last executing test programs:

13.21376501s ago: executing program 3 (id=96):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70, 0x49}, {&(0x7f00000006c0)=""/179, 0xfffffffffffffe84}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x403, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x1e1e}, @TCA_TBF_PRATE64={0xc, 0x5, 0xafa8d36186c14c7d}]}}]}, 0x74}}, 0x44080)
connect$netlink(r0, &(0x7f0000000d80)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400050}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18)
r5 = mq_open(&(0x7f0000000000)='-(%\x8d\x00', 0x40, 0x4, &(0x7f0000000080)={0xad, 0x1, 0x2, 0x1})
mq_timedsend(r5, &(0x7f00000000c0)="b7fda6f6199fccefe2d34fc5cf353723929569783da37684ff17a4bb8491d11c42967b1a6932892d0d86043cd7f80352fa5eb0db37af927372f273e5704e40ff5431397f5d588547f4506ee4c2e692191e175eed25304800d43f39e1244a3327dfc67d499671825638a49dcf2a718f6b6290cfa6849d18d7dda6f5b596207451664a509298e294b2138ea4f7e3801370ca698b3cf5d5eb4293e5a9c609858fa3b9bfa1cadc72531dc0923160d0150480855b8f879d2d82eddff083c0546328a0c9f2528e1ecb3387628a147bc8a8984cd4725664bcbae65908b1690402696b50246ea1d283d374c22a2f103605c08f5862665d76ba70dcbbcb2f63be59b20a3183a8c9ec9004b12062f2a2b343a508384cc157ae85a61567b39a5d37c6a2beb7eca061e718e2dbbe29dcf7426b4f54a16247bf62fae9a96b614364727592252197d6480d490d1607aac87ca486f1c3c9f6601d0701e95fc03882aceb41a31a009a0863bc1a53a0bbf7372a5dbfd90c690fa21701bbfde2508895739e89e6aa4955edf67d34a52229962dd9cdd2b3f753a9f7b7747b656325e3bac08dfc4f1e72556fa9281507ad3f48c448f83b5b95a5d720ef54d87967c908d5f6386a8722130f8d33ef5b3a4c2714149fac1e58be8f7769132d80f2d7654003485ce2c11195938f5200a53ee81010797519193db2971c3825a292cb2d88a4d87ddcf068744dc2ba9e825cc687de204c3d5d306cbb475b68f9c73408766c8349b2dc9a423cf42559ab08d3199f90fd0a87d19583dd05ae11d0cf7206c41521caad85e2dabd17b978a987f6d3e2a9448f49075b7df7aa3c31a5d6dc3871157a6df1f1d261be7ac69c5737a7ced8429487477c2079c7ac950481a05f91d7a0d39bf3afee91f64eff8abc8134452af0d68cd14a968c39a5a805c82d2cc719951c0913491b12b34c85e27714cd00ac5775529e83748e693d8ab45dcf595e07817e82a66d426f82756b546985c55acf9f6ea5a521a9faf285a4de33b78c731129ce0ac936cd93a925d9c8fcac1014a4ebf4e5fa2cdcf632dbfe1ecc47d690817cf6b9407f9fa9e16b57bd020215e6e9ed1bd6394ef1f4e9f9a851423cb0dfb367cea30d92c1590d843aadf71793678fd8f698c57b85328f11667cbd67c3b973a742660f893a01d401734fe454a2e7c9ef453200b2457232207e17ee63f8d38fadd8a74ea2ba65ae7a53051e36db8e58d4081c213496da9a0b3c1e4bdcdebc368cdcf2be0e1fdf30b34cf6ec99833b4f007ccbdd5efe43335996bfecb66adeb08c333bff47ddbcaed07bf012123b43cfc35e98ad9a3bdfdba9aca3ea79fe2cc1e5da213de0268e8e0445ed707723f919ffb8a9df66474ed8921782562582a8ab5735e1442e08544448729a5b675daf9da757a7d79beac4e7521c903c7711733988a5b472f77cfb68874ba847e14f83cfca413fb17bda344eb88b4611db7b7cb0f1c3120fa4d61408f886dc419d76fc07c87b6d502cea7fe885ee4edb770a6acdcfdb3ff4a83c96c822a0b97d62a6acca8321b77f29c7ed99f03999f27620cf6f6dc8c20ef01bbac0f5da1d994b2a7fb1affa15057e0f75ac09e34dcd523e51fadb1dbaf9bb77d3cfc064e7261ef67d4d339763c35492fce5dec41dc55fa0475171cb2a50c038bc5bedd13f47e38a4d87f41b7d435ac4d467eb0220c7ef4aac584931508a80fcfa5aa24603db9247d76f556c229e5e59ed3a2409c68ed009fa9aed9aab58cef83d9dd81cd3038b6aad9881e4062cdaba42faec4e3bc8882e7645b9b16bf1f3ae9d106d3593a50a78becbaeda4438e786e538f33ba878a03f57044e4ce7acf3ea5da9b90df5cbd7354b1c1e976834b89ec999acd6ba94ce108826d5d345a31dbf94a5c14deafaeb8caf56c1b5d66cd09e6e72c7416d0154f32828c03c61371ed2a858f0ad3c9b075d09bd8a44011100e504b468461d5a492adde67f5307a8c7d81cfae7b7da6460bacd29f173e3357eee06e4363d214fe9d86a259099a6edfe5566fe592da8716846693796a3cbdd96326bddda04c0a23fb61afb609c691ffdbf734fbaf02057a27da28161665285205b960596c091e0b94f7e634b482a30bd3e89a1861bf560110b58fb16b8780a57112b963397098a6e6a1a3accbde44d0996691275dd614e04cbfe3aa3525f052dd38946bc10200da43639a3a5d018245e7514ea7ee1ab209b9a5956bdf72c4ef342c2efc13c641b4e80e0a35100db963d0ce3110c473222f17eae2f7e7dabe08de2a7e7c1528a620b5fc637fb7627cee8cc07f6bd70884e50d7c3f26900eedc11532060e436bf1717830dfa819d53a5e814edfc3b4588bad14632a662eda3349346c1a2e93593526ecb879d0530688b7215b72884efba84f695a2ed464819d0b4ebef5638f21f1f9138b6d7ff59b2bcf851f261b7f79d0bccbe68c9f575a2e82e736c7c3207be7395f4787e9f1c5f0efcf32b57697ee6b0d6379db1fbaf0b7ec2ba236865a4e15401595dcac641093842146d186772deed15bcf10f5549003e11defd541496a55098b024476bf3dcdf02272d2c8cc0ebb2557ba58f0fc76e777e4cb038f3446f7b29963447f0694ffa4631df9a0b9440f085fc186287572cb5517f06cf5f470fba5167c367e0e96f9e8f2af2141d55f894daca2a741240ae0e54ce04fb3166e8298ea7dc113f51ade1c66efdd96eda02974d629f2b91e9d10c44b1ae9ad2f6d956ca596d0779a791c1f327eb82efd3307fde1d214953db9c382ae1877e69f1f00e781ebe632aa87f37a25d44df04748e277c9bf5401b006bb2a1fc055ba7d452e736aaa5e81dfd1e69c04b6d54340c6c1f2d631d69f28252defc03d761948bcdd088415d2d4ba29c0ad429b87d960e15499b6a90f46e921e9f6baef1471d27151da32fb751abbe69fefe852db74434ed48ce3b3286adbd79fd3b992dc3ec1ea0a501d3dff1d73af82cb607ed3754e8a5818782924bff6873a70c71c71232151eaf5aa036e51f6ca5354bba917cacc09513864fa267b93fef9d721871af243d629ccb146dd0452a650d8468b882dcdd8684c4e8fd99086b9fa124895ebe16d2f550172e05f02b6d800e1827c3bae10418cad57989eb8525881ea39b0fadd57a363cdea4551dbf7aa9850432d745eef24040e63b1027631884918bc2be2816c48ca5aa899677de6fa653c78ff841a1308f232e685107d5c031b1af81ed5689c75fdaeab501239a5a0ec4f3b32c5c504f10c3662b2ea476657251f6c37ff16fb62da78151418f4d204f16f15e0fa93fba33e2dc0cf9adc74da698716b015fbf03a8833c47bad1a20ccc75f066f09642d3ce76dd9f85daa1e3b9bbe6d97053db353da6dae54d588c08a1b6bb798a2f851102336b4caf8b2f20aab714490ea61352112ec4ab960d5b961ff2c59f44fe6f10efb71771a47d97b4a2e35934a1acc74b59b01bf92fee025865e5d203246a5256c27b4d30908d485822d18d1ff72201f0bf693298e069d5f4c3174996af2c02ce0f11060919675d6d89fd53092d09abd71ccfe8c24d507811fa4b00889c2c03185cda084ab52860af7beb057529cb377a86597d9b70cbae668225d99b04dd2ab9463df80cfe54fe369338a67a32964e415e88e2248e594cf59c14af3aa38465feddaa4277925d90b8d3f112f7b9b77e91a2698d81f416aae6b667e3debf366c2b22d5e65ab0ad54f4eac878c8c784220fa456b83accd07d3dee8de49f560661f07ed9116bd9bbebaaa80c64acc1a7579a2ea663239e5a4a981ea93c410153db019ae06af63143cbd4935a8bf263311c10b6f18af6637cb790e158eb476bf5956dcce133ad442f5675ff71579a16567f71061d1b8316b0f9ed8e6e8b1e9ca4e3970445b9d4009aa9c5913530bb46d469656ada2574d95f92c37b0d660c8b09e6325ce0b8e55c55bb17b21ed55e46b2fff96973080e3be195e1bd9412c82f0ad050455cd20687f5f0368525c0e849da5861f525e24e29becfa8bc986a7dbf21888f8244c4f34bf272d18728d76d63b948f2a48834d9ee70cd370c9a800b385ae70db5d1d1de88c9d7dc9766e9d13548fdcb060c8be77d4b0862b9dd7ca52518d332d30a81e6de4335ef8fe4516390c6bc8f98ff2a53fb26dc3ac1996a745500628a7c0bb25cd066a8f1308f143da1c0568384d62724c8d450974a84c07b88a505ea87949010d10460704bc8325b9b462bd213a7c68006d138f72bbbebe1c99b6882a57269cb0f45d0a4a4a2b89ac5aff6f4c5c9f14fe25b30c9b756d574b9b6e5591c824ccaf1701334a6d54208b853553fe377d9e8d35eae21fc8422f9c89909c274b6a4999c8339b8b24bb409eb31fb8fb978f4b36f5deab44ecfbb70144ba86772fc2efcb5872c58a610a197876bf9a45f6a061143c4036c1d87b0739a67d2a5cdacd2e9014f204822110fa9d770d56e66326d42aa373059017002eeaf60024409ff198a3c7c829c9a6058ae3b745931bab62f10402b38d2043e1ef4e8f6c49939db76bdb08cdfaf2bd490242cd39205f3098ca6727a4c5f59146ed3740dec78596a31d8d21cc93a60c34d88ffabb5a9413fcf5de04f424efe2f678961fc37a9ac2513a03bf17ce0049067ac8920369728089508255adeef4de0e3b9eda0b090d42fc02393ae2fc423424938a6d5c69b4aa779af46a901f48c911cadfe4dc0212016241e172ad4ae93531e3850480a10df903aba4a9671c7263e6a50adcec800d5734df44e19237cea7e8a01447eb113419870075b474aa7660d1c2da16d9e5585174f6266fedbb58af2e5f72699603b18d5bb0ecb9630dddd35da3fb4a7c01aca3938f5379a6eb57ec2594bc807c1f869ec4d42480b253e3405dd18d0c303db757ea97a03b2fcbffbdbac82ad31e968226db4652e7ec3ec49ace0c97f14e047d7c5e8156f4957e4c542e6a41c72d9f385e452ae23da7e8218dc6872a0d3dd89b4c226aea0163ed1324f93f84f1d8bd0a8d7780ec7172c3d7a6e05bdadecaab3a2da64656ece4b0e7e621e857a43233467fc5488f7e3457a48e4bed2deabc04d30dbb74bb3a61a4cbdbfecb7f42920d4c9e7962bf04f2200697e35e7d4b8caaf82485b49ff1a3a156aded82f00a4c38ec9c6c22f507fe2dad3bff343b829d7ce958e6261786f7cf07ca815d580f6ac81cc5f0023c11420d83aacecae90305bd5f1bd6f5792054ee328913fc570b0367992bfeda852214fbc843a326d97716f34f497e803ca7563cb4ed69d6483c96863467c8fec3f071e1a47ab4f46e97fd6b615f457b5b44ec7e6fe5956b739548247794407924d9fa25954c83196051fb6e3f29e6f8e2ba57619e2708ba3e7fa04973fe3d366d9d9e9431051437cef14b7c5ab1f94299aa6c658120b9231913ff29ebd2f81d7e0bb2da523ed35929266bc7c9f98d426a4c01ea63d956cbd7d9354018cff38989af5f5187c24484db42cd2ccf9dc87d21c6c302691d12bbf080a4ff3b8175081a3dd0a88f64d98c6cfb03498bd8ae956dd8043061d1cf899197ec522750e3da90b79640981995514234118cd97f17d184e96c3b32c58e53cf79a403a652b77b9ed03cd752293e2ed9438b00becdfb43bc1759e393a0e3c77ec4884b0cc659f444b141cc9d96b043ed2221eee7b96dff6eb1bbda90c2da275df49bbef8cd003234be52ba41cd8980a5ef96f4d81b2393f2dbb55211bad13fa9dc61720d040e1b79a50e3ab1ec0885b67ead67a16e85dd619d699e41fbcd3f1add97dd9326084c2a75e931004f2d412457187", 0x1000, 0x100000000, &(0x7f00000010c0)={0x0, 0x989680})

12.116728725s ago: executing program 3 (id=102):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
connect$inet6(r1, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000005700)=""/185, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002400)={'wlan0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4080)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeedb1000})

11.397546331s ago: executing program 3 (id=104):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x608}}, './file2\x00'})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}})
setpgid(0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r3, r0, 0x80000)
unshare(0x24040400)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x260}], 0x1, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204080, 0x4)
creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

10.459166467s ago: executing program 3 (id=107):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f00000006c0)='.\x00', 0xaa)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeca}, 0x94)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ptrace(0x10, r3)
wait4(r3, 0x0, 0x0, &(0x7f000009dfc0))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
dup3(r1, r2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000709c3120e80401669b81010203010902120001010000000904"], 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @random="7c9754b34afc"}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10)
ioctl$KVM_CAP_HYPERV_VP_INDEX(r0, 0x4068aea3, &(0x7f0000000040))

10.0839479s ago: executing program 4 (id=109):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f00000002800000129487a71fe2c251244961f2a74a", 0x3a}], 0x1}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0)
syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r4, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001b00)=""/4089, 0xff9}], 0x1}, 0x40005}], 0x1, 0x100, 0x0)

9.733801805s ago: executing program 1 (id=110):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0xe)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
syz_io_uring_complete(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00000000000000"], 0x50)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d})

9.489342955s ago: executing program 4 (id=112):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70, 0x49}, {&(0x7f00000006c0)=""/179, 0xfffffffffffffe84}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x74, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x403, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x1e1e}, @TCA_TBF_PRATE64={0xc, 0x5, 0xafa8d36186c14c7d}]}}]}, 0x74}}, 0x44080)
connect$netlink(r0, &(0x7f0000000d80)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400050}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x18)
r5 = mq_open(&(0x7f0000000000)='-(%\x8d\x00', 0x40, 0x4, &(0x7f0000000080)={0xad, 0x1, 0x2, 0x1})
mq_timedsend(r5, &(0x7f00000000c0)="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", 0x1000, 0x100000000, &(0x7f00000010c0)={0x0, 0x989680})

9.281973397s ago: executing program 2 (id=113):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ppoll(&(0x7f0000000140)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}])
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000000}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x22020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x12d4, 0x42, 0x200, 0x70bd2c, 0x25dfdbfc, {0x8}, [@generic="cb80cb478f65a76d1f31d247eb9714d61867d43fd12cf200827b427889fd55d50b75e1f6ecdfded3ec848265e936406eca0483fb6204e387247bac9930145623f990181614ab8882df2ef95faaa73fdaee2df2a41c4055db4d632f6800f406444aa2d4f714d4c2effb2264be5257897e1c62948a3eea27fe6f06aff6e0b724a08b444938b2691e2aaebc10febb6d13c88736ace779d410de1404d1421e9c5c1b482dc1d74b66a60510edc8ea1869d38950956f952f88860f653348202d9cf2a45363a27a574ca7d519df1373e5116545fb801b3809d48df91417058095c0a510ad95e7c27ba81bab7dc9fe3b0f502cba8b0e943764d46b75d3a32181", @nested={0x8, 0x103, 0x0, 0x1, [@nested={0x4, 0x119}]}, @generic="e5fde16135cd0be5bbece7583c9ad17fbf0e3e6a0dc2172ffb295f1a8996be5ebd6230c166c78a2eb897bba258abb337c60257c53c613a24e7a61a1445c0ad4a3521336cd1e24e8f39e5d6f261d82f3d115d09007fb385efc236f71d19f6cebc62375e7aed3aacd885270efd2134c5713fbdb9165ceb3f5a6f4d8a0066a211b34212ddbe416b0cdfe39f93cbdd5cf3b00125388cec0325d9cc2d3d57b20dc69660c443b61df8850355b83559a4c9", @typed={0xc, 0xf4, 0x0, 0x0, @u64}, @typed={0x16, 0x14, 0x0, 0x0, @str='/dev/input/event#\x00'}, @nested={0x10e7, 0xb4, 0x0, 0x1, [@generic="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", @nested={0x4, 0x141}, @nested={0x4, 0xd6}, @generic="b2e316d9985bc6f613dee60f26d21020602c5f49351ab7d1f6d2e83307e16cf262b4a3c734cea9c66126dc55cc1726c3a40696c06891f94b39bb36f6e0b1620fbddcffb0d1461d9da6d835444fa388d25c04e68256610dc6ac94f188584c46060709557b4ff72b04317b74df054ae295d5f66243c56a7935e29e6463234b40a4be5d99ce527b557be53289e2e71271d3f407f73688769d3534e4a7214e2093e99d650df5298518cbc3cd1db1f5dad802401e20cf771085a9226f56e601c42d34af793a574ff2ae88b5aa0c050d32d06a397b1afd599599", @nested={0x4, 0xc5}]}]}, 0x12d4}, 0x1, 0x0, 0x0, 0x8d}, 0x400c841)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778)
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0xad3}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x3eff3e70}, @uexit={0x0, 0x18}, @wr_crn={0x67, 0x20, {0x8, 0x2cb}}, @out_dx={0x6a, 0x28, {0x4250, 0x5}}, @code={0xa, 0x67, {"430f2ea2b48a8f7b3666460f3882570666baa10066b8246766ef66baf80cb80924e185ef66bafc0cec66b840000f00d0c482059f9cfd99000000c4211d679107fc00002e4283afcc05694a92c4e17ae6d266ba2100ec"}}, @in_dx={0x69, 0x20, {0xedab, 0x2}}, @rdmsr={0x66, 0x18, {0xbaf}}, @uexit={0x0, 0x18, 0x6}, @in_dx={0x69, 0x20, {0xc703, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x25, 0x3, 0x9, 0x7}}, @wrmsr={0x65, 0x20, {0x9b9, 0x5}}, @enable_nested={0x12c, 0x18}, @set_irq_handler={0xc8, 0x20, {0x6a, 0x1}}, @wr_crn={0x67, 0x20, {0x4, 0x4c}}], 0x22f})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

9.181676834s ago: executing program 4 (id=114):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x800, 0x4)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
unshare(0x2c020400)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x5}, 0x4)
setsockopt$packet_int(r2, 0x107, 0x16, 0x0, 0x0)
setreuid(0x0, 0xee00)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0xc, &(0x7f0000000000)=0x5402, 0x4)
bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r5, 0x4068aea3, &(0x7f00000002c0))
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000180)={@empty, 0x1, 0x0, 0x10, 0x0, [{@loopback}]}})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000001c0)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x17, 0xd, 0x35}, 0x2c)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)

7.930922105s ago: executing program 1 (id=115):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x40000)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) (fail_nth: 1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x0, 0xfffffe01, 0x9, 0x400000000008, 0x8, 0x200001515, 0xb, 0x10000, 0x0, 0x100000000001, 0x5b0, 0x4})

7.755975978s ago: executing program 0 (id=116):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0xe)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
syz_io_uring_complete(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000"], 0x50)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d})

7.534011398s ago: executing program 2 (id=117):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x608}}, './file2\x00'})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}})
setpgid(0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r3, r0, 0x80000)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r4, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{r4, 0x260}], 0x1, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204080, 0x4)
creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6.643186351s ago: executing program 3 (id=118):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000140)={0x20004, <r3=>r1})
r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={<r5=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r6})
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r8=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x7ffffffe, 0xffff, 0x2000, 0x1ff, 0x1})

6.174570238s ago: executing program 1 (id=119):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000040), &(0x7f0000002000)=0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x0, &(0x7f00000001c0)})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70fd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0xc800)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000480)=@keyring={'key_or_keyring:', r3})
getresuid(0x0, 0x0, 0x0)
r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
read(r5, &(0x7f00000001c0)=""/220, 0xdc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c00028006000100000000"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r9 = socket$kcm(0x2, 0xa, 0x2)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2, {}, {}, @raw32}], 0x1c)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f0000000300)={@void, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x7ff, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x4e24, 0x17c1, 0x8}}}}}}, 0x32)
write$cgroup_pressure(r4, &(0x7f0000000100)={'full', 0x20, 0x200, 0x20, 0x33}, 0x2f)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)

5.989794895s ago: executing program 0 (id=120):
syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x1, 0x199}, 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2d, 0x9b, 0x98, 0x10, 0x403, 0xfa06, 0xff64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x10, 0x80, 0x4f, [{{0x9, 0x4, 0xe4, 0x5, 0x0, 0x89, 0x9e, 0xa5, 0xf}}]}}]}}, 0x0)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[])

5.855036453s ago: executing program 3 (id=121):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0)

5.292807083s ago: executing program 4 (id=122):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000005c0)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800)
epoll_create1(0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

5.222664327s ago: executing program 2 (id=123):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x608}}, './file2\x00'})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}})
setpgid(0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r0, 0x80000)
unshare(0x24040400)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(0xffffffffffffffff, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x260}], 0x1, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204080, 0x4)
creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c000}, 0x20004004)

5.001033128s ago: executing program 1 (id=124):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x2, 0x7ffe}, 0xc)
bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240", @ANYRES64], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)

4.812511211s ago: executing program 0 (id=125):
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r2, 0x455d, 0x7721, 0x12, 0x0, 0x4a)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x1})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$tipc(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000540)='D', 0x1}], 0x2, 0x0, 0x0, 0x8040}, 0x0)

4.606120913s ago: executing program 1 (id=126):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x4000001)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='virtio_transport_alloc_pkt\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)

3.222347222s ago: executing program 4 (id=127):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r1 = syz_open_pts(r0, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0xfffffdfd}], 0x1, 0x0, 0x0)
sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x801)
r3 = dup3(r1, r0, 0x0)
read$FUSE(r3, &(0x7f0000004640)={0x2020}, 0x2020)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2d, 0x9b, 0x98, 0x10, 0x403, 0xfa06, 0xff64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x10, 0x80, 0x4f, [{{0x9, 0x4, 0xe4, 0x5, 0x0, 0x89, 0x9e, 0xa5, 0xf}}]}}]}}, 0x0)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[])

3.136940913s ago: executing program 2 (id=128):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)

2.73783964s ago: executing program 2 (id=129):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0xe)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
syz_io_uring_complete(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d})

2.658657042s ago: executing program 0 (id=130):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000001000000fe8000000000000000000000000000bbac1414bb0000000000000000000000000000040010000000020000"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) (fail_nth: 5)

2.343521193s ago: executing program 0 (id=131):
pipe(&(0x7f00000001c0)) (async)
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x43}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4048884)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x9, 0x0) (async)
io_uring_setup(0x9, 0x0)
r2 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xa8bf, 0xc000, 0x7, 0x20002f7})
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) (async)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async)
getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0)

750.660159ms ago: executing program 2 (id=132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000036000701fcffffff00008100017c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
accept4(0xffffffffffffffff, &(0x7f0000001040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f00000010c0)=0x80, 0x80800)
syz_genetlink_get_family_id$ethtool(0x0, r0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f363b68090890e0878f0e1ac6e7049b3646959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc9d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec2c0911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8de7f4b05f60cea0da7710ac00008b0000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750a01ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2beffffffff0000000084b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c2509e5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50476ff0f00005957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78c78cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c2715500b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017eef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f48451ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22dc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79df8248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e5029bea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee721cfb3f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2, 0x0, 0x36}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00')
fanotify_init(0x20, 0x400)
close_range(r6, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

476.866543ms ago: executing program 4 (id=133):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r2=>r1, {0x608}}, './file2\x00'})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}})
setpgid(0xffffffffffffffff, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r3, r0, 0x80000)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r4, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f00000000c0)=[{r4, 0x260}], 0x1, 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x204080, 0x4)
creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

410.940764ms ago: executing program 1 (id=134):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x1)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="f78d3aff4ccae8c034c41634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2", 0x88}], 0x3}], 0x1, 0x40800)
readv(r7, &(0x7f0000001b80)=[{&(0x7f00000002c0)=""/5, 0x5}, {&(0x7f0000001a00)=""/222, 0xde}], 0x2)
shutdown(r5, 0x1)

0s ago: executing program 0 (id=135):
syz_io_uring_setup(0x10f, 0x0, 0x0, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2d, 0x9b, 0x98, 0x10, 0x403, 0xfa06, 0xff64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x10, 0x80, 0x4f, [{{0x9, 0x4, 0xe4, 0x5, 0x0, 0x89, 0x9e, 0xa5, 0xf}}]}}]}}, 0x0)
fsopen(&(0x7f0000000000)='nfs\x00', 0x0)
socket$netlink(0x10, 0x3, 0x0)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts.
[   83.179219][ T5787] cgroup: Unknown subsys name 'net'
[   83.410071][ T5787] cgroup: Unknown subsys name 'cpuset'
[   83.455109][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   85.361339][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.989488][   T10] cfg80211: failed to load regulatory.db
[   87.950875][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.956651][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.961603][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.962983][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.964902][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.966587][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.968448][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.969553][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.016651][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.018012][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   88.026681][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.027331][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.028833][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   88.037491][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.038371][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.049873][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.100947][   T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.102709][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.107715][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.109573][   T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.135664][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.152413][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.153444][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.176741][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.181420][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.076545][ T5802] chnl_net:caif_netlink_parms(): no params data found
[   89.082162][ T5800] chnl_net:caif_netlink_parms(): no params data found
[   89.462942][ T5799] chnl_net:caif_netlink_parms(): no params data found
[   89.476694][ T5801] chnl_net:caif_netlink_parms(): no params data found
[   89.481276][ T5803] chnl_net:caif_netlink_parms(): no params data found
[   90.036020][ T5805] Bluetooth: hci3: command tx timeout
[   90.095949][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.097219][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.097840][ T5802] bridge_slave_0: entered allmulticast mode
[   90.099427][ T5802] bridge_slave_0: entered promiscuous mode
[   90.105341][ T5805] Bluetooth: hci2: command tx timeout
[   90.152401][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.152490][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.152605][ T5800] bridge_slave_0: entered allmulticast mode
[   90.153933][ T5800] bridge_slave_0: entered promiscuous mode
[   90.159123][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.159256][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.159419][ T5802] bridge_slave_1: entered allmulticast mode
[   90.162293][ T5802] bridge_slave_1: entered promiscuous mode
[   90.188032][ T5805] Bluetooth: hci4: command tx timeout
[   90.188039][ T5807] Bluetooth: hci0: command tx timeout
[   90.241911][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.242055][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.242192][ T5800] bridge_slave_1: entered allmulticast mode
[   90.243548][ T5800] bridge_slave_1: entered promiscuous mode
[   90.267570][ T5805] Bluetooth: hci1: command tx timeout
[   90.749389][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.009070][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.011667][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.011869][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.011997][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.012084][ T5799] bridge_slave_0: entered allmulticast mode
[   91.013399][ T5799] bridge_slave_0: entered promiscuous mode
[   91.062969][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.063089][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.063279][ T5801] bridge_slave_0: entered allmulticast mode
[   91.067355][ T5801] bridge_slave_0: entered promiscuous mode
[   91.069722][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.069860][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.070027][ T5803] bridge_slave_0: entered allmulticast mode
[   91.075555][ T5803] bridge_slave_0: entered promiscuous mode
[   91.086298][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.155622][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.155719][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.155844][ T5799] bridge_slave_1: entered allmulticast mode
[   91.157628][ T5799] bridge_slave_1: entered promiscuous mode
[   91.159105][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.159242][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.159391][ T5801] bridge_slave_1: entered allmulticast mode
[   91.160787][ T5801] bridge_slave_1: entered promiscuous mode
[   91.161964][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.162074][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.162186][ T5803] bridge_slave_1: entered allmulticast mode
[   91.164037][ T5803] bridge_slave_1: entered promiscuous mode
[   91.818297][ T5802] team0: Port device team_slave_0 added
[   91.997338][ T5800] team0: Port device team_slave_0 added
[   91.999691][ T5802] team0: Port device team_slave_1 added
[   92.002705][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.007611][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.011571][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.016415][ T5800] team0: Port device team_slave_1 added
[   92.088276][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.090632][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.092746][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.114582][ T5805] Bluetooth: hci3: command tx timeout
[   92.184631][ T5805] Bluetooth: hci2: command tx timeout
[   92.264654][ T5807] Bluetooth: hci0: command tx timeout
[   92.264744][ T5805] Bluetooth: hci4: command tx timeout
[   92.344656][ T5805] Bluetooth: hci1: command tx timeout
[   92.536580][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.536598][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.536618][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.986377][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.986397][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.986424][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.987855][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.987869][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.987895][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.990640][ T5799] team0: Port device team_slave_0 added
[   92.993769][ T5801] team0: Port device team_slave_0 added
[   92.996776][ T5803] team0: Port device team_slave_0 added
[   92.997644][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.997656][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.997679][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.020841][ T5799] team0: Port device team_slave_1 added
[   93.023616][ T5803] team0: Port device team_slave_1 added
[   93.269042][ T5801] team0: Port device team_slave_1 added
[   93.567305][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.567325][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.567342][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.568774][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.568791][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.568816][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.006414][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.006433][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.006460][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.007645][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.007658][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.007672][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.014354][ T5802] hsr_slave_0: entered promiscuous mode
[   94.097465][ T5802] hsr_slave_1: entered promiscuous mode
[   94.186481][ T5805] Bluetooth: hci3: command tx timeout
[   94.198546][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.198562][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.198585][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.242322][ T5800] hsr_slave_0: entered promiscuous mode
[   94.243731][ T5800] hsr_slave_1: entered promiscuous mode
[   94.256240][ T5800] debugfs: 'hsr0' already exists in 'hsr'
[   94.256357][ T5800] Cannot create hsr debugfs directory
[   94.258150][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.258163][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   94.258185][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.267199][ T5805] Bluetooth: hci2: command tx timeout
[   94.345007][ T5807] Bluetooth: hci0: command tx timeout
[   94.345087][ T5805] Bluetooth: hci4: command tx timeout
[   94.424672][ T5805] Bluetooth: hci1: command tx timeout
[   94.940909][ T5803] hsr_slave_0: entered promiscuous mode
[   94.941826][ T5803] hsr_slave_1: entered promiscuous mode
[   94.942509][ T5803] debugfs: 'hsr0' already exists in 'hsr'
[   94.942531][ T5803] Cannot create hsr debugfs directory
[   94.980513][ T5799] hsr_slave_0: entered promiscuous mode
[   94.981552][ T5799] hsr_slave_1: entered promiscuous mode
[   94.982141][ T5799] debugfs: 'hsr0' already exists in 'hsr'
[   94.982157][ T5799] Cannot create hsr debugfs directory
[   95.195627][ T5801] hsr_slave_0: entered promiscuous mode
[   95.196479][ T5801] hsr_slave_1: entered promiscuous mode
[   95.196978][ T5801] debugfs: 'hsr0' already exists in 'hsr'
[   95.196996][ T5801] Cannot create hsr debugfs directory
[   96.265375][ T5805] Bluetooth: hci3: command tx timeout
[   96.344550][ T5805] Bluetooth: hci2: command tx timeout
[   96.376510][ T5802] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.424088][ T5802] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.434760][ T5807] Bluetooth: hci0: command tx timeout
[   96.434814][ T5805] Bluetooth: hci4: command tx timeout
[   96.470886][ T5802] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.504703][ T5805] Bluetooth: hci1: command tx timeout
[   96.524883][ T5802] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.658272][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.694111][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.729994][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.771256][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.913336][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.950155][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.980470][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.039481][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.173071][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   97.218968][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   97.257139][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   97.304379][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   97.439665][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   97.484338][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.491992][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   97.532443][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   97.554147][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.658844][ T5802] 8021q: adding VLAN 0 to HW filter on device team0
[   97.676870][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.707286][ T2247] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.707763][ T2247] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.742775][ T1303] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.743029][ T1303] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.796120][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[   97.831292][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.831476][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.859772][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.909382][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.909517][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.994898][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[   98.029052][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.031544][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.031659][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.095545][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.098129][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.203762][ T5801] 8021q: adding VLAN 0 to HW filter on device team0
[   98.249128][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.271053][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.271292][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.358985][ T2130] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.359197][ T2130] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.442592][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[   98.488770][ T2247] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.488917][ T2247] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.561028][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.561191][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.612211][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.874002][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.089025][ T5802] veth0_vlan: entered promiscuous mode
[   99.152219][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.156337][ T5802] veth1_vlan: entered promiscuous mode
[   99.343153][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.425527][ T5802] veth0_macvtap: entered promiscuous mode
[   99.481102][ T5802] veth1_macvtap: entered promiscuous mode
[   99.536752][ T5803] veth0_vlan: entered promiscuous mode
[   99.571808][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.592101][ T5803] veth1_vlan: entered promiscuous mode
[   99.603053][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.646882][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.709928][ T5801] veth0_vlan: entered promiscuous mode
[   99.710740][ T1303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.716032][ T1303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.739324][ T1303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.744358][ T1303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.782720][ T5801] veth1_vlan: entered promiscuous mode
[   99.932008][ T5803] veth0_macvtap: entered promiscuous mode
[   99.934134][ T5800] veth0_vlan: entered promiscuous mode
[  100.022302][ T5799] veth0_vlan: entered promiscuous mode
[  100.036074][ T5803] veth1_macvtap: entered promiscuous mode
[  100.107323][ T5800] veth1_vlan: entered promiscuous mode
[  100.147237][ T5799] veth1_vlan: entered promiscuous mode
[  100.153864][ T1423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.153887][ T1423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.212337][ T5801] veth0_macvtap: entered promiscuous mode
[  100.231007][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.279910][ T5801] veth1_macvtap: entered promiscuous mode
[  100.283693][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.301365][ T2247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.301380][ T2247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.338609][ T1423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.366261][ T1423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.375141][ T1423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.387569][ T1423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.417986][ T5800] veth0_macvtap: entered promiscuous mode
[  100.421423][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.480452][ T5799] veth0_macvtap: entered promiscuous mode
[  100.493031][ T5800] veth1_macvtap: entered promiscuous mode
[  100.504114][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.563176][ T5799] veth1_macvtap: entered promiscuous mode
[  100.646902][ T1423] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.696464][ T1423] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.734904][ T1423] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.749232][ T3491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.773064][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.980266][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[  102.063819][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.338332][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.428664][ T3491] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.450943][ T3491] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.454689][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.454708][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.499718][ T3491] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.521192][ T3491] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.539492][ T3491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.572852][ T3491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.599593][ T3491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.627520][   T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.679405][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.679429][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.785962][   T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  102.820055][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.820076][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.945804][   T49] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  102.945828][   T49] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  102.945842][   T49] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  102.959181][   T49] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  102.959209][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.959226][   T49] usb 2-1: Product: syz
[  102.959239][   T49] usb 2-1: Manufacturer: syz
[  102.959252][   T49] usb 2-1: SerialNumber: syz
[  103.008594][   T49] usb 2-1: config 0 descriptor??
[  103.015695][ T5926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  103.015950][ T5926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  103.058809][  T815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.058835][  T815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.073769][   T49] usb 2-1: ucan: probing device on interface #0
[  103.374787][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.375108][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.542352][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.542374][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.689846][  T815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.689871][  T815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.260637][ T5934] capability: warning: `syz.2.8' uses deprecated v2 capabilities in a way that may be insecure
[  104.296453][  T815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.296473][  T815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.337991][   T49] ucan 2-1:0.0 can0: registered device
[  104.345186][   T49] ucan 2-1:0.0 can0: firmware string: unknown
[  104.430983][   T49] usb 2-1: USB disconnect, device number 2
[  105.094582][ T5788] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  105.254695][ T5788] usb 4-1: Using ep0 maxpacket: 32
[  105.257409][ T5788] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9
[  105.257446][ T5788] usb 4-1: config 1 interface 0 has no altsetting 0
[  105.260628][ T5788] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40
[  105.260656][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.260676][ T5788] usb 4-1: Product: syz
[  105.260690][ T5788] usb 4-1: Manufacturer: syz
[  105.260705][ T5788] usb 4-1: SerialNumber: syz
[  105.625436][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.655575][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  107.318853][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  107.469483][ T5788] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5
[  107.492429][ T5889] usb 2-1: no configurations
[  107.492451][ T5889] usb 2-1: can't read configurations, error -22
[  107.635335][ T5889] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  107.657806][    C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1
[  107.829659][ T5788] usb 4-1: USB disconnect, device number 2
[  107.840781][ T5889] usb 2-1: no configurations
[  107.840803][ T5889] usb 2-1: can't read configurations, error -22
[  107.859680][ T5889] usb usb2-port1: attempt power cycle
[  108.107756][ T5987] FAULT_INJECTION: forcing a failure.
[  108.107756][ T5987] name failslab, interval 1, probability 0, space 0, times 1
[  108.107795][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  108.107819][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  108.107831][ T5987] Call Trace:
[  108.107839][ T5987]  <TASK>
[  108.107848][ T5987]  dump_stack_lvl+0x189/0x250
[  108.107878][ T5987]  ? __pfx____ratelimit+0x10/0x10
[  108.107903][ T5987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.107925][ T5987]  ? __pfx__printk+0x10/0x10
[  108.107941][ T5987]  ? __kasan_slab_alloc+0x6c/0x80
[  108.107985][ T5987]  ? __lock_acquire+0x6b6/0x2cf0
[  108.108027][ T5987]  should_fail_ex+0x46c/0x600
[  108.108058][ T5987]  ? skb_clone+0x212/0x3a0
[  108.108083][ T5987]  should_failslab+0xa8/0x100
[  108.108103][ T5987]  ? skb_clone+0x212/0x3a0
[  108.108125][ T5987]  kmem_cache_alloc_noprof+0x84/0x6c0
[  108.108150][ T5987]  ? __netlink_lookup+0xbd/0x8a0
[  108.108186][ T5987]  skb_clone+0x212/0x3a0
[  108.108215][ T5987]  __netlink_deliver_tap+0x404/0x850
[  108.108253][ T5987]  ? netlink_deliver_tap+0x2e/0x1b0
[  108.108279][ T5987]  netlink_deliver_tap+0x19c/0x1b0
[  108.108306][ T5987]  netlink_unicast+0x811/0xa10
[  108.108338][ T5987]  ? __pfx_netlink_unicast+0x10/0x10
[  108.108363][ T5987]  ? netlink_sendmsg+0x642/0xb30
[  108.108387][ T5987]  ? skb_put+0x11b/0x210
[  108.108414][ T5987]  netlink_sendmsg+0x805/0xb30
[  108.108451][ T5987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.108487][ T5987]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  108.108513][ T5987]  ? __pfx_netlink_sendmsg+0x10/0x10
[  108.108540][ T5987]  __sock_sendmsg+0x21c/0x270
[  108.108573][ T5987]  ____sys_sendmsg+0x508/0x810
[  108.108604][ T5987]  ? __pfx_____sys_sendmsg+0x10/0x10
[  108.108640][ T5987]  ? import_iovec+0x74/0xa0
[  108.108662][ T5987]  ___sys_sendmsg+0x21f/0x2a0
[  108.108690][ T5987]  ? __pfx____sys_sendmsg+0x10/0x10
[  108.108755][ T5987]  ? __fget_files+0x2a/0x420
[  108.108773][ T5987]  ? __fget_files+0x3a6/0x420
[  108.108806][ T5987]  __x64_sys_sendmsg+0x1a1/0x260
[  108.108832][ T5987]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  108.108866][ T5987]  ? __pfx_ksys_write+0x10/0x10
[  108.108894][ T5987]  ? do_syscall_64+0xbe/0xf80
[  108.108915][ T5987]  do_syscall_64+0xfa/0xf80
[  108.108933][ T5987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.108953][ T5987]  ? clear_bhb_loop+0x60/0xb0
[  108.109036][ T5987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.109055][ T5987] RIP: 0033:0x7f16087bf749
[  108.109075][ T5987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  108.109092][ T5987] RSP: 002b:00007f1606a1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  108.109115][ T5987] RAX: ffffffffffffffda RBX: 00007f1608a15fa0 RCX: 00007f16087bf749
[  108.109130][ T5987] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003
[  108.109142][ T5987] RBP: 00007f1606a1e090 R08: 0000000000000000 R09: 0000000000000000
[  108.109155][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.109167][ T5987] R13: 00007f1608a16038 R14: 00007f1608a15fa0 R15: 00007fff916e8238
[  108.109203][ T5987]  </TASK>
[  108.122600][ T5817] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  108.135069][ T5987] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20'.
[  108.301556][ T5788] appletouch 4-1:1.0: input: appletouch disconnected
[  108.317670][ T5817] usb 5-1: Using ep0 maxpacket: 32
[  108.319912][ T5817] usb 5-1: config 5 has an invalid interface number: 76 but max is 1
[  108.319937][ T5817] usb 5-1: config 5 has an invalid interface number: 130 but max is 1
[  108.319954][ T5817] usb 5-1: config 5 has no interface number 0
[  108.319969][ T5817] usb 5-1: config 5 has no interface number 1
[  108.320025][ T5817] usb 5-1: config 5 interface 76 altsetting 127 has an invalid endpoint descriptor of length 6, skipping
[  108.320054][ T5817] usb 5-1: config 5 interface 76 altsetting 127 endpoint 0x7 has invalid wMaxPacketSize 0
[  108.320074][ T5817] usb 5-1: config 5 interface 76 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[  108.320094][ T5817] usb 5-1: config 5 interface 76 altsetting 127 has a duplicate endpoint with address 0x7, skipping
[  108.320115][ T5817] usb 5-1: config 5 interface 76 altsetting 127 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  108.320138][ T5817] usb 5-1: config 5 interface 76 altsetting 127 bulk endpoint 0x4 has invalid maxpacket 16
[  108.320159][ T5817] usb 5-1: config 5 interface 76 altsetting 127 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  108.320183][ T5817] usb 5-1: config 5 interface 76 has no altsetting 0
[  108.320199][ T5817] usb 5-1: config 5 interface 130 has no altsetting 0
[  108.324622][ T5889] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  108.379967][ T5817] usb 5-1: New USB device found, idVendor=12d1, idProduct=6100, bcdDevice=7f.44
[  108.379996][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.380014][ T5817] usb 5-1: Manufacturer: 娎웿麯犒䄑↦㶢见탰ㄜ㍄࿓鳸祯쯌
[  108.380029][ T5817] usb 5-1: SerialNumber: 㰊
[  108.477761][ T5980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  108.487476][ T5889] usb 2-1: no configurations
[  108.487495][ T5889] usb 2-1: can't read configurations, error -22
[  108.522712][ T5980] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  108.674127][ T5889] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  108.700315][ T5889] usb 2-1: no configurations
[  108.700337][ T5889] usb 2-1: can't read configurations, error -22
[  108.703436][ T5889] usb usb2-port1: unable to enumerate USB device
[  109.077022][ T5817] option 5-1:5.76: GSM modem (1-port) converter detected
[  109.309392][ T5817] usb 5-1: USB disconnect, device number 2
[  109.367415][ T5817] option 5-1:5.76: device disconnected
[  111.048244][ T5805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  111.048272][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  111.048296][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  111.048311][ T5805] Workqueue: hci2 hci_rx_work
[  111.048337][ T5805] Call Trace:
[  111.048346][ T5805]  <TASK>
[  111.048356][ T5805]  dump_stack_lvl+0x189/0x250
[  111.048394][ T5805]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.048423][ T5805]  ? __pfx__printk+0x10/0x10
[  111.048452][ T5805]  ? kernfs_path_from_node+0x2c/0x280
[  111.048485][ T5805]  ? kernfs_path_from_node+0x243/0x280
[  111.048515][ T5805]  ? kernfs_path_from_node+0x2c/0x280
[  111.048550][ T5805]  sysfs_create_dir_ns+0x259/0x280
[  111.048581][ T5805]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  111.048612][ T5805]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  111.048647][ T5805]  ? rt_spin_unlock+0x161/0x200
[  111.048679][ T5805]  kobject_add_internal+0x6b1/0xcd0
[  111.048716][ T5805]  kobject_add+0x155/0x220
[  111.048746][ T5805]  ? __pfx_kobject_add+0x10/0x10
[  111.048778][ T5805]  ? get_device_parent+0x370/0x3a0
[  111.048806][ T5805]  device_add+0x408/0xb80
[  111.048834][ T5805]  hci_conn_add_sysfs+0xd5/0x210
[  111.048871][ T5805]  le_conn_complete_evt+0xf1d/0x1420
[  111.048898][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  111.048929][ T5805]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  111.048953][ T5805]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  111.048975][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  111.049001][ T5805]  ? skb_pull_data+0xfb/0x200
[  111.049050][ T5805]  hci_le_conn_complete_evt+0x187/0x480
[  111.049085][ T5805]  hci_event_packet+0x78f/0x1260
[  111.049117][ T5805]  ? reacquire_held_locks+0x121/0x1c0
[  111.049153][ T5805]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  111.049181][ T5805]  ? __pfx_hci_event_packet+0x10/0x10
[  111.049213][ T5805]  ? rt_spin_unlock+0x150/0x200
[  111.049254][ T5805]  ? hci_send_to_monitor+0xe2/0x590
[  111.049287][ T5805]  hci_rx_work+0x3ee/0x1060
[  111.049318][ T5805]  ? process_scheduled_works+0x9ef/0x1770
[  111.049346][ T5805]  process_scheduled_works+0xad1/0x1770
[  111.049408][ T5805]  ? __pfx_process_scheduled_works+0x10/0x10
[  111.049456][ T5805]  worker_thread+0x8a0/0xda0
[  111.049499][ T5805]  ? __kthread_parkme+0x7b/0x200
[  111.049539][ T5805]  kthread+0x711/0x8a0
[  111.049573][ T5805]  ? __pfx_worker_thread+0x10/0x10
[  111.049598][ T5805]  ? __pfx_kthread+0x10/0x10
[  111.049625][ T5805]  ? rt_spin_unlock+0x150/0x200
[  111.049659][ T5805]  ? rt_spin_unlock+0x161/0x200
[  111.049684][ T5805]  ? __pfx_kthread+0x10/0x10
[  111.049716][ T5805]  ret_from_fork+0x599/0xb30
[  111.049744][ T5805]  ? __pfx_ret_from_fork+0x10/0x10
[  111.049780][ T5805]  ? __switch_to_asm+0x39/0x70
[  111.049809][ T5805]  ? __switch_to_asm+0x33/0x70
[  111.049838][ T5805]  ? __pfx_kthread+0x10/0x10
[  111.049870][ T5805]  ret_from_fork_asm+0x1a/0x30
[  111.049923][ T5805]  </TASK>
[  111.049959][ T5805] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  111.050003][ T5805] Bluetooth: hci2: failed to register connection device
[  112.505719][ T6025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.644560][ T5994] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  114.895539][ T5994] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  114.895579][ T5994] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  114.895624][ T5994] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  114.895647][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.834710][ T6038] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  115.930184][ T5994] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  116.400785][ T5994] usb 1-1: USB disconnect, device number 2
[  116.507735][ T5981] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  116.661844][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  116.661872][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  116.661899][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  116.661912][ T5807] Workqueue: hci4 hci_rx_work
[  116.661938][ T5807] Call Trace:
[  116.661947][ T5807]  <TASK>
[  116.661958][ T5807]  dump_stack_lvl+0x189/0x250
[  116.661991][ T5807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.662022][ T5807]  ? __pfx__printk+0x10/0x10
[  116.662047][ T5807]  ? kernfs_path_from_node+0x2c/0x280
[  116.662075][ T5807]  ? kernfs_path_from_node+0x243/0x280
[  116.662101][ T5807]  ? kernfs_path_from_node+0x2c/0x280
[  116.662131][ T5807]  sysfs_create_dir_ns+0x259/0x280
[  116.662157][ T5807]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  116.662184][ T5807]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  116.662216][ T5807]  ? rt_spin_unlock+0x161/0x200
[  116.662245][ T5807]  kobject_add_internal+0x6b1/0xcd0
[  116.662278][ T5807]  kobject_add+0x155/0x220
[  116.662305][ T5807]  ? __pfx_kobject_add+0x10/0x10
[  116.662334][ T5807]  ? get_device_parent+0x370/0x3a0
[  116.662361][ T5807]  device_add+0x408/0xb80
[  116.662387][ T5807]  hci_conn_add_sysfs+0xd5/0x210
[  116.662420][ T5807]  le_conn_complete_evt+0xf1d/0x1420
[  116.662446][ T5807]  ? lockdep_hardirqs_on+0x98/0x140
[  116.662474][ T5807]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  116.662496][ T5807]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  116.662517][ T5807]  ? lockdep_hardirqs_on+0x98/0x140
[  116.662540][ T5807]  ? skb_pull_data+0xfb/0x200
[  116.662574][ T5807]  hci_le_conn_complete_evt+0x187/0x480
[  116.662605][ T5807]  hci_event_packet+0x78f/0x1260
[  116.662634][ T5807]  ? reacquire_held_locks+0x121/0x1c0
[  116.662667][ T5807]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  116.662692][ T5807]  ? __pfx_hci_event_packet+0x10/0x10
[  116.662721][ T5807]  ? rt_spin_unlock+0x150/0x200
[  116.662768][ T5807]  ? hci_send_to_monitor+0xe2/0x590
[  116.662797][ T5807]  hci_rx_work+0x3ee/0x1060
[  116.662824][ T5807]  ? process_scheduled_works+0x9ef/0x1770
[  116.662849][ T5807]  process_scheduled_works+0xad1/0x1770
[  116.662907][ T5807]  ? __pfx_process_scheduled_works+0x10/0x10
[  116.662950][ T5807]  worker_thread+0x8a0/0xda0
[  116.663003][ T5807]  kthread+0x711/0x8a0
[  116.663034][ T5807]  ? __pfx_worker_thread+0x10/0x10
[  116.663056][ T5807]  ? __pfx_kthread+0x10/0x10
[  116.663080][ T5807]  ? rt_spin_unlock+0x150/0x200
[  116.663110][ T5807]  ? rt_spin_unlock+0x161/0x200
[  116.663134][ T5807]  ? __pfx_kthread+0x10/0x10
[  116.663162][ T5807]  ret_from_fork+0x599/0xb30
[  116.663188][ T5807]  ? __pfx_ret_from_fork+0x10/0x10
[  116.663224][ T5807]  ? __switch_to_asm+0x39/0x70
[  116.663251][ T5807]  ? __switch_to_asm+0x33/0x70
[  116.663277][ T5807]  ? __pfx_kthread+0x10/0x10
[  116.663307][ T5807]  ret_from_fork_asm+0x1a/0x30
[  116.663354][ T5807]  </TASK>
[  116.663547][ T5807] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  116.663594][ T5807] Bluetooth: hci4: failed to register connection device
[  116.707448][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.707481][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.707519][ T5981] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  116.707540][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.124273][ T5981] usb 5-1: config 0 descriptor??
[  117.647353][   T37] audit: type=1326 audit(1765768120.147:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.647412][   T37] audit: type=1326 audit(1765768120.147:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.647457][   T37] audit: type=1326 audit(1765768120.147:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.647512][   T37] audit: type=1326 audit(1765768120.147:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.672239][   T37] audit: type=1326 audit(1765768120.157:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.684124][   T37] audit: type=1326 audit(1765768120.187:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.684229][   T37] audit: type=1326 audit(1765768120.187:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.687101][   T37] audit: type=1326 audit(1765768120.187:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.719066][   T37] audit: type=1326 audit(1765768120.217:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.721784][   T37] audit: type=1326 audit(1765768120.227:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6064 comm="syz.2.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71eea1f749 code=0x7ffc0000
[  117.730829][ T6066] Zero length message leads to an empty skb
[  118.335882][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.41'.
[  118.425090][ T5807] Bluetooth: hci2: command 0x0406 tx timeout
[  118.601131][ T5866] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  118.764588][ T5866] usb 1-1: Using ep0 maxpacket: 32
[  118.769558][ T5866] usb 1-1: config 5 has an invalid interface number: 76 but max is 1
[  118.769590][ T5866] usb 1-1: config 5 has an invalid interface number: 130 but max is 1
[  118.769610][ T5866] usb 1-1: config 5 has no interface number 0
[  118.769626][ T5866] usb 1-1: config 5 has no interface number 1
[  118.769694][ T5866] usb 1-1: config 5 interface 76 altsetting 127 has an endpoint descriptor with address 0xE4, changing to 0x84
[  118.769729][ T5866] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x84 has an invalid bInterval 160, changing to 11
[  118.769756][ T5866] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x84 has invalid maxpacket 1598, setting to 1024
[  118.769784][ T5866] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x7 has invalid wMaxPacketSize 0
[  118.769807][ T5866] usb 1-1: config 5 interface 76 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[  118.769827][ T5866] usb 1-1: config 5 interface 76 altsetting 127 has a duplicate endpoint with address 0x7, skipping
[  118.769852][ T5866] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  118.769877][ T5866] usb 1-1: config 5 interface 76 altsetting 127 bulk endpoint 0x4 has invalid maxpacket 16
[  118.769898][ T5866] usb 1-1: config 5 interface 76 altsetting 127 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  118.769923][ T5866] usb 1-1: config 5 interface 76 has no altsetting 0
[  118.769941][ T5866] usb 1-1: config 5 interface 130 has no altsetting 0
[  118.815462][ T5866] usb 1-1: New USB device found, idVendor=12d1, idProduct=6100, bcdDevice=7f.44
[  118.815493][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.815513][ T5866] usb 1-1: Manufacturer: 娎웿麯犒䄑↦㶢见탰ㄜ㍄࿓鳸祯쯌
[  118.815530][ T5866] usb 1-1: SerialNumber: 㰊
[  118.979949][ T6074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  119.045513][ T6074] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  119.400926][ T5866] option 1-1:5.76: GSM modem (1-port) converter detected
[  119.515015][ T5866] usb 1-1: USB disconnect, device number 3
[  119.564821][ T5866] option 1-1:5.76: device disconnected
[  119.948324][ T5817] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  120.790857][ T5981] usbhid 5-1:0.0: can't add hid device: -71
[  120.791012][ T5981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  120.825270][ T5981] usb 5-1: USB disconnect, device number 3
[  120.914063][ T5817] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  120.914096][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.914116][ T5817] usb 4-1: Product: syz
[  120.914131][ T5817] usb 4-1: Manufacturer: syz
[  120.914146][ T5817] usb 4-1: SerialNumber: syz
[  121.006391][ T5817] usb 4-1: config 0 descriptor??
[  121.352114][ T5807] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  121.352143][ T5807] CPU: 0 UID: 0 PID: 5807 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  121.352175][ T5807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  121.352190][ T5807] Workqueue: hci1 hci_rx_work
[  121.352217][ T5807] Call Trace:
[  121.352226][ T5807]  <TASK>
[  121.352236][ T5807]  dump_stack_lvl+0x189/0x250
[  121.352273][ T5807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.352303][ T5807]  ? __pfx__printk+0x10/0x10
[  121.352333][ T5807]  ? kernfs_path_from_node+0x2c/0x280
[  121.352364][ T5807]  ? kernfs_path_from_node+0x243/0x280
[  121.352393][ T5807]  ? kernfs_path_from_node+0x2c/0x280
[  121.352428][ T5807]  sysfs_create_dir_ns+0x259/0x280
[  121.352458][ T5807]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  121.352489][ T5807]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  121.352524][ T5807]  ? rt_spin_unlock+0x161/0x200
[  121.352556][ T5807]  kobject_add_internal+0x6b1/0xcd0
[  121.352593][ T5807]  kobject_add+0x155/0x220
[  121.352624][ T5807]  ? __pfx_kobject_add+0x10/0x10
[  121.352684][ T5807]  ? get_device_parent+0x370/0x3a0
[  121.352713][ T5807]  device_add+0x408/0xb80
[  121.352751][ T5807]  hci_conn_add_sysfs+0xd5/0x210
[  121.352788][ T5807]  le_conn_complete_evt+0xf1d/0x1420
[  121.352815][ T5807]  ? lockdep_hardirqs_on+0x98/0x140
[  121.352845][ T5807]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  121.352869][ T5807]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  121.352891][ T5807]  ? lockdep_hardirqs_on+0x98/0x140
[  121.352918][ T5807]  ? skb_pull_data+0xfb/0x200
[  121.352956][ T5807]  hci_le_conn_complete_evt+0x187/0x480
[  121.352992][ T5807]  hci_event_packet+0x78f/0x1260
[  121.353024][ T5807]  ? reacquire_held_locks+0x121/0x1c0
[  121.353061][ T5807]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  121.353090][ T5807]  ? __pfx_hci_event_packet+0x10/0x10
[  121.353122][ T5807]  ? rt_spin_unlock+0x150/0x200
[  121.353162][ T5807]  ? hci_send_to_monitor+0xe2/0x590
[  121.353196][ T5807]  hci_rx_work+0x3ee/0x1060
[  121.353227][ T5807]  ? process_scheduled_works+0x9ef/0x1770
[  121.353255][ T5807]  process_scheduled_works+0xad1/0x1770
[  121.353318][ T5807]  ? __pfx_process_scheduled_works+0x10/0x10
[  121.353366][ T5807]  worker_thread+0x8a0/0xda0
[  121.353427][ T5807]  kthread+0x711/0x8a0
[  121.353462][ T5807]  ? __pfx_worker_thread+0x10/0x10
[  121.353487][ T5807]  ? __pfx_kthread+0x10/0x10
[  121.353513][ T5807]  ? rt_spin_unlock+0x150/0x200
[  121.353547][ T5807]  ? rt_spin_unlock+0x161/0x200
[  121.353573][ T5807]  ? __pfx_kthread+0x10/0x10
[  121.353604][ T5807]  ret_from_fork+0x599/0xb30
[  121.353632][ T5807]  ? __pfx_ret_from_fork+0x10/0x10
[  121.353670][ T5807]  ? __switch_to_asm+0x39/0x70
[  121.353700][ T5807]  ? __switch_to_asm+0x33/0x70
[  121.353728][ T5807]  ? __pfx_kthread+0x10/0x10
[  121.353767][ T5807]  ret_from_fork_asm+0x1a/0x30
[  121.353821][ T5807]  </TASK>
[  121.354089][ T5807] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  121.354135][ T5807] Bluetooth: hci1: failed to register connection device
[  121.438790][ T5981] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  121.507349][ T5817] airspy 4-1:0.0: Board ID: 00
[  121.507373][ T5817] airspy 4-1:0.0: Firmware version: ?Q���"�B4�/!ـ�rb��-�Y&B���x>��)C6�~���ތ����W햣�jد5&f�t���������
[  121.919432][ T5981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.919483][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  121.919745][ T5981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  121.919764][ T5981] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  121.922913][ T5981] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  121.923018][ T5981] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  121.923040][ T5981] usb 5-1: Manufacturer: syz
[  122.015117][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  122.038727][ T5981] usb 5-1: config 0 descriptor??
[  122.174599][    T9] usb 1-1: Using ep0 maxpacket: 16
[  122.283751][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  122.296785][    T9] usb 1-1: config 128 has an invalid interface number: 12 but max is 0
[  122.296816][    T9] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  122.297076][    T9] usb 1-1: config 128 has no interface number 0
[  122.297133][    T9] usb 1-1: config 128 interface 12 altsetting 86 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  122.297162][    T9] usb 1-1: config 128 interface 12 has no altsetting 0
[  122.354537][    T9] usb 1-1: New USB device found, idVendor=0451, idProduct=8142, bcdDevice=66.86
[  122.354570][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.354590][    T9] usb 1-1: Product: syz
[  122.354604][    T9] usb 1-1: Manufacturer: syz
[  122.354618][    T9] usb 1-1: SerialNumber: syz
[  122.558748][ T6112] [syz.2.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  124.365425][ T5817] airspy 4-1:0.0: usb_control_msg() failed -110 request 10
[  124.503019][    T9] hub 1-1:128.12: bad descriptor, ignoring hub
[  124.503064][    T9] hub 1-1:128.12: probe with driver hub failed with error -5
[  124.611573][ T5817] airspy 4-1:0.0: Registered as swradio24
[  124.611596][ T5817] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  124.655927][ T6118] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  124.656002][    T9] usb 1-1: USB disconnect, device number 4
[  124.717834][ T5981] rc_core: IR keymap rc-hauppauge not found
[  124.717977][ T5981] Registered IR keymap rc-empty
[  124.719946][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  124.723454][ T6120] FAULT_INJECTION: forcing a failure.
[  124.723454][ T6120] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  124.723489][ T6120] CPU: 1 UID: 0 PID: 6120 Comm: syz.2.62 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  124.723511][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  124.723522][ T6120] Call Trace:
[  124.723530][ T6120]  <TASK>
[  124.723540][ T6120]  dump_stack_lvl+0x189/0x250
[  124.723571][ T6120]  ? __pfx____ratelimit+0x10/0x10
[  124.723599][ T6120]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.723623][ T6120]  ? __pfx__printk+0x10/0x10
[  124.723663][ T6120]  should_fail_ex+0x46c/0x600
[  124.723705][ T6120]  _copy_to_user+0x31/0xb0
[  124.723727][ T6120]  simple_read_from_buffer+0xe1/0x170
[  124.723753][ T6120]  proc_fail_nth_read+0x1b6/0x220
[  124.723785][ T6120]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  124.723823][ T6120]  ? rw_verify_area+0x2ac/0x4e0
[  124.723850][ T6120]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  124.723881][ T6120]  vfs_read+0x206/0xa30
[  124.723919][ T6120]  ? __pfx_vfs_read+0x10/0x10
[  124.723940][ T6120]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  124.723979][ T6120]  ? mutex_lock_nested+0x154/0x1d0
[  124.724003][ T6120]  ? fdget_pos+0x253/0x320
[  124.724037][ T6120]  ksys_read+0x14b/0x260
[  124.724068][ T6120]  ? __pfx_ksys_read+0x10/0x10
[  124.724102][ T6120]  ? do_syscall_64+0xbe/0xf80
[  124.724127][ T6120]  do_syscall_64+0xfa/0xf80
[  124.724148][ T6120]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.724168][ T6120]  ? clear_bhb_loop+0x60/0xb0
[  124.724194][ T6120]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.724213][ T6120] RIP: 0033:0x7f71eea1e15c
[  124.724232][ T6120] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  124.724249][ T6120] RSP: 002b:00007f71ecc7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  124.724271][ T6120] RAX: ffffffffffffffda RBX: 00007f71eec75fa0 RCX: 00007f71eea1e15c
[  124.724286][ T6120] RDX: 000000000000000f RSI: 00007f71ecc7e0a0 RDI: 0000000000000004
[  124.724299][ T6120] RBP: 00007f71ecc7e090 R08: 0000000000000000 R09: 0000000000000000
[  124.724311][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.724323][ T6120] R13: 00007f71eec76038 R14: 00007f71eec75fa0 R15: 00007ffcbf176708
[  124.724361][ T6120]  </TASK>
[  124.844639][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.039008][ T5981] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  125.113714][ T5916] usb 4-1: USB disconnect, device number 3
[  125.169842][ T5981] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6
[  125.209539][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.230374][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.251530][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.264976][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.293060][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.304678][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.324753][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.344700][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.366713][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.392322][ T5981] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  125.429124][ T5981] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  125.429152][ T5981] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  125.900943][ T6133] loop8: detected capacity change from 0 to 8
[  126.824667][ T6133] Dev loop8: unable to read RDB block 8
[  126.824725][ T6133]  loop8: unable to read partition table
[  126.824967][ T6133] loop8: partition table beyond EOD, truncated
[  126.824987][ T6133] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  127.205649][ T5994] usb 5-1: USB disconnect, device number 4
[  127.717250][ T5807] Bluetooth: hci1: command 0x0406 tx timeout
[  129.821353][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.821397][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.821424][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.821449][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.821475][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.821500][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.821526][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.821551][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.821577][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.821602][    T9] hid-generic 00A0:0006:0003.0001: unknown main item tag 0x0
[  129.926422][    T9] hid-generic 00A0:0006:0003.0001: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  130.044591][ T6090] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  130.127397][ T6165] pim6reg: entered allmulticast mode
[  130.205708][ T6090] usb 2-1: Using ep0 maxpacket: 32
[  130.222651][ T6090] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  130.222683][ T6090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.222702][ T6090] usb 2-1: Product: syz
[  130.222715][ T6090] usb 2-1: Manufacturer: syz
[  130.222728][ T6090] usb 2-1: SerialNumber: syz
[  130.893552][ T6090] usb 2-1: palm_os_4_probe - error -110 getting connection info
[  130.898868][ T6090] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  131.049411][ T6090] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  131.076016][ T6090] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  131.143002][ T5916] usb 2-1: USB disconnect, device number 7
[  131.170460][ T6161] pim6reg: left allmulticast mode
[  131.292343][ T5916] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  131.357263][ T5916] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  131.358176][ T5916] visor 2-1:1.0: device disconnected
[  131.436994][ T6184] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET)
[  131.788655][ T6180] fido_id[6180]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  132.167452][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.064498][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.074503][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.084467][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.094454][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.104461][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.114469][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.124460][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.134462][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.144469][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  138.314187][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  138.314293][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  138.757091][ T5817] hid_parser_main: 5 callbacks suppressed
[  138.757116][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.757145][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.757171][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.757196][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.757222][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.757247][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.757272][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.757298][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.757323][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.757352][ T5817] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0
[  138.845600][ T5817] hid-generic 00A0:0006:0003.0002: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  139.138419][ T6218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.814611][ T5808] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  139.947406][ T6227] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  139.972798][ T5808] usb 4-1: Using ep0 maxpacket: 32
[  139.990120][ T5808] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  139.990153][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.990174][ T5808] usb 4-1: Product: syz
[  139.990188][ T5808] usb 4-1: Manufacturer: syz
[  139.990203][ T5808] usb 4-1: SerialNumber: syz
[  140.247153][ T5808] usb 4-1: palm_os_4_probe - error -71 getting connection info
[  140.247246][ T5808] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  140.280477][ T5808] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  140.308339][ T5808] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  140.341945][ T5808] usb 4-1: USB disconnect, device number 4
[  140.377198][ T5808] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  140.396820][ T5805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  140.396848][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  140.396882][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  140.396895][ T5805] Workqueue: hci3 hci_rx_work
[  140.396921][ T5805] Call Trace:
[  140.396929][ T5805]  <TASK>
[  140.396936][ T5805]  dump_stack_lvl+0x189/0x250
[  140.396969][ T5805]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.396995][ T5805]  ? __pfx__printk+0x10/0x10
[  140.397023][ T5805]  ? kernfs_path_from_node+0x2c/0x280
[  140.397054][ T5805]  ? kernfs_path_from_node+0x243/0x280
[  140.397082][ T5805]  ? kernfs_path_from_node+0x2c/0x280
[  140.397116][ T5805]  sysfs_create_dir_ns+0x259/0x280
[  140.397145][ T5805]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  140.397173][ T5805]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  140.397207][ T5805]  ? rt_spin_unlock+0x161/0x200
[  140.397238][ T5805]  kobject_add_internal+0x6b1/0xcd0
[  140.397279][ T5805]  kobject_add+0x155/0x220
[  140.397309][ T5805]  ? __pfx_kobject_add+0x10/0x10
[  140.397342][ T5805]  ? get_device_parent+0x370/0x3a0
[  140.397371][ T5805]  device_add+0x408/0xb80
[  140.397398][ T5805]  hci_conn_add_sysfs+0xd5/0x210
[  140.397435][ T5805]  le_conn_complete_evt+0xf1d/0x1420
[  140.397461][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  140.397490][ T5805]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  140.397513][ T5805]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  140.397533][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  140.397558][ T5805]  ? skb_pull_data+0xfb/0x200
[  140.397592][ T5805]  hci_le_conn_complete_evt+0x187/0x480
[  140.397624][ T5805]  hci_event_packet+0x78f/0x1260
[  140.397654][ T5805]  ? reacquire_held_locks+0x121/0x1c0
[  140.397686][ T5805]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  140.397713][ T5805]  ? __pfx_hci_event_packet+0x10/0x10
[  140.397743][ T5805]  ? rt_spin_unlock+0x150/0x200
[  140.397779][ T5805]  ? hci_send_to_monitor+0xe2/0x590
[  140.397810][ T5805]  hci_rx_work+0x3ee/0x1060
[  140.397842][ T5805]  ? process_scheduled_works+0x9ef/0x1770
[  140.397878][ T5805]  process_scheduled_works+0xad1/0x1770
[  140.397940][ T5805]  ? __pfx_process_scheduled_works+0x10/0x10
[  140.397988][ T5805]  worker_thread+0x8a0/0xda0
[  140.398030][ T5805]  ? __kthread_parkme+0x7b/0x200
[  140.398070][ T5805]  kthread+0x711/0x8a0
[  140.398104][ T5805]  ? __pfx_worker_thread+0x10/0x10
[  140.398126][ T5805]  ? __pfx_kthread+0x10/0x10
[  140.398151][ T5805]  ? rt_spin_unlock+0x150/0x200
[  140.398184][ T5805]  ? rt_spin_unlock+0x161/0x200
[  140.398209][ T5805]  ? __pfx_kthread+0x10/0x10
[  140.398239][ T5805]  ret_from_fork+0x599/0xb30
[  140.398266][ T5805]  ? __pfx_ret_from_fork+0x10/0x10
[  140.398303][ T5805]  ? __switch_to_asm+0x39/0x70
[  140.398329][ T5805]  ? __switch_to_asm+0x33/0x70
[  140.398356][ T5805]  ? __pfx_kthread+0x10/0x10
[  140.398387][ T5805]  ret_from_fork_asm+0x1a/0x30
[  140.398439][ T5805]  </TASK>
[  140.399899][ T5805] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  140.399937][ T5805] Bluetooth: hci3: failed to register connection device
[  140.484592][ T6023] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  140.740778][ T5808] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  140.772417][ T5808] visor 4-1:1.0: device disconnected
[  140.904515][ T6023] usb 1-1: Using ep0 maxpacket: 32
[  140.907299][ T6023] usb 1-1: config 5 has an invalid interface number: 76 but max is 1
[  140.907328][ T6023] usb 1-1: config 5 has an invalid interface number: 130 but max is 1
[  140.907347][ T6023] usb 1-1: config 5 has no interface number 0
[  140.907362][ T6023] usb 1-1: config 5 has no interface number 1
[  140.907431][ T6023] usb 1-1: config 5 interface 76 altsetting 127 has an endpoint descriptor with address 0xE4, changing to 0x84
[  140.907457][ T6023] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x84 has an invalid bInterval 160, changing to 11
[  140.907484][ T6023] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x84 has invalid maxpacket 1598, setting to 1024
[  140.907511][ T6023] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x7 has invalid wMaxPacketSize 0
[  140.907533][ T6023] usb 1-1: config 5 interface 76 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[  140.907556][ T6023] usb 1-1: config 5 interface 76 altsetting 127 has a duplicate endpoint with address 0x7, skipping
[  140.907579][ T6023] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  140.907606][ T6023] usb 1-1: config 5 interface 76 altsetting 127 bulk endpoint 0x4 has invalid maxpacket 16
[  140.907630][ T6023] usb 1-1: config 5 interface 76 altsetting 127 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  140.907657][ T6023] usb 1-1: config 5 interface 76 has no altsetting 0
[  140.907673][ T6023] usb 1-1: config 5 interface 130 has no altsetting 0
[  140.910813][ T6023] usb 1-1: New USB device found, idVendor=12d1, idProduct=6100, bcdDevice=7f.44
[  140.910841][ T6023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.910860][ T6023] usb 1-1: Manufacturer: 娎웿麯犒䄑↦㶢见탰ㄜ㍄࿓鳸祯쯌
[  140.910875][ T6023] usb 1-1: SerialNumber: 㰊
[  141.126993][ T6235] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  141.129529][ T6235] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  141.604200][ T5788] hid-generic 00A0:0006:0003.0003: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  141.641960][ T6250] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  141.645080][ T6023] option 1-1:5.76: GSM modem (1-port) converter detected
[  141.683357][ T5805] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection
[  141.735605][ T6023] usb 1-1: USB disconnect, device number 5
[  141.761037][ T6023] option 1-1:5.76: device disconnected
[  142.029620][ T6258] fido_id[6258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  142.344695][ T5788] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  142.501647][ T5788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 56, changing to 9
[  142.501675][ T5788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8703, setting to 1024
[  142.501707][ T5788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  142.501717][ T5788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.548846][ T5788] usb 2-1: config 0 descriptor??
[  142.704578][ T6062] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.759727][ T5788] ath6kl: Failed to submit usb control message: -71
[  142.759788][ T5788] ath6kl: unable to send the bmi data to the device: -71
[  142.759803][ T5788] ath6kl: Unable to send get target info: -71
[  142.788360][ T5788] ath6kl: Failed to init ath6kl core: -71
[  142.795053][ T5788] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  142.846038][ T5788] usb 2-1: USB disconnect, device number 8
[  142.894528][ T6062] usb 1-1: Using ep0 maxpacket: 32
[  142.897249][ T6062] usb 1-1: config 5 has an invalid interface number: 76 but max is 1
[  142.897278][ T6062] usb 1-1: config 5 has an invalid interface number: 130 but max is 1
[  142.897299][ T6062] usb 1-1: config 5 has no interface number 0
[  142.897315][ T6062] usb 1-1: config 5 has no interface number 1
[  142.897380][ T6062] usb 1-1: config 5 interface 76 altsetting 127 has an invalid endpoint descriptor of length 2, skipping
[  142.897403][ T6062] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x7 has invalid wMaxPacketSize 0
[  142.897492][ T6062] usb 1-1: config 5 interface 76 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[  142.897607][ T6062] usb 1-1: config 5 interface 76 altsetting 127 has a duplicate endpoint with address 0x7, skipping
[  142.897631][ T6062] usb 1-1: config 5 interface 76 altsetting 127 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  142.897659][ T6062] usb 1-1: config 5 interface 76 altsetting 127 bulk endpoint 0x4 has invalid maxpacket 16
[  142.897683][ T6062] usb 1-1: config 5 interface 76 altsetting 127 has 8 endpoint descriptors, different from the interface descriptor's value: 7
[  142.897711][ T6062] usb 1-1: config 5 interface 76 has no altsetting 0
[  142.897728][ T6062] usb 1-1: config 5 interface 130 has no altsetting 0
[  143.014622][ T6062] usb 1-1: New USB device found, idVendor=12d1, idProduct=6100, bcdDevice=7f.44
[  143.014652][ T6062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.014673][ T6062] usb 1-1: Manufacturer: 娎웿麯犒䄑↦㶢见탰ㄜ㍄࿓鳸祯쯌
[  143.014690][ T6062] usb 1-1: SerialNumber: 㰊
[  143.161650][ T5807] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  143.333647][ T6062] option 1-1:5.76: GSM modem (1-port) converter detected
[  143.400134][ T6062] usb 1-1: USB disconnect, device number 6
[  143.444206][ T6062] option 1-1:5.76: device disconnected
[  144.548797][ T5994] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  144.581967][ T6290] netlink: 'syz.4.109': attribute type 10 has an invalid length.
[  144.592542][ T6290] 8021q: adding VLAN 0 to HW filter on device batadv0
[  144.599857][ T6290] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  144.724547][ T5994] usb 4-1: Using ep0 maxpacket: 32
[  144.830621][ T5805] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  145.065365][ T5994] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  145.065400][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.065418][ T5994] usb 4-1: Product: syz
[  145.065431][ T5994] usb 4-1: Manufacturer: syz
[  145.065445][ T5994] usb 4-1: SerialNumber: syz
[  145.224650][ T6306] loop8: detected capacity change from 0 to 8
[  146.281914][ T6306] Dev loop8: unable to read RDB block 8
[  146.281951][ T6306]  loop8: unable to read partition table
[  146.282091][ T6306] loop8: partition table beyond EOD, truncated
[  146.282124][ T6306] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  146.344635][ T5994] usb 4-1: palm_os_4_probe - error -71 getting connection info
[  146.344723][ T5994] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  146.364780][ T5994] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  146.369753][ T5994] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  146.380752][ T5994] usb 4-1: USB disconnect, device number 5
[  146.416100][ T5994] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  146.466629][ T5994] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  146.467621][ T5994] visor 4-1:1.0: device disconnected
[  146.577226][ T6313] FAULT_INJECTION: forcing a failure.
[  146.577226][ T6313] name failslab, interval 1, probability 0, space 0, times 0
[  146.577262][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.1.115 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  146.577284][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  146.577295][ T6313] Call Trace:
[  146.577303][ T6313]  <TASK>
[  146.577311][ T6313]  dump_stack_lvl+0x189/0x250
[  146.577341][ T6313]  ? __pfx____ratelimit+0x10/0x10
[  146.577373][ T6313]  ? __pfx_dump_stack_lvl+0x10/0x10
[  146.577400][ T6313]  ? __pfx__printk+0x10/0x10
[  146.577429][ T6313]  ? __pfx___might_resched+0x10/0x10
[  146.577456][ T6313]  should_fail_ex+0x46c/0x600
[  146.577489][ T6313]  should_failslab+0xa8/0x100
[  146.577511][ T6313]  __kmalloc_cache_noprof+0x84/0x6d0
[  146.577540][ T6313]  ? register_lock_class+0x51/0x320
[  146.577566][ T6313]  ? snd_pcm_oss_change_params_locked+0x172/0x3f70
[  146.577598][ T6313]  snd_pcm_oss_change_params_locked+0x172/0x3f70
[  146.577623][ T6313]  ? register_lock_class+0x51/0x320
[  146.577646][ T6313]  ? __lock_acquire+0x6b6/0x2cf0
[  146.577676][ T6313]  ? __lock_acquire+0x6b6/0x2cf0
[  146.577715][ T6313]  ? do_raw_spin_lock+0x121/0x290
[  146.577742][ T6313]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  146.577768][ T6313]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  146.577789][ T6313]  ? lockdep_hardirqs_on+0x98/0x140
[  146.577814][ T6313]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  146.577857][ T6313]  snd_pcm_oss_make_ready_locked+0x7d/0x300
[  146.577883][ T6313]  snd_pcm_oss_write+0x287/0xf20
[  146.577933][ T6313]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  146.577961][ T6313]  ? do_raw_spin_lock+0x121/0x290
[  146.577991][ T6313]  ? rw_verify_area+0x25b/0x4e0
[  146.578019][ T6313]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  146.578051][ T6313]  vfs_write+0x287/0xb40
[  146.578088][ T6313]  ? __pfx_vfs_write+0x10/0x10
[  146.578118][ T6313]  ? __fget_files+0x2a/0x420
[  146.578143][ T6313]  ? __fget_files+0x2a/0x420
[  146.578163][ T6313]  ? __fget_files+0x3a6/0x420
[  146.578182][ T6313]  ? __fget_files+0x2a/0x420
[  146.578214][ T6313]  ksys_write+0x14b/0x260
[  146.578245][ T6313]  ? __pfx_ksys_write+0x10/0x10
[  146.578278][ T6313]  ? do_syscall_64+0xbe/0xf80
[  146.578303][ T6313]  do_syscall_64+0xfa/0xf80
[  146.578324][ T6313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.578344][ T6313]  ? clear_bhb_loop+0x60/0xb0
[  146.578370][ T6313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  146.578389][ T6313] RIP: 0033:0x7f6a3e5bf749
[  146.578409][ T6313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  146.578425][ T6313] RSP: 002b:00007f6a3c826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  146.578447][ T6313] RAX: ffffffffffffffda RBX: 00007f6a3e815fa0 RCX: 00007f6a3e5bf749
[  146.578462][ T6313] RDX: 000000000000fdbc RSI: 0000200000000500 RDI: 0000000000000004
[  146.578475][ T6313] RBP: 00007f6a3c826090 R08: 0000000000000000 R09: 0000000000000000
[  146.578487][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  146.578498][ T6313] R13: 00007f6a3e816038 R14: 00007f6a3e815fa0 R15: 00007ffdb4c38f48
[  146.578534][ T6313]  </TASK>
[  147.133671][ T6317] loop8: detected capacity change from 0 to 8
[  148.040371][ T6317] Dev loop8: unable to read RDB block 8
[  148.040783][ T6317]  loop8: unable to read partition table
[  148.044120][ T6317] loop8: partition table beyond EOD, truncated
[  148.044196][ T6317] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  148.222947][ T5805] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  149.117542][ T5805] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  151.394497][ T5808] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  151.558905][ T5808] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  151.558937][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.558956][ T5808] usb 2-1: Product: syz
[  151.558970][ T5808] usb 2-1: Manufacturer: syz
[  151.558985][ T5808] usb 2-1: SerialNumber: syz
[  151.609571][ T5808] usb 2-1: config 0 descriptor??
[  151.805112][ T6363] FAULT_INJECTION: forcing a failure.
[  151.805112][ T6363] name failslab, interval 1, probability 0, space 0, times 0
[  151.805149][ T6363] CPU: 0 UID: 0 PID: 6363 Comm: syz.0.130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  151.805172][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  151.805184][ T6363] Call Trace:
[  151.805193][ T6363]  <TASK>
[  151.805202][ T6363]  dump_stack_lvl+0x189/0x250
[  151.805234][ T6363]  ? __pfx____ratelimit+0x10/0x10
[  151.805266][ T6363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.805293][ T6363]  ? __pfx__printk+0x10/0x10
[  151.805311][ T6363]  ? __kasan_kmalloc+0x93/0xb0
[  151.805345][ T6363]  ? __lock_acquire+0x6b6/0x2cf0
[  151.805383][ T6363]  should_fail_ex+0x46c/0x600
[  151.805415][ T6363]  ? skb_clone+0x212/0x3a0
[  151.805441][ T6363]  should_failslab+0xa8/0x100
[  151.805462][ T6363]  ? skb_clone+0x212/0x3a0
[  151.805486][ T6363]  kmem_cache_alloc_noprof+0x84/0x6c0
[  151.805512][ T6363]  ? __netlink_lookup+0xbd/0x8a0
[  151.805549][ T6363]  skb_clone+0x212/0x3a0
[  151.805580][ T6363]  __netlink_deliver_tap+0x404/0x850
[  151.805630][ T6363]  ? netlink_deliver_tap+0x2e/0x1b0
[  151.805659][ T6363]  netlink_deliver_tap+0x19c/0x1b0
[  151.805688][ T6363]  netlink_unicast+0x811/0xa10
[  151.805724][ T6363]  ? __pfx_netlink_unicast+0x10/0x10
[  151.805748][ T6363]  ? smack_socket_getpeersec_dgram+0x266/0x430
[  151.805781][ T6363]  ? netlink_sendmsg+0x642/0xb30
[  151.805805][ T6363]  ? skb_put+0x11b/0x210
[  151.805832][ T6363]  netlink_sendmsg+0x805/0xb30
[  151.805870][ T6363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.805907][ T6363]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  151.805934][ T6363]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.805962][ T6363]  __sock_sendmsg+0x21c/0x270
[  151.805998][ T6363]  ____sys_sendmsg+0x508/0x810
[  151.806031][ T6363]  ? __pfx_____sys_sendmsg+0x10/0x10
[  151.806069][ T6363]  ? import_iovec+0x74/0xa0
[  151.806093][ T6363]  ___sys_sendmsg+0x21f/0x2a0
[  151.806123][ T6363]  ? __pfx____sys_sendmsg+0x10/0x10
[  151.806193][ T6363]  ? __fget_files+0x2a/0x420
[  151.806215][ T6363]  ? __fget_files+0x3a6/0x420
[  151.806249][ T6363]  __x64_sys_sendmsg+0x1a1/0x260
[  151.806279][ T6363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  151.806317][ T6363]  ? __pfx_ksys_write+0x10/0x10
[  151.806351][ T6363]  ? do_syscall_64+0xbe/0xf80
[  151.806377][ T6363]  do_syscall_64+0xfa/0xf80
[  151.806398][ T6363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.806418][ T6363]  ? clear_bhb_loop+0x60/0xb0
[  151.806444][ T6363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.806464][ T6363] RIP: 0033:0x7f16087bf749
[  151.806483][ T6363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  151.806500][ T6363] RSP: 002b:00007f1606a1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  151.806523][ T6363] RAX: ffffffffffffffda RBX: 00007f1608a15fa0 RCX: 00007f16087bf749
[  151.806538][ T6363] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  151.806551][ T6363] RBP: 00007f1606a1e090 R08: 0000000000000000 R09: 0000000000000000
[  151.806563][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  151.806575][ T6363] R13: 00007f1608a16038 R14: 00007f1608a15fa0 R15: 00007fff916e8238
[  151.806620][ T6363]  </TASK>
[  152.148419][ T6365] loop8: detected capacity change from 0 to 8
[  153.081480][ T6365] Dev loop8: unable to read RDB block 8
[  153.081534][ T6365]  loop8: unable to read partition table
[  153.081807][ T6365] loop8: partition table beyond EOD, truncated
[  153.081827][ T6365] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  153.459825][ T5808] usb 2-1: Firmware version (0.0) predates our first public release.
[  153.459858][ T5808] usb 2-1: Please update to version 0.2 or newer
[  154.063688][ T5808] usb 2-1: USB disconnect, device number 9
[  154.427222][ T5805] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  154.427251][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  154.427275][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  154.427289][ T5805] Workqueue: hci0 hci_rx_work
[  154.427314][ T5805] Call Trace:
[  154.427324][ T5805]  <TASK>
[  154.427334][ T5805]  dump_stack_lvl+0x189/0x250
[  154.427372][ T5805]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.427401][ T5805]  ? __pfx__printk+0x10/0x10
[  154.427430][ T5805]  ? kernfs_path_from_node+0x2c/0x280
[  154.427462][ T5805]  ? kernfs_path_from_node+0x243/0x280
[  154.427492][ T5805]  ? kernfs_path_from_node+0x2c/0x280
[  154.427527][ T5805]  sysfs_create_dir_ns+0x259/0x280
[  154.427558][ T5805]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  154.427599][ T5805]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  154.427636][ T5805]  ? rt_spin_unlock+0x161/0x200
[  154.427668][ T5805]  kobject_add_internal+0x6b1/0xcd0
[  154.427705][ T5805]  kobject_add+0x155/0x220
[  154.427737][ T5805]  ? __pfx_kobject_add+0x10/0x10
[  154.427771][ T5805]  ? get_device_parent+0x370/0x3a0
[  154.427800][ T5805]  device_add+0x408/0xb80
[  154.427828][ T5805]  hci_conn_add_sysfs+0xd5/0x210
[  154.427864][ T5805]  le_conn_complete_evt+0xf1d/0x1420
[  154.427891][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  154.427927][ T5805]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  154.427951][ T5805]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  154.427973][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  154.427999][ T5805]  ? skb_pull_data+0xfb/0x200
[  154.428037][ T5805]  hci_le_conn_complete_evt+0x187/0x480
[  154.428072][ T5805]  hci_event_packet+0x78f/0x1260
[  154.428104][ T5805]  ? reacquire_held_locks+0x121/0x1c0
[  154.428140][ T5805]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  154.428168][ T5805]  ? __pfx_hci_event_packet+0x10/0x10
[  154.428200][ T5805]  ? rt_spin_unlock+0x150/0x200
[  154.428241][ T5805]  ? hci_send_to_monitor+0xe2/0x590
[  154.428273][ T5805]  hci_rx_work+0x3ee/0x1060
[  154.428303][ T5805]  ? process_scheduled_works+0x9ef/0x1770
[  154.428331][ T5805]  process_scheduled_works+0xad1/0x1770
[  154.428393][ T5805]  ? __pfx_process_scheduled_works+0x10/0x10
[  154.428440][ T5805]  worker_thread+0x8a0/0xda0
[  154.428484][ T5805]  ? __kthread_parkme+0x7b/0x200
[  154.428524][ T5805]  kthread+0x711/0x8a0
[  154.428559][ T5805]  ? __pfx_worker_thread+0x10/0x10
[  154.428597][ T5805]  ? __pfx_kthread+0x10/0x10
[  154.428621][ T5805]  ? rt_spin_unlock+0x150/0x200
[  154.428655][ T5805]  ? rt_spin_unlock+0x161/0x200
[  154.428681][ T5805]  ? __pfx_kthread+0x10/0x10
[  154.428713][ T5805]  ret_from_fork+0x599/0xb30
[  154.428741][ T5805]  ? __pfx_ret_from_fork+0x10/0x10
[  154.428780][ T5805]  ? __switch_to_asm+0x39/0x70
[  154.428810][ T5805]  ? __switch_to_asm+0x33/0x70
[  154.428838][ T5805]  ? __pfx_kthread+0x10/0x10
[  154.428870][ T5805]  ret_from_fork_asm+0x1a/0x30
[  154.428923][ T5805]  </TASK>
[  154.429081][ T5805] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  154.429125][ T5805] Bluetooth: hci0: failed to register connection device
[  154.465486][ T5805] ==================================================================
[  154.465506][ T5805] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6d0/0x10e0
[  154.465544][ T5805] Read of size 8 at addr ffff888028ea0500 by task kworker/u9:2/5805
[  154.465563][ T5805] 
[  154.465576][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  154.465608][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  154.465623][ T5805] Workqueue: hci0 hci_rx_work
[  154.465645][ T5805] Call Trace:
[  154.465653][ T5805]  <TASK>
[  154.465663][ T5805]  dump_stack_lvl+0x189/0x250
[  154.465694][ T5805]  ? __kasan_check_byte+0x12/0x40
[  154.465727][ T5805]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.465755][ T5805]  ? lock_release+0x4b/0x3b0
[  154.465787][ T5805]  ? __virt_addr_valid+0x4a5/0x5c0
[  154.465821][ T5805]  print_report+0xca/0x240
[  154.465844][ T5805]  ? l2cap_connect_cfm+0x6d0/0x10e0
[  154.465871][ T5805]  kasan_report+0x118/0x150
[  154.465904][ T5805]  ? l2cap_connect_cfm+0x6d0/0x10e0
[  154.465935][ T5805]  l2cap_connect_cfm+0x6d0/0x10e0
[  154.465967][ T5805]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  154.465996][ T5805]  ? mutex_lock_nested+0x154/0x1d0
[  154.466022][ T5805]  ? hci_connect_cfm+0x2c/0x140
[  154.466045][ T5805]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  154.466072][ T5805]  hci_connect_cfm+0x95/0x140
[  154.466097][ T5805]  le_conn_complete_evt+0xf65/0x1420
[  154.466123][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  154.466147][ T5805]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  154.466171][ T5805]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  154.466191][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  154.466213][ T5805]  ? skb_pull_data+0xfb/0x200
[  154.466246][ T5805]  hci_le_conn_complete_evt+0x187/0x480
[  154.466273][ T5805]  hci_event_packet+0x78f/0x1260
[  154.466305][ T5805]  ? reacquire_held_locks+0x121/0x1c0
[  154.466337][ T5805]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  154.466362][ T5805]  ? __pfx_hci_event_packet+0x10/0x10
[  154.466392][ T5805]  ? rt_spin_unlock+0x150/0x200
[  154.466424][ T5805]  ? hci_send_to_monitor+0xe2/0x590
[  154.466452][ T5805]  hci_rx_work+0x3ee/0x1060
[  154.466475][ T5805]  ? process_scheduled_works+0x9ef/0x1770
[  154.466500][ T5805]  process_scheduled_works+0xad1/0x1770
[  154.466538][ T5805]  ? __pfx_process_scheduled_works+0x10/0x10
[  154.466570][ T5805]  worker_thread+0x8a0/0xda0
[  154.466608][ T5805]  ? __kthread_parkme+0x7b/0x200
[  154.466638][ T5805]  kthread+0x711/0x8a0
[  154.466669][ T5805]  ? __pfx_worker_thread+0x10/0x10
[  154.466692][ T5805]  ? __pfx_kthread+0x10/0x10
[  154.466719][ T5805]  ? rt_spin_unlock+0x150/0x200
[  154.466748][ T5805]  ? rt_spin_unlock+0x161/0x200
[  154.466774][ T5805]  ? __pfx_kthread+0x10/0x10
[  154.466803][ T5805]  ret_from_fork+0x599/0xb30
[  154.466827][ T5805]  ? __pfx_ret_from_fork+0x10/0x10
[  154.466853][ T5805]  ? __switch_to_asm+0x39/0x70
[  154.466882][ T5805]  ? __switch_to_asm+0x33/0x70
[  154.466906][ T5805]  ? __pfx_kthread+0x10/0x10
[  154.466934][ T5805]  ret_from_fork_asm+0x1a/0x30
[  154.466973][ T5805]  </TASK>
[  154.466981][ T5805] 
[  154.466986][ T5805] Allocated by task 5805:
[  154.466997][ T5805]  kasan_save_track+0x3e/0x80
[  154.467023][ T5805]  __kasan_kmalloc+0x93/0xb0
[  154.467050][ T5805]  __kmalloc_cache_noprof+0x1fb/0x6d0
[  154.467078][ T5805]  l2cap_chan_create+0x51/0x7a0
[  154.467106][ T5805]  l2cap_sock_new_connection_cb+0x182/0x2e0
[  154.467134][ T5805]  l2cap_connect_cfm+0x367/0x10e0
[  154.467159][ T5805]  hci_connect_cfm+0x95/0x140
[  154.467178][ T5805]  le_conn_complete_evt+0xf65/0x1420
[  154.467201][ T5805]  hci_le_conn_complete_evt+0x187/0x480
[  154.467222][ T5805]  hci_event_packet+0x78f/0x1260
[  154.467250][ T5805]  hci_rx_work+0x3ee/0x1060
[  154.467266][ T5805]  process_scheduled_works+0xad1/0x1770
[  154.467286][ T5805]  worker_thread+0x8a0/0xda0
[  154.467306][ T5805]  kthread+0x711/0x8a0
[  154.467331][ T5805]  ret_from_fork+0x599/0xb30
[  154.467350][ T5805]  ret_from_fork_asm+0x1a/0x30
[  154.467378][ T5805] 
[  154.467383][ T5805] Freed by task 6380:
[  154.467392][ T5805]  kasan_save_track+0x3e/0x80
[  154.467417][ T5805]  kasan_save_free_info+0x46/0x50
[  154.467439][ T5805]  __kasan_slab_free+0x5c/0x80
[  154.467465][ T5805]  kfree+0x1bd/0x900
[  154.467488][ T5805]  l2cap_sock_cleanup_listen+0xf0/0x450
[  154.467516][ T5805]  l2cap_sock_release+0x6e/0x270
[  154.467541][ T5805]  sock_close+0xc3/0x240
[  154.467566][ T5805]  __fput+0x45b/0xa80
[  154.467594][ T5805]  task_work_run+0x1d4/0x260
[  154.467622][ T5805]  exit_to_user_mode_loop+0xff/0x4f0
[  154.467649][ T5805]  do_syscall_64+0x2d0/0xf80
[  154.467666][ T5805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.467686][ T5805] 
[  154.467691][ T5805] The buggy address belongs to the object at ffff888028ea0000
[  154.467691][ T5805]  which belongs to the cache kmalloc-2k of size 2048
[  154.467708][ T5805] The buggy address is located 1280 bytes inside of
[  154.467708][ T5805]  freed 2048-byte region [ffff888028ea0000, ffff888028ea0800)
[  154.467730][ T5805] 
[  154.467735][ T5805] The buggy address belongs to the physical page:
[  154.467746][ T5805] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28ea0
[  154.467766][ T5805] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  154.467783][ T5805] flags: 0x80000000000040(head|node=0|zone=1)
[  154.467800][ T5805] page_type: f5(slab)
[  154.467819][ T5805] raw: 0080000000000040 ffff88813ff27000 ffffea0000a1bc00 dead000000000002
[  154.467836][ T5805] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  154.467854][ T5805] head: 0080000000000040 ffff88813ff27000 ffffea0000a1bc00 dead000000000002
[  154.467871][ T5805] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  154.467889][ T5805] head: 0080000000000003 ffffea0000a3a801 00000000ffffffff 00000000ffffffff
[  154.467906][ T5805] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  154.467916][ T5805] page dumped because: kasan: bad access detected
[  154.467926][ T5805] page_owner tracks the page as allocated
[  154.467935][ T5805] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 815, tgid 815 (kworker/u8:6), ts 15560210005, free_ts 0
[  154.467970][ T5805]  post_alloc_hook+0x234/0x290
[  154.467997][ T5805]  get_page_from_freelist+0x28c0/0x2960
[  154.468016][ T5805]  __alloc_frozen_pages_noprof+0x181/0x370
[  154.468035][ T5805]  alloc_pages_mpol+0xd1/0x380
[  154.468052][ T5805]  allocate_slab+0x86/0x3b0
[  154.468074][ T5805]  ___slab_alloc+0xb10/0x1400
[  154.468092][ T5805]  __slab_alloc+0xc6/0x1f0
[  154.468110][ T5805]  __kmalloc_noprof+0x15f/0x7e0
[  154.468137][ T5805]  scsi_alloc_target+0x138/0xbb0
[  154.468161][ T5805]  __scsi_scan_target+0x15b/0xd10
[  154.468190][ T5805]  scsi_scan_host_selected+0x375/0x690
[  154.468214][ T5805]  do_scan_async+0x124/0x760
[  154.468237][ T5805]  async_run_entry_fn+0xa8/0x450
[  154.468259][ T5805]  process_scheduled_works+0xad1/0x1770
[  154.468280][ T5805]  worker_thread+0x8a0/0xda0
[  154.468300][ T5805]  kthread+0x711/0x8a0
[  154.468325][ T5805] page_owner free stack trace missing
[  154.468333][ T5805] 
[  154.468338][ T5805] Memory state around the buggy address:
[  154.468349][ T5805]  ffff888028ea0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.468363][ T5805]  ffff888028ea0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.468377][ T5805] >ffff888028ea0500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.468387][ T5805]                    ^
[  154.468398][ T5805]  ffff888028ea0580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.468412][ T5805]  ffff888028ea0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.468422][ T5805] ==================================================================
[  154.468511][ T5805] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  154.468528][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  154.468552][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  154.468566][ T5805] Workqueue: hci0 hci_rx_work
[  154.468593][ T5805] Call Trace:
[  154.468601][ T5805]  <TASK>
[  154.468610][ T5805]  dump_stack_lvl+0x99/0x250
[  154.468637][ T5805]  ? __asan_memcpy+0x40/0x70
[  154.468664][ T5805]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.468692][ T5805]  ? __pfx__printk+0x10/0x10
[  154.468719][ T5805]  vpanic+0x237/0x6d0
[  154.468749][ T5805]  ? __pfx_vpanic+0x10/0x10
[  154.468776][ T5805]  ? preempt_schedule+0xae/0xc0
[  154.468807][ T5805]  ? __pfx_preempt_schedule+0x10/0x10
[  154.468847][ T5805]  panic+0xb9/0xc0
[  154.468875][ T5805]  ? __pfx_panic+0x10/0x10
[  154.468905][ T5805]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  154.468930][ T5805]  ? l2cap_connect_cfm+0x6d0/0x10e0
[  154.468956][ T5805]  check_panic_on_warn+0x89/0xb0
[  154.468988][ T5805]  ? l2cap_connect_cfm+0x6d0/0x10e0
[  154.469015][ T5805]  end_report+0x6f/0x140
[  154.469046][ T5805]  kasan_report+0x129/0x150
[  154.469078][ T5805]  ? l2cap_connect_cfm+0x6d0/0x10e0
[  154.469109][ T5805]  l2cap_connect_cfm+0x6d0/0x10e0
[  154.469141][ T5805]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  154.469170][ T5805]  ? mutex_lock_nested+0x154/0x1d0
[  154.469196][ T5805]  ? hci_connect_cfm+0x2c/0x140
[  154.469219][ T5805]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  154.469247][ T5805]  hci_connect_cfm+0x95/0x140
[  154.469271][ T5805]  le_conn_complete_evt+0xf65/0x1420
[  154.469297][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  154.469320][ T5805]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  154.469344][ T5805]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  154.469365][ T5805]  ? lockdep_hardirqs_on+0x98/0x140
[  154.469386][ T5805]  ? skb_pull_data+0xfb/0x200
[  154.469418][ T5805]  hci_le_conn_complete_evt+0x187/0x480
[  154.469446][ T5805]  hci_event_packet+0x78f/0x1260
[  154.469477][ T5805]  ? reacquire_held_locks+0x121/0x1c0
[  154.469511][ T5805]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  154.469535][ T5805]  ? __pfx_hci_event_packet+0x10/0x10
[  154.469566][ T5805]  ? rt_spin_unlock+0x150/0x200
[  154.469605][ T5805]  ? hci_send_to_monitor+0xe2/0x590
[  154.469633][ T5805]  hci_rx_work+0x3ee/0x1060
[  154.469656][ T5805]  ? process_scheduled_works+0x9ef/0x1770
[  154.469681][ T5805]  process_scheduled_works+0xad1/0x1770
[  154.469718][ T5805]  ? __pfx_process_scheduled_works+0x10/0x10
[  154.469750][ T5805]  worker_thread+0x8a0/0xda0
[  154.469781][ T5805]  ? __kthread_parkme+0x7b/0x200
[  154.469811][ T5805]  kthread+0x711/0x8a0
[  154.469840][ T5805]  ? __pfx_worker_thread+0x10/0x10
[  154.469864][ T5805]  ? __pfx_kthread+0x10/0x10
[  154.469890][ T5805]  ? rt_spin_unlock+0x150/0x200
[  154.469919][ T5805]  ? rt_spin_unlock+0x161/0x200
[  154.469945][ T5805]  ? __pfx_kthread+0x10/0x10
[  154.469974][ T5805]  ret_from_fork+0x599/0xb30
[  154.469997][ T5805]  ? __pfx_ret_from_fork+0x10/0x10
[  154.470024][ T5805]  ? __switch_to_asm+0x39/0x70
[  154.470053][ T5805]  ? __switch_to_asm+0x33/0x70
[  154.470082][ T5805]  ? __pfx_kthread+0x10/0x10
[  154.470111][ T5805]  ret_from_fork_asm+0x1a/0x30
[  154.470149][ T5805]  </TASK>
[  154.470431][ T5805] Kernel Offset: disabled