫑䲔�䷧撮緉䇫咋㰰䷹ᡭ觥븸ꆔ윛⿋홚��㕥牡â꽵ṣ�盬
[  207.186225][ T5621] usb 2-1: SerialNumber: Њ
[  207.775472][ T5621] ftdi_sio 2-1:6.131: FTDI USB Serial Device converter detected
[  207.781161][ T5621] ftdi_sio ttyUSB0: unknown device type: 0x32e1
[  207.809154][ T5621] ftdi_sio 2-1:6.166: FTDI USB Serial Device converter detected
[  207.811463][ T5621] ftdi_sio ttyUSB1: unknown device type: 0x32e1
[  207.831722][ T5621] ftdi_sio 2-1:6.4: FTDI USB Serial Device converter detected
[  207.834282][ T5621] ftdi_sio ttyUSB2: unknown device type: 0x32e1
[  207.856871][ T5621] usb 2-1: USB disconnect, device number 22
[  207.887112][ T5621] ftdi_sio 2-1:6.131: device disconnected
[  207.907245][ T5618] usb 1-1: new low-speed USB device number 13 using dummy_hcd
[  207.934456][ T5621] ftdi_sio 2-1:6.166: device disconnected
[  207.947771][ T5621] ftdi_sio 2-1:6.4: device disconnected
[  208.057805][ T5618] usb 1-1: unable to get BOS descriptor or descriptor too short
[  208.059078][ T5618] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0
[  208.059123][ T5618] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[  208.059142][ T5618] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0
[  208.062362][ T5618] usb 1-1: string descriptor 0 read error: -22
[  208.062476][ T5618] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40
[  208.062494][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.167488][ T5618] usb 1-1: low speed audio streaming not supported
[  208.167505][ T5618] usb 1-1: low speed audio streaming not supported
[  209.253204][ T7014] =======================================================
[  209.253204][ T7014] WARNING: The mand mount option has been deprecated and
[  209.253204][ T7014]          and is ignored by this kernel. Remove the mand
[  209.253204][ T7014]          option from the mount to silence this warning.
[  209.253204][ T7014] =======================================================
[  209.625753][ T7012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.698339][ T7012] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.896763][ T5847] usb 1-1: USB disconnect, device number 13
[  211.543120][ T7004] syz.0.417 (7004) used greatest stack depth: 18784 bytes left
[  211.666955][ T7033] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  211.875474][ T7039] netlink: 92 bytes leftover after parsing attributes in process `syz.0.432'.
[  212.326473][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.433'.
[  212.330295][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.433'.
[  212.381432][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.434'.
[  212.382034][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'.
[  214.096774][   T11] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[  214.247971][   T11] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  214.248000][   T11] usb 4-1: config 0 has no interface number 0
[  214.248045][   T11] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  214.248069][   T11] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  214.248096][   T11] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  214.248123][   T11] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  214.248149][   T11] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  214.248176][   T11] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  214.248391][   T11] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  214.248417][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.359211][   T11] usb 4-1: config 0 descriptor??
[  214.364258][ T7056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  214.365058][ T7056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  214.405702][   T11] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  216.504359][   T11] usb 4-1: USB disconnect, device number 16
[  217.064606][   T11] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  220.825025][ T7092] netlink: 92 bytes leftover after parsing attributes in process `syz.3.446'.
[  221.853066][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'.
[  222.718585][ T5627] Bluetooth: hci1: command 0x0406 tx timeout
[  222.805466][ T5627] Bluetooth: hci3: command 0x0406 tx timeout
[  222.875414][ T5627] Bluetooth: hci4: command 0x0406 tx timeout
[  222.889024][ T5627] Bluetooth: hci2: command 0x0406 tx timeout
[  222.890496][ T5627] Bluetooth: hci0: command 0x0406 tx timeout
[  223.020358][ T5589] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  223.095767][ T5621] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  224.051389][ T5589] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  224.051420][ T5589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.051441][ T5589] usb 1-1: Product: syz
[  224.051455][ T5589] usb 1-1: Manufacturer: syz
[  224.051471][ T5589] usb 1-1: SerialNumber: syz
[  224.098063][ T5621] usb 4-1: unable to get BOS descriptor or descriptor too short
[  224.099355][ T5621] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.099380][ T5621] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  224.166017][ T5621] usb 4-1: New USB device found, idVendor=1235, idProduct=820b, bcdDevice= 0.40
[  224.166045][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.166062][ T5621] usb 4-1: Product: syz
[  224.166074][ T5621] usb 4-1: Manufacturer: syz
[  224.166086][ T5621] usb 4-1: SerialNumber: syz
[  224.552880][ T5621] usb 4-1: 0:1 : does not exist
[  224.552962][ T5621] usb 4-1: Focusrite Clarett+ Mixer Driver enabled (pid=0x820b); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  224.553023][ T5621] usb 4-1: Error initialising Clarett+ Mixer Driver: -22
[  224.780452][ T5589] rtl8150 1-1:1.0: couldn't reset the device
[  224.819357][ T5589] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[  224.877756][ T5589] usb 1-1: USB disconnect, device number 14
[  225.218966][ T7131] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0)
[  225.869774][ T5621] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  225.909733][ T5621] usb 4-1: USB disconnect, device number 17
[  226.230450][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.634113][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'.
[  227.425807][ T5621] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  227.500038][ T7165] FAULT_INJECTION: forcing a failure.
[  227.500038][ T7165] name failslab, interval 1, probability 0, space 0, times 0
[  227.500075][ T7165] CPU: 0 UID: 0 PID: 7165 Comm: syz.0.474 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  227.500100][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  227.500113][ T7165] Call Trace:
[  227.500122][ T7165]  <TASK>
[  227.500131][ T7165]  dump_stack_lvl+0xe8/0x150
[  227.500165][ T7165]  should_fail_ex+0x467/0x600
[  227.500200][ T7165]  should_failslab+0xa8/0x100
[  227.500235][ T7165]  __kmalloc_noprof+0xfe/0x780
[  227.500265][ T7165]  ? tomoyo_encode+0x2ad/0x570
[  227.500286][ T7165]  ? tomoyo_encode+0x2ad/0x570
[  227.500316][ T7165]  tomoyo_encode+0x2ad/0x570
[  227.500345][ T7165]  tomoyo_realpath_from_path+0x5fa/0x640
[  227.500388][ T7165]  ? tomoyo_path_number_perm+0x219/0x5f0
[  227.500422][ T7165]  tomoyo_path_number_perm+0x246/0x5f0
[  227.500458][ T7165]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  227.500489][ T7165]  ? __lock_acquire+0x683/0x2ce0
[  227.500535][ T7165]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  227.500562][ T7165]  ? hook_file_ioctl+0x1f3/0x600
[  227.500589][ T7165]  ? lockdep_hardirqs_on+0x7a/0x110
[  227.500635][ T7165]  ? __fget_files+0x2a/0x420
[  227.500668][ T7165]  ? __fget_files+0x2a/0x420
[  227.500693][ T7165]  ? __fget_files+0x3a8/0x420
[  227.500724][ T7165]  ? __fget_files+0x2a/0x420
[  227.500757][ T7165]  security_file_ioctl+0xc3/0x2a0
[  227.500794][ T7165]  __se_sys_ioctl+0x47/0x170
[  227.500827][ T7165]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.500852][ T7165]  do_syscall_64+0x174/0x580
[  227.500879][ T7165]  ? trace_irq_disable+0x3b/0x140
[  227.500907][ T7165]  ? clear_bhb_loop+0x40/0x90
[  227.500936][ T7165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.500959][ T7165] RIP: 0033:0x7f597ccdce59
[  227.500980][ T7165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.500999][ T7165] RSP: 002b:00007f597af36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  227.501023][ T7165] RAX: ffffffffffffffda RBX: 00007f597cf55fa0 RCX: 00007f597ccdce59
[  227.501039][ T7165] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[  227.501052][ T7165] RBP: 00007f597af36090 R08: 0000000000000000 R09: 0000000000000000
[  227.501065][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  227.501077][ T7165] R13: 00007f597cf56038 R14: 00007f597cf55fa0 R15: 00007fff700292a8
[  227.501111][ T7165]  </TASK>
[  227.501158][ T7165] ERROR: Out of memory at tomoyo_realpath_from_path.
[  227.801206][ T5621] usb 4-1: config 100 has an invalid interface number: 124 but max is 0
[  227.801235][ T5621] usb 4-1: config 100 has no interface number 0
[  227.801285][ T5621] usb 4-1: config 100 interface 124 has no altsetting 0
[  227.820290][ T5621] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e
[  227.820322][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.820342][ T5621] usb 4-1: Product: syz
[  227.820358][ T5621] usb 4-1: Manufacturer: syz
[  227.820373][ T5621] usb 4-1: SerialNumber: syz
[  228.201707][ T7166] bond1: option all_slaves_active: invalid value (166)
[  228.259849][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.260513][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.445949][ T7166] bond1 (unregistering): Released all slaves
[  229.146915][ T7178] netlink: 92 bytes leftover after parsing attributes in process `syz.4.476'.
[  230.382594][ T7193] FAULT_INJECTION: forcing a failure.
[  230.382594][ T7193] name failslab, interval 1, probability 0, space 0, times 0
[  230.382633][ T7193] CPU: 0 UID: 0 PID: 7193 Comm: syz.4.481 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  230.382659][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  230.382672][ T7193] Call Trace:
[  230.382684][ T7193]  <TASK>
[  230.382692][ T7193]  dump_stack_lvl+0xe8/0x150
[  230.382734][ T7193]  should_fail_ex+0x467/0x600
[  230.382769][ T7193]  should_failslab+0xa8/0x100
[  230.382801][ T7193]  __kmalloc_noprof+0xfe/0x780
[  230.382830][ T7193]  ? tomoyo_encode+0x2ad/0x570
[  230.382851][ T7193]  ? tomoyo_encode+0x2ad/0x570
[  230.382881][ T7193]  tomoyo_encode+0x2ad/0x570
[  230.382910][ T7193]  tomoyo_realpath_from_path+0x5fa/0x640
[  230.382945][ T7193]  ? tomoyo_path_number_perm+0x219/0x5f0
[  230.382979][ T7193]  tomoyo_path_number_perm+0x246/0x5f0
[  230.383015][ T7193]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  230.383046][ T7193]  ? __lock_acquire+0x683/0x2ce0
[  230.383090][ T7193]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  230.383115][ T7193]  ? hook_file_ioctl+0x1f3/0x600
[  230.383143][ T7193]  ? lockdep_hardirqs_on+0x7a/0x110
[  230.383191][ T7193]  ? __fget_files+0x2a/0x420
[  230.383225][ T7193]  ? __fget_files+0x2a/0x420
[  230.383252][ T7193]  ? __fget_files+0x3a8/0x420
[  230.383277][ T7193]  ? __fget_files+0x2a/0x420
[  230.383310][ T7193]  security_file_ioctl+0xc3/0x2a0
[  230.383347][ T7193]  __se_sys_ioctl+0x47/0x170
[  230.383382][ T7193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.383408][ T7193]  do_syscall_64+0x174/0x580
[  230.383434][ T7193]  ? trace_irq_disable+0x3b/0x140
[  230.383462][ T7193]  ? clear_bhb_loop+0x40/0x90
[  230.383490][ T7193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.383513][ T7193] RIP: 0033:0x7f83176fce59
[  230.383533][ T7193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.383551][ T7193] RSP: 002b:00007f8315956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  230.383574][ T7193] RAX: ffffffffffffffda RBX: 00007f8317975fa0 RCX: 00007f83176fce59
[  230.383590][ T7193] RDX: 0000200000000040 RSI: 0000000080045510 RDI: 0000000000000003
[  230.383604][ T7193] RBP: 00007f8315956090 R08: 0000000000000000 R09: 0000000000000000
[  230.383617][ T7193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.383629][ T7193] R13: 00007f8317976038 R14: 00007f8317975fa0 R15: 00007ffd84a8af98
[  230.383664][ T7193]  </TASK>
[  230.386694][ T7193] ERROR: Out of memory at tomoyo_realpath_from_path.
[  231.030258][ T7185] bond1: option downdelay: invalid value (18446744073709551487)
[  231.030287][ T7185] bond1: option downdelay: allowed values 0 - 2147483647
[  231.189575][ T7185] bond1 (unregistering): Released all slaves
[  231.447644][ T5621] idmouse 4-1:100.124: Unable to find bulk-in endpoint.
[  231.491020][ T5621] usb 4-1: USB disconnect, device number 18
[  231.527012][ T7200] FAULT_INJECTION: forcing a failure.
[  231.527012][ T7200] name failslab, interval 1, probability 0, space 0, times 0
[  231.527047][ T7200] CPU: 1 UID: 0 PID: 7200 Comm: syz.4.484 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  231.527071][ T7200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  231.527085][ T7200] Call Trace:
[  231.527093][ T7200]  <TASK>
[  231.527102][ T7200]  dump_stack_lvl+0xe8/0x150
[  231.527135][ T7200]  should_fail_ex+0x467/0x600
[  231.527177][ T7200]  should_failslab+0xa8/0x100
[  231.527211][ T7200]  __kmalloc_noprof+0xfe/0x780
[  231.527241][ T7200]  ? tomoyo_encode+0x2ad/0x570
[  231.527262][ T7200]  ? tomoyo_encode+0x2ad/0x570
[  231.527292][ T7200]  tomoyo_encode+0x2ad/0x570
[  231.527320][ T7200]  tomoyo_realpath_from_path+0x5fa/0x640
[  231.527353][ T7200]  ? tomoyo_path_number_perm+0x219/0x5f0
[  231.527387][ T7200]  tomoyo_path_number_perm+0x246/0x5f0
[  231.527421][ T7200]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  231.527452][ T7200]  ? __lock_acquire+0x683/0x2ce0
[  231.527496][ T7200]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  231.527521][ T7200]  ? hook_file_ioctl+0x1f3/0x600
[  231.527546][ T7200]  ? lockdep_hardirqs_on+0x7a/0x110
[  231.527591][ T7200]  ? __fget_files+0x2a/0x420
[  231.527623][ T7200]  ? __fget_files+0x2a/0x420
[  231.527651][ T7200]  ? __fget_files+0x3a8/0x420
[  231.527678][ T7200]  ? __fget_files+0x2a/0x420
[  231.527710][ T7200]  security_file_ioctl+0xc3/0x2a0
[  231.527747][ T7200]  __se_sys_ioctl+0x47/0x170
[  231.527781][ T7200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.527807][ T7200]  do_syscall_64+0x174/0x580
[  231.527833][ T7200]  ? trace_irq_disable+0x3b/0x140
[  231.527865][ T7200]  ? clear_bhb_loop+0x40/0x90
[  231.527893][ T7200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.527921][ T7200] RIP: 0033:0x7f83176fce59
[  231.527942][ T7200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.527961][ T7200] RSP: 002b:00007f8315956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.527984][ T7200] RAX: ffffffffffffffda RBX: 00007f8317975fa0 RCX: 00007f83176fce59
[  231.528000][ T7200] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005
[  231.528015][ T7200] RBP: 00007f8315956090 R08: 0000000000000000 R09: 0000000000000000
[  231.528028][ T7200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  231.528041][ T7200] R13: 00007f8317976038 R14: 00007f8317975fa0 R15: 00007ffd84a8af98
[  231.528075][ T7200]  </TASK>
[  231.548819][ T7200] ERROR: Out of memory at tomoyo_realpath_from_path.
[  232.193729][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.488'.
[  232.194289][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'.
[  232.732826][ T7219] netlink: 92 bytes leftover after parsing attributes in process `syz.1.490'.
[  233.003100][ T7222] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  233.052404][ T7225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.494'.
[  233.116998][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.494'.
[  235.050716][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'.
[  235.311802][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.2.495'.
[  235.312234][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'.
[  235.512506][ T7248] FAULT_INJECTION: forcing a failure.
[  235.512506][ T7248] name failslab, interval 1, probability 0, space 0, times 0
[  235.512537][ T7248] CPU: 0 UID: 0 PID: 7248 Comm: syz.3.498 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  235.512557][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  235.512585][ T7248] Call Trace:
[  235.512592][ T7248]  <TASK>
[  235.512599][ T7248]  dump_stack_lvl+0xe8/0x150
[  235.512626][ T7248]  should_fail_ex+0x467/0x600
[  235.512653][ T7248]  should_failslab+0xa8/0x100
[  235.512681][ T7248]  __kmalloc_noprof+0xfe/0x780
[  235.512707][ T7248]  ? tomoyo_encode+0x2ad/0x570
[  235.512726][ T7248]  ? tomoyo_encode+0x2ad/0x570
[  235.512749][ T7248]  tomoyo_encode+0x2ad/0x570
[  235.512771][ T7248]  tomoyo_realpath_from_path+0x5fa/0x640
[  235.512797][ T7248]  ? tomoyo_path_number_perm+0x219/0x5f0
[  235.512823][ T7248]  tomoyo_path_number_perm+0x246/0x5f0
[  235.512849][ T7248]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  235.512873][ T7248]  ? __lock_acquire+0x683/0x2ce0
[  235.512908][ T7248]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  235.512928][ T7248]  ? hook_file_ioctl+0x1f3/0x600
[  235.512950][ T7248]  ? lockdep_hardirqs_on+0x7a/0x110
[  235.512985][ T7248]  ? __fget_files+0x2a/0x420
[  235.513011][ T7248]  ? __fget_files+0x2a/0x420
[  235.513032][ T7248]  ? __fget_files+0x3a8/0x420
[  235.513055][ T7248]  ? __fget_files+0x2a/0x420
[  235.513079][ T7248]  security_file_ioctl+0xc3/0x2a0
[  235.513107][ T7248]  __se_sys_ioctl+0x47/0x170
[  235.513139][ T7248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.513158][ T7248]  do_syscall_64+0x174/0x580
[  235.513178][ T7248]  ? trace_irq_disable+0x3b/0x140
[  235.513209][ T7248]  ? clear_bhb_loop+0x40/0x90
[  235.513231][ T7248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.513248][ T7248] RIP: 0033:0x7fa5f8ecce59
[  235.513266][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  235.513281][ T7248] RSP: 002b:00007fa5f711e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  235.513301][ T7248] RAX: ffffffffffffffda RBX: 00007fa5f9145fa0 RCX: 00007fa5f8ecce59
[  235.513313][ T7248] RDX: 00002000000000c0 RSI: 0000000080585414 RDI: 0000000000000003
[  235.513324][ T7248] RBP: 00007fa5f711e090 R08: 0000000000000000 R09: 0000000000000000
[  235.513335][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.513348][ T7248] R13: 00007fa5f9146038 R14: 00007fa5f9145fa0 R15: 00007ffe3a34c0c8
[  235.513381][ T7248]  </TASK>
[  235.513414][ T7248] ERROR: Out of memory at tomoyo_realpath_from_path.
[  235.523136][ T7242] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size.
[  236.545314][ T7130] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  236.579769][ T5608] Bluetooth: hci1: unexpected cc 0x0809 length: 2 < 4
[  236.579803][ T5608] Bluetooth: hci1: unexpected event for opcode 0x0809
[  236.579904][ T5608] Bluetooth: hci1: ACL packet for unknown connection handle 3273
[  236.715346][ T7130] usb 2-1: Using ep0 maxpacket: 8
[  236.718064][ T7130] usb 2-1: config 0 has an invalid interface number: 33 but max is 1
[  236.718092][ T7130] usb 2-1: config 0 has no interface number 1
[  236.718151][ T7130] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  236.718194][ T7130] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247
[  236.722968][ T7130] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  236.722999][ T7130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.723021][ T7130] usb 2-1: Product: syz
[  236.723035][ T7130] usb 2-1: Manufacturer: syz
[  236.723051][ T7130] usb 2-1: SerialNumber: syz
[  236.845238][ T7130] usb 2-1: config 0 descriptor??
[  236.902206][ T7130] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  237.098897][ T7130] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  237.365813][ T7255] netlink: 'syz.1.501': attribute type 6 has an invalid length.
[  237.365836][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.501'.
[  237.690009][ T7130] usb 2-1: USB disconnect, device number 23
[  237.706408][ T7130] pvrusb2: Device being rendered inoperable
[  237.714810][ T7130] pvrusb2: Device being rendered inoperable
[  238.037837][ T7274] netlink: 92 bytes leftover after parsing attributes in process `syz.4.506'.
[  238.547877][ T7281] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  238.571574][ T7281] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.508'.
[  238.798552][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'.
[  239.581135][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.513'.
[  239.591067][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'.
[  240.633345][ T7318] netlink: 92 bytes leftover after parsing attributes in process `syz.3.519'.
[  240.646874][ T7315] netlink: 'syz.2.518': attribute type 6 has an invalid length.
[  240.646898][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[  240.762597][ T7323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.520'.
[  240.774873][ T7323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'.
[  241.171536][ T5621] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  241.612940][ T5621] usb 1-1: Using ep0 maxpacket: 8
[  241.800972][ T5621] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  241.801020][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.801085][ T5621] usb 1-1: Product: syz
[  241.801158][ T5621] usb 1-1: Manufacturer: syz
[  241.801233][ T5621] usb 1-1: SerialNumber: syz
[  242.063640][ T5621] usb 1-1: config 0 descriptor??
[  242.273166][ T5621] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  242.955049][ T5621] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  243.146878][ T5589] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  243.175465][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'.
[  243.327515][ T5589] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  243.327538][ T5589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.327553][ T5589] usb 4-1: Product: syz
[  243.327563][ T5589] usb 4-1: Manufacturer: syz
[  243.327574][ T5589] usb 4-1: SerialNumber: syz
[  243.587578][   T11] usb 1-1: USB disconnect, device number 15
[  243.890589][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.891275][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.754130][ T5589] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  244.754188][ T5589] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  244.929409][ T5589] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  245.538963][ T5589] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  245.770243][ T5589] usb 4-1: USB disconnect, device number 19
[  245.902651][ T7362] netlink: 'syz.2.533': attribute type 6 has an invalid length.
[  245.902674][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'.
[  246.109203][ T7367] netlink: 80 bytes leftover after parsing attributes in process `syz.1.535'.
[  247.496200][ T7380] Invalid ELF header type: 3 != 1
[  250.781462][ T7404] FAULT_INJECTION: forcing a failure.
[  250.781462][ T7404] name failslab, interval 1, probability 0, space 0, times 0
[  250.781500][ T7404] CPU: 1 UID: 0 PID: 7404 Comm: syz.3.547 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  250.781524][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  250.781538][ T7404] Call Trace:
[  250.781546][ T7404]  <TASK>
[  250.781556][ T7404]  dump_stack_lvl+0xe8/0x150
[  250.781589][ T7404]  should_fail_ex+0x467/0x600
[  250.781623][ T7404]  should_failslab+0xa8/0x100
[  250.781658][ T7404]  __kmalloc_noprof+0xfe/0x780
[  250.781687][ T7404]  ? tomoyo_encode+0x2ad/0x570
[  250.781708][ T7404]  ? tomoyo_encode+0x2ad/0x570
[  250.781737][ T7404]  tomoyo_encode+0x2ad/0x570
[  250.781766][ T7404]  tomoyo_realpath_from_path+0x5fa/0x640
[  250.781801][ T7404]  ? tomoyo_path_number_perm+0x219/0x5f0
[  250.781835][ T7404]  tomoyo_path_number_perm+0x246/0x5f0
[  250.781870][ T7404]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  250.781902][ T7404]  ? __lock_acquire+0x683/0x2ce0
[  250.781958][ T7404]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  250.781983][ T7404]  ? hook_file_ioctl+0x1f3/0x600
[  250.782025][ T7404]  ? lockdep_hardirqs_on+0x7a/0x110
[  250.782072][ T7404]  ? __fget_files+0x2a/0x420
[  250.782104][ T7404]  ? __fget_files+0x2a/0x420
[  250.782131][ T7404]  ? __fget_files+0x3a8/0x420
[  250.782158][ T7404]  ? __fget_files+0x2a/0x420
[  250.782191][ T7404]  security_file_ioctl+0xc3/0x2a0
[  250.782227][ T7404]  __se_sys_ioctl+0x47/0x170
[  250.782262][ T7404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.782287][ T7404]  do_syscall_64+0x174/0x580
[  250.782313][ T7404]  ? trace_irq_disable+0x3b/0x140
[  250.782340][ T7404]  ? clear_bhb_loop+0x40/0x90
[  250.782368][ T7404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.782389][ T7404] RIP: 0033:0x7fa5f8ecce59
[  250.782410][ T7404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  250.782430][ T7404] RSP: 002b:00007fa5f711e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  250.782453][ T7404] RAX: ffffffffffffffda RBX: 00007fa5f9145fa0 RCX: 00007fa5f8ecce59
[  250.782469][ T7404] RDX: 0000200000000040 RSI: 00000000c2604110 RDI: 0000000000000003
[  250.782483][ T7404] RBP: 00007fa5f711e090 R08: 0000000000000000 R09: 0000000000000000
[  250.782496][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  250.782508][ T7404] R13: 00007fa5f9146038 R14: 00007fa5f9145fa0 R15: 00007ffe3a34c0c8
[  250.782542][ T7404]  </TASK>
[  250.879800][ T7404] ERROR: Out of memory at tomoyo_realpath_from_path.
[  251.396447][ T7408] FAULT_INJECTION: forcing a failure.
[  251.396447][ T7408] name failslab, interval 1, probability 0, space 0, times 0
[  251.396484][ T7408] CPU: 1 UID: 0 PID: 7408 Comm: syz.3.549 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  251.396508][ T7408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  251.396521][ T7408] Call Trace:
[  251.396529][ T7408]  <TASK>
[  251.396539][ T7408]  dump_stack_lvl+0xe8/0x150
[  251.396573][ T7408]  should_fail_ex+0x467/0x600
[  251.396609][ T7408]  should_failslab+0xa8/0x100
[  251.396644][ T7408]  __kmalloc_noprof+0xfe/0x780
[  251.396674][ T7408]  ? tomoyo_encode+0x2ad/0x570
[  251.396695][ T7408]  ? tomoyo_encode+0x2ad/0x570
[  251.396724][ T7408]  tomoyo_encode+0x2ad/0x570
[  251.396754][ T7408]  tomoyo_realpath_from_path+0x5fa/0x640
[  251.396789][ T7408]  ? tomoyo_path_number_perm+0x219/0x5f0
[  251.396824][ T7408]  tomoyo_path_number_perm+0x246/0x5f0
[  251.396860][ T7408]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  251.396900][ T7408]  ? __lock_acquire+0x683/0x2ce0
[  251.396948][ T7408]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  251.396974][ T7408]  ? hook_file_ioctl+0x1f3/0x600
[  251.397000][ T7408]  ? lockdep_hardirqs_on+0x7a/0x110
[  251.397047][ T7408]  ? __fget_files+0x2a/0x420
[  251.397078][ T7408]  ? __fget_files+0x2a/0x420
[  251.397104][ T7408]  ? __fget_files+0x3a8/0x420
[  251.397132][ T7408]  ? __fget_files+0x2a/0x420
[  251.397164][ T7408]  security_file_ioctl+0xc3/0x2a0
[  251.397200][ T7408]  __se_sys_ioctl+0x47/0x170
[  251.397235][ T7408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.397259][ T7408]  do_syscall_64+0x174/0x580
[  251.397283][ T7408]  ? trace_irq_disable+0x3b/0x140
[  251.397311][ T7408]  ? clear_bhb_loop+0x40/0x90
[  251.397340][ T7408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.397363][ T7408] RIP: 0033:0x7fa5f8ecce59
[  251.397385][ T7408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.397404][ T7408] RSP: 002b:00007fa5f711e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  251.397427][ T7408] RAX: ffffffffffffffda RBX: 00007fa5f9145fa0 RCX: 00007fa5f8ecce59
[  251.397443][ T7408] RDX: 0000200000000700 RSI: 00000000c2604111 RDI: 0000000000000003
[  251.397457][ T7408] RBP: 00007fa5f711e090 R08: 0000000000000000 R09: 0000000000000000
[  251.397471][ T7408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  251.397483][ T7408] R13: 00007fa5f9146038 R14: 00007fa5f9145fa0 R15: 00007ffe3a34c0c8
[  251.397517][ T7408]  </TASK>
[  251.399251][ T7408] ERROR: Out of memory at tomoyo_realpath_from_path.
[  253.048060][ T7416] overlay: ./cgroup is not a directory
[  255.871714][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  255.871790][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  261.151448][   T36] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  261.585806][ T7469] overlay: ./cgroup is not a directory
[  261.723320][ T7471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.566'.
[  261.736211][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'.
[  262.074495][   T36] usb 2-1: Using ep0 maxpacket: 8
[  262.265960][   T36] usb 2-1: unable to get BOS descriptor or descriptor too short
[  262.267643][   T36] usb 2-1: config 15 has an invalid interface number: 162 but max is 0
[  262.267669][   T36] usb 2-1: config 15 has no interface number 0
[  262.267716][   T36] usb 2-1: config 15 interface 162 altsetting 82 endpoint 0x87 has an invalid bInterval 192, changing to 11
[  262.267745][   T36] usb 2-1: config 15 interface 162 has no altsetting 0
[  262.346761][   T36] usb 2-1: New USB device found, idVendor=10c4, idProduct=817c, bcdDevice=8c.e0
[  262.346791][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.346812][   T36] usb 2-1: Product: syz
[  262.346827][   T36] usb 2-1: Manufacturer: syz
[  262.346842][   T36] usb 2-1: SerialNumber: syz
[  263.792325][ T7465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.793179][ T7465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.822813][ T7465] ntfs3(nullb0): Primary boot signature is not NTFS.
[  263.823015][ T7465] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  264.191922][   T36] cp210x 2-1:15.162: cp210x converter detected
[  264.199204][   T36] cp210x 2-1:15.162: failed to get vendor val 0x370b size 1: -71
[  264.199293][   T36] cp210x 2-1:15.162: querying part number failed
[  264.231976][   T36] usb 2-1: cp210x converter now attached to ttyUSB0
[  264.641584][   T36] usb 2-1: USB disconnect, device number 24
[  265.087585][   T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  265.088404][   T36] cp210x 2-1:15.162: device disconnected
[  265.287233][ T5980] udevd[5980]: setting owner of /dev/bus/usb/002/024 to uid=0, gid=0 failed: No such file or directory
[  266.119218][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  266.166433][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  266.263084][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  266.273038][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  266.300053][ T2388] pvrusb2: request_firmware fatal error with code=-110
[  266.300075][ T2388] pvrusb2: Failure uploading firmware1
[  266.300083][ T2388] pvrusb2: Device initialization was not successful.
[  266.300092][ T2388] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  266.300104][ T2388] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  266.312272][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  266.350805][  T821] pvrusb2: Device being rendered inoperable
[  268.486008][ T5608] Bluetooth: hci5: command tx timeout
[  270.121372][ T7531] trusted_key: encrypted_key: master key parameter '�' is invalid
[  270.335287][   T36] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  270.526206][   T36] usb 5-1: Using ep0 maxpacket: 8
[  270.530788][   T36] usb 5-1: unable to get BOS descriptor or descriptor too short
[  270.555301][ T5608] Bluetooth: hci5: command tx timeout
[  270.556353][   T36] usb 5-1: config 15 has an invalid interface number: 162 but max is 0
[  270.556380][   T36] usb 5-1: config 15 has no interface number 0
[  270.556427][   T36] usb 5-1: config 15 interface 162 altsetting 82 endpoint 0x87 has an invalid bInterval 192, changing to 11
[  270.556457][   T36] usb 5-1: config 15 interface 162 has no altsetting 0
[  270.610922][   T36] usb 5-1: New USB device found, idVendor=10c4, idProduct=817c, bcdDevice=8c.e0
[  270.610953][   T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.610974][   T36] usb 5-1: Product: syz
[  270.610989][   T36] usb 5-1: Manufacturer: syz
[  270.611005][   T36] usb 5-1: SerialNumber: syz
[  271.388514][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.389129][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  271.390944][ T7530] ntfs3(nullb0): Primary boot signature is not NTFS.
[  271.392105][ T7530] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  271.739972][   T36] cp210x 5-1:15.162: cp210x converter detected
[  271.740560][   T36] cp210x 5-1:15.162: failed to get vendor val 0x370b size 1: -71
[  271.740586][   T36] cp210x 5-1:15.162: querying part number failed
[  271.744798][   T36] usb 5-1: cp210x converter now attached to ttyUSB0
[  271.864899][   T36] usb 5-1: USB disconnect, device number 5
[  271.961669][   T36] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  272.270032][   T36] cp210x 5-1:15.162: device disconnected
[  272.609091][ T7538] FAULT_INJECTION: forcing a failure.
[  272.609091][ T7538] name failslab, interval 1, probability 0, space 0, times 0
[  272.609129][ T7538] CPU: 0 UID: 0 PID: 7538 Comm: syz.4.584 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  272.609155][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  272.609169][ T7538] Call Trace:
[  272.609177][ T7538]  <TASK>
[  272.609186][ T7538]  dump_stack_lvl+0xe8/0x150
[  272.609220][ T7538]  should_fail_ex+0x467/0x600
[  272.609254][ T7538]  should_failslab+0xa8/0x100
[  272.609289][ T7538]  __kmalloc_noprof+0xfe/0x780
[  272.609316][ T7538]  ? rcu_is_watching+0x15/0xb0
[  272.609350][ T7538]  ? tomoyo_realpath_from_path+0xef/0x640
[  272.609373][ T7538]  ? tomoyo_realpath_from_path+0xef/0x640
[  272.609405][ T7538]  tomoyo_realpath_from_path+0xef/0x640
[  272.609440][ T7538]  ? tomoyo_path_number_perm+0x219/0x5f0
[  272.609474][ T7538]  tomoyo_path_number_perm+0x246/0x5f0
[  272.609510][ T7538]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  272.609542][ T7538]  ? __lock_acquire+0x683/0x2ce0
[  272.609587][ T7538]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  272.609621][ T7538]  ? hook_file_ioctl+0x1f3/0x600
[  272.609648][ T7538]  ? lockdep_hardirqs_on+0x7a/0x110
[  272.609695][ T7538]  ? __fget_files+0x2a/0x420
[  272.609727][ T7538]  ? __fget_files+0x2a/0x420
[  272.609754][ T7538]  ? __fget_files+0x3a8/0x420
[  272.609782][ T7538]  ? __fget_files+0x2a/0x420
[  272.609814][ T7538]  security_file_ioctl+0xc3/0x2a0
[  272.609852][ T7538]  __se_sys_ioctl+0x47/0x170
[  272.609888][ T7538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.609912][ T7538]  do_syscall_64+0x174/0x580
[  272.609939][ T7538]  ? trace_irq_disable+0x3b/0x140
[  272.609967][ T7538]  ? clear_bhb_loop+0x40/0x90
[  272.609995][ T7538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.610017][ T7538] RIP: 0033:0x7f83176fce59
[  272.610038][ T7538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  272.610058][ T7538] RSP: 002b:00007f8315956028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  272.610081][ T7538] RAX: ffffffffffffffda RBX: 00007f8317975fa0 RCX: 00007f83176fce59
[  272.610098][ T7538] RDX: 0000200000002bc0 RSI: 00000000c0cc5616 RDI: 0000000000000003
[  272.610113][ T7538] RBP: 00007f8315956090 R08: 0000000000000000 R09: 0000000000000000
[  272.610127][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.610140][ T7538] R13: 00007f8317976038 R14: 00007f8317975fa0 R15: 00007ffd84a8af98
[  272.610173][ T7538]  </TASK>
[  272.610182][ T7538] ERROR: Out of memory at tomoyo_realpath_from_path.
[  272.637032][ T5608] Bluetooth: hci5: command tx timeout
[  274.723406][ T5608] Bluetooth: hci5: command tx timeout
[  276.915312][   T11] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  277.206847][   T11] usb 4-1: Using ep0 maxpacket: 8
[  277.211427][   T11] usb 4-1: config 0 interface 0 has no altsetting 0
[  277.211468][   T11] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  277.211492][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.288536][   T11] usb 4-1: config 0 descriptor??
[  277.725978][   T11] usbhid 4-1:0.0: can't add hid device: -71
[  277.726101][   T11] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  277.809946][   T11] usb 4-1: USB disconnect, device number 20
[  278.174684][ T7552] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request
[  279.141793][ T7556] netlink: 'syz.3.589': attribute type 6 has an invalid length.
[  279.141816][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'.
[  286.514786][ T7563] pim6reg: entered allmulticast mode
[  286.692956][ T7569] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  287.027466][ T7570] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.592'.
[  288.644386][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  288.699584][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  288.897903][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  289.016247][ T7499] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.016401][ T7499] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.016639][ T7499] bridge_slave_0: entered allmulticast mode
[  289.034046][ T7499] bridge_slave_0: entered promiscuous mode
[  289.062727][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.062891][ T7499] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.063120][ T7499] bridge_slave_1: entered allmulticast mode
[  289.072188][ T7499] bridge_slave_1: entered promiscuous mode
[  289.298596][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  289.299632][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  290.104686][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'.
[  290.158553][ T7499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  290.455289][   T36] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  290.659474][ T7499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  290.725242][   T36] usb 2-1: Using ep0 maxpacket: 8
[  290.728084][   T36] usb 2-1: unable to get BOS descriptor or descriptor too short
[  290.729775][   T36] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.729806][   T36] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  290.729834][   T36] usb 2-1: config 1 interface 0 has no altsetting 0
[  290.733758][   T36] usb 2-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.40
[  290.733785][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.733805][   T36] usb 2-1: Product: syz
[  290.733820][   T36] usb 2-1: Manufacturer: 殹
[  290.733835][   T36] usb 2-1: SerialNumber: syz
[  290.830762][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  290.881572][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  290.883132][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  290.932339][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  290.967137][ T4913] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  291.557466][ T4913] Bluetooth: hci0: command tx timeout
[  292.211158][ T7599] netlink: 'syz.3.600': attribute type 6 has an invalid length.
[  292.211183][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.600'.
[  293.151882][   T36] usbhid 2-1:1.0: can't add hid device: -71
[  293.152020][   T36] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  293.152584][ T7499] team0: Port device team_slave_0 added
[  293.195516][ T4913] Bluetooth: hci6: command tx timeout
[  293.210598][   T36] usb 2-1: USB disconnect, device number 25
[  293.783321][ T4913] Bluetooth: hci0: command tx timeout
[  294.275854][ T7499] team0: Port device team_slave_1 added
[  295.276935][ T4913] Bluetooth: hci6: command tx timeout
[  295.835438][ T4913] Bluetooth: hci0: command tx timeout
[  297.103709][ T7614] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  297.355230][ T4913] Bluetooth: hci6: command tx timeout
[  298.199947][ T4913] Bluetooth: hci0: command tx timeout
[  298.287849][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.287870][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.287900][ T7499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  298.384502][ T7499] batman_adv: batadv0: Adding interface: batadv_slave_1
[  298.384521][ T7499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  298.384551][ T7499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.435283][ T5626] Bluetooth: hci6: command tx timeout
[  300.380133][ T7635] 
@0Ùÿÿ: renamed from bond_slave_1 (while UP)
[  305.909602][   T89] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.003717][ T7499] hsr_slave_0: entered promiscuous mode
[  309.017176][ T7499] hsr_slave_1: entered promiscuous mode
[  309.024780][ T7499] debugfs: 'hsr0' already exists in 'hsr'
[  309.024801][ T7499] Cannot create hsr debugfs directory
[  309.667659][   T37] kauditd_printk_skb: 917 callbacks suppressed
[  309.667681][   T37] audit: type=1326 audit(1782595059.101:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7643 comm="syz.1.607" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32239ce59 code=0x0
[  310.959011][ T7648] FAULT_INJECTION: forcing a failure.
[  310.959011][ T7648] name failslab, interval 1, probability 0, space 0, times 0
[  310.959048][ T7648] CPU: 0 UID: 0 PID: 7648 Comm: syz.1.608 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  310.959074][ T7648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  310.959089][ T7648] Call Trace:
[  310.959097][ T7648]  <TASK>
[  310.959107][ T7648]  dump_stack_lvl+0xe8/0x150
[  310.959140][ T7648]  should_fail_ex+0x467/0x600
[  310.959174][ T7648]  should_failslab+0xa8/0x100
[  310.959208][ T7648]  kmem_cache_alloc_noprof+0xa4/0x650
[  310.959236][ T7648]  ? do_getname+0x2e/0x250
[  310.959259][ T7648]  ? do_getname+0x2e/0x250
[  310.959290][ T7648]  do_getname+0x2e/0x250
[  310.959312][ T7648]  ? getname_flags+0x11/0x20
[  310.959336][ T7648]  __x64_sys_lgetxattr+0x1fb/0x2b0
[  310.959377][ T7648]  ? __pfx___x64_sys_lgetxattr+0x10/0x10
[  310.959406][ T7648]  ? rt_mutex_slowunlock+0x219/0x460
[  310.959475][ T7648]  ? __pfx_ksys_write+0x10/0x10
[  310.959519][ T7648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.959544][ T7648]  do_syscall_64+0x174/0x580
[  310.959571][ T7648]  ? trace_irq_disable+0x3b/0x140
[  310.959603][ T7648]  ? clear_bhb_loop+0x40/0x90
[  310.959630][ T7648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.959652][ T7648] RIP: 0033:0x7fe32239ce59
[  310.959672][ T7648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.959691][ T7648] RSP: 002b:00007fe3205cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0
[  310.959715][ T7648] RAX: ffffffffffffffda RBX: 00007fe322616090 RCX: 00007fe32239ce59
[  310.959731][ T7648] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000040
[  310.959745][ T7648] RBP: 00007fe3205cd090 R08: 0000000000000000 R09: 0000000000000000
[  310.959758][ T7648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.959771][ T7648] R13: 00007fe322616128 R14: 00007fe322616090 R15: 00007ffdb1b91d98
[  310.959804][ T7648]  </TASK>
[  313.380605][ T7652] netlink: 'syz.1.609': attribute type 6 has an invalid length.
[  313.380630][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'.
[  314.393318][ T4913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  314.430157][ T4913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  314.452906][ T4913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  314.454686][ T4913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  314.469809][ T4913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.495435][ T5584] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  316.635524][ T4913] Bluetooth: hci2: command tx timeout
[  316.775189][ T5584] usb 2-1: Using ep0 maxpacket: 32
[  316.781833][ T5584] usb 2-1: config 7 has an invalid interface number: 98 but max is 0
[  316.781864][ T5584] usb 2-1: config 7 has no interface number 0
[  316.781906][ T5584] usb 2-1: config 7 interface 98 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  316.781926][ T5584] usb 2-1: config 7 interface 98 altsetting 7 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  316.781949][ T5584] usb 2-1: config 7 interface 98 altsetting 7 has a duplicate endpoint with address 0xA, skipping
[  316.781966][ T5584] usb 2-1: config 7 interface 98 altsetting 7 endpoint 0x2 has invalid maxpacket 528, setting to 64
[  316.781985][ T5584] usb 2-1: config 7 interface 98 altsetting 7 has a duplicate endpoint with address 0x4, skipping
[  316.782002][ T5584] usb 2-1: config 7 interface 98 altsetting 7 endpoint 0xE has an invalid bInterval 171, changing to 7
[  316.782021][ T5584] usb 2-1: config 7 interface 98 altsetting 7 endpoint 0xE has invalid wMaxPacketSize 0
[  316.782038][ T5584] usb 2-1: config 7 interface 98 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  316.782057][ T5584] usb 2-1: config 7 interface 98 has no altsetting 0
[  316.823300][ T5584] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=8c.55
[  316.823382][ T5584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.823445][ T5584] usb 2-1: Product: 孀㌘�괛៵྄뷼焄᳟�献乶垬廷䡿垰岺嵚䙓噴詌橱⊓飉梅ꌶ⟉ꉡ纎ℼ䱠ﰡ紲￫罶䅯�汶ᆪ氎�륄㞉眂��㵭�葹軶࣭�୊Ⴥｂ襚ﴅ鉽�緊�툖냛쬹�ꈙꓘ킳헹㈬혌鮗愴怳컦旊▴ꘗⱹ䳯ࢃ沌喾즡䤆늜ꆳ�尓㵉Ш碸⇉롻斃ꦩ轘ᆊ팭䲡댵㞓쀬濫和냴咣�颇캡
[  316.823541][ T5584] usb 2-1: Manufacturer: п
[  316.823582][ T5584] usb 2-1: SerialNumber: �
[  317.012976][ T7662] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  317.204805][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  317.220007][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  317.962198][ T5584] usb 2-1: USB disconnect, device number 26
[  318.715344][ T4913] Bluetooth: hci2: command tx timeout
[  320.795237][ T4913] Bluetooth: hci2: command tx timeout
[  322.865246][  T820] usb 2-1: new low-speed USB device number 27 using dummy_hcd
[  322.875418][ T4913] Bluetooth: hci2: command tx timeout
[  323.025256][  T820] usb 2-1: device descriptor read/64, error -71
[  323.335233][  T820] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[  323.926854][  T820] usb 2-1: device descriptor read/64, error -71
[  324.072217][  T820] usb usb2-port1: attempt power cycle
[  324.775482][  T820] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  326.687427][  T820] usb 2-1: device descriptor read/8, error -71
[  326.761728][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  326.829709][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  326.837522][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  326.843850][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  326.862875][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  327.565322][  T820] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  327.593372][  T820] usb 2-1: Using ep0 maxpacket: 8
[  327.609247][  T820] usb 2-1: unable to get BOS descriptor or descriptor too short
[  327.611561][  T820] usb 2-1: config 15 has an invalid interface number: 162 but max is 0
[  327.611588][  T820] usb 2-1: config 15 has no interface number 0
[  327.611635][  T820] usb 2-1: config 15 interface 162 altsetting 82 endpoint 0x87 has an invalid bInterval 192, changing to 11
[  327.611665][  T820] usb 2-1: config 15 interface 162 has no altsetting 0
[  327.678614][  T820] usb 2-1: New USB device found, idVendor=10c4, idProduct=817c, bcdDevice=8c.e0
[  327.678645][  T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.678666][  T820] usb 2-1: Product: syz
[  327.678681][  T820] usb 2-1: Manufacturer: syz
[  327.678696][  T820] usb 2-1: SerialNumber: syz
[  328.192938][ T7707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.193630][ T7707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  329.115581][ T5626] Bluetooth: hci3: command tx timeout
[  329.133970][  T820] cp210x 2-1:15.162: cp210x converter detected
[  329.137506][  T820] cp210x 2-1:15.162: failed to get vendor val 0x370b size 1: -71
[  329.137579][  T820] cp210x 2-1:15.162: querying part number failed
[  329.447654][  T820] usb 2-1: cp210x converter now attached to ttyUSB0
[  329.624106][  T820] usb 2-1: USB disconnect, device number 30
[  329.724439][  T820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  329.742225][  T820] cp210x 2-1:15.162: device disconnected
[  330.819064][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.819196][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.819421][ T7575] bridge_slave_0: entered allmulticast mode
[  330.869779][ T7575] bridge_slave_0: entered promiscuous mode
[  330.983082][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.983212][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.983440][ T7575] bridge_slave_1: entered allmulticast mode
[  331.035519][ T7575] bridge_slave_1: entered promiscuous mode
[  331.202669][ T5626] Bluetooth: hci3: command tx timeout
[  331.580980][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.581106][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.581318][ T7595] bridge_slave_0: entered allmulticast mode
[  331.584103][ T7595] bridge_slave_0: entered promiscuous mode
[  331.701944][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  331.702353][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.702521][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.702718][ T7595] bridge_slave_1: entered allmulticast mode
[  331.771963][ T7595] bridge_slave_1: entered promiscuous mode
[  332.240872][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.276412][ T4913] Bluetooth: hci3: command tx timeout
[  334.057247][ T7595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.162403][ T7575] team0: Port device team_slave_0 added
[  334.193582][ T7595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.628641][ T7575] team0: Port device team_slave_1 added
[  335.355502][ T4913] Bluetooth: hci3: command 0x0419 tx timeout
[  336.209013][   T89] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.615245][ T5589] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  336.825275][ T5589] usb 2-1: Using ep0 maxpacket: 32
[  336.827867][ T5589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.827894][ T5589] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  336.827931][ T5589] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  336.827955][ T5589] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.891471][ T5589] usb 2-1: config 0 descriptor??
[  337.443134][ T7746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.443793][ T7746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.449338][ T5626] Bluetooth: hci3: command 0x0419 tx timeout
[  341.603960][ T7595] team0: Port device team_slave_0 added
[  341.612230][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.612248][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  341.612276][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.803047][ T7595] team0: Port device team_slave_1 added
[  341.811878][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.811895][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  341.811926][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.691430][ T5589] usb 2-1: string descriptor 0 read error: -110
[  343.493967][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_0
[  343.493986][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.494015][ T7595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  343.650128][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  343.650147][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.650176][ T7595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.489004][ T7575] hsr_slave_0: entered promiscuous mode
[  344.541458][ T7575] hsr_slave_1: entered promiscuous mode
[  344.771083][ T7575] debugfs: 'hsr0' already exists in 'hsr'
[  344.771115][ T7575] Cannot create hsr debugfs directory
[  346.067871][ T7595] hsr_slave_0: entered promiscuous mode
[  346.069308][ T7595] hsr_slave_1: entered promiscuous mode
[  346.133813][ T7595] debugfs: 'hsr0' already exists in 'hsr'
[  346.133845][ T7595] Cannot create hsr debugfs directory
[  346.486188][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.486408][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.486626][ T7654] bridge_slave_0: entered allmulticast mode
[  346.635642][ T7654] bridge_slave_0: entered promiscuous mode
[  346.865246][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.865419][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.865672][ T7654] bridge_slave_1: entered allmulticast mode
[  346.873459][ T7654] bridge_slave_1: entered promiscuous mode
[  349.274716][ T4913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  349.331299][ T4913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  349.343748][ T4913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  349.613779][ T4913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  349.624734][ T4913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  349.748289][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.001733][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.582295][ T7654] team0: Port device team_slave_0 added
[  350.813594][ T4913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  350.863738][ T4913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  350.887519][ T4913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  350.918459][ T4913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  350.919635][ T4913] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  351.676120][ T4913] Bluetooth: hci5: command tx timeout
[  351.900649][ T7654] team0: Port device team_slave_1 added
[  352.201457][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.201477][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.201506][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.748997][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.749016][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.749044][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.502260][ T4913] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  353.554396][ T4913] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  353.579156][ T4913] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  353.649626][ T4913] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  353.650373][ T4913] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  353.757834][ T4913] Bluetooth: hci5: command tx timeout
[  353.835316][ T4913] Bluetooth: hci7: command tx timeout
[  355.835769][ T5626] Bluetooth: hci5: command tx timeout
[  355.915429][ T5626] Bluetooth: hci7: command tx timeout
[  356.081136][ T5626] Bluetooth: hci8: command tx timeout
[  357.959540][ T5626] Bluetooth: hci5: command tx timeout
[  358.005208][ T5626] Bluetooth: hci7: command tx timeout
[  358.159418][ T5626] Bluetooth: hci8: command tx timeout
[  360.075342][ T5626] Bluetooth: hci7: command tx timeout
[  360.235297][ T5626] Bluetooth: hci8: command tx timeout
[  361.238945][ T7654] hsr_slave_0: entered promiscuous mode
[  361.242229][ T7654] hsr_slave_1: entered promiscuous mode
[  361.245433][ T7654] debugfs: 'hsr0' already exists in 'hsr'
[  361.245461][ T7654] Cannot create hsr debugfs directory
[  362.315239][ T5626] Bluetooth: hci8: command tx timeout
[  363.340665][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.340788][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.341054][ T7701] bridge_slave_0: entered allmulticast mode
[  363.379510][ T7701] bridge_slave_0: entered promiscuous mode
[  363.707678][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.707810][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.708068][ T7701] bridge_slave_1: entered allmulticast mode
[  363.715044][ T7701] bridge_slave_1: entered promiscuous mode
[  366.041413][ T7701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  366.223979][ T7701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  369.140385][ T7701] team0: Port device team_slave_0 added
[  369.357256][ T7701] team0: Port device team_slave_1 added
[  370.639271][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  370.639289][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.639319][ T7701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  371.203504][ T7701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  371.203522][ T7701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  371.203553][ T7701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.348647][ T7701] hsr_slave_0: entered promiscuous mode
[  373.354227][ T7701] hsr_slave_1: entered promiscuous mode
[  373.372003][ T7701] debugfs: 'hsr0' already exists in 'hsr'
[  373.372032][ T7701] Cannot create hsr debugfs directory
[  374.562565][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  374.626203][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  374.642789][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  374.792313][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  374.794067][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  376.955502][ T5626] Bluetooth: hci0: command tx timeout
[  378.650932][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  378.650999][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  379.035612][ T5626] Bluetooth: hci0: command tx timeout
[  381.126065][ T5626] Bluetooth: hci0: command tx timeout
[  382.890251][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.890462][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.890711][ T7755] bridge_slave_0: entered allmulticast mode
[  382.943509][ T7755] bridge_slave_0: entered promiscuous mode
[  383.196664][ T5626] Bluetooth: hci0: command tx timeout
[  383.602699][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.602887][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.603134][ T7755] bridge_slave_1: entered allmulticast mode
[  383.634144][ T7755] bridge_slave_1: entered promiscuous mode
[  383.676498][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.676624][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.676859][ T7763] bridge_slave_0: entered allmulticast mode
[  383.708883][ T7763] bridge_slave_0: entered promiscuous mode
[  384.121338][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.121495][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.121958][ T7763] bridge_slave_1: entered allmulticast mode
[  384.163150][ T7763] bridge_slave_1: entered promiscuous mode
[  385.919547][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.919714][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.920356][ T7774] bridge_slave_0: entered allmulticast mode
[  385.952216][ T7774] bridge_slave_0: entered promiscuous mode
[  385.980632][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.960919][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.961059][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.961345][ T7774] bridge_slave_1: entered allmulticast mode
[  387.037858][ T7774] bridge_slave_1: entered promiscuous mode
[  387.055610][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.111421][ T7763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.874154][ T4913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  387.910944][ T4913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  387.914248][ T4913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  387.939468][ T4913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  387.940729][ T4913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  389.995943][ T5626] Bluetooth: hci2: command tx timeout
[  391.213142][ T7763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.076170][ T5626] Bluetooth: hci2: command tx timeout
[  392.324754][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.416555][ T7755] team0: Port device team_slave_0 added
[  392.883110][ T7755] team0: Port device team_slave_1 added
[  392.899024][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.940851][ T7763] team0: Port device team_slave_0 added
[  393.283955][ T7763] team0: Port device team_slave_1 added
[  394.205489][ T5626] Bluetooth: hci2: command tx timeout
[  394.735989][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.736020][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.736049][ T7755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.796854][ T7774] team0: Port device team_slave_0 added
[  394.891424][ T7755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.891443][ T7755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.891472][ T7755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.959508][ T7774] team0: Port device team_slave_1 added
[  394.963978][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.963996][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  394.964024][ T7763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.530788][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.530806][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  395.530835][ T7763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.286594][ T5626] Bluetooth: hci2: command tx timeout
[  396.287587][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  396.287601][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.287631][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.964414][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.964433][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  396.964463][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.253081][ T7755] hsr_slave_0: entered promiscuous mode
[  398.395970][ T7755] hsr_slave_1: entered promiscuous mode
[  398.397149][ T7755] debugfs: 'hsr0' already exists in 'hsr'
[  398.397175][ T7755] Cannot create hsr debugfs directory
[  399.360450][ T7763] hsr_slave_0: entered promiscuous mode
[  399.366224][ T7763] hsr_slave_1: entered promiscuous mode
[  399.383959][ T7763] debugfs: 'hsr0' already exists in 'hsr'
[  399.383991][ T7763] Cannot create hsr debugfs directory
[  400.777838][ T7774] hsr_slave_0: entered promiscuous mode
[  400.779351][ T7774] hsr_slave_1: entered promiscuous mode
[  400.812226][ T7774] debugfs: 'hsr0' already exists in 'hsr'
[  400.812256][ T7774] Cannot create hsr debugfs directory
[  404.845028][ T7499] syz-executor (7499) used greatest stack depth: 17224 bytes left
[  405.449503][ T5621] usb 2-1: USB disconnect, device number 31
[  408.480801][   T89] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.007077][ T4913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  411.096236][ T4913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  411.109327][ T4913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  411.360499][ T4913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  411.444778][ T4913] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  411.612169][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state
[  411.612301][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.612600][ T7804] bridge_slave_0: entered allmulticast mode
[  411.647870][ T7804] bridge_slave_0: entered promiscuous mode
[  412.063270][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.063404][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.063715][ T7804] bridge_slave_1: entered allmulticast mode
[  412.104509][ T7804] bridge_slave_1: entered promiscuous mode
[  412.192181][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  412.233745][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  412.258844][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  412.260358][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  412.261139][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  413.291790][ T7804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  413.595655][ T5626] Bluetooth: hci6: command tx timeout
[  413.824560][ T4913] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  413.869282][ T4913] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  413.872914][ T4913] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  413.902767][ T4913] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  413.903485][ T4913] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  414.002215][ T7804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.385639][ T5626] Bluetooth: hci4: command tx timeout
[  415.030210][ T7804] team0: Port device team_slave_0 added
[  415.681698][ T4913] Bluetooth: hci6: command tx timeout
[  415.996535][ T4913] Bluetooth: hci9: command tx timeout
[  416.395424][ T4913] Bluetooth: hci4: command tx timeout
[  417.805651][ T4913] Bluetooth: hci6: command tx timeout
[  418.076886][ T4913] Bluetooth: hci9: command tx timeout
[  418.478209][ T4913] Bluetooth: hci4: command tx timeout
[  419.269393][ T7804] team0: Port device team_slave_1 added
[  419.839033][ T4913] Bluetooth: hci6: command tx timeout
[  420.165588][ T4913] Bluetooth: hci9: command tx timeout
[  420.567697][ T4913] Bluetooth: hci4: command tx timeout
[  422.235515][ T4913] Bluetooth: hci9: command tx timeout
[  429.979396][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.979415][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.979444][ T7804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.197479][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.197507][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  430.197538][ T7804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  431.672614][ T7841] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.672753][ T7841] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.673004][ T7841] bridge_slave_0: entered allmulticast mode
[  431.697471][ T7841] bridge_slave_0: entered promiscuous mode
[  432.040247][ T7804] hsr_slave_0: entered promiscuous mode
[  432.051148][ T7804] hsr_slave_1: entered promiscuous mode
[  432.058587][ T7804] debugfs: 'hsr0' already exists in 'hsr'
[  432.058658][ T7804] Cannot create hsr debugfs directory
[  432.119433][ T7841] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.119666][ T7841] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.119974][ T7841] bridge_slave_1: entered allmulticast mode
[  432.144572][ T7841] bridge_slave_1: entered promiscuous mode
[  433.417952][ T7841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.194084][ T7841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.705594][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  435.799168][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  435.830936][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  435.832762][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  435.853952][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  436.671122][ T7841] team0: Port device team_slave_0 added
[  436.750154][ T7841] team0: Port device team_slave_1 added
[  437.998175][ T4913] Bluetooth: hci5: command tx timeout
[  438.616314][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  438.616332][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.616361][ T7841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  438.758501][ T7841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  438.758518][ T7841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  438.758546][ T7841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.078472][ T4913] Bluetooth: hci5: command tx timeout
[  440.084189][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  440.084261][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  441.478862][ T7841] hsr_slave_0: entered promiscuous mode
[  441.482321][ T7841] hsr_slave_1: entered promiscuous mode
[  441.497185][ T7841] debugfs: 'hsr0' already exists in 'hsr'
[  441.497214][ T7841] Cannot create hsr debugfs directory
[  442.156144][ T4913] Bluetooth: hci5: command tx timeout
[  444.255592][ T4913] Bluetooth: hci5: command tx timeout
[  448.438344][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.438474][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.438866][ T7867] bridge_slave_0: entered allmulticast mode
[  448.507727][ T7867] bridge_slave_0: entered promiscuous mode
[  448.742169][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  448.789982][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  448.802121][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  448.836592][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  448.839275][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  448.950187][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.950367][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.950677][ T7867] bridge_slave_1: entered allmulticast mode
[  448.967210][ T7867] bridge_slave_1: entered promiscuous mode
[  450.356314][ T7867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  450.568556][ T7867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  450.571740][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.571958][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.572218][ T7881] bridge_slave_0: entered allmulticast mode
[  450.615992][ T7881] bridge_slave_0: entered promiscuous mode
[  450.623271][ T7871] bridge0: port 1(bridge_slave_0) entered blocking state
[  450.623401][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.623696][ T7871] bridge_slave_0: entered allmulticast mode
[  450.671000][ T7871] bridge_slave_0: entered promiscuous mode
[  450.892797][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state
[  450.912359][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.912693][ T7881] bridge_slave_1: entered allmulticast mode
[  450.949804][ T7881] bridge_slave_1: entered promiscuous mode
[  450.962031][ T4913] Bluetooth: hci0: command tx timeout
[  451.011383][ T7871] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.011526][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.011812][ T7871] bridge_slave_1: entered allmulticast mode
[  451.046132][ T7871] bridge_slave_1: entered promiscuous mode
[  451.562812][ T7867] team0: Port device team_slave_0 added
[  452.180361][ T7867] team0: Port device team_slave_1 added
[  452.404862][ T4913] Bluetooth: hci3: command 0x0419 tx timeout
[  452.412421][ T7881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.035334][ T4913] Bluetooth: hci0: command tx timeout
[  453.500939][ T7871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  453.691734][ T7881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.115176][ T5626] Bluetooth: hci0: command tx timeout
[  457.228775][ T5626] Bluetooth: hci0: command tx timeout
[  462.037952][ T7871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  463.157738][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.157755][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.157785][ T7867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.333430][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.333448][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.333476][ T7867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.403710][ T7881] team0: Port device team_slave_0 added
[  463.414435][ T7871] team0: Port device team_slave_0 added
[  463.471736][ T7881] team0: Port device team_slave_1 added
[  463.483815][ T7871] team0: Port device team_slave_1 added
[  463.804472][ T7881] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.804491][ T7881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.804519][ T7881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.855878][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.855896][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.855938][ T7871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.990405][ T7881] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.990424][ T7881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.990453][ T7881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.992279][ T7871] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.992294][ T7871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.992321][ T7871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.137146][ T7867] hsr_slave_0: entered promiscuous mode
[  464.140474][ T7867] hsr_slave_1: entered promiscuous mode
[  464.143357][ T7867] debugfs: 'hsr0' already exists in 'hsr'
[  464.143383][ T7867] Cannot create hsr debugfs directory
[  469.435671][ T7871] hsr_slave_0: entered promiscuous mode
[  469.442172][ T7871] hsr_slave_1: entered promiscuous mode
[  469.459666][ T7871] debugfs: 'hsr0' already exists in 'hsr'
[  469.459694][ T7871] Cannot create hsr debugfs directory
[  471.103898][ T7881] hsr_slave_0: entered promiscuous mode
[  471.314103][ T7881] hsr_slave_1: entered promiscuous mode
[  471.356171][ T7881] debugfs: 'hsr0' already exists in 'hsr'
[  471.356202][ T7881] Cannot create hsr debugfs directory
[  471.377703][ T7908] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.377831][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.378201][ T7908] bridge_slave_0: entered allmulticast mode
[  471.381879][ T7908] bridge_slave_0: entered promiscuous mode
[  472.382631][ T4913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  472.432363][ T4913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  472.573993][ T4913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  472.583853][ T4913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  472.593342][ T4913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  473.298326][ T4913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  473.348185][ T4913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  473.350528][ T4913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  473.440360][ T4913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  473.455909][ T4913] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  474.329566][ T4913] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  474.364810][ T4913] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  474.374835][ T4913] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  474.386969][ T4913] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  474.390381][ T4913] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  474.735163][ T5626] Bluetooth: hci2: command tx timeout
[  475.595273][ T5626] Bluetooth: hci7: command tx timeout
[  475.813851][ T7908] bridge0: port 2(bridge_slave_1) entered blocking state
[  475.813984][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.814330][ T7908] bridge_slave_1: entered allmulticast mode
[  475.837779][ T7908] bridge_slave_1: entered promiscuous mode
[  476.297606][ T7908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.475266][ T5626] Bluetooth: hci8: command tx timeout
[  477.008838][ T5626] Bluetooth: hci2: command tx timeout
[  477.229618][ T7908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.696669][ T5626] Bluetooth: hci7: command tx timeout
[  478.555822][ T5626] Bluetooth: hci8: command tx timeout
[  479.035655][ T5626] Bluetooth: hci2: command tx timeout
[  479.755563][ T5626] Bluetooth: hci7: command tx timeout
[  480.635250][ T4913] Bluetooth: hci8: command tx timeout
[  481.115129][ T4913] Bluetooth: hci2: command tx timeout
[  481.847630][ T4913] Bluetooth: hci7: command tx timeout
[  482.732279][ T4913] Bluetooth: hci8: command tx timeout
[  491.805820][ T7908] team0: Port device team_slave_0 added
[  492.046113][ T7908] team0: Port device team_slave_1 added
[  492.692119][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  492.692138][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  492.692167][ T7908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.069428][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.069447][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.069476][ T7908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.119735][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  496.160559][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  496.194659][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  496.258464][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  496.261361][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  498.395957][ T5626] Bluetooth: hci4: command tx timeout
[  498.682653][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.722145][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.865379][ T7944] bridge_slave_0: entered allmulticast mode
[  498.910836][ T7944] bridge_slave_0: entered promiscuous mode
[  499.072663][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.072882][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.093175][ T7944] bridge_slave_1: entered allmulticast mode
[  499.109813][ T7944] bridge_slave_1: entered promiscuous mode
[  500.485735][ T5626] Bluetooth: hci4: command tx timeout
[  500.825447][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  501.516983][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  501.517057][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  502.111800][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.555165][ T5626] Bluetooth: hci4: command tx timeout
[  503.145119][ T7944] team0: Port device team_slave_0 added
[  504.508606][ T7944] team0: Port device team_slave_1 added
[  504.635160][ T5626] Bluetooth: hci4: command tx timeout
[  506.768237][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.768255][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.768284][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.928384][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  506.928403][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  506.928433][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.071170][ T4913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  512.185834][ T4913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  512.197338][ T4913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  512.217866][ T4913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  512.218933][ T4913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  514.402992][ T4913] Bluetooth: hci5: command tx timeout
[  515.811192][ T7974] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.811318][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.811670][ T7974] bridge_slave_0: entered allmulticast mode
[  515.875369][ T7974] bridge_slave_0: entered promiscuous mode
[  516.028477][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.028607][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.028961][ T7986] bridge_slave_0: entered allmulticast mode
[  516.287506][ T7986] bridge_slave_0: entered promiscuous mode
[  516.304971][ T7974] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.305247][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.305603][ T7974] bridge_slave_1: entered allmulticast mode
[  516.311627][ T7974] bridge_slave_1: entered promiscuous mode
[  516.349528][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.349692][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.350006][ T7981] bridge_slave_0: entered allmulticast mode
[  516.380055][ T7981] bridge_slave_0: entered promiscuous mode
[  516.410321][ T7986] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.410452][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.410779][ T7986] bridge_slave_1: entered allmulticast mode
[  516.429866][ T7986] bridge_slave_1: entered promiscuous mode
[  516.485500][ T4913] Bluetooth: hci5: command tx timeout
[  517.666787][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.666924][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.667292][ T7981] bridge_slave_1: entered allmulticast mode
[  517.713061][ T7981] bridge_slave_1: entered promiscuous mode
[  518.564695][ T4913] Bluetooth: hci5: command tx timeout
[  519.522642][ T7974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.249949][ T7986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.341100][ T7974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.411767][ T7981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.496604][ T7986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.692105][ T7981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.802396][ T4913] Bluetooth: hci5: command tx timeout
[  531.168441][ T7974] team0: Port device team_slave_0 added
[  532.490805][ T7986] team0: Port device team_slave_0 added
[  532.529666][ T7986] team0: Port device team_slave_1 added
[  532.740796][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  532.773175][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  532.800197][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  532.812704][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  532.824041][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  533.508141][ T8082] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  533.553597][ T8082] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  533.562536][ T8082] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  533.582064][ T8082] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  533.599502][ T8082] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  535.055941][ T5626] Bluetooth: hci0: command tx timeout
[  535.453562][ T8082] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  535.519827][ T8082] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  535.542426][ T8082] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  535.567255][ T8082] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  535.570757][ T8082] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  535.835527][ T8082] Bluetooth: hci6: command tx timeout
[  537.125339][ T8082] Bluetooth: hci0: command tx timeout
[  537.689495][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.689622][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.689982][ T8013] bridge_slave_0: entered allmulticast mode
[  537.729479][ T8013] bridge_slave_0: entered promiscuous mode
[  537.755291][ T8082] Bluetooth: hci9: command tx timeout
[  537.916061][ T8082] Bluetooth: hci6: command tx timeout
[  538.532402][ T8013] bridge0: port 2(bridge_slave_1) entered blocking state
[  538.532538][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.532939][ T8013] bridge_slave_1: entered allmulticast mode
[  538.568120][ T8013] bridge_slave_1: entered promiscuous mode
[  539.195869][ T8082] Bluetooth: hci0: command tx timeout
[  540.042360][ T8082] Bluetooth: hci9: command tx timeout
[  540.042399][ T8082] Bluetooth: hci6: command tx timeout
[  540.734439][ T8013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  540.908233][ T8013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.288404][ T5626] Bluetooth: hci0: command tx timeout
[  542.075261][ T8082] Bluetooth: hci9: command tx timeout
[  542.077085][ T5626] Bluetooth: hci6: command tx timeout
[  543.082553][ T8013] team0: Port device team_slave_0 added
[  543.147911][ T8013] team0: Port device team_slave_1 added
[  544.155153][ T5626] Bluetooth: hci9: command tx timeout
[  554.268433][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.268453][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.268484][ T8013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  557.485585][ T8013] batman_adv: batadv0: Adding interface: batadv_slave_1
[  557.485601][ T8013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  557.485623][ T8013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  560.352984][ T8082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  560.405282][ T8082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  560.410279][ T8082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  560.417002][ T8082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  560.418106][ T8082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  561.752840][ T8051] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.752977][ T8051] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.753371][ T8051] bridge_slave_0: entered allmulticast mode
[  561.797740][ T8051] bridge_slave_0: entered promiscuous mode
[  561.936038][ T8051] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.936170][ T8051] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.936594][ T8051] bridge_slave_1: entered allmulticast mode
[  561.972408][ T8051] bridge_slave_1: entered promiscuous mode
[  562.957899][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  562.957969][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  563.158633][ T8051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  563.277667][ T8082] Bluetooth: hci2: command tx timeout
[  563.403092][ T8051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  565.210072][ T8051] team0: Port device team_slave_0 added
[  565.366084][ T8082] Bluetooth: hci2: command tx timeout
[  565.424955][ T8051] team0: Port device team_slave_1 added
[  567.435363][ T5626] Bluetooth: hci2: command tx timeout
[  568.644552][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.644572][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  568.683167][ T8051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  569.527060][ T8082] Bluetooth: hci2: command tx timeout
[  569.904151][   T89] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.313126][ T8051] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.313144][ T8051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.313174][ T8051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  572.016377][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  572.033704][ T5608] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  572.051142][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  572.052751][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  572.087306][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  574.395199][ T8082] Bluetooth: hci4: command tx timeout
[  575.336947][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.337112][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.337480][ T8078] bridge_slave_0: entered allmulticast mode
[  575.448386][ T8078] bridge_slave_0: entered promiscuous mode
[  575.977807][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.977940][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.978339][ T8078] bridge_slave_1: entered allmulticast mode
[  576.018946][ T8078] bridge_slave_1: entered promiscuous mode
[  576.762579][ T8082] Bluetooth: hci4: command tx timeout
[  577.069044][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.069257][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.069613][ T8086] bridge_slave_0: entered allmulticast mode
[  577.108070][ T8086] bridge_slave_0: entered promiscuous mode
[  577.478525][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.478659][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.479028][ T8086] bridge_slave_1: entered allmulticast mode
[  577.533459][ T8086] bridge_slave_1: entered promiscuous mode
[  577.590141][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.795357][ T8082] Bluetooth: hci4: command tx timeout
[  580.875145][ T8082] Bluetooth: hci4: command tx timeout
[  582.809612][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.758074][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.758204][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.758547][ T8093] bridge_slave_0: entered allmulticast mode
[  583.789861][ T8093] bridge_slave_0: entered promiscuous mode
[  583.827265][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.150843][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.151097][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.151223][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.151553][ T8093] bridge_slave_1: entered allmulticast mode
[  584.184572][ T8093] bridge_slave_1: entered promiscuous mode
[  584.330990][ T8078] team0: Port device team_slave_0 added
[  584.549785][ T8078] team0: Port device team_slave_1 added
[  584.971581][ T8086] team0: Port device team_slave_0 added
[  585.157351][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  585.855576][ T8086] team0: Port device team_slave_1 added
[  585.910223][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  586.526100][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  586.526120][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  586.526148][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  587.304116][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  587.304134][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  587.304163][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.773030][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  587.773049][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  587.773133][ T8086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  587.887661][ T8093] team0: Port device team_slave_0 added
[  587.997676][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  587.997695][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  587.999269][ T8086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  588.108276][ T8093] team0: Port device team_slave_1 added
[  591.050745][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  591.050766][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  591.050795][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.077893][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  592.120651][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  592.123827][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  592.149933][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  592.150873][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  592.688738][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.688755][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  592.688785][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.453647][ T8086] hsr_slave_0: entered promiscuous mode
[  593.461611][ T8086] hsr_slave_1: entered promiscuous mode
[  593.467104][ T8086] debugfs: 'hsr0' already exists in 'hsr'
[  593.467133][ T8086] Cannot create hsr debugfs directory
[  594.236479][ T5608] Bluetooth: hci5: command tx timeout
[  596.315150][ T5608] Bluetooth: hci5: command tx timeout
[  596.586758][ T8082] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  596.623562][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.623692][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.624098][ T8128] bridge_slave_0: entered allmulticast mode
[  596.625358][ T8082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  596.650540][ T8082] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  596.675609][ T8082] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  596.684241][ T8082] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  596.754148][ T8128] bridge_slave_0: entered promiscuous mode
[  596.935468][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.935610][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.936013][ T8128] bridge_slave_1: entered allmulticast mode
[  596.998255][ T8128] bridge_slave_1: entered promiscuous mode
[  597.538517][ T5608] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  597.634057][ T5608] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  597.651836][ T5608] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  597.664259][ T5608] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  597.686265][ T5608] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  598.396077][ T8082] Bluetooth: hci5: command tx timeout
[  598.669531][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  598.692729][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.797759][ T8082] Bluetooth: hci7: command tx timeout
[  599.389882][ T8128] team0: Port device team_slave_0 added
[  599.916655][ T5608] Bluetooth: hci8: command tx timeout
[  600.479834][ T5608] Bluetooth: hci5: command tx timeout
[  600.875414][ T5608] Bluetooth: hci7: command tx timeout
[  600.950092][ T8128] team0: Port device team_slave_1 added
[  601.996085][ T5608] Bluetooth: hci8: command tx timeout
[  602.956375][ T5608] Bluetooth: hci7: command tx timeout
[  604.076015][ T5608] Bluetooth: hci8: command tx timeout
[  605.036200][ T5608] Bluetooth: hci7: command tx timeout
[  606.155691][ T5608] Bluetooth: hci8: command tx timeout
[  613.852604][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  613.852635][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  613.852662][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  615.250963][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  615.250981][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  615.251009][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  616.705200][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.705331][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.705649][ T8153] bridge_slave_0: entered allmulticast mode
[  616.712440][ T8153] bridge_slave_0: entered promiscuous mode
[  616.995646][ T8128] hsr_slave_0: entered promiscuous mode
[  617.003243][ T8128] hsr_slave_1: entered promiscuous mode
[  617.015052][ T8128] debugfs: 'hsr0' already exists in 'hsr'
[  617.015082][ T8128] Cannot create hsr debugfs directory
[  617.021671][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.021987][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.029954][ T8153] bridge_slave_1: entered allmulticast mode
[  617.051240][ T8153] bridge_slave_1: entered promiscuous mode
[  618.274827][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.464933][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  620.152206][ T8082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  620.196988][ T8082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  620.199201][ T8082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  620.202820][ T8082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  620.226796][ T8082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  620.493891][ T8153] team0: Port device team_slave_0 added
[  621.231598][ T8153] team0: Port device team_slave_1 added
[  622.054353][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0
[  622.054369][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  622.054392][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  622.373254][ T8082] Bluetooth: hci0: command tx timeout
[  622.517905][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1
[  622.517923][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  622.517951][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.116278][   T38] INFO: task syz.3.603:7620 blocked for more than 143 seconds.
[  623.116302][   T38]       Not tainted syzkaller #0
[  623.116311][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  623.116319][   T38] task:syz.3.603       state:D stack:23896 pid:7620  tgid:7619  ppid:5610   task_flags:0x400140 flags:0x00080002
[  623.116388][   T38] Call Trace:
[  623.116394][   T38]  <TASK>
[  623.116406][   T38]  __schedule+0x16dc/0x5500
[  623.116454][   T38]  ? __pfx___schedule+0x10/0x10
[  623.116485][   T38]  rt_mutex_schedule+0x76/0xf0
[  623.116581][   T38]  rt_mutex_slowlock_block+0x55c/0x680
[  623.116627][   T38]  rt_mutex_slowlock+0x2d4/0x780
[  623.116657][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[  623.116683][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  623.116725][   T38]  ? rcu_barrier+0x4c/0x530
[  623.116777][   T38]  ? rcu_barrier+0x4c/0x530
[  623.116798][   T38]  ? rcu_barrier+0x4c/0x530
[  623.116813][   T38]  mutex_lock_nested+0x168/0x1d0
[  623.116843][   T38]  rcu_barrier+0x4c/0x530
[  623.116868][   T38]  setup_net+0x2fb/0x350
[  623.116948][   T38]  ? __pfx_setup_net+0x10/0x10
[  623.116974][   T38]  ? preinit_net+0x4b5/0x7d0
[  623.116996][   T38]  copy_net_ns+0x4f9/0x720
[  623.117021][   T38]  create_new_namespaces+0x3f0/0x6b0
[  623.117095][   T38]  ? security_capable+0x7e/0x2c0
[  623.117146][   T38]  unshare_nsproxy_namespaces+0x149/0x190
[  623.117175][   T38]  ksys_unshare+0x57d/0xa00
[  623.117224][   T38]  ? __pfx_ksys_unshare+0x10/0x10
[  623.117243][   T38]  ? __pfx_kcov_ioctl+0x10/0x10
[  623.117317][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.117336][   T38]  __x64_sys_unshare+0x38/0x50
[  623.117353][   T38]  do_syscall_64+0x174/0x580
[  623.117374][   T38]  ? trace_irq_disable+0x3b/0x140
[  623.117437][   T38]  ? clear_bhb_loop+0x40/0x90
[  623.117459][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.117482][   T38] RIP: 0033:0x7fa5f8ecce59
[  623.117498][   T38] RSP: 002b:00007fa5f711e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  623.117516][   T38] RAX: ffffffffffffffda RBX: 00007fa5f9145fa0 RCX: 00007fa5f8ecce59
[  623.117529][   T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  623.117540][   T38] RBP: 00007fa5f8f62e6f R08: 0000000000000000 R09: 0000000000000000
[  623.117551][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  623.117561][   T38] R13: 00007fa5f9146038 R14: 00007fa5f9145fa0 R15: 00007ffe3a34c0c8
[  623.117588][   T38]  </TASK>
[  623.117599][   T38] INFO: task syz-executor:7701 blocked for more than 143 seconds.
[  623.117612][   T38]       Not tainted syzkaller #0
[  623.117621][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  623.117628][   T38] task:syz-executor    state:D stack:18536 pid:7701  tgid:7701  ppid:1      task_flags:0x480140 flags:0x00080002
[  623.117674][   T38] Call Trace:
[  623.117680][   T38]  <TASK>
[  623.117691][   T38]  __schedule+0x16dc/0x5500
[  623.117743][   T38]  ? __pfx___schedule+0x10/0x10
[  623.117773][   T38]  rt_mutex_schedule+0x76/0xf0
[  623.117797][   T38]  rt_mutex_slowlock_block+0x55c/0x680
[  623.117835][   T38]  rt_mutex_slowlock+0x2d4/0x780
[  623.117863][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[  623.117890][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  623.117925][   T38]  ? rcu_barrier+0x4c/0x530
[  623.117945][   T38]  ? rcu_barrier+0x4c/0x530
[  623.117966][   T38]  ? rcu_barrier+0x4c/0x530
[  623.117980][   T38]  mutex_lock_nested+0x168/0x1d0
[  623.118005][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  623.118035][   T38]  rcu_barrier+0x4c/0x530
[  623.118060][   T38]  netdev_run_todo+0x2ff/0x10d0
[  623.118148][   T38]  ? __pfx_netdev_run_todo+0x10/0x10
[  623.118174][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  623.118199][   T38]  ? kfree+0x1c5/0x6c0
[  623.118251][   T38]  nsim_destroy+0x423/0x800
[  623.118313][   T38]  __nsim_dev_port_del+0x14e/0x200
[  623.118374][   T38]  nsim_dev_reload_destroy+0x288/0x490
[  623.118404][   T38]  ? nsim_drv_remove+0x50/0x160
[  623.118455][   T38]  nsim_drv_remove+0x58/0x160
[  623.118500][   T38]  ? __pfx_nsim_bus_remove+0x10/0x10
[  623.118523][   T38]  device_release_driver_internal+0x48b/0x880
[  623.118622][   T38]  bus_remove_device+0x449/0x560
[  623.118660][   T38]  ? __pfx_bus_remove_device+0x10/0x10
[  623.118694][   T38]  ? up_read+0x34/0x180
[  623.118746][   T38]  ? kernfs_remove_by_name_ns+0x101/0x140
[  623.118834][   T38]  device_del+0x528/0x8f0
[  623.118866][   T38]  ? __pfx_device_del+0x10/0x10
[  623.118888][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  623.118914][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  623.118946][   T38]  device_unregister+0x21/0xf0
[  623.118970][   T38]  del_device_store+0x2b5/0x370
[  623.119002][   T38]  ? __pfx_del_device_store+0x10/0x10
[  623.119031][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[  623.119057][   T38]  ? sysfs_kf_write+0x166/0x260
[  623.119087][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[  623.119111][   T38]  kernfs_fop_write_iter+0x3a5/0x540
[  623.119153][   T38]  vfs_write+0x61e/0xbb0
[  623.119241][   T38]  ? __pfx_vfs_write+0x10/0x10
[  623.119278][   T38]  ? do_sys_openat2+0x14e/0x200
[  623.119305][   T38]  ? kmem_cache_free+0x187/0x6c0
[  623.119377][   T38]  ksys_write+0x156/0x270
[  623.119414][   T38]  ? __pfx_ksys_write+0x10/0x10
[  623.123117][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.123153][   T38]  do_syscall_64+0x174/0x580
[  623.123182][   T38]  ? clear_bhb_loop+0x40/0x90
[  623.123212][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.123236][   T38] RIP: 0033:0x7fb10257d68e
[  623.123256][   T38] RSP: 002b:00007ffee6363a38 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  623.123280][   T38] RAX: ffffffffffffffda RBX: 0000555581d26500 RCX: 00007fb10257d68e
[  623.123298][   T38] RDX: 0000000000000001 RSI: 00007ffee6363ac0 RDI: 0000000000000005
[  623.123313][   T38] RBP: 00007fb1026536f2 R08: 0000000000000000 R09: 0000000000000000
[  623.123327][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.123340][   T38] R13: 00007ffee6363ac0 R14: 00007fb103364620 R15: 0000000000000003
[  623.123375][   T38]  </TASK>
[  623.123467][   T38] 
[  623.123467][   T38] Showing all locks held in the system:
[  623.123483][   T38] 5 locks held by ksoftirqd/0/15:
[  623.123497][   T38] 4 locks held by rcuc/0/20:
[  623.123510][   T38] 3 locks held by rcuc/1/28:
[  623.123522][   T38] 4 locks held by ksoftirqd/1/30:
[  623.123535][   T38] 1 lock held by khungtaskd/38:
[  623.123547][   T38]  #0: ffffffff8dfc2fc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  623.123614][   T38] 5 locks held by kworker/u8:2/43:
[  623.123628][   T38] 3 locks held by kworker/u8:3/49:
[  623.123640][   T38]  #0: ffff88801a084138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  623.123778][   T38]  #1: ffffc90000bb7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  623.123842][   T38]  #2: ffffffff8f371638 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  623.123958][   T38] 3 locks held by kworker/u8:4/66:
[  623.123971][   T38]  #0: ffff8880322b9938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  623.124034][   T38]  #1: ffffc9000151fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  623.124098][   T38]  #2: ffffffff8f371638 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0
[  623.124183][   T38] 6 locks held by kworker/u8:5/89:
[  623.124196][   T38]  #0: ffff88801b2a8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  623.124258][   T38]  #1: ffffc90002f0fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  623.124319][   T38]  #2: ffffffff8f362aa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  623.124376][   T38]  #3: ffff88805eb11160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  623.124485][   T38]  #4: ffff888025c0a310 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  623.124551][   T38]  #5: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.124631][   T38] 2 locks held by getty/5355:
[  623.124644][   T38]  #0: ffff8880363bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  623.124763][   T38]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[  623.124823][   T38] 3 locks held by kworker/0:4/5618:
[  623.124836][   T38]  #0: ffff88801a043938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  623.124898][   T38]  #1: ffffc90005377c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  623.130157][   T38]  #2: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.130352][   T38] 2 locks held by syz.3.603/7620:
[  623.130384][   T38]  #0: ffffffff8f362aa0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720
[  623.130534][   T38]  #1: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.130674][   T38] 7 locks held by syz-executor/7701:
[  623.130715][   T38]  #0: ffff88803649e500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[  623.130900][   T38]  #1: ffff88803c530478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[  623.131089][   T38]  #2: ffff888028f2a2d8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[  623.131257][   T38]  #3: ffffffff8ebe7118 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[  623.131406][   T38]  #4: ffff888024ddf160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[  623.131546][   T38]  #5: ffff888082b16310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  623.131709][   T38]  #6: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.131856][   T38] 1 lock held by syz-executor/7867:
[  623.131888][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.132010][   T38] 1 lock held by syz-executor/7871:
[  623.132042][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.132194][   T38] 1 lock held by syz-executor/7881:
[  623.132238][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.132385][   T38] 1 lock held by syz-executor/7908:
[  623.132416][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.132552][   T38] 1 lock held by syz-executor/7944:
[  623.132577][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.132724][   T38] 1 lock held by syz-executor/7974:
[  623.132754][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.132812][   T38] 1 lock held by syz-executor/7981:
[  623.136749][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.136910][   T38] 1 lock held by syz-executor/7986:
[  623.136924][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.137055][   T38] 1 lock held by syz-executor/8013:
[  623.137087][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.137231][   T38] 1 lock held by syz-executor/8051:
[  623.137269][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.137409][   T38] 1 lock held by syz-executor/8078:
[  623.137440][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.137574][   T38] 1 lock held by syz-executor/8086:
[  623.137605][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.137776][   T38] 1 lock held by syz-executor/8093:
[  623.137807][   T38]  #0: ffffffff8dfc9170 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530
[  623.137940][   T38] 3 locks held by syz-executor/8128:
[  623.137953][   T38] 2 locks held by syz-executor/8153:
[  623.137965][   T38]  #0: ffffffff8f8cc918 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  623.138155][   T38]  #1: ffffffff8f371638 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  623.138309][   T38] 2 locks held by syz-executor/8187:
[  623.138342][   T38]  #0: ffffffff8f8b1b08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  623.138444][   T38]  #1: ffffffff8f371638 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  623.138593][   T38] 1 lock held by syz-executor/8202:
[  623.138625][   T38]  #0: ffffffff8f371638 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  623.138775][   T38] 2 locks held by syz-executor/8211:
[  623.138800][   T38]  #0: ffffffff8f8cde70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  623.138961][   T38]  #1: ffffffff8f371638 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  623.139108][   T38] 1 lock held by syz-executor/8237:
[  623.139132][   T38]  #0: ffffffff8f371638 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0
[  623.146696][   T38] 
[  623.146719][   T38] =============================================
[  623.146719][   T38] 
[  623.146760][   T38] NMI backtrace for cpu 1
[  623.146814][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  623.146879][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  623.146912][   T38] Call Trace:
[  623.146934][   T38]  <TASK>
[  623.146955][   T38]  dump_stack_lvl+0xe8/0x150
[  623.147033][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[  623.147130][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  623.147266][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  623.147370][   T38]  sys_info+0x135/0x170
[  623.147448][   T38]  watchdog+0xfd7/0x1030
[  623.147542][   T38]  ? watchdog+0x1c7/0x1030
[  623.147629][   T38]  kthread+0x388/0x470
[  623.147655][   T38]  ? __pfx_watchdog+0x10/0x10
[  623.147686][   T38]  ? __pfx_kthread+0x10/0x10
[  623.147775][   T38]  ret_from_fork+0x514/0xb70
[  623.147901][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  623.147958][   T38]  ? __switch_to+0xc89/0x1420
[  623.148049][   T38]  ? __pfx_kthread+0x10/0x10
[  623.148114][   T38]  ret_from_fork_asm+0x1a/0x30
[  623.148217][   T38]  </TASK>
[  623.148247][   T38] Sending NMI from CPU 1 to CPUs 0:
[  623.148304][    C0] NMI backtrace for cpu 0
[  623.148325][    C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  623.148345][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  623.148356][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  623.148420][    C0] Code: e8 ae a8 89 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 0c f3 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a af ef 05 cc 44 89 f9 80 e1 07
[  623.148437][    C0] RSP: 0000:ffffc90000167a28 EFLAGS: 00000202
[  623.148454][    C0] RAX: 1ffffffff336f500 RBX: 00000000000003fd RCX: 0000000000000000
[  623.148467][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000
[  623.148478][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000
[  623.148490][    C0] R10: dffffc0000000000 R11: ffffffff853b7f50 R12: dffffc0000000000
[  623.148505][    C0] R13: 0000000000000000 R14: ffffffff99b7aaa0 R15: 0000000000000000
[  623.148517][    C0] FS:  0000000000000000(0000) GS:ffff888126111000(0000) knlGS:0000000000000000
[  623.148532][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  623.148545][    C0] CR2: 00007f0586ff4b2a CR3: 000000000ddb0000 CR4: 00000000003526f0
[  623.148561][    C0] Call Trace:
[  623.148568][    C0]  <TASK>
[  623.148576][    C0]  wait_for_lsr+0x190/0x300
[  623.148598][    C0]  serial8250_console_write+0x113a/0x1b40
[  623.148625][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  623.148645][    C0]  ? console_flush_one_record+0xfa/0xb50
[  623.148718][    C0]  ? console_flush_one_record+0x472/0xb50
[  623.148743][    C0]  console_flush_one_record+0x642/0xb50
[  623.148815][    C0]  ? console_flush_one_record+0xfa/0xb50
[  623.148843][    C0]  ? __pfx_console_flush_one_record+0x10/0x10
[  623.148867][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  623.148892][    C0]  legacy_kthread_func+0x1b6/0x250
[  623.148917][    C0]  ? __pfx_legacy_kthread_func+0x10/0x10
[  623.148939][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[  623.148987][    C0]  ? __kthread_parkme+0x71/0x1f0
[  623.149004][    C0]  ? __kthread_parkme+0x196/0x1f0
[  623.149024][    C0]  kthread+0x388/0x470
[  623.149044][    C0]  ? __pfx_legacy_kthread_func+0x10/0x10
[  623.149065][    C0]  ? __pfx_kthread+0x10/0x10
[  623.149085][    C0]  ret_from_fork+0x514/0xb70
[  623.149108][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  623.149129][    C0]  ? __switch_to+0xc89/0x1420
[  623.149147][    C0]  ? __pfx_kthread+0x10/0x10
[  623.149167][    C0]  ret_from_fork_asm+0x1a/0x30
[  623.149206][    C0]  </TASK>
[  623.174287][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  623.174349][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  623.174416][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  623.174458][   T38] Call Trace:
[  623.174481][   T38]  <TASK>
[  623.174502][   T38]  vpanic+0x56c/0xa60
[  623.174594][   T38]  ? __pfx___schedule+0x10/0x10
[  623.174660][   T38]  ? __pfx_vpanic+0x10/0x10
[  623.174764][   T38]  panic+0xc5/0xd0
[  623.174837][   T38]  ? __pfx_panic+0x10/0x10
[  623.174912][   T38]  ? preempt_schedule_common+0x82/0xd0
[  623.174965][   T38]  ? preempt_schedule_thunk+0x16/0x40
[  623.175000][   T38]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  623.175038][   T38]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  623.175076][   T38]  watchdog+0x1030/0x1030
[  623.175125][   T38]  ? watchdog+0x1c7/0x1030
[  623.175203][   T38]  kthread+0x388/0x470
[  623.175261][   T38]  ? __pfx_watchdog+0x10/0x10
[  623.175326][   T38]  ? __pfx_kthread+0x10/0x10
[  623.175389][   T38]  ret_from_fork+0x514/0xb70
[  623.175469][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  623.175518][   T38]  ? __switch_to+0xc89/0x1420
[  623.175541][   T38]  ? __pfx_kthread+0x10/0x10
[  623.175567][   T38]  ret_from_fork_asm+0x1a/0x30
[  623.175609][   T38]  </TASK>
[  623.176226][   T38] Kernel Offset: disabled