last executing test programs:

9m56.285407705s ago: executing program 0 (id=1):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa3, 0x624042)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000880)={0x2, @sliced={0xf62e, [0x1, 0xff, 0xd, 0x8, 0x2, 0x57e3, 0x9, 0x668c, 0x7, 0xfff9, 0x8, 0x7, 0x0, 0x51, 0x2e75, 0xdf, 0x7, 0xa, 0xeb, 0x0, 0x3a, 0x6, 0x7, 0x10, 0x0, 0x6, 0x3, 0xd6, 0x8000, 0x3, 0x64, 0x10, 0x0, 0xff, 0x9, 0xe, 0x0, 0x1, 0x6, 0x179a, 0xfff, 0xb, 0x9, 0x7b, 0x7, 0xd2e1, 0xff2f, 0x6], 0x4}})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtaction={0x174, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x160, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xf0, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x1}}}]]}, {0x88, 0x6, "76ffe750879df293cc98cbb82f1e92ac5d89af1345d287e290083b88f31229a6be80fcee203633e791fb7c085681d71fae633ff5ddc059feb4ba820134b4f2530c11222195c845122742db007ab236cddd6bcb2ae0a624ddf364211aead7e901bd19787bff4e694788768e2eed40dc6557df5687c9c0ec7dc8690c467eb72806f36dc66f"}, {0xc}, {0xc}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c00bffe128a890a0000040900010073797a3100000000080540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ffffa274140000001100010000000000000000000100000ae2cd848e2cfcf6036a5b769e968d534d7f22441bbc322a54398000f62d0da7a82625ad973bc27fcb6d3077a60240"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140))

9m39.735946026s ago: executing program 32 (id=1):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa3, 0x624042)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000880)={0x2, @sliced={0xf62e, [0x1, 0xff, 0xd, 0x8, 0x2, 0x57e3, 0x9, 0x668c, 0x7, 0xfff9, 0x8, 0x7, 0x0, 0x51, 0x2e75, 0xdf, 0x7, 0xa, 0xeb, 0x0, 0x3a, 0x6, 0x7, 0x10, 0x0, 0x6, 0x3, 0xd6, 0x8000, 0x3, 0x64, 0x10, 0x0, 0xff, 0x9, 0xe, 0x0, 0x1, 0x6, 0x179a, 0xfff, 0xb, 0x9, 0x7b, 0x7, 0xd2e1, 0xff2f, 0x6], 0x4}})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtaction={0x174, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x160, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xf0, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x1}}}]]}, {0x88, 0x6, "76ffe750879df293cc98cbb82f1e92ac5d89af1345d287e290083b88f31229a6be80fcee203633e791fb7c085681d71fae633ff5ddc059feb4ba820134b4f2530c11222195c845122742db007ab236cddd6bcb2ae0a624ddf364211aead7e901bd19787bff4e694788768e2eed40dc6557df5687c9c0ec7dc8690c467eb72806f36dc66f"}, {0xc}, {0xc}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c00bffe128a890a0000040900010073797a3100000000080540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ffffa274140000001100010000000000000000000100000ae2cd848e2cfcf6036a5b769e968d534d7f22441bbc322a54398000f62d0da7a82625ad973bc27fcb6d3077a60240"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140))

9m3.143901197s ago: executing program 4 (id=73):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
r1 = userfaultfd(0x800)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000d43000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3})
mkdir(&(0x7f0000000000)='./file1\x00', 0x74)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYBLOB="004c6bb357ec493ae55500"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r6, r5, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20)
recvmmsg(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000b80)=""/4119, 0x1017}], 0x1}}], 0x1, 0x42, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c0001800600060065580000100002800c001780080001800400", @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x10001}}, './file0\x00'})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

9m2.729518479s ago: executing program 4 (id=75):
r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prlimit64(0x0, 0x7, &(0x7f0000000200), 0x0)
accept4(r2, 0x0, 0x0, 0x80000)
write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0xfebe)
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0)
r5 = socket$inet6(0xa, 0x3, 0x4)
shutdown(r5, 0x0)
recvmmsg(r5, &(0x7f0000008880), 0x45b, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e44050c10"], 0x47)
write$vga_arbiter(r1, &(0x7f0000000040), 0xf)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
close_range(r0, r0, 0x2)

9m0.119596425s ago: executing program 1 (id=77):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x40000000015, 0x5, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00000000000000", 0x85}], 0x1}, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xf7)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r8=>0x0})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002500), r9)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4cb717950744651acff508182c98b102bc886b584a35b7d8230844a708d40fdda8d389e715cfe7729db0e5446235124ad5", @ANYRES16=r10, @ANYBLOB="010027bd7000fcdbdf2507000000080004007f0000011400020000000000000000000000ffff6401010114000300ff010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4040)
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r7, r8, <r11=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r8, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000080)={0x10, 0x1, r11})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x940003c8)

8m58.693246396s ago: executing program 1 (id=78):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x43c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0x9, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0x7ff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x9, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x1, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x84, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20044010}, 0x81)
recvmmsg$unix(r4, 0x0, 0x0, 0x10000, 0x0)

8m57.466125334s ago: executing program 4 (id=81):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r0=>0x0})
sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x207)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66)

8m57.270734911s ago: executing program 1 (id=82):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000040)=0x7, 0x4)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
prlimit64(r1, 0x6, &(0x7f00000002c0)={0x8db, 0xfffffffffffffffe}, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000002400)={0x2, 0x100}, &(0x7f0000002440))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400602, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="260fae079a65cb071000000f01c4b8c30000000f23c80f21f8350400e0000f23f80fc76e00660f3a0dd1000f9b13b8010000000f01d966ba6100b800000000ef66b82f008ee8", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x1c, 0x22, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="b7"]}, 0x1c}], 0x1}, 0x0)
ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r6, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x40000004}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null]}, 0x48)

8m56.955994065s ago: executing program 1 (id=83):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 's}z', 0x20, 0xfcd}, 0x2f, 0xfffffffffffffffa)
msync(&(0x7f0000580000/0x2000)=nil, 0x2000, 0x5)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @private1, 0x85bad93}]}, &(0x7f0000000080)=0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)

8m54.717154577s ago: executing program 1 (id=85):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32], 0x3}}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000000000", @ANYRES32=r7, @ANYBLOB="000000000000000010001a800c000a80050008004c000000"], 0x30}}, 0x4080)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d099}, 0x0)
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r10, 0x0)
sendfile(r10, r10, 0x0, 0x40008)

8m53.5948617s ago: executing program 1 (id=87):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa3, 0x624042)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000880)={0x2, @sliced={0xf62e, [0x1, 0xff, 0xd, 0x8, 0x2, 0x57e3, 0x9, 0x668c, 0x7, 0xfff9, 0x8, 0x7, 0x0, 0x51, 0x2e75, 0xdf, 0x7, 0xa, 0xeb, 0x0, 0x3a, 0x6, 0x7, 0x10, 0x0, 0x6, 0x3, 0xd6, 0x8000, 0x3, 0x64, 0x10, 0x0, 0xff, 0x9, 0xe, 0x0, 0x1, 0x6, 0x179a, 0xfff, 0xb, 0x9, 0x7b, 0x7, 0xd2e1, 0xff2f, 0x6], 0x4}})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtaction={0x174, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x160, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xf0, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x1}}}]]}, {0x88, 0x6, "76ffe750879df293cc98cbb82f1e92ac5d89af1345d287e290083b88f31229a6be80fcee203633e791fb7c085681d71fae633ff5ddc059feb4ba820134b4f2530c11222195c845122742db007ab236cddd6bcb2ae0a624ddf364211aead7e901bd19787bff4e694788768e2eed40dc6557df5687c9c0ec7dc8690c467eb72806f36dc66f"}, {0xc}, {0xc}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x918)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00')
preadv(r7, &(0x7f0000000780)=[{&(0x7f0000000440)=""/140, 0x8c}], 0x1, 0xf, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c00bffe128a890a0000040900010073797a3100000000080540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ffffa274140000001100010000000000000000000100000ae2cd848e2cfcf6036a5b769e968d534d7f22441bbc322a54398000f62d0da7a82625ad973bc27fcb6d3077a60240"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

8m53.103135653s ago: executing program 4 (id=89):
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioperm(0x2, 0x7fb, 0x100)
ioperm(0x0, 0x3, 0x1)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r0, 0x100000000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, '.\x00'})
ioctl$TCGETA(r1, 0x5405, &(0x7f0000000040))

8m51.251977951s ago: executing program 4 (id=91):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000011d80)=@newtfilter={0x43c, 0x2c, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff1}, {0x9, 0xfff1}, {0xfff3, 0x7}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x0, 0x1, 0x21, 0x6, 0x4, 0x9, 0xa, 0x6, 0x3, 0xe23f, 0x243c, 0x58b, 0x1000, 0x2, 0x5, 0x6, 0x80000000, 0x1, 0x80000000, 0x7, 0x1, 0x7, 0xc7, 0x7, 0x5, 0x7, 0x200, 0x7, 0x7, 0xde7, 0x3, 0x88f00000, 0x30000000, 0x2, 0x6, 0x3, 0x5, 0xd3a, 0x3, 0x5, 0x4, 0x0, 0x0, 0x6, 0x39f0, 0x72, 0x7, 0x0, 0x28, 0x91, 0x4, 0x2, 0xffff, 0x3, 0x7, 0x1, 0xcc9, 0x6, 0x10000, 0x0, 0x1, 0x2, 0x9, 0xfffffffb, 0x7, 0x1, 0x0, 0x9a, 0xe25, 0x5, 0x9, 0x80, 0x200, 0xffff, 0x0, 0x7ff, 0x4027, 0xa, 0x1, 0x4, 0x8, 0x700, 0x0, 0xe97, 0x5, 0x4, 0x4, 0x6, 0x0, 0x10001, 0x4, 0x7, 0xb36, 0xe, 0x6, 0x6, 0x9, 0x7, 0x8000, 0x2, 0x3, 0x20, 0x0, 0x0, 0x101, 0x7, 0x13, 0x10, 0x2, 0xc, 0x5, 0x7, 0x4, 0xfffffffa, 0x9, 0x1, 0x1, 0x8, 0x81, 0x2, 0x0, 0xa, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0x8, 0x6a0ff34, 0xfffffff8, 0x0, 0x3, 0x7, 0x36, 0x401, 0xfffffff5, 0xac4, 0x5, 0x40, 0x80000000, 0x1, 0x85f, 0x3, 0x8, 0xfffffffc, 0x0, 0x4, 0x3, 0x5, 0x3, 0x300000, 0x1, 0x0, 0x8cb, 0x0, 0x9a89, 0x3, 0x1, 0xd, 0xfffffff8, 0xffff, 0xfffff1b5, 0x94f, 0x7, 0x2, 0x45, 0x8, 0x7, 0x2, 0x7fff, 0x2, 0x401, 0x0, 0x10000, 0x0, 0x4, 0x0, 0x6, 0x3, 0x1, 0x6, 0xffffffff, 0x1ff, 0x9, 0x951e, 0x10000, 0x2, 0x7fffffff, 0x6, 0x3, 0x6, 0x9, 0x1, 0x7, 0x3, 0x9, 0x2, 0x3, 0x4, 0x5, 0xa, 0x7d8, 0xff, 0x6, 0x2, 0x5, 0x11, 0x2e0c, 0x1ff, 0x0, 0x8, 0x6, 0x4, 0x3, 0x80000000, 0x9, 0x4, 0x5, 0xd, 0x6899, 0x2d87, 0x2, 0x8, 0x8, 0x8, 0x5, 0x4, 0x9, 0x1, 0x3, 0x6, 0x9, 0xff, 0x2000, 0x4, 0x75, 0x1, 0x4, 0x4, 0x0, 0xd, 0x5, 0x433, 0x9, 0x4, 0x5, 0x7ff, 0x200, 0x84, 0xfffffffb, 0x6, 0x5, 0x7, 0x7ff, 0x80000001]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x20044010}, 0x81)
recvmmsg$unix(r4, &(0x7f0000004100), 0x0, 0x10000, 0x0)

8m49.470020706s ago: executing program 4 (id=92):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa3, 0x624042)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000880)={0x2, @sliced={0xf62e, [0x1, 0xff, 0xd, 0x8, 0x2, 0x57e3, 0x9, 0x668c, 0x7, 0xfff9, 0x8, 0x7, 0x0, 0x51, 0x2e75, 0xdf, 0x7, 0xa, 0xeb, 0x0, 0x3a, 0x6, 0x7, 0x10, 0x0, 0x6, 0x3, 0xd6, 0x8000, 0x3, 0x64, 0x10, 0x0, 0xff, 0x9, 0xe, 0x0, 0x1, 0x6, 0x179a, 0xfff, 0xb, 0x9, 0x7b, 0x7, 0xd2e1, 0xff2f, 0x6], 0x4}})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtaction={0x174, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x160, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xf0, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x1}}}]]}, {0x88, 0x6, "76ffe750879df293cc98cbb82f1e92ac5d89af1345d287e290083b88f31229a6be80fcee203633e791fb7c085681d71fae633ff5ddc059feb4ba820134b4f2530c11222195c845122742db007ab236cddd6bcb2ae0a624ddf364211aead7e901bd19787bff4e694788768e2eed40dc6557df5687c9c0ec7dc8690c467eb72806f36dc66f"}, {0xc}, {0xc}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x918)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00')
preadv(r8, &(0x7f0000000780)=[{&(0x7f0000000440)=""/140, 0x8c}], 0x1, 0xf, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c00bffe128a890a0000040900010073797a3100000000080540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ffffa274140000001100010000000000000000000100000ae2cd848e2cfcf6036a5b769e968d534d7f22441bbc322a54398000f62d0da7a82625ad973bc27fcb6d3077a60240"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6010104000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8b3eea7d7200801e"], 0x0)

8m37.243196448s ago: executing program 33 (id=87):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa3, 0x624042)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000880)={0x2, @sliced={0xf62e, [0x1, 0xff, 0xd, 0x8, 0x2, 0x57e3, 0x9, 0x668c, 0x7, 0xfff9, 0x8, 0x7, 0x0, 0x51, 0x2e75, 0xdf, 0x7, 0xa, 0xeb, 0x0, 0x3a, 0x6, 0x7, 0x10, 0x0, 0x6, 0x3, 0xd6, 0x8000, 0x3, 0x64, 0x10, 0x0, 0xff, 0x9, 0xe, 0x0, 0x1, 0x6, 0x179a, 0xfff, 0xb, 0x9, 0x7b, 0x7, 0xd2e1, 0xff2f, 0x6], 0x4}})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtaction={0x174, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x160, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xf0, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x1}}}]]}, {0x88, 0x6, "76ffe750879df293cc98cbb82f1e92ac5d89af1345d287e290083b88f31229a6be80fcee203633e791fb7c085681d71fae633ff5ddc059feb4ba820134b4f2530c11222195c845122742db007ab236cddd6bcb2ae0a624ddf364211aead7e901bd19787bff4e694788768e2eed40dc6557df5687c9c0ec7dc8690c467eb72806f36dc66f"}, {0xc}, {0xc}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x918)
r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00')
preadv(r7, &(0x7f0000000780)=[{&(0x7f0000000440)=""/140, 0x8c}], 0x1, 0xf, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c00bffe128a890a0000040900010073797a3100000000080540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ffffa274140000001100010000000000000000000100000ae2cd848e2cfcf6036a5b769e968d534d7f22441bbc322a54398000f62d0da7a82625ad973bc27fcb6d3077a60240"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

8m32.949611777s ago: executing program 34 (id=92):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa3, 0x624042)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000880)={0x2, @sliced={0xf62e, [0x1, 0xff, 0xd, 0x8, 0x2, 0x57e3, 0x9, 0x668c, 0x7, 0xfff9, 0x8, 0x7, 0x0, 0x51, 0x2e75, 0xdf, 0x7, 0xa, 0xeb, 0x0, 0x3a, 0x6, 0x7, 0x10, 0x0, 0x6, 0x3, 0xd6, 0x8000, 0x3, 0x64, 0x10, 0x0, 0xff, 0x9, 0xe, 0x0, 0x1, 0x6, 0x179a, 0xfff, 0xb, 0x9, 0x7b, 0x7, 0xd2e1, 0xff2f, 0x6], 0x4}})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x9)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtaction={0x174, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x160, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd, 0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xf0, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}, {0x0, 0x0, 0x1}}}]]}, {0x88, 0x6, "76ffe750879df293cc98cbb82f1e92ac5d89af1345d287e290083b88f31229a6be80fcee203633e791fb7c085681d71fae633ff5ddc059feb4ba820134b4f2530c11222195c845122742db007ab236cddd6bcb2ae0a624ddf364211aead7e901bd19787bff4e694788768e2eed40dc6557df5687c9c0ec7dc8690c467eb72806f36dc66f"}, {0xc}, {0xc}}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)
r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r6, &(0x7f0000000040)="e2", 0x918)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00')
preadv(r8, &(0x7f0000000780)=[{&(0x7f0000000440)=""/140, 0x8c}], 0x1, 0xf, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c00bffe128a890a0000040900010073797a3100000000080540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ffffa274140000001100010000000000000000000100000ae2cd848e2cfcf6036a5b769e968d534d7f22441bbc322a54398000f62d0da7a82625ad973bc27fcb6d3077a60240"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6010104000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8b3eea7d7200801e"], 0x0)

7m52.684095703s ago: executing program 3 (id=146):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x40000, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4083, 0xff3}], 0x2}, 0x5}], 0x3, 0x2, 0x0)

7m43.103510369s ago: executing program 3 (id=156):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d00)={'batadv0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r3, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0xe651, @local, 0xba}, 0x1c, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="d08dd54232f03297e17591", 0xb}, {&(0x7f0000000740)="64a9ddae8c2b4101f986a7d00c59ae7b29aedc3e08b7eeccc027504185ee9045", 0x20}], 0x2, &(0x7f00000008c0)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000c40)="f990", 0x2}], 0x4, &(0x7f0000000d40)=[@rthdr={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x4, 0x0, [@empty, @private1]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x1a, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x8, {0x2, 0x0, 0xc, 0x9}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0xd42}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x89, 0x8, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xff}}], 0x138}}, {{&(0x7f0000000f80)={0xa, 0x4e20, 0xdaa1, @private0, 0xb000000}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000000fc0)="b1af22980126b6a7649fc1f5614e771586736cde166386cae152f20b9ec272d23522a63bb02d8848754d2fb95ce6fe14fdf6707bc8", 0x35}, {&(0x7f00000010c0)="5459c95e6f52ccbb55480dce42a02d7fe948b5c69ce186fe78186c896fe12232623050a39c9c5ce543dcc3709f56334870d4712710eb4f9124d7", 0x3a}, {&(0x7f0000001140)="588d1dd7c75d8becfa4d7c16c5235fdc5d9546d77c40668d0c321ceaea99147c1d22477196ed81db9c108d9301b93c157e769718719502a2fb5e181d3bd16b0c73e62aa640a5be8b043584e82564d50fbb451e6164d6d4e9265c8b0729110bfac2b7cc73521096e809679347a0801addbdefaea8dfb2383561512c8692735ada643768d020efc35d070816b08992a8a6250b51e90ef23ed33263b35ecba32fd819d912ec3a0513b9cf58", 0xaa}, {&(0x7f0000001240)="139dd4c56cb292ecce869d289cdbfb29721a052d17a2a83adb3f1f18dd2acb24b2a385bf3589bf87c639661949c3862dcefdd1a44016ec950e4a00a23a6419fa53a1f36caa6364b78a3da1e54faa7801348fd27521fe719ddfde26b270906eb1dc33cac6aab5f3002b67bb98dac9d8a7e441ac9924a91bc52386d1cb92ce43ed3870f03edefa35afcd6c94ecef198dc1c47052dde1765add01dbd2eca4195a7b55bc5982fcf70da05ae54921660cfbe262b4771886d1a97f1c4e017cfc5879977f2179bf0e25b2a16339982db35af086662af4a18c9332f9144c3b3799ba96801f6c5f33e0e32c5d414512d4c38c79b6c55ffb92f643b475bac1053147e82363769f69ac07c23a684f736bf3c453495796edd94ffe0a1b025d894735e1489bdb140a1ef1290a11f68f35087e8730f6877afbb15402d6b63e710fef2cb62b4985a6e66a5b1321381ff83e9ba33ed7c1ff3e2f64630b0196ac275eafc8f53af909250c927823111003d3a1625016389a918406016db996ced758b984925f3855c4a232bec25f4708f822b8cca848d335d0f96a8dda28770eb2ccf0b40583dd9b695dd5fde5de9bb3705b7873ea5e3a1bfd76b4d477bdce6219144110f0610bca86e697395f3eeaa7b93b626d63e0d32c63bddbac80e91f30ac631a060c80c4f1d990cdbe3b420dae0fb703fbe3174cf3cce27098e5c5533d06c179ade2f5b250d6bdcd76ac1c88eb5a9bc612ee3f3926f796d952c777aaf113812886572dca670226eebb51db5811bfef33b382cadbf597f861861272ca95d335b31abd6e0998496816df448f6899c26aaa7e2b2f13d81966ae6a2a6d78d9d7a7771678f9fc5ad59c12f4d1169eed6433c5874ba4f0646c242b39a91bcc4cec43f2ba3f7be25d4d350ac536f6781d9411bfd2ce56e66523c274d6fed84bdd1742235b070d62cd8871ecd6373e8c2f98f06ed503affcded0f9304a1fe35038924e822ae37accecf730407a7f2cb1ce8e81cfd9eab939b3afc893315d0859b0cb3f0c2eff3223c064d4ae198a7b1fcefe19f807f6250e85b549e2aa9fb29ceaafeb89ef9ffc71c749883cf295ddd3f498ec0a9a14eff094b28b34e5fc7dc50808a99c420f47b9d1a518109960ed2a4c554c19563ab21d50cd2c1b8f48e40d52250b2a6b4d3d605c1403579566f69e27d7184787de4ae7c05ea963a9d58743dd548470dbc61452774eb8d05a72eca7e0284b136adacc4254f0c27661f3db32a04bee7afa699340cb7977421c62b42dc2db214b7041707269d748e65ec80cacb68ea401ec89f99f6b0c0a2ccfea20116bd556dec69adfcf620bb8d550e238d53957f79f36ca3ea90504dc8ba96e31f4540b34b0d2411c155e70fd32ad3415fa892747056238220efe55e1865590a51151d2840cb577d267f3b9ce6189420289d29aeecefe8bd3c177e28b47c7893a650c45275e744eda186e3efd5db3b0633fed09d9fcfafb1fb9767b49c49423e7247e446b160023e2731d8f81c49083801ed7af6f5325d6fea3f7e09bea56d155921d0929060e829a302d3f849c3c5aba33a5e950c62a7d909abd7d2b1f0fc55e729d791a975f1bff3a490e280b98d21ddebb6151d26b97a533447ade7dc83d4cecf1907ea1fcc54588d7c3dafd558f2d4a00f88e3c09df4b09bbd2ee272aed30a66f2038232d1b9cd1b9d1ba75573c62f9e9124d6c57c09739a4ff1eada76780263a6c1c7eeadbbaa215292f1535c43a7de097feeef04e237a62937ac369a4ac338f9ae61ad4b81e8832c0cab8842edc832894f6df13c2daa0ef65a6a599c8cf3122c208c3d1ae87b1917013d567abd972f85bc75242ee1ac6109f7f78dce06132ce6ed9b2e7b435d3683f0e7a229c7d98f0be5099163246a3d7f23e9b4f0ca34e1cf1a877494be4835940c2458a096e4042089219a60bf4617ab57c7732192dafcc92f4ebda196d254d48b2111c8d8b667b47165da6a6d4d1e0611ec26c85fc6933077ba70c1db5f50171956ec6ad4a9e12fdbbe9ef3a26a29ddb1a6f644b2e55211840161a53c60b67643697fdb2300efaf39014e9416d142071a115e744e442223426b8472302eb29677680a0839a217128e617e77e1b861b8d6c4b77eaf1fd5901e26e3060c08d52aa79d98b765062c2349cd3a3cd588a943ded99a2a54047597e73bd7af3923caca73bf788d19d08881a613f8e0f588db66dfcbc44989f2d7e2d0b9a935e0379360ed22dacf2dbea5a16743beb09c3332949c5640bc8aecf6a74cb0611e9993a5ca653c7dd519575e80bbfa6021d0d5b66e4888acec46f7a8669670667802363a07813302896591bb8a58feee7fad3e4a0960d463503b20aabe65e16808919f2606226af46eca3d419a35ba07d0ac0acd59c5cec401b3f67a73b04c96c896b53e1227757ca1e7ed33e72de6b93aaee84899284465c5b25ce87148aef2fe87bb722487d39e804229fa37406914fec57476508e43ebdec708cb2f0c9e3dc2c07f349f68ac1dba534f1f5e83deb4d7c697c6040d2a4c6bc1cc083fb57c9ee409e115b4fb245d6049f2959a6ebca7d112c363bca54e25e08f8d774a4984c1b48b26eb6e58232807e167fc47c1cfbe8b7d9660cb1d13bd159266b85413048f30a92f6f3f3014a93e74cd7636153dec9eb89899f034ced8fac83b837f1cf90558acf9ecc79baef36a83768d64dbca9f5824733021ff0f01089c82889915876a31ccd3b23af1130e3b29ba2c8fc807448c72cf1e49efd75bbe93ac0c5c11ba5ec628d19ed98e2e6f6ae5c82703955abd460ebe5095e99a971f8cd4b66325db88501d03bcd3ca3a0d3e7c2a0159d72319504ba5c19410be9bfe46d56a71e1b13ae05e159b8fb77abeb078a82896ddab91d02cea4ce6466ee0c09fa560a35fe573f1487d0e096d8cf56f7cb16b3140f400a5c54be82fd659989bb46c15e7f5e32ee7ffc569db14af565f82a69ff5bbb80ca36cecefb2331fa1c727b7081a7eb4c5ca9452b10858b5db121bce99f2114d4154b942733e18da4efd32ea555d61ecdd25b273530dafad4bf2cb50cd299315da0ad17850cc835fe88d6d5b695e1e84f08f9fb7e41d54c9de2ec74233efdcd4480664ff785e9141cf9928106169302915de20189983866dbc7515e23cb84681dc2f9bdf4fe7523b0ab6529e2ecd740bc2cf8c38b5d1c8ec23fca1386f0f52144b358e671d2db83d8a486f16d8774b4f2baaff61bbf3ff051d562b886fa03bf991d6fb2b7f514e8b7c62b6f31be8e3746428856b0c645bc300d8bdd38c8e9a092022d99106365dc342b7bc5532b3e043f2986137707ff374d9eac5aea366511ae1e45c7625e82ef07e1d584dc5ac93e98add12918c585e50c9f50647158bf9339c8c525a56ce229511acee23fe4f7ea0214b45cf076e52663a88efc874b40a19bdffe91630085bd59ddb70429b06be54ca6531bce6a8ffab67d9e569933b1ddd107e15f072f13101df60957f9646e46c14f125c42ea8733a8034569e5686a72cb7ce76ba18de425f6874a0996159b15bda891988a6db8655959e3cdff30a881353e732cc6ab4e0c9f4b08f29c18496cc46180940a20e30b678b4029ba6907e8fcb9e7a1dbb9bcb5ab3b10227e4815a8acfbab899f50d7fbde6623ade06b13390ca62d6d5f0e60ef2d29dad6436b26a12693d268664d0705b01cee1bdbf09d6f9a43e3e22db813e9f6320c0202095278bfb4ff9f7f5ed62ddb0f6c580e4a34825b9b7c76f77d2b74f1169aa76ea75617d24e5096063b44b28048e5e59554f437f45f6973dfeedb7faf1eef505a07aa738f1bdb542f144b7b2252072103846cecb082752116f29b891728f90ed7411efe397a4c0d6f8dba70c23fb2f2f61b78435b0ce33a9024772c237b32eabfbb86384427a41d9c7c87b8e5233d56dc2f46f9b56abf16a452a3b6ed2f2e9963e118f7892f3af16e9bf7ebef8bc02b319ae58dec2bb0771af3350005f90c46404e6c9846dfbb70391420977cfd9934ee02b0336aa5b99f87157388a6448f0599b8acd065046ab9cb7c9d222ff83c61c7398d6b547e7a443a41d0e0a9360e5ba34fa5902a493afea16ca865be59eb92fd05c8eb952f66b79494468df4067f9e169c817ac4e3f12d3c3d395c817df3d36f5748e81affe761f96b1879ddfb0e3810d45833617a72e07bdf25291d5b79d987c0185991d5e23db3b104535cf8d7e47bccc3059982ac8ee69cd7a829688d6a6797d458c7ffa0f17a52b70c8a9121f2d6ed057b581069d4b0754adad4b278b936005d211843b8071d2239e1959c2766074815939f08868e81334d59338c85c8cc15beeafe6b8e412181ac15e1f8e2ba8f9fe0a7dcff88f362a227dd044a63f1aeabc137152d4a5dfd1d3a161fc707304989176edbfc3d430d3f7acce189128f354139e20fd830316419883c6e37ebd97910a552ccd51385641e4d376be95fc9c5aa38a24911ea15b85e2254a0cf7c69db13ae74e740b906076c9025f417b4600a2ad68d21f251513b9d2d67855c54373e96f96e7ced684dae0070c896cb17ea29ae43f276455d9f998ec81c5b295e7be3d938d80d9074629b89dfdf62c950e52faf4f1ea015f8a40b1210c9bec40ffc11bdaea6a61795a72dbf0437557076b746cb25fadac18349c28cf5faf9c403d3c1e173ec3df397e81c699d5c339dbe2aeb7434c515142a9c801cbd64822c9b5d09eb13f8644b79fecedcf26e5594ead9d508e33cb4c0391817d9ce4b59363522ad35e3055eb94ae6d985d61f395c1de3609082cdd99b12e196b0f668fb102375714d39c31149ca9ecc5b0477c82e631c735f9e927d7c4d2d799a1e52317830a01732437e810581242ad9f69e513a036a6b8c46181aa0e0401c7af43669841c4d18b6fb3c928cab1ccdd9c05c5fc2bd1b70cc014eecf731a38f7fe01affa527ba39ce3e6d3cb143ff0c42f3877546bc5c81acc5cd08734808f6e217d3e6e2686782b02a1402924235e2456e9146b2977f545aa6c8a68d788f124538e23363a8868b9ffe86754da2ff29e8b51355729e8a93da3a04c11f314b9920bcfa550b8239f7ae79cd47c2a2113957c5e6cc0f9702f4dd43daf8053cf35086e87dff7786c1c7db843b4c1d94ea8e62b4a2fdd2f06c220a57fc4817c1670913666bbb61c3252c752322d65f299314e4092af481d8ef8a3037382f9f8beb207971e66faae8f3bc54067a920670afcfa078229d9469df4bd86959abcb627f4164f01665586a4df483fa221557e4ed809647d6c07b13528f52990a14c3bd0f3656162e934a9b372c151ece24ff7c96c1dcb64c035f6eed657270887f27c7fc5e2e969357f2af976f2f21ac0ec17a4f7586070beb9a427292593e4c0654e37ed20facf4ee9ae9d6154ec822b50fda268f830ecfad4b4dd135cf9275cbd3ec3c8df204113db4ee8163cbb347953581cdd579001fc3a6f0b2e947cd19e34067ae23492084aadc0ca9c0a284e9f18dac69b255bd3ded762fcd8cecd65efcd0675677835cae6600a6b14d96f794efe000ddd0a6709a09798baf99603b393700fca9b0d1498c5790dee2da9e289c83a89d5ac713e8c77a5a83befb9f90ba3bcc1e88899debd258d3b617142fdec813f6b23c0417832a73833ccbdd7750d3bd28397a9d77ff43e6e3f1859fc915aa53df628a6b3acdde5df6670e97cba89c4b722df530e02fe8c433ff861fa8f0f18d014bf1d654cde8ce5b5d1b23b6483b4def0296ca6abd718f08e85b298d95d0d8b271b158936b0cb6abb659a2179db51ae6b26aa5", 0xffe}, {&(0x7f0000006380)="06879f733dcf260fd2f97e81797a57f910702d2899bbbbdd3e78afec4de7012b0e7362145bd0ab267549f391db6636425b6003666b2a766a1dbfaeeb37f1a195fcbb6d8b734bab9fcf903f2d96b220058a398b889bb8b3212c9afe8da0c5a58cb3835e122e83fcd911350076b8159cef92d2c01d7821a2c09beee0b090e73e011b4a997fdaddd8cfb7acea3e40e9a4483fd9226b2b27e0d45ebb4f6b833f8b36a86841019a2633e6bc4e5fa7a1f4c4bfd37cb5d702444adeca8203dd203d8946e923639e453aa2bb22fc96a802cd7c2d134a5f8902", 0xd5}], 0x5, &(0x7f00000023c0)}}, {{&(0x7f00000048c0)={0xa, 0x4e20, 0x3, @mcast1, 0x36}, 0x1c, 0x0, 0x0, &(0x7f0000005d40)=[@dstopts={{0x20, 0x29, 0x37, {0x11, 0x1, '\x00', [@generic={0xfe}, @jumbo={0xc2, 0x4, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x83, 0x7, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x18, {0x1, 0x4, 0x9d, 0x3, [0x2, 0x7fffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xe}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x87, 0x6, '\x00', [@generic={0x8}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0xffff, [0xc, 0x80]}}, @ra={0x5, 0x2, 0x43e}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x5}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x84, 0x6, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x2, 0x6, 0xce, 0x3, [0x3e7, 0x1, 0x1]}}]}}}], 0x160}}, {{&(0x7f0000006080)={0xa, 0x4e23, 0x0, @mcast1, 0x6}, 0x1c, &(0x7f0000006140)=[{&(0x7f00000060c0)="7dd6b96f4007d590441cbddc89d4a3cc4e12f69c84f6d9075fdab86866ba68e90314", 0x22}], 0x1, &(0x7f0000006180)}}], 0x6, 0x43498276faa3c0ee)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r8, 0x0, r11, 0x0, 0x39000, 0x0)
splice(r10, 0x0, r8, 0x0, 0x408c8, 0xe)
write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[], 0xfffffe3e)
writev(r6, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f0000001300)="ab0af7f5f1ed872d9ba97ccea3d5309a4a886aaf86d86f2f047c13a52c028c11d7ba84844fbfe97be0836ccfde9d3057d0ae0e49fb85f55ae175d8bc0627d596041b9a56707e950bc812d6c4ba13b167496816b8adc25f9aeb047f25e65571e09014e59e75cbb6b444a6159c294217ed639c83fc59db5e124af23539e8c4d3e4c73918a10064f1fb290b1fd541922e843af4c653bf04bb5c8e233825dde729c153a0dbbf64ea80965727ea99f805bee6f60203565e2c22e89f529aca707206ea4c7ed184f259dc9818901745359401c44a7c", 0xd2}, {&(0x7f00000001c0)}, {&(0x7f0000001580)="33cc159610c6a9056d01f0a95abfc04087e3e95836ee5acade98e890bbad2b9dada30e6f80debf275ab16da5ffe17fb05096ed498c055e8cb9f6a885", 0x3c}], 0x5)

7m40.369930629s ago: executing program 3 (id=158):
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0)
ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x7, 0x7, 0x0, 0x2, 0xfb, "baf2157a453a208132d68c067b02b4b38920af", 0x6391, 0x9})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"})
r2 = syz_open_pts(r1, 0x103100)
dup3(r2, r1, 0x0)
splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) (fail_nth: 4)

7m39.823577415s ago: executing program 3 (id=160):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000d00)={'batadv0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r3, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006200)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0xe651, @local, 0xba}, 0x1c, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="d08dd54232f03297e17591", 0xb}, {&(0x7f0000000740)="64a9ddae8c2b4101f986a7d00c59ae7b29aedc3e08b7eeccc027504185ee9045", 0x20}], 0x2, &(0x7f00000008c0)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000c40)="f990", 0x2}], 0x4, &(0x7f0000000d40)=[@rthdr={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x0, 0x4, 0x0, [@empty, @private1]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x1a, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x8, {0x2, 0x0, 0xc, 0x9}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0xd42}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x89, 0x8, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xff}}], 0x138}}, {{&(0x7f0000000f80)={0xa, 0x4e20, 0xdaa1, @private0, 0xb000000}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000000fc0)="b1af22980126b6a7649fc1f5614e771586736cde166386cae152f20b9ec272d23522a63bb02d8848754d2fb95ce6fe14fdf6707bc8", 0x35}, {&(0x7f00000010c0)="5459c95e6f52ccbb55480dce42a02d7fe948b5c69ce186fe78186c896fe12232623050a39c9c5ce543dcc3709f56334870d4712710eb4f9124d7", 0x3a}, {&(0x7f0000001140)="588d1dd7c75d8becfa4d7c16c5235fdc5d9546d77c40668d0c321ceaea99147c1d22477196ed81db9c108d9301b93c157e769718719502a2fb5e181d3bd16b0c73e62aa640a5be8b043584e82564d50fbb451e6164d6d4e9265c8b0729110bfac2b7cc73521096e809679347a0801addbdefaea8dfb2383561512c8692735ada643768d020efc35d070816b08992a8a6250b51e90ef23ed33263b35ecba32fd819d912ec3a0513b9cf58", 0xaa}, {&(0x7f0000001240)="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", 0xffe}, {&(0x7f0000006380)="06879f733dcf260fd2f97e81797a57f910702d2899bbbbdd3e78afec4de7012b0e7362145bd0ab267549f391db6636425b6003666b2a766a1dbfaeeb37f1a195fcbb6d8b734bab9fcf903f2d96b220058a398b889bb8b3212c9afe8da0c5a58cb3835e122e83fcd911350076b8159cef92d2c01d7821a2c09beee0b090e73e011b4a997fdaddd8cfb7acea3e40e9a4483fd9226b2b27e0d45ebb4f6b833f8b36a86841019a2633e6bc4e5fa7a1f4c4bfd37cb5d702444adeca8203dd203d8946e923639e453aa2bb22fc96a802cd7c2d134a5f8902", 0xd5}], 0x5, &(0x7f00000023c0)}}, {{&(0x7f00000048c0)={0xa, 0x4e20, 0x3, @mcast1, 0x36}, 0x1c, 0x0, 0x0, &(0x7f0000005d40)=[@dstopts={{0x20, 0x29, 0x37, {0x11, 0x1, '\x00', [@generic={0xfe}, @jumbo={0xc2, 0x4, 0x7}]}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x83, 0x7, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x18, {0x1, 0x4, 0x9d, 0x3, [0x2, 0x7fffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xe}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x87, 0x6, '\x00', [@generic={0x8}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0xffff, [0xc, 0x80]}}, @ra={0x5, 0x2, 0x43e}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x5}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x84, 0x6, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x20, {0x2, 0x6, 0xce, 0x3, [0x3e7, 0x1, 0x1]}}]}}}], 0x160}}, {{&(0x7f0000006080)={0xa, 0x4e23, 0x0, @mcast1, 0x6}, 0x1c, &(0x7f0000006140)=[{&(0x7f00000060c0)="7dd6b96f4007d590441cbddc89d4a3cc4e12f69c84f6d9075fdab86866ba68e90314", 0x22}], 0x1, &(0x7f0000006180)}}], 0x6, 0x43498276faa3c0ee)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000180)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r8, 0x0, r11, 0x0, 0x39000, 0x0)
splice(r10, 0x0, r8, 0x0, 0x408c8, 0xe)
write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[], 0xfffffe3e)
writev(r6, &(0x7f00000015c0)=[{0x0}, {0x0}, {&(0x7f0000001300)="ab0af7f5f1ed872d9ba97ccea3d5309a4a886aaf86d86f2f047c13a52c028c11d7ba84844fbfe97be0836ccfde9d3057d0ae0e49fb85f55ae175d8bc0627d596041b9a56707e950bc812d6c4ba13b167496816b8adc25f9aeb047f25e65571e09014e59e75cbb6b444a6159c294217ed639c83fc59db5e124af23539e8c4d3e4c73918a10064f1fb290b1fd541922e843af4c653bf04bb5c8e233825dde729c153a0dbbf64ea80965727ea99f805bee6f60203565e2c22e89f529aca707206ea4c7ed184f259dc9818901745359401c44a7c", 0xd2}, {&(0x7f00000001c0)}, {&(0x7f0000001580)="33cc159610c6a9056d01f0a95abfc04087e3e95836ee5acade98e890bbad2b9dada30e6f80debf275ab16da5ffe17fb05096ed498c055e8cb9f6a885", 0x3c}], 0x5)

7m37.641506265s ago: executing program 3 (id=161):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340})
ioctl$KVM_RUN(r2, 0xae80, 0x20)

7m36.70169964s ago: executing program 3 (id=163):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7dea, 0x842)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x109)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tcp_congestion(r2, &(0x7f0000000240)='cdg\x00', 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x13)
syz_emit_ethernet(0x56, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @local, @void, {@canfd={0xd, {{0x4}, 0x2c, 0x0, 0x0, 0x0, "3976063dc65b15bac5cc4cbf152dba9272584ac28dde6da41cc813a2f4bba7f9a5403201e71cb8a4681ca7d289c59b03a89a21f5467dad443a34c67fb904df62"}}}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071435060387000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x28}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3)

7m21.238033927s ago: executing program 35 (id=163):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7dea, 0x842)
mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0)
mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0)
ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x109)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tcp_congestion(r2, &(0x7f0000000240)='cdg\x00', 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x13)
syz_emit_ethernet(0x56, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @local, @void, {@canfd={0xd, {{0x4}, 0x2c, 0x0, 0x0, 0x0, "3976063dc65b15bac5cc4cbf152dba9272584ac28dde6da41cc813a2f4bba7f9a5403201e71cb8a4681ca7d289c59b03a89a21f5467dad443a34c67fb904df62"}}}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071435060387000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010100, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x28}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3)

25.81215838s ago: executing program 2 (id=429):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
r1 = syz_open_pts(r0, 0x101)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='environ\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

24.825774322s ago: executing program 2 (id=430):
open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0)
pipe(&(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000200)='./bus\x00', 0x4)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x3a)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1)

23.730950586s ago: executing program 2 (id=431):
syz_io_uring_setup(0x88b, 0x0, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
userfaultfd(0x80001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0xc0, 0x0, 0x0, 0x0, 0x3})
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12)

22.032524023s ago: executing program 2 (id=432):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

20.376241828s ago: executing program 2 (id=433):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x80044100, &(0x7f0000000140)=0xfff)

20.160246419s ago: executing program 2 (id=434):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32], 0x3}}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getsockname$packet(r6, 0x0, &(0x7f0000000140))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000000000", @ANYRES32, @ANYBLOB="000000000000000010001a800c000a80050008004c000000"], 0x30}}, 0x4080)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d099}, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0)
sendfile(r9, r9, 0x0, 0x40008)

0s ago: executing program 36 (id=434):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010000000000000000", @ANYRES32], 0x3}}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
getsockname$packet(r6, 0x0, &(0x7f0000000140))
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000000000", @ANYRES32, @ANYBLOB="000000000000000010001a800c000a80050008004c000000"], 0x30}}, 0x4080)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0)
r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d099}, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0)
sendfile(r9, r9, 0x0, 0x40008)

kernel console output (not intermixed with test programs):

ugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  459.838318][ T7475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  459.838335][ T7475] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  459.838352][ T7475] 44755 total pagecache pages
[  459.838361][ T7475] 0 pages in swap cache
[  459.838368][ T7475] Free swap  = 124996kB
[  459.838376][ T7475] Total swap = 124996kB
[  459.838384][ T7475] 2097051 pages RAM
[  459.838392][ T7475] 0 pages HighMem/MovableOnly
[  459.838399][ T7475] 422071 pages reserved
[  459.838407][ T7475] 0 pages cma reserved
[  460.212786][ T5853] Bluetooth: hci8: command tx timeout
[  460.233156][ T5979] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  460.379418][ T7445] chnl_net:caif_netlink_parms(): no params data found
[  460.415693][ T5979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.415757][ T5979] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  460.415798][ T5979] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  460.415819][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.428860][ T5979] usb 3-1: config 0 descriptor??
[  460.464496][ T5979] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  461.432220][ T7448] chnl_net:caif_netlink_parms(): no params data found
[  462.292777][ T5853] Bluetooth: hci8: command tx timeout
[  462.789316][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.789684][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state
[  462.789982][ T7445] bridge_slave_0: entered allmulticast mode
[  462.794389][ T7445] bridge_slave_0: entered promiscuous mode
[  462.825287][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.825510][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.825798][ T7445] bridge_slave_1: entered allmulticast mode
[  462.829606][ T7445] bridge_slave_1: entered promiscuous mode
[  462.989977][ T5979] usb 3-1: USB disconnect, device number 54
[  463.142998][ T7458] chnl_net:caif_netlink_parms(): no params data found
[  464.485137][ T5853] Bluetooth: hci8: command tx timeout
[  465.400809][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  465.408911][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.421718][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.421954][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.422226][ T7448] bridge_slave_0: entered allmulticast mode
[  465.437578][ T7448] bridge_slave_0: entered promiscuous mode
[  465.569800][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  465.571186][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  465.590525][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  465.594332][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  465.680933][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.681702][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.681871][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.682232][ T7448] bridge_slave_1: entered allmulticast mode
[  465.723572][ T7448] bridge_slave_1: entered promiscuous mode
[  467.654109][ T5844] Bluetooth: hci1: command tx timeout
[  468.615794][ T7445] team0: Port device team_slave_0 added
[  468.621689][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  468.827688][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  468.845361][ T7445] team0: Port device team_slave_1 added
[  469.733838][ T5844] Bluetooth: hci1: command tx timeout
[  470.297585][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.297842][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.298113][ T7458] bridge_slave_0: entered allmulticast mode
[  470.301625][ T7458] bridge_slave_0: entered promiscuous mode
[  470.312163][ T7448] team0: Port device team_slave_0 added
[  470.331866][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.331884][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.331910][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.372904][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.374498][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.374837][ T7458] bridge_slave_1: entered allmulticast mode
[  470.400806][ T7458] bridge_slave_1: entered promiscuous mode
[  470.415292][ T7448] team0: Port device team_slave_1 added
[  470.424919][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.424938][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.424966][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.822842][ T5844] Bluetooth: hci1: command tx timeout
[  473.893383][ T5844] Bluetooth: hci1: command tx timeout
[  473.977944][ T7458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.979002][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.979017][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.979047][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.017630][ T7458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.103028][ T3118] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  474.135671][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.135692][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.135722][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.262845][ T3118] usb 3-1: Using ep0 maxpacket: 8
[  474.268106][ T3118] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  474.268136][ T3118] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  474.268156][ T3118] usb 3-1: config 0 has no interface number 0
[  474.268205][ T3118] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  474.268231][ T3118] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  474.268263][ T3118] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  474.268290][ T3118] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  474.268317][ T3118] usb 3-1: config 0 interface 52 has no altsetting 0
[  474.268355][ T3118] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  474.268378][ T3118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.396593][ T3118] usb 3-1: config 0 descriptor??
[  474.616993][ T3118] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input15
[  474.699406][ T7445] hsr_slave_0: entered promiscuous mode
[  474.706740][ T7445] hsr_slave_1: entered promiscuous mode
[  474.712050][ T7445] debugfs: 'hsr0' already exists in 'hsr'
[  474.712079][ T7445] Cannot create hsr debugfs directory
[  474.752380][ T7458] team0: Port device team_slave_0 added
[  474.822525][ T7458] team0: Port device team_slave_1 added
[  475.497972][ T7448] hsr_slave_0: entered promiscuous mode
[  475.499595][ T7448] hsr_slave_1: entered promiscuous mode
[  475.500779][ T7448] debugfs: 'hsr0' already exists in 'hsr'
[  475.500808][ T7448] Cannot create hsr debugfs directory
[  475.532822][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  475.532843][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.532869][ T7458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  475.731739][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  475.731762][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  475.732009][ T7458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.629319][ T7458] hsr_slave_0: entered promiscuous mode
[  476.631475][ T7458] hsr_slave_1: entered promiscuous mode
[  476.646411][ T7458] debugfs: 'hsr0' already exists in 'hsr'
[  476.646443][ T7458] Cannot create hsr debugfs directory
[  476.815904][ T3118] usb 3-1: USB disconnect, device number 55
[  477.728927][ T7498] chnl_net:caif_netlink_parms(): no params data found
[  482.806862][ T7566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.301'.
[  483.899644][ T7572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.302'.
[  484.118849][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state
[  484.119096][ T7498] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.119410][ T7498] bridge_slave_0: entered allmulticast mode
[  484.146362][ T7498] bridge_slave_0: entered promiscuous mode
[  484.153158][ T3118] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  484.176716][ T7498] bridge0: port 2(bridge_slave_1) entered blocking state
[  484.176896][ T7498] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.177217][ T7498] bridge_slave_1: entered allmulticast mode
[  484.192778][ T7498] bridge_slave_1: entered promiscuous mode
[  484.313002][ T3118] usb 3-1: Using ep0 maxpacket: 8
[  484.321226][ T3118] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  484.321258][ T3118] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.321277][ T3118] usb 3-1: config 0 has no interface number 0
[  484.321329][ T3118] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  484.321356][ T3118] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  484.321383][ T3118] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  484.321411][ T3118] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  484.321439][ T3118] usb 3-1: config 0 interface 52 has no altsetting 0
[  484.321476][ T3118] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  484.321500][ T3118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.464005][ T3118] usb 3-1: config 0 descriptor??
[  484.683542][ T7498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  484.685763][ T3118] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input16
[  484.827638][ T7498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.110271][   T57] bridge_slave_1: left allmulticast mode
[  485.110313][   T57] bridge_slave_1: left promiscuous mode
[  485.110653][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.184941][   T57] bridge_slave_0: left allmulticast mode
[  485.184980][   T57] bridge_slave_0: left promiscuous mode
[  485.187722][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.257465][   T57] bridge_slave_1: left allmulticast mode
[  485.257504][   T57] bridge_slave_1: left promiscuous mode
[  485.257802][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.316540][   T57] bridge_slave_0: left allmulticast mode
[  485.316581][   T57] bridge_slave_0: left promiscuous mode
[  485.316879][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.383719][   T57] bridge_slave_1: left allmulticast mode
[  485.383766][   T57] bridge_slave_1: left promiscuous mode
[  485.384126][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.439393][   T57] bridge_slave_0: left allmulticast mode
[  485.439430][   T57] bridge_slave_0: left promiscuous mode
[  485.439730][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.518356][   T57] bridge_slave_1: left allmulticast mode
[  485.518395][   T57] bridge_slave_1: left promiscuous mode
[  485.518693][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.604873][   T57] bridge_slave_0: left allmulticast mode
[  485.604912][   T57] bridge_slave_0: left promiscuous mode
[  485.605265][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.065430][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.154005][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.223274][   T57] bond0 (unregistering): Released all slaves
[  486.593870][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.696538][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.758433][   T57] bond0 (unregistering): Released all slaves
[  486.888303][ T3118] usb 3-1: USB disconnect, device number 56
[  488.723993][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  488.863868][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  488.954411][   T57] bond0 (unregistering): Released all slaves
[  489.453921][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  489.564215][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  489.665970][   T57] bond0 (unregistering): Released all slaves
[  490.198515][ T7498] team0: Port device team_slave_0 added
[  490.213433][ T7498] team0: Port device team_slave_1 added
[  491.360376][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_0
[  491.360396][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  491.360426][ T7498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  491.643015][   T57] hsr_slave_0: left promiscuous mode
[  491.666167][   T57] hsr_slave_1: left promiscuous mode
[  491.667282][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.688978][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.812864][ T5911] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  491.843224][   T57] hsr_slave_0: left promiscuous mode
[  491.863067][   T57] hsr_slave_1: left promiscuous mode
[  491.864725][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.914124][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.953154][ T5911] usb 3-1: device descriptor read/64, error -71
[  492.047002][   T57] hsr_slave_0: left promiscuous mode
[  492.063066][   T57] hsr_slave_1: left promiscuous mode
[  492.064283][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.126208][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.202819][ T5911] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  492.312838][   T57] hsr_slave_0: left promiscuous mode
[  492.332931][ T5911] usb 3-1: device descriptor read/64, error -71
[  492.334701][   T57] hsr_slave_1: left promiscuous mode
[  492.335830][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.375421][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  492.444501][ T5911] usb usb3-port1: attempt power cycle
[  492.796315][ T5911] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  492.815499][ T5911] usb 3-1: device descriptor read/8, error -71
[  493.082842][ T5911] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  493.103679][ T5911] usb 3-1: device descriptor read/8, error -71
[  493.216219][ T5911] usb usb3-port1: unable to enumerate USB device
[  493.355544][   T57] team0 (unregistering): Port device team_slave_1 removed
[  493.514079][   T57] team0 (unregistering): Port device team_slave_0 removed
[  495.114218][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.309'.
[  495.343774][   T57] team0 (unregistering): Port device team_slave_1 removed
[  495.383816][ T5979] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  495.523724][   T57] team0 (unregistering): Port device team_slave_0 removed
[  495.572755][ T5979] usb 3-1: Using ep0 maxpacket: 8
[  495.578268][ T5979] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  495.578309][ T5979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  495.578329][ T5979] usb 3-1: config 0 has no interface number 0
[  495.578382][ T5979] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  495.578410][ T5979] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  495.578437][ T5979] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  495.578465][ T5979] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  495.578493][ T5979] usb 3-1: config 0 interface 52 has no altsetting 0
[  495.578530][ T5979] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  495.578553][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.594403][ T5979] usb 3-1: config 0 descriptor??
[  495.835908][ T5979] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input17
[  497.393931][   T57] team0 (unregistering): Port device team_slave_1 removed
[  497.573993][   T57] team0 (unregistering): Port device team_slave_0 removed
[  498.058724][ T5979] usb 3-1: USB disconnect, device number 61
[  499.285578][   T57] team0 (unregistering): Port device team_slave_1 removed
[  499.484968][   T57] team0 (unregistering): Port device team_slave_0 removed
[  500.247230][ T7498] batman_adv: batadv0: Adding interface: batadv_slave_1
[  500.247250][ T7498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.247279][ T7498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.554443][ T7600] netlink: 6020 bytes leftover after parsing attributes in process `syz.2.311'.
[  501.385288][ T7498] hsr_slave_0: entered promiscuous mode
[  501.388621][ T7498] hsr_slave_1: entered promiscuous mode
[  501.389995][ T7498] debugfs: 'hsr0' already exists in 'hsr'
[  501.390027][ T7498] Cannot create hsr debugfs directory
[  502.782132][ T7445] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  502.857178][ T7445] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  502.966091][ T7445] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  503.111910][ T7445] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  503.604285][ T7448] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  503.703063][ T7448] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  503.753601][ T7448] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  503.850374][ T7448] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  505.427950][ T7458] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  505.513183][ T7458] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  505.569762][ T7458] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  505.660380][ T7458] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  505.752892][ T6029] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  505.882982][ T6029] usb 3-1: device descriptor read/64, error -71
[  506.060117][ T7498] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  506.122723][ T6029] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  506.147758][ T7498] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  506.198694][ T7498] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  506.254641][ T6029] usb 3-1: device descriptor read/64, error -71
[  506.267564][ T7498] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  506.376169][ T6029] usb usb3-port1: attempt power cycle
[  506.426629][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.565352][   T57] bridge_slave_1: left allmulticast mode
[  506.565388][   T57] bridge_slave_1: left promiscuous mode
[  506.565691][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.645220][   T57] bridge_slave_0: left allmulticast mode
[  506.645260][   T57] bridge_slave_0: left promiscuous mode
[  506.645593][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.732776][ T6029] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  506.759761][ T6029] usb 3-1: device descriptor read/8, error -71
[  507.006707][ T6029] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  507.036558][ T6029] usb 3-1: device descriptor read/8, error -71
[  507.062983][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.148513][ T6029] usb usb3-port1: unable to enumerate USB device
[  507.169823][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.239295][   T57] bond0 (unregistering): Released all slaves
[  507.421366][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  507.421462][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  507.448057][ T7445] 8021q: adding VLAN 0 to HW filter on device team0
[  507.546964][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.547304][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.609834][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.753107][   T57] hsr_slave_0: left promiscuous mode
[  507.775010][   T57] hsr_slave_1: left promiscuous mode
[  507.776207][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  507.815568][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  508.704880][   T57] team0 (unregistering): Port device team_slave_1 removed
[  508.945728][   T57] team0 (unregistering): Port device team_slave_0 removed
[  510.189910][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.190193][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state
[  510.539751][ T7458] 8021q: adding VLAN 0 to HW filter on device bond0
[  510.585426][ T7448] 8021q: adding VLAN 0 to HW filter on device team0
[  510.812275][ T7531] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.812948][ T7531] bridge0: port 1(bridge_slave_0) entered forwarding state
[  510.881611][ T7458] 8021q: adding VLAN 0 to HW filter on device team0
[  510.908353][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  510.923266][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  510.926968][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  510.928563][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  510.929809][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  511.036845][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.037030][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.138178][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.138451][ T1506] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.186820][ T7498] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.223993][ T7498] 8021q: adding VLAN 0 to HW filter on device team0
[  512.569042][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  512.587396][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  512.590756][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  512.612934][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  512.614274][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  512.796444][ T4145] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.800841][ T4145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.961074][ T4145] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.962482][ T4145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.012840][ T5844] Bluetooth: hci4: command tx timeout
[  513.080458][ T7649] 8021q: adding VLAN 0 to HW filter on device bond4
[  513.179441][ T7651] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  513.182837][ T6041] net_ratelimit: 86 callbacks suppressed
[  513.182855][ T6041] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  513.299211][   T70] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  513.420564][ T7655] bond4: option mode: unable to set because the bond device has slaves
[  514.693019][ T5844] Bluetooth: hci0: command tx timeout
[  515.109870][ T5853] Bluetooth: hci4: command tx timeout
[  515.934842][ T6029] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  516.107456][ T6029] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  516.110921][ T6029] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  516.110953][ T6029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.110974][ T6029] usb 3-1: Product: з
[  516.110988][ T6029] usb 3-1: Manufacturer: Ц
[  516.111003][ T6029] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  516.125646][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  516.138769][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  516.140163][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  516.150609][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  516.151598][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  516.510780][ T6029] cdc_ncm 3-1:1.0: bind() failure
[  516.527906][ T6029] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  516.527960][ T6029] cdc_ncm 3-1:1.1: bind() failure
[  516.553898][ T6029] usb 3-1: USB disconnect, device number 66
[  516.587201][ T7641] chnl_net:caif_netlink_parms(): no params data found
[  516.772948][ T5844] Bluetooth: hci0: command tx timeout
[  517.432991][ T6029] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  517.492892][ T5844] Bluetooth: hci4: command tx timeout
[  517.562926][ T6029] usb 3-1: device descriptor read/64, error -71
[  517.622894][ T7641] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.623081][ T7641] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.623353][ T7641] bridge_slave_0: entered allmulticast mode
[  517.626872][ T7641] bridge_slave_0: entered promiscuous mode
[  517.822741][ T6029] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  517.855055][ T7641] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.855248][ T7641] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.855531][ T7641] bridge_slave_1: entered allmulticast mode
[  517.858968][ T7641] bridge_slave_1: entered promiscuous mode
[  517.952965][ T6029] usb 3-1: device descriptor read/64, error -71
[  518.063058][ T6029] usb usb3-port1: attempt power cycle
[  518.213013][ T5844] Bluetooth: hci5: command tx timeout
[  518.412897][ T6029] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  518.433481][ T6029] usb 3-1: device descriptor read/8, error -71
[  518.448410][ T7641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  518.528027][ T7641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.528616][ T7644] chnl_net:caif_netlink_parms(): no params data found
[  518.687174][ T6029] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  518.713995][ T6029] usb 3-1: device descriptor read/8, error -71
[  518.823301][ T6029] usb usb3-port1: unable to enumerate USB device
[  518.852918][ T5844] Bluetooth: hci0: command tx timeout
[  519.091775][ T7641] team0: Port device team_slave_0 added
[  519.314178][ T7641] team0: Port device team_slave_1 added
[  519.573742][ T5844] Bluetooth: hci4: command tx timeout
[  519.941567][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.941588][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.941618][ T7641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.056586][ T7641] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.056605][ T7641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.056636][ T7641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.296137][ T5844] Bluetooth: hci5: command tx timeout
[  520.554840][ T7701] misc userio: No port type given on /dev/userio
[  520.941753][ T5844] Bluetooth: hci0: command tx timeout
[  521.233250][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.233430][ T7644] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.233723][ T7644] bridge_slave_0: entered allmulticast mode
[  521.239693][ T7644] bridge_slave_0: entered promiscuous mode
[  521.286401][ T7498] 8021q: adding VLAN 0 to HW filter on device batadv0
[  521.286814][ T7644] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.286902][ T7644] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.287066][ T7644] bridge_slave_1: entered allmulticast mode
[  521.288857][ T7644] bridge_slave_1: entered promiscuous mode
[  521.639949][ T7707] FAULT_INJECTION: forcing a failure.
[  521.639949][ T7707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  521.639985][ T7707] CPU: 1 UID: 0 PID: 7707 Comm: syz.2.323 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  521.640009][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  521.640021][ T7707] Call Trace:
[  521.640030][ T7707]  <TASK>
[  521.640038][ T7707]  dump_stack_lvl+0x189/0x250
[  521.640074][ T7707]  ? __pfx____ratelimit+0x10/0x10
[  521.640103][ T7707]  ? __pfx_dump_stack_lvl+0x10/0x10
[  521.640133][ T7707]  ? __pfx__printk+0x10/0x10
[  521.640165][ T7707]  ? __might_fault+0xb0/0x130
[  521.640208][ T7707]  should_fail_ex+0x46c/0x600
[  521.640240][ T7707]  _copy_from_iter+0x1de/0x1790
[  521.640277][ T7707]  ? kmalloc_reserve+0xbd/0x290
[  521.640304][ T7707]  ? kmalloc_reserve+0xbd/0x290
[  521.640328][ T7707]  ? rcu_is_watching+0x15/0xb0
[  521.640359][ T7707]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  521.640384][ T7707]  ? kmem_cache_alloc_node_noprof+0x19c/0x330
[  521.640411][ T7707]  ? __pfx__copy_from_iter+0x10/0x10
[  521.640445][ T7707]  ? __build_skb_around+0x257/0x3e0
[  521.640475][ T7707]  ? netlink_sendmsg+0x642/0xb30
[  521.640499][ T7707]  ? skb_put+0x11b/0x210
[  521.640531][ T7707]  netlink_sendmsg+0x6b2/0xb30
[  521.640567][ T7707]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.640602][ T7707]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  521.640623][ T7707]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.640651][ T7707]  __sock_sendmsg+0x219/0x270
[  521.640677][ T7707]  ____sys_sendmsg+0x508/0x820
[  521.640714][ T7707]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.640754][ T7707]  ? import_iovec+0x74/0xa0
[  521.640781][ T7707]  ___sys_sendmsg+0x21f/0x2a0
[  521.640813][ T7707]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.640891][ T7707]  ? __fget_files+0x2a/0x420
[  521.640919][ T7707]  ? __fget_files+0x3a6/0x420
[  521.640970][ T7707]  __x64_sys_sendmsg+0x1a1/0x260
[  521.641003][ T7707]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  521.641044][ T7707]  ? __pfx_ksys_write+0x10/0x10
[  521.641068][ T7707]  ? rcu_is_watching+0x15/0xb0
[  521.641103][ T7707]  ? do_syscall_64+0xbe/0x3b0
[  521.641136][ T7707]  do_syscall_64+0xfa/0x3b0
[  521.641169][ T7707]  ? lockdep_hardirqs_on+0x9c/0x150
[  521.641195][ T7707]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.641216][ T7707]  ? clear_bhb_loop+0x60/0xb0
[  521.641241][ T7707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.641261][ T7707] RIP: 0033:0x7f9ae78debe9
[  521.641281][ T7707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.641299][ T7707] RSP: 002b:00007f9ae5b46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.641324][ T7707] RAX: ffffffffffffffda RBX: 00007f9ae7b15fa0 RCX: 00007f9ae78debe9
[  521.641339][ T7707] RDX: 0000000000008040 RSI: 0000200000000380 RDI: 0000000000000003
[  521.641353][ T7707] RBP: 00007f9ae5b46090 R08: 0000000000000000 R09: 0000000000000000
[  521.641365][ T7707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  521.641378][ T7707] R13: 00007f9ae7b16038 R14: 00007f9ae7b15fa0 R15: 00007fff98461848
[  521.641409][ T7707]  </TASK>
[  522.172807][   T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  522.332925][   T10] usb 3-1: Using ep0 maxpacket: 32
[  522.339052][   T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  522.339082][   T10] usb 3-1: config 0 has no interface number 0
[  522.339137][   T10] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 754
[  522.339173][   T10] usb 3-1: config 0 interface 184 has no altsetting 0
[  522.342427][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  522.342455][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.342475][   T10] usb 3-1: Product: syz
[  522.342490][   T10] usb 3-1: Manufacturer: syz
[  522.342505][   T10] usb 3-1: SerialNumber: syz
[  522.370950][   T10] usb 3-1: config 0 descriptor??
[  522.372358][ T7709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  522.377271][ T5844] Bluetooth: hci5: command tx timeout
[  522.408857][   T10] smsc75xx v1.0.0
[  522.415808][ T7644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.489984][ T7641] hsr_slave_0: entered promiscuous mode
[  522.499751][ T7641] hsr_slave_1: entered promiscuous mode
[  522.500815][ T7641] debugfs: 'hsr0' already exists in 'hsr'
[  522.500841][ T7641] Cannot create hsr debugfs directory
[  522.620362][ T7709] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  522.629727][ T7644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.280389][ T7716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.324'.
[  523.330809][ T7716] comedi comedi0: comedi_config --init_data is deprecated
[  524.251768][ T7644] team0: Port device team_slave_0 added
[  524.452871][ T5844] Bluetooth: hci5: command tx timeout
[  524.460020][ T7668] chnl_net:caif_netlink_parms(): no params data found
[  524.674281][ T7644] team0: Port device team_slave_1 added
[  525.079964][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  525.079999][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  525.080019][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  525.080383][   T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  525.153722][   T10] usb 3-1: USB disconnect, device number 71
[  525.474699][ T7719] bond4: option mode: unable to set because the bond device has slaves
[  526.476188][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.476210][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  526.476236][ T7644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.715991][ T7644] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.716011][ T7644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  526.716040][ T7644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.879881][   T57] bridge_slave_1: left allmulticast mode
[  526.879921][   T57] bridge_slave_1: left promiscuous mode
[  526.880214][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.014736][   T57] bridge_slave_0: left allmulticast mode
[  527.014774][   T57] bridge_slave_0: left promiscuous mode
[  527.015094][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.142160][   T57] bridge_slave_1: left allmulticast mode
[  527.142203][   T57] bridge_slave_1: left promiscuous mode
[  527.142508][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.174912][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  527.181024][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  527.187739][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  527.189024][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  527.189845][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  527.324880][   T57] bridge_slave_0: left allmulticast mode
[  527.324919][   T57] bridge_slave_0: left promiscuous mode
[  527.325693][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.252790][ T5853] Bluetooth: hci6: command tx timeout
[  529.545206][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.330'.
[  529.793243][   T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  529.942749][   T10] usb 3-1: Using ep0 maxpacket: 8
[  529.946098][   T10] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  529.946140][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.946161][   T10] usb 3-1: config 0 has no interface number 0
[  529.946218][   T10] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  529.946245][   T10] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  529.946272][   T10] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  529.946300][   T10] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  529.946328][   T10] usb 3-1: config 0 interface 52 has no altsetting 0
[  529.946367][   T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  529.946397][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.985304][   T10] usb 3-1: config 0 descriptor??
[  530.269273][   T10] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input18
[  531.343660][ T5853] Bluetooth: hci6: command tx timeout
[  531.474489][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  531.575414][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  531.637729][   T57] bond0 (unregistering): Released all slaves
[  532.518603][ T5845] usb 3-1: USB disconnect, device number 72
[  533.413044][ T5853] Bluetooth: hci6: command tx timeout
[  533.673936][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  533.753839][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  533.844447][   T57] bond0 (unregistering): Released all slaves
[  534.829754][ T7668] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.829995][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.830226][ T7668] bridge_slave_0: entered allmulticast mode
[  534.844957][ T7668] bridge_slave_0: entered promiscuous mode
[  534.980099][ T7668] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.980303][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.980598][ T7668] bridge_slave_1: entered allmulticast mode
[  534.987785][ T7668] bridge_slave_1: entered promiscuous mode
[  535.016161][ T7644] hsr_slave_0: entered promiscuous mode
[  535.017732][ T7644] hsr_slave_1: entered promiscuous mode
[  535.018750][ T7644] debugfs: 'hsr0' already exists in 'hsr'
[  535.018775][ T7644] Cannot create hsr debugfs directory
[  535.196520][   T57] hsr_slave_0: left promiscuous mode
[  535.415155][   T57] hsr_slave_1: left promiscuous mode
[  535.416249][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.473977][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  535.492733][ T5853] Bluetooth: hci6: command tx timeout
[  536.915289][   T57] hsr_slave_0: left promiscuous mode
[  536.939367][   T57] hsr_slave_1: left promiscuous mode
[  536.940655][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  536.989381][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  537.082793][ T5911] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  537.232992][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  537.237385][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short
[  537.238795][ T5911] usb 3-1: config 0 has an invalid interface number: 149 but max is 0
[  537.238822][ T5911] usb 3-1: config 0 has an invalid interface association descriptor of length 2, skipping
[  537.238841][ T5911] usb 3-1: config 0 has no interface number 0
[  537.238894][ T5911] usb 3-1: config 0 interface 149 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[  537.238924][ T5911] usb 3-1: config 0 interface 149 has no altsetting 0
[  537.306328][ T5911] usb 3-1: New USB device found, idVendor=04ca, idProduct=4605, bcdDevice=5b.55
[  537.306370][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.306391][ T5911] usb 3-1: Product: syz
[  537.306405][ T5911] usb 3-1: Manufacturer: syz
[  537.306420][ T5911] usb 3-1: SerialNumber: syz
[  537.358492][ T5911] usb 3-1: config 0 descriptor??
[  537.570517][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.571347][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.633335][ T5911] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  537.658471][ T5911] usb 3-1: USB disconnect, device number 73
[  538.524939][   T57] team0 (unregistering): Port device team_slave_1 removed
[  539.403718][   T57] team0 (unregistering): Port device team_slave_0 removed
[  540.077618][ T7770] GUP no longer grows the stack in syz.2.338 (7770): 200000004000-20000000a000 (200000002000)
[  540.077692][ T7770] CPU: 1 UID: 0 PID: 7770 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  540.077724][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  540.077739][ T7770] Call Trace:
[  540.077749][ T7770]  <TASK>
[  540.077759][ T7770]  dump_stack_lvl+0x189/0x250
[  540.077804][ T7770]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.077839][ T7770]  ? __pfx__printk+0x10/0x10
[  540.077865][ T7770]  ? find_vma+0xe7/0x160
[  540.077915][ T7770]  __get_user_pages+0x237e/0x2b60
[  540.077993][ T7770]  get_user_pages_remote+0x2f1/0xad0
[  540.078025][ T7770]  ? __pfx_mtree_load+0x10/0x10
[  540.078065][ T7770]  ? __pfx_get_user_pages_remote+0x10/0x10
[  540.078101][ T7770]  ? __access_remote_vm+0x367/0x7d0
[  540.078143][ T7770]  __access_remote_vm+0x211/0x7d0
[  540.078190][ T7770]  ? __pfx___access_remote_vm+0x10/0x10
[  540.078222][ T7770]  ? set_page_refcounted+0xa0/0x1e0
[  540.078267][ T7770]  ? alloc_pages_noprof+0xe4/0x1e0
[  540.078306][ T7770]  proc_pid_cmdline_read+0x433/0x810
[  540.078355][ T7770]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  540.078390][ T7770]  ? __sanitizer_cov_trace_const_cmp4+0x4/0xa0
[  540.078427][ T7770]  ? rw_verify_area+0x2ac/0x4e0
[  540.078463][ T7770]  vfs_readv+0x5b3/0x850
[  540.078498][ T7770]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  540.078538][ T7770]  ? __pfx_vfs_readv+0x10/0x10
[  540.078602][ T7770]  ? __fget_files+0x3a6/0x420
[  540.078634][ T7770]  ? __fget_files+0x2a/0x420
[  540.078679][ T7770]  __x64_sys_preadv+0x19a/0x2a0
[  540.078716][ T7770]  ? __pfx___x64_sys_preadv+0x10/0x10
[  540.078745][ T7770]  ? rcu_is_watching+0x15/0xb0
[  540.078788][ T7770]  ? do_syscall_64+0xbe/0x3b0
[  540.078826][ T7770]  do_syscall_64+0xfa/0x3b0
[  540.078859][ T7770]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.078883][ T7770]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  540.078907][ T7770]  ? clear_bhb_loop+0x60/0xb0
[  540.078937][ T7770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  540.078962][ T7770] RIP: 0033:0x7f9ae78debe9
[  540.078986][ T7770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  540.079005][ T7770] RSP: 002b:00007f9ae5b04038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  540.079032][ T7770] RAX: ffffffffffffffda RBX: 00007f9ae7b16180 RCX: 00007f9ae78debe9
[  540.079051][ T7770] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000009
[  540.079067][ T7770] RBP: 00007f9ae7961e19 R08: 0000000000000000 R09: 0000000000000000
[  540.079083][ T7770] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  540.079098][ T7770] R13: 00007f9ae7b16218 R14: 00007f9ae7b16180 R15: 00007fff98461848
[  540.079137][ T7770]  </TASK>
[  541.712878][ T6023] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  541.862870][ T6023] usb 3-1: Using ep0 maxpacket: 16
[  541.865445][ T6023] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  541.865487][ T6023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.865508][ T6023] usb 3-1: config 0 has no interface number 0
[  541.868840][ T6023] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  541.868868][ T6023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.868890][ T6023] usb 3-1: Product: syz
[  541.868905][ T6023] usb 3-1: Manufacturer: syz
[  541.868919][ T6023] usb 3-1: SerialNumber: syz
[  541.884436][ T6023] usb 3-1: config 0 descriptor??
[  542.091827][ T6023] usb 3-1: Found UVC 0.00 device syz (046c:14e8)
[  542.091865][ T6023] usb 3-1: No valid video chain found.
[  542.230403][ T6029] usb 3-1: USB disconnect, device number 74
[  544.013360][ T5979] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  544.192806][ T5979] usb 3-1: Using ep0 maxpacket: 16
[  544.195042][ T5979] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  544.195073][ T5979] usb 3-1: config 0 interface 0 has no altsetting 0
[  544.195110][ T5979] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  544.195134][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.248744][ T5979] usb 3-1: config 0 descriptor??
[  544.266392][ T5979] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  545.899963][   T10] usb 3-1: USB disconnect, device number 75
[  547.316907][   T57] team0 (unregistering): Port device team_slave_1 removed
[  547.733596][   T57] team0 (unregistering): Port device team_slave_0 removed
[  548.102933][   T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  548.255360][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.255390][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 7
[  548.256969][   T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.82
[  548.256996][   T10] usb 3-1: New USB device strings: Mfr=0, Product=4, SerialNumber=0
[  548.257016][   T10] usb 3-1: Product: syz
[  548.285284][   T10] usb 3-1: config 0 descriptor??
[  550.269235][ T7668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  550.575409][ T7668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  551.196897][ T7668] team0: Port device team_slave_0 added
[  551.372230][ T7668] team0: Port device team_slave_1 added
[  551.518144][ T5979] usb 3-1: USB disconnect, device number 76
[  552.410342][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_0
[  552.410363][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.410393][ T7668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  552.532989][   T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  552.670563][ T7668] batman_adv: batadv0: Adding interface: batadv_slave_1
[  552.670582][ T7668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  552.670613][ T7668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  552.781267][   T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  552.807889][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  552.807924][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.807956][   T10] usb 3-1: Product: з
[  552.807971][   T10] usb 3-1: Manufacturer: Ц
[  552.807985][   T10] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  553.654492][   T10] cdc_ncm 3-1:1.0: bind() failure
[  553.699592][   T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  553.699649][   T10] cdc_ncm 3-1:1.1: bind() failure
[  553.752837][   T10] usb 3-1: USB disconnect, device number 77
[  553.822498][ T7668] hsr_slave_0: entered promiscuous mode
[  553.827870][ T7668] hsr_slave_1: entered promiscuous mode
[  553.833062][ T7668] debugfs: 'hsr0' already exists in 'hsr'
[  553.833091][ T7668] Cannot create hsr debugfs directory
[  554.319401][ T7801] FAULT_INJECTION: forcing a failure.
[  554.319401][ T7801] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  554.319440][ T7801] CPU: 1 UID: 0 PID: 7801 Comm: syz.2.345 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  554.319463][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  554.319475][ T7801] Call Trace:
[  554.319483][ T7801]  <TASK>
[  554.319492][ T7801]  dump_stack_lvl+0x189/0x250
[  554.319527][ T7801]  ? __pfx____ratelimit+0x10/0x10
[  554.319555][ T7801]  ? __pfx_dump_stack_lvl+0x10/0x10
[  554.319584][ T7801]  ? __pfx__printk+0x10/0x10
[  554.319607][ T7801]  ? __might_fault+0xb0/0x130
[  554.319650][ T7801]  should_fail_ex+0x46c/0x600
[  554.319683][ T7801]  _copy_from_iter+0x1de/0x1790
[  554.319719][ T7801]  ? kmalloc_reserve+0xbd/0x290
[  554.319746][ T7801]  ? kmalloc_reserve+0xbd/0x290
[  554.319770][ T7801]  ? rcu_is_watching+0x15/0xb0
[  554.319802][ T7801]  ? trace_kmem_cache_alloc+0x1f/0xc0
[  554.319827][ T7801]  ? kmem_cache_alloc_node_noprof+0x19c/0x330
[  554.319855][ T7801]  ? __pfx__copy_from_iter+0x10/0x10
[  554.319890][ T7801]  ? __build_skb_around+0x257/0x3e0
[  554.319920][ T7801]  ? netlink_sendmsg+0x642/0xb30
[  554.319944][ T7801]  ? skb_put+0x11b/0x210
[  554.319975][ T7801]  netlink_sendmsg+0x6b2/0xb30
[  554.320010][ T7801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.320045][ T7801]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  554.320065][ T7801]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.320093][ T7801]  __sock_sendmsg+0x219/0x270
[  554.320120][ T7801]  ____sys_sendmsg+0x508/0x820
[  554.320156][ T7801]  ? __pfx_____sys_sendmsg+0x10/0x10
[  554.320196][ T7801]  ? import_iovec+0x74/0xa0
[  554.320223][ T7801]  ___sys_sendmsg+0x21f/0x2a0
[  554.320263][ T7801]  ? __pfx____sys_sendmsg+0x10/0x10
[  554.320333][ T7801]  ? __fget_files+0x2a/0x420
[  554.320361][ T7801]  ? __fget_files+0x3a6/0x420
[  554.320402][ T7801]  __x64_sys_sendmsg+0x1a1/0x260
[  554.320435][ T7801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  554.320476][ T7801]  ? __pfx_ksys_write+0x10/0x10
[  554.320499][ T7801]  ? rcu_is_watching+0x15/0xb0
[  554.320535][ T7801]  ? do_syscall_64+0xbe/0x3b0
[  554.320568][ T7801]  do_syscall_64+0xfa/0x3b0
[  554.320594][ T7801]  ? lockdep_hardirqs_on+0x9c/0x150
[  554.320619][ T7801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.320640][ T7801]  ? clear_bhb_loop+0x60/0xb0
[  554.320666][ T7801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.320686][ T7801] RIP: 0033:0x7f9ae78debe9
[  554.320705][ T7801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  554.320723][ T7801] RSP: 002b:00007f9ae5b46038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  554.320746][ T7801] RAX: ffffffffffffffda RBX: 00007f9ae7b15fa0 RCX: 00007f9ae78debe9
[  554.320761][ T7801] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  554.320775][ T7801] RBP: 00007f9ae5b46090 R08: 0000000000000000 R09: 0000000000000000
[  554.320788][ T7801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  554.320801][ T7801] R13: 00007f9ae7b16038 R14: 00007f9ae7b15fa0 R15: 00007fff98461848
[  554.320836][ T7801]  </TASK>
[  554.675816][ T6029] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  554.858569][ T6029] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  554.858608][ T6029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  554.858634][ T6029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  554.858659][ T6029] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  554.858706][ T6029] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  554.858730][ T6029] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.875927][ T6029] usb 3-1: config 0 descriptor??
[  555.072937][ T7641] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  555.200937][ T7732] chnl_net:caif_netlink_parms(): no params data found
[  555.235459][ T7641] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  555.300331][ T6029] usbhid 3-1:0.0: can't add hid device: -71
[  555.300482][ T6029] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  555.318104][ T6029] usb 3-1: USB disconnect, device number 78
[  555.601250][ T7641] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  556.013785][ T7641] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  557.860176][ T7824] netlink: 48 bytes leftover after parsing attributes in process `syz.2.348'.
[  562.412869][ T5911] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  562.426163][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.426399][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.426659][ T7732] bridge_slave_0: entered allmulticast mode
[  562.443363][ T7732] bridge_slave_0: entered promiscuous mode
[  562.456003][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.456192][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.456466][ T7732] bridge_slave_1: entered allmulticast mode
[  562.462365][ T7732] bridge_slave_1: entered promiscuous mode
[  562.565585][ T5911] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  562.565615][ T5911] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  562.565637][ T5911] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  562.576714][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  562.576748][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.576768][ T5911] usb 3-1: Product: syz
[  562.576783][ T5911] usb 3-1: Manufacturer: syz
[  562.576797][ T5911] usb 3-1: SerialNumber: syz
[  562.658929][ T5911] hub 3-1:1.0: bad descriptor, ignoring hub
[  562.658984][ T5911] hub 3-1:1.0: probe with driver hub failed with error -5
[  562.880037][ T5911] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 79 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  563.283767][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  563.307186][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  563.651091][ T7858] usb 3-1: reset high-speed USB device number 79 using dummy_hcd
[  563.677993][ T7858] usb 3-1: device reset changed ep0 maxpacket size!
[  563.691456][ T3118] usb 3-1: USB disconnect, device number 79
[  563.710266][ T3118] usblp0: removed
[  563.863400][ T3118] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  563.944708][ T7732] team0: Port device team_slave_0 added
[  563.987836][ T7732] team0: Port device team_slave_1 added
[  564.024719][ T3118] usb 3-1: Using ep0 maxpacket: 8
[  564.032304][ T3118] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  564.032336][ T3118] usb 3-1: config 0 has no interface number 0
[  564.032387][ T3118] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  564.032411][ T3118] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  564.032436][ T3118] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  564.032463][ T3118] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  564.062799][ T3118] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  564.062833][ T3118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.145767][ T3118] usb 3-1: config 0 descriptor??
[  564.186871][ T3118] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  564.395935][ T7858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.396593][ T7858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.401989][ T3118] usb 3-1: USB disconnect, device number 80
[  564.438596][ T3118] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  564.781233][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0
[  564.781280][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  564.781311][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  564.884010][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1
[  564.884030][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  564.884061][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  565.313301][ T7865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.352'.
[  565.313636][ T7866] FAULT_INJECTION: forcing a failure.
[  565.313636][ T7866] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  565.313669][ T7866] CPU: 0 UID: 0 PID: 7866 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  565.313692][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  565.313703][ T7866] Call Trace:
[  565.313710][ T7866]  <TASK>
[  565.313718][ T7866]  dump_stack_lvl+0x189/0x250
[  565.313747][ T7866]  ? __pfx____ratelimit+0x10/0x10
[  565.313769][ T7866]  ? __pfx_dump_stack_lvl+0x10/0x10
[  565.313793][ T7866]  ? __pfx__printk+0x10/0x10
[  565.313814][ T7866]  ? fs_reclaim_acquire+0x7d/0x100
[  565.313840][ T7866]  should_fail_ex+0x46c/0x600
[  565.313868][ T7866]  prepare_alloc_pages+0x213/0x670
[  565.313890][ T7866]  __alloc_frozen_pages_noprof+0x123/0x370
[  565.313912][ T7866]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  565.313951][ T7866]  ? policy_nodemask+0x27c/0x720
[  565.313975][ T7866]  alloc_pages_mpol+0xd1/0x380
[  565.314001][ T7866]  vma_alloc_folio_noprof+0xe4/0x280
[  565.314027][ T7866]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  565.314063][ T7866]  folio_prealloc+0x30/0x180
[  565.314081][ T7866]  handle_mm_fault+0x12ee/0x3400
[  565.314104][ T7866]  ? mt_find+0x15c/0x5f0
[  565.314126][ T7866]  ? __pfx_mt_find+0x10/0x10
[  565.314150][ T7866]  ? handle_mm_fault+0xdb/0x3400
[  565.314180][ T7866]  ? __pfx_handle_mm_fault+0x10/0x10
[  565.314224][ T7866]  ? lock_mm_and_find_vma+0x9c/0x300
[  565.314243][ T7866]  do_user_addr_fault+0x764/0x1390
[  565.314282][ T7866]  exc_page_fault+0x76/0xf0
[  565.314306][ T7866]  asm_exc_page_fault+0x26/0x30
[  565.314322][ T7866] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  565.314341][ T7866] Code: d4 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 8f d4 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  565.314355][ T7866] RSP: 0018:ffffc900044e7638 EFLAGS: 00050206
[  565.314372][ T7866] RAX: ffff88803c04c001 RBX: ffff88803c04c0e6 RCX: 000000000000087e
[  565.314385][ T7866] RDX: 0000000000000000 RSI: ffff88803c04c366 RDI: 0000200000001000
[  565.314397][ T7866] RBP: ffffc900044e77b0 R08: ffff88803c04cbe3 R09: 1ffff1100780997c
[  565.314409][ T7866] R10: dffffc0000000000 R11: ffffed100780997d R12: dffffc0000000000
[  565.314422][ T7866] R13: 0000000000000afe R14: 00007ffffffff000 R15: 000020000000187e
[  565.314453][ T7866]  _copy_to_iter+0x60a/0x1790
[  565.314478][ T7866]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  565.314513][ T7866]  ? rt_mutex_slowunlock+0x493/0x8a0
[  565.314531][ T7866]  ? __pfx__copy_to_iter+0x10/0x10
[  565.314554][ T7866]  ? rt_spin_lock+0x1bb/0x2c0
[  565.314572][ T7866]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  565.314602][ T7866]  __skb_datagram_iter+0xf8/0x990
[  565.314629][ T7866]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  565.314653][ T7866]  skb_copy_datagram_iter+0xc5/0x230
[  565.314673][ T7866]  netlink_recvmsg+0x2ab/0xa30
[  565.314704][ T7866]  ? __pfx_netlink_recvmsg+0x10/0x10
[  565.314734][ T7866]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  565.314750][ T7866]  ? security_socket_recvmsg+0x7e/0x2e0
[  565.314768][ T7866]  ? __pfx_netlink_recvmsg+0x10/0x10
[  565.314788][ T7866]  sock_recvmsg+0x22c/0x270
[  565.314812][ T7866]  ____sys_recvmsg+0x1ce/0x470
[  565.314846][ T7866]  ? __pfx_____sys_recvmsg+0x10/0x10
[  565.314888][ T7866]  ? import_iovec+0x74/0xa0
[  565.314910][ T7866]  ___sys_recvmsg+0x1b5/0x510
[  565.314949][ T7866]  ? __pfx____sys_recvmsg+0x10/0x10
[  565.315000][ T7866]  ? __fget_files+0x3a6/0x420
[  565.315035][ T7866]  __x64_sys_recvmsg+0x19e/0x260
[  565.315062][ T7866]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  565.315097][ T7866]  ? __pfx_ksys_write+0x10/0x10
[  565.315123][ T7866]  ? do_syscall_64+0xbe/0x3b0
[  565.315149][ T7866]  do_syscall_64+0xfa/0x3b0
[  565.315168][ T7866]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.315189][ T7866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.315206][ T7866]  ? clear_bhb_loop+0x60/0xb0
[  565.315227][ T7866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.315243][ T7866] RIP: 0033:0x7f9ae78debe9
[  565.315258][ T7866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  565.315272][ T7866] RSP: 002b:00007f9ae5b25038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  565.315291][ T7866] RAX: ffffffffffffffda RBX: 00007f9ae7b16090 RCX: 00007f9ae78debe9
[  565.315303][ T7866] RDX: 0000000000010100 RSI: 0000200000000040 RDI: 0000000000000003
[  565.315314][ T7866] RBP: 00007f9ae5b25090 R08: 0000000000000000 R09: 0000000000000000
[  565.315324][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  565.315334][ T7866] R13: 00007f9ae7b16128 R14: 00007f9ae7b16090 R15: 00007fff98461848
[  565.315363][ T7866]  </TASK>
[  565.322255][ T7866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.352'.
[  567.906544][ T7732] hsr_slave_0: entered promiscuous mode
[  567.923451][ T7732] hsr_slave_1: entered promiscuous mode
[  567.933255][ T7732] debugfs: 'hsr0' already exists in 'hsr'
[  567.933289][ T7732] Cannot create hsr debugfs directory
[  568.013344][ T7877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.355'.
[  568.861806][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  568.861890][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  569.175114][   T57] bridge_slave_1: left allmulticast mode
[  569.175170][   T57] bridge_slave_1: left promiscuous mode
[  569.175472][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.820638][   T57] bridge_slave_0: left allmulticast mode
[  569.820673][   T57] bridge_slave_0: left promiscuous mode
[  569.823243][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.938559][   T57] bridge_slave_1: left allmulticast mode
[  569.938585][   T57] bridge_slave_1: left promiscuous mode
[  569.938762][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.015056][   T57] bridge_slave_0: left allmulticast mode
[  570.015096][   T57] bridge_slave_0: left promiscuous mode
[  570.015565][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.095337][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  572.139028][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  572.151636][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  572.154314][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  572.155600][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  572.495828][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  572.564881][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  572.620517][   T57] bond0 (unregistering): Released all slaves
[  572.726694][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  572.755224][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  572.779645][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  572.781214][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  572.782257][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  574.302803][ T5844] Bluetooth: hci1: command tx timeout
[  574.645097][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  574.733868][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  574.768286][   T57] bond0 (unregistering): Released all slaves
[  574.855071][ T5844] Bluetooth: hci7: command tx timeout
[  576.373101][ T5844] Bluetooth: hci1: command tx timeout
[  576.508299][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  576.532108][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  576.543910][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  576.546104][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  576.547957][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  577.649348][ T7910] Bluetooth: hci7: command tx timeout
[  577.994500][ T6023] kernel read not supported for file /900/environ (pid: 6023 comm: kworker/1:6)
[  578.107809][   T57] hsr_slave_0: left promiscuous mode
[  578.143161][   T57] hsr_slave_1: left promiscuous mode
[  578.144252][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  578.198480][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.379151][   T57] hsr_slave_0: left promiscuous mode
[  578.418275][   T57] hsr_slave_1: left promiscuous mode
[  578.419474][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  578.453723][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.463196][ T7910] Bluetooth: hci1: command tx timeout
[  578.670781][ T7910] Bluetooth: hci4: command tx timeout
[  579.314177][ T7916] syz.2.360 (7916) used greatest stack depth: 15320 bytes left
[  579.663512][ T7910] Bluetooth: hci7: command tx timeout
[  580.493728][   T57] team0 (unregistering): Port device team_slave_1 removed
[  580.533235][ T7910] Bluetooth: hci1: command tx timeout
[  580.710231][ T7910] Bluetooth: hci4: command tx timeout
[  580.753612][   T57] team0 (unregistering): Port device team_slave_0 removed
[  581.743224][ T7910] Bluetooth: hci7: command tx timeout
[  582.772740][ T7910] Bluetooth: hci4: command tx timeout
[  584.543801][   T57] team0 (unregistering): Port device team_slave_1 removed
[  584.823874][   T57] team0 (unregistering): Port device team_slave_0 removed
[  584.862275][ T7910] Bluetooth: hci4: command tx timeout
[  587.477491][ T7734] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  587.484266][ T7734] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  587.497342][ T7734] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  587.501711][ T7734] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  587.502843][ T7734] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  587.907825][ T7644] netdevsim netdevsim6: probe with driver netdevsim failed with error -12
[  589.652778][ T7910] Bluetooth: hci8: command tx timeout
[  591.772460][ T7910] Bluetooth: hci8: command tx timeout
[  593.813558][ T7910] Bluetooth: hci8: command tx timeout
[  593.948769][ T7890] chnl_net:caif_netlink_parms(): no params data found
[  593.976260][ T7887] chnl_net:caif_netlink_parms(): no params data found
[  594.093092][ T6023] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  594.261065][ T6023] usb 3-1: Using ep0 maxpacket: 32
[  594.270000][ T6023] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  594.270029][ T6023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.270048][ T6023] usb 3-1: config 0 has no interface number 0
[  594.270101][ T6023] usb 3-1: config 0 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  594.305874][ T6023] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  594.305903][ T6023] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  594.305922][ T6023] usb 3-1: Product: syz
[  594.305934][ T6023] usb 3-1: Manufacturer: syz
[  594.315289][ T6023] usb 3-1: config 0 descriptor??
[  595.892676][ T7910] Bluetooth: hci8: command tx timeout
[  596.254625][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.254920][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.255165][ T7890] bridge_slave_0: entered allmulticast mode
[  596.294933][ T7890] bridge_slave_0: entered promiscuous mode
[  596.309951][ T7907] chnl_net:caif_netlink_parms(): no params data found
[  596.364637][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state
[  596.365167][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.365471][ T7887] bridge_slave_0: entered allmulticast mode
[  596.377753][ T7887] bridge_slave_0: entered promiscuous mode
[  596.410145][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.410346][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.410646][ T7890] bridge_slave_1: entered allmulticast mode
[  596.420479][ T7890] bridge_slave_1: entered promiscuous mode
[  596.557177][ T7927] chnl_net:caif_netlink_parms(): no params data found
[  596.583026][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.583343][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.587063][ T7887] bridge_slave_1: entered allmulticast mode
[  596.598063][ T7887] bridge_slave_1: entered promiscuous mode
[  596.932414][ T5845] usb 3-1: USB disconnect, device number 81
[  597.552238][ T7890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  597.792425][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  597.824337][ T7890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  597.879744][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  598.720437][ T7890] team0: Port device team_slave_0 added
[  599.133148][ T7887] team0: Port device team_slave_0 added
[  599.138373][ T7890] team0: Port device team_slave_1 added
[  599.139526][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.170235][ T7907] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.170545][ T7907] bridge_slave_0: entered allmulticast mode
[  599.190781][ T7907] bridge_slave_0: entered promiscuous mode
[  599.351448][ T7887] team0: Port device team_slave_1 added
[  599.465414][ T7907] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.465599][ T7907] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.465772][ T7907] bridge_slave_1: entered allmulticast mode
[  599.504414][ T7907] bridge_slave_1: entered promiscuous mode
[  600.215261][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.215523][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state
[  600.215812][ T7927] bridge_slave_0: entered allmulticast mode
[  600.219532][ T7927] bridge_slave_0: entered promiscuous mode
[  600.618312][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.618479][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state
[  600.618872][ T7927] bridge_slave_1: entered allmulticast mode
[  600.633649][ T7927] bridge_slave_1: entered promiscuous mode
[  600.754185][ T7890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.754206][ T7890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  600.754236][ T7890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  601.126100][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  601.126120][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.126150][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  601.129954][ T7890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  601.129973][ T7890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.130006][ T7890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  601.135952][ T7907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  601.363774][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  601.363794][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.363825][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  601.449641][ T7907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  601.458487][ T7927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  601.658878][ T7927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.061912][ T7907] team0: Port device team_slave_0 added
[  607.319444][ T7907] team0: Port device team_slave_1 added
[  607.423499][ T7927] team0: Port device team_slave_0 added
[  607.442806][ T7890] hsr_slave_0: entered promiscuous mode
[  607.453771][ T7890] hsr_slave_1: entered promiscuous mode
[  607.454806][ T7890] debugfs: 'hsr0' already exists in 'hsr'
[  607.454831][ T7890] Cannot create hsr debugfs directory
[  607.759571][ T7927] team0: Port device team_slave_1 added
[  607.788672][ T7887] hsr_slave_0: entered promiscuous mode
[  607.790480][ T7887] hsr_slave_1: entered promiscuous mode
[  607.791597][ T7887] debugfs: 'hsr0' already exists in 'hsr'
[  607.791624][ T7887] Cannot create hsr debugfs directory
[  608.031553][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  608.031574][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  608.031604][ T7907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  609.982190][ T7907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  609.982212][ T7907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  609.982242][ T7907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  610.083965][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  610.083985][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.084015][ T7927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  610.317880][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  610.317900][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  610.318154][ T7927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.230506][ T7907] hsr_slave_0: entered promiscuous mode
[  612.232430][ T7907] hsr_slave_1: entered promiscuous mode
[  612.257736][ T7907] debugfs: 'hsr0' already exists in 'hsr'
[  612.257769][ T7907] Cannot create hsr debugfs directory
[  612.277356][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'.
[  612.315577][ T8029] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  612.536967][ T8027] hsr_slave_0: left promiscuous mode
[  612.573022][ T8027] hsr_slave_1: left promiscuous mode
[  612.856763][ T7927] hsr_slave_0: entered promiscuous mode
[  612.860698][ T7927] hsr_slave_1: entered promiscuous mode
[  617.734004][ T6023] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  617.910498][ T6023] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  617.928778][ T6023] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  617.928810][ T6023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.928830][ T6023] usb 3-1: Product: з
[  617.928845][ T6023] usb 3-1: Manufacturer: Ц
[  617.928859][ T6023] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  618.429929][ T6023] cdc_ncm 3-1:1.0: bind() failure
[  618.478457][ T6023] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  618.478511][ T6023] cdc_ncm 3-1:1.1: bind() failure
[  618.552326][ T6023] usb 3-1: USB disconnect, device number 82
[  618.756610][ T7890] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  618.840228][ T7890] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  618.887334][ T7890] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  618.950289][ T7890] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  619.042240][   T57] bridge_slave_1: left allmulticast mode
[  619.042278][   T57] bridge_slave_1: left promiscuous mode
[  619.042747][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.144657][   T57] bridge_slave_0: left allmulticast mode
[  619.144696][   T57] bridge_slave_0: left promiscuous mode
[  619.145069][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.259175][   T57] bridge_slave_1: left allmulticast mode
[  619.259217][   T57] bridge_slave_1: left promiscuous mode
[  619.259544][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.345355][   T57] bridge_slave_0: left allmulticast mode
[  619.345395][   T57] bridge_slave_0: left promiscuous mode
[  619.345760][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.449026][   T57] bridge_slave_1: left allmulticast mode
[  619.449066][   T57] bridge_slave_1: left promiscuous mode
[  619.449368][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.476938][ T8059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  619.915023][   T57] bridge_slave_0: left allmulticast mode
[  619.915063][   T57] bridge_slave_0: left promiscuous mode
[  619.915384][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.062936][ T8061] random: crng reseeded on system resumption
[  620.088911][ T8061] Restarting kernel threads ...
[  620.090856][ T8061] Done restarting kernel threads.
[  621.008635][   T57] bridge_slave_1: left allmulticast mode
[  621.008680][   T57] bridge_slave_1: left promiscuous mode
[  621.008972][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.065008][   T57] bridge_slave_0: left allmulticast mode
[  621.065046][   T57] bridge_slave_0: left promiscuous mode
[  621.065334][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.543574][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  621.613599][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  621.655684][   T57] bond0 (unregistering): Released all slaves
[  621.954445][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  622.044056][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  622.089963][   T57] bond0 (unregistering): Released all slaves
[  622.376503][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  622.436107][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  622.497854][   T57] bond0 (unregistering): Released all slaves
[  623.177777][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  623.243462][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  623.327630][   T57] bond0 (unregistering): Released all slaves
[  625.155305][   T57] hsr_slave_0: left promiscuous mode
[  625.199000][   T57] hsr_slave_1: left promiscuous mode
[  625.200139][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  625.218622][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  625.530106][   T57] hsr_slave_0: left promiscuous mode
[  625.592858][   T57] hsr_slave_1: left promiscuous mode
[  625.594184][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  625.602814][ T6023] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  625.644200][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  625.803511][   T57] hsr_slave_0: left promiscuous mode
[  625.835168][ T6023] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  625.863444][   T57] hsr_slave_1: left promiscuous mode
[  625.882395][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  625.916604][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  625.962004][ T6023] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  625.962039][ T6023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.962060][ T6023] usb 3-1: Product: з
[  625.962074][ T6023] usb 3-1: Manufacturer: Ц
[  625.962089][ T6023] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  626.133128][   T57] hsr_slave_0: left promiscuous mode
[  626.182929][   T57] hsr_slave_1: left promiscuous mode
[  626.191167][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  626.215217][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  628.050272][ T6023] cdc_ncm 3-1:1.0: bind() failure
[  628.084291][ T6023] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  628.084348][ T6023] cdc_ncm 3-1:1.1: bind() failure
[  628.103126][ T6023] usb 3-1: USB disconnect, device number 83
[  628.429408][   T57] team0 (unregistering): Port device team_slave_1 removed
[  628.619560][   T57] team0 (unregistering): Port device team_slave_0 removed
[  630.263710][   T57] team0 (unregistering): Port device team_slave_1 removed
[  630.322278][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  630.322370][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  630.456620][   T57] team0 (unregistering): Port device team_slave_0 removed
[  632.034585][   T57] team0 (unregistering): Port device team_slave_1 removed
[  632.246260][   T57] team0 (unregistering): Port device team_slave_0 removed
[  633.477654][ T7734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  633.511612][ T7734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  633.521604][ T7734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  633.539654][ T7734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  633.540652][ T7734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  634.217719][ T7910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  634.221397][ T7910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  634.252195][ T7910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  634.277512][ T7910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  634.281169][ T7910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  634.349376][   T57] team0 (unregistering): Port device team_slave_1 removed
[  634.536031][   T57] team0 (unregistering): Port device team_slave_0 removed
[  635.653873][ T7734] Bluetooth: hci0: command tx timeout
[  635.896426][ T8095] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[  636.402681][ T7734] Bluetooth: hci5: command tx timeout
[  637.344863][ T7910] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  637.366106][ T7910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  637.463455][ T7910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  637.465012][ T7910] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  637.466179][ T7910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  637.493929][   T10] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  637.494220][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  637.624529][   T10] usb 3-1: device descriptor read/64, error -32
[  637.732986][ T7734] Bluetooth: hci0: command tx timeout
[  637.862763][   T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  638.107094][   T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  638.174172][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  638.174194][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.174206][   T10] usb 3-1: Product: з
[  638.174225][   T10] usb 3-1: Manufacturer: Ц
[  638.174234][   T10] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  638.455020][ T7734] Bluetooth: hci5: command tx timeout
[  639.572862][ T7734] Bluetooth: hci6: command tx timeout
[  639.812731][ T7734] Bluetooth: hci0: command tx timeout
[  640.534501][ T7734] Bluetooth: hci5: command tx timeout
[  640.608393][   T10] cdc_ncm 3-1:1.0: bind() failure
[  640.628269][   T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  640.628320][   T10] cdc_ncm 3-1:1.1: bind() failure
[  640.746535][   T10] usb 3-1: USB disconnect, device number 85
[  642.783959][ T7734] Bluetooth: hci6: command tx timeout
[  642.784032][ T7734] Bluetooth: hci0: command tx timeout
[  642.784068][ T7734] Bluetooth: hci5: command tx timeout
[  644.171926][ T8082] chnl_net:caif_netlink_parms(): no params data found
[  644.582975][ T7927] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  644.738098][ T8086] chnl_net:caif_netlink_parms(): no params data found
[  644.763748][ T7927] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  644.853060][ T7910] Bluetooth: hci6: command tx timeout
[  645.065951][ T7927] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  645.378226][ T7927] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  645.653769][ T8130] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  646.933398][ T7910] Bluetooth: hci6: command tx timeout
[  647.322781][ T5911] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  647.422076][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.422365][ T8082] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.443791][ T8082] bridge_slave_0: entered allmulticast mode
[  647.447213][ T8082] bridge_slave_0: entered promiscuous mode
[  647.488012][ T5911] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  647.492383][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  647.492415][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.492436][ T5911] usb 3-1: Product: з
[  647.492452][ T5911] usb 3-1: Manufacturer: Ц
[  647.492466][ T5911] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  647.696256][ T8102] chnl_net:caif_netlink_parms(): no params data found
[  647.791670][ T8082] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.792164][ T8082] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.809322][ T8082] bridge_slave_1: entered allmulticast mode
[  647.838397][ T8082] bridge_slave_1: entered promiscuous mode
[  647.849849][ T8086] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.850032][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.850318][ T8086] bridge_slave_0: entered allmulticast mode
[  647.874502][ T5911] cdc_ncm 3-1:1.0: bind() failure
[  647.878217][ T8086] bridge_slave_0: entered promiscuous mode
[  647.911475][ T5911] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  647.911735][ T5911] cdc_ncm 3-1:1.1: bind() failure
[  647.948358][ T5911] usb 3-1: USB disconnect, device number 86
[  648.186477][ T8086] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.186689][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.186945][ T8086] bridge_slave_1: entered allmulticast mode
[  648.190323][ T8086] bridge_slave_1: entered promiscuous mode
[  649.531001][ T7734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  649.559586][ T7734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  649.561391][ T7734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  649.580070][ T7734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  649.583287][ T7734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  649.793185][ T8082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  649.993264][ T8082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  650.008872][ T8086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  650.695805][ T8086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  651.743816][ T7910] Bluetooth: hci1: command tx timeout
[  652.527869][ T8082] team0: Port device team_slave_0 added
[  652.728259][ T8082] team0: Port device team_slave_1 added
[  652.744032][ T8086] team0: Port device team_slave_0 added
[  652.744927][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.745976][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.746268][ T8102] bridge_slave_0: entered allmulticast mode
[  652.750089][ T8102] bridge_slave_0: entered promiscuous mode
[  652.793205][ T8040] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  652.909799][ T8086] team0: Port device team_slave_1 added
[  652.910906][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.911080][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.911323][ T8102] bridge_slave_1: entered allmulticast mode
[  652.916459][ T8102] bridge_slave_1: entered promiscuous mode
[  652.952857][ T8040] usb 3-1: Using ep0 maxpacket: 8
[  652.964131][ T8040] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  652.964159][ T8040] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  652.964176][ T8040] usb 3-1: config 0 has no interface number 0
[  652.964227][ T8040] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  652.964252][ T8040] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  652.964275][ T8040] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  652.964299][ T8040] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  652.964324][ T8040] usb 3-1: config 0 interface 52 has no altsetting 0
[  652.964356][ T8040] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  652.964376][ T8040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.988173][ T8040] usb 3-1: config 0 descriptor??
[  653.217340][ T8040] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input19
[  653.558672][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  653.558692][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.558720][ T8082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.776121][ T8082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.776142][ T8082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.776172][ T8082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  653.813129][ T7910] Bluetooth: hci1: command tx timeout
[  653.878431][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  653.878451][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.878482][ T8086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  653.903095][ T8102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  653.957995][ T8086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  653.958017][ T8086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  653.958049][ T8086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  654.014587][ T8102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.598099][ T8102] team0: Port device team_slave_0 added
[  654.887809][ T8102] team0: Port device team_slave_1 added
[  654.911068][ T8082] hsr_slave_0: entered promiscuous mode
[  654.921843][ T8082] hsr_slave_1: entered promiscuous mode
[  654.924226][ T8082] debugfs: 'hsr0' already exists in 'hsr'
[  654.924255][ T8082] Cannot create hsr debugfs directory
[  655.455830][ T8040] usb 3-1: USB disconnect, device number 87
[  655.558900][ T8086] hsr_slave_0: entered promiscuous mode
[  655.560364][ T8086] hsr_slave_1: entered promiscuous mode
[  655.561294][ T8086] debugfs: 'hsr0' already exists in 'hsr'
[  655.561320][ T8086] Cannot create hsr debugfs directory
[  655.928754][ T7910] Bluetooth: hci1: command tx timeout
[  656.252155][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_0
[  656.252175][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  656.252205][ T8102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  656.719970][ T8102] batman_adv: batadv0: Adding interface: batadv_slave_1
[  656.719989][ T8102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  656.720022][ T8102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  657.928691][ T8102] hsr_slave_0: entered promiscuous mode
[  657.930374][ T8102] hsr_slave_1: entered promiscuous mode
[  657.931472][ T8102] debugfs: 'hsr0' already exists in 'hsr'
[  657.931509][ T8102] Cannot create hsr debugfs directory
[  657.972685][ T7910] Bluetooth: hci1: command tx timeout
[  658.784750][ T8154] chnl_net:caif_netlink_parms(): no params data found
[  662.342968][ T6023] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  662.623108][ T6023] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  662.694210][ T6023] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  662.694245][ T6023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  662.694266][ T6023] usb 3-1: Product: з
[  662.694280][ T6023] usb 3-1: Manufacturer: Ц
[  662.694294][ T6023] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  663.712355][ T8154] bridge0: port 1(bridge_slave_0) entered blocking state
[  663.715770][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state
[  663.717896][ T8154] bridge_slave_0: entered allmulticast mode
[  663.781573][ T8154] bridge_slave_0: entered promiscuous mode
[  663.869008][ T8154] bridge0: port 2(bridge_slave_1) entered blocking state
[  663.870875][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state
[  663.876929][ T8154] bridge_slave_1: entered allmulticast mode
[  663.919757][ T8154] bridge_slave_1: entered promiscuous mode
[  664.787758][ T8082] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  665.201868][ T8154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  665.212350][ T8082] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  665.546874][ T8154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  665.566384][ T8082] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  665.566603][ T6023] cdc_ncm 3-1:1.0: bind() failure
[  665.581014][ T6023] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  665.581064][ T6023] cdc_ncm 3-1:1.1: bind() failure
[  665.635887][ T6023] usb 3-1: USB disconnect, device number 88
[  666.008886][ T8082] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  666.092772][ T6023] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  666.166893][ T8154] team0: Port device team_slave_0 added
[  666.184404][ T8154] team0: Port device team_slave_1 added
[  666.242863][ T6023] usb 3-1: Using ep0 maxpacket: 8
[  666.245455][ T6023] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  666.245484][ T6023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  666.245505][ T6023] usb 3-1: config 0 has no interface number 0
[  666.245556][ T6023] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  666.245583][ T6023] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  666.245611][ T6023] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  666.245639][ T6023] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  666.245674][ T6023] usb 3-1: config 0 interface 52 has no altsetting 0
[  666.245711][ T6023] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  666.245736][ T6023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.268969][ T6023] usb 3-1: config 0 descriptor??
[  666.503050][ T6023] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input20
[  666.699679][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.699708][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.699736][ T8154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.739396][ T8154] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.739413][ T8154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.739530][ T8154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.252269][ T8154] hsr_slave_0: entered promiscuous mode
[  667.256582][ T8154] hsr_slave_1: entered promiscuous mode
[  667.257631][ T8154] debugfs: 'hsr0' already exists in 'hsr'
[  667.257656][ T8154] Cannot create hsr debugfs directory
[  667.485770][   T57] bridge_slave_1: left allmulticast mode
[  667.485809][   T57] bridge_slave_1: left promiscuous mode
[  667.486159][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.535177][   T57] bridge_slave_0: left allmulticast mode
[  667.535217][   T57] bridge_slave_0: left promiscuous mode
[  667.535578][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.608634][   T57] bridge_slave_1: left allmulticast mode
[  667.608875][   T57] bridge_slave_1: left promiscuous mode
[  667.609200][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.654697][   T57] bridge_slave_0: left allmulticast mode
[  667.654736][   T57] bridge_slave_0: left promiscuous mode
[  667.655035][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.719426][   T57] bridge_slave_1: left allmulticast mode
[  667.719576][   T57] bridge_slave_1: left promiscuous mode
[  667.719864][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.805413][   T57] bridge_slave_0: left allmulticast mode
[  667.805564][   T57] bridge_slave_0: left promiscuous mode
[  667.805977][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.878389][   T57] bridge_slave_1: left allmulticast mode
[  667.878428][   T57] bridge_slave_1: left promiscuous mode
[  667.878728][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.934136][   T57] bridge_slave_0: left allmulticast mode
[  667.934175][   T57] bridge_slave_0: left promiscuous mode
[  667.934419][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.546092][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  668.648908][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  668.705550][ T8040] usb 3-1: USB disconnect, device number 89
[  668.757874][   T57] bond0 (unregistering): Released all slaves
[  669.380176][   T38] audit: type=1326 audit(1756559037.383:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8211 comm="syz.2.411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ae78debe9 code=0x0
[  670.871382][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  672.060725][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  672.143530][   T57] bond0 (unregistering): Released all slaves
[  672.478115][ T8222] netlink: 48 bytes leftover after parsing attributes in process `syz.2.413'.
[  673.753482][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  673.883365][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  673.949945][   T57] bond0 (unregistering): Released all slaves
[  674.042597][ T6024] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  674.245186][ T6024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  674.245224][ T6024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  674.245267][ T6024] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  674.245292][ T6024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.251645][ T6024] usb 3-1: config 0 descriptor??
[  674.702359][ T6024] hkems 0003:2006:0118.0002: unbalanced delimiter at end of report description
[  674.703361][ T6024] hkems 0003:2006:0118.0002: parse failed
[  674.703443][ T6024] hkems 0003:2006:0118.0002: probe with driver hkems failed with error -22
[  674.833823][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  674.953613][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  675.028074][   T57] bond0 (unregistering): Released all slaves
[  675.112584][ T6024] usb 3-1: USB disconnect, device number 90
[  676.142817][    T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  676.322430][    T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  676.326954][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  676.326988][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.327008][    T9] usb 3-1: Product: з
[  676.327023][    T9] usb 3-1: Manufacturer: Ц
[  676.327037][    T9] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  676.663232][    T9] cdc_ncm 3-1:1.0: bind() failure
[  676.709171][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  676.709240][    T9] cdc_ncm 3-1:1.1: bind() failure
[  676.748000][    T9] usb 3-1: USB disconnect, device number 91
[  677.132944][   T57] hsr_slave_0: left promiscuous mode
[  677.177097][   T57] hsr_slave_1: left promiscuous mode
[  677.177907][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  677.201357][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  677.436713][   T57] hsr_slave_0: left promiscuous mode
[  677.484074][   T57] hsr_slave_1: left promiscuous mode
[  677.486554][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  677.544932][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  677.705769][   T57] hsr_slave_0: left promiscuous mode
[  677.722843][   T57] hsr_slave_1: left promiscuous mode
[  677.725103][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  677.774130][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  677.927548][   T57] hsr_slave_0: left promiscuous mode
[  677.942979][   T57] hsr_slave_1: left promiscuous mode
[  677.944342][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  677.993984][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  681.893762][   T57] team0 (unregistering): Port device team_slave_1 removed
[  682.083559][   T57] team0 (unregistering): Port device team_slave_0 removed
[  685.094107][ T8255] 9pnet_fd: Insufficient options for proto=fd
[  685.694046][   T57] team0 (unregistering): Port device team_slave_1 removed
[  685.951963][   T57] team0 (unregistering): Port device team_slave_0 removed
[  686.313004][ T3118] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  686.498571][ T3118] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  686.514903][ T3118] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  686.514938][ T3118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.514959][ T3118] usb 3-1: Product: з
[  686.514973][ T3118] usb 3-1: Manufacturer: Ц
[  686.514988][ T3118] usb 3-1: SerialNumber: ᶔ昌ꔷ합껵ൺ芖ኈ랕侂짯꽑솃釚瞮㥑䬏ᐙￒ䕣誻呝鷍ꡏ畞즿譑낑ꎣ૚渨ჿ༽அꈼ﷿◧ቜ诀À牤׽謗塒㫶砩렿ᔪﳄ␄牊⊏ࣽ薵倱￪폭ꁂ寀훡軶鵠꽱톯豝ꙻ隞낺鯿ォྞ⨇閫ᘪ㵴⼚
[  686.839232][ T3118] cdc_ncm 3-1:1.0: bind() failure
[  686.921385][ T3118] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  686.921443][ T3118] cdc_ncm 3-1:1.1: bind() failure
[  686.973325][ T3118] usb 3-1: USB disconnect, device number 92
[  687.989655][   T38] audit: type=1326 audit(1756559056.023:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8258 comm="syz.2.424" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ae78debe9 code=0x0
[  690.794961][   T57] team0 (unregistering): Port device team_slave_1 removed
[  690.987119][   T57] team0 (unregistering): Port device team_slave_0 removed
[  691.252967][ T3118] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  691.430500][ T3118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  691.457103][ T3118] usb 3-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19
[  691.457138][ T3118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.457158][ T3118] usb 3-1: Product: syz
[  691.457173][ T3118] usb 3-1: Manufacturer: syz
[  691.457188][ T3118] usb 3-1: SerialNumber: syz
[  691.505128][ T3118] usb 3-1: config 0 descriptor??
[  691.542950][ T3118] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -32
[  691.740124][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  691.740177][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  691.786340][ T8269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.426'.
[  692.995985][   T57] team0 (unregistering): Port device team_slave_1 removed
[  693.210654][   T57] team0 (unregistering): Port device team_slave_0 removed
[  694.346139][    T9] usb 3-1: USB disconnect, device number 93
[  694.625635][ T7734] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  694.637483][ T7734] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  694.640036][ T7734] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  694.656916][ T7734] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  694.658117][ T7734] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  694.926319][ T8086] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  696.774283][ T7734] Bluetooth: hci4: command tx timeout
[  696.859321][ T8102] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  697.614316][ T7910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  697.632051][ T7910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  697.650138][ T7910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  697.668579][ T7910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  697.672283][ T7910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  698.168770][ T8292] 9pnet_fd: Insufficient options for proto=fd
[  698.561795][ T7734] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  698.600956][ T7734] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  698.617266][ T7734] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  698.660470][ T7734] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  698.672802][ T7734] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  698.852937][ T7910] Bluetooth: hci4: command tx timeout
[  699.839032][ T7910] Bluetooth: hci0: command tx timeout
[  701.692138][ T7734] Bluetooth: hci5: command tx timeout
[  701.694525][ T7734] Bluetooth: hci4: command tx timeout
[  701.897514][ T7910] Bluetooth: hci0: command tx timeout
[  702.200103][ T8274] chnl_net:caif_netlink_parms(): no params data found
[  703.738474][ T7910] Bluetooth: hci4: command tx timeout
[  703.738490][ T7734] Bluetooth: hci5: command tx timeout
[  703.885548][ T8326] netlink: 48 bytes leftover after parsing attributes in process `syz.2.434'.
[  703.972755][ T7734] Bluetooth: hci0: command tx timeout
[  705.891036][ T7734] Bluetooth: hci5: command tx timeout
[  706.052701][ T7734] Bluetooth: hci0: command tx timeout
[  707.894895][ T7734] Bluetooth: hci5: command tx timeout
[  714.991954][ T1392] sched: DL replenish lagged too much
[  724.436610][ T7910] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  724.457087][ T7910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  724.534706][ T7910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  724.536947][ T7910] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  724.538015][ T7910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  724.846730][ T7910] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  724.894326][ T7910] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  724.898764][ T7910] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  724.900275][ T7910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  724.901294][ T7910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  726.612908][ T7910] Bluetooth: hci6: command tx timeout
[  727.102633][ T7910] Bluetooth: hci7: command tx timeout
[  728.692960][ T7910] Bluetooth: hci6: command tx timeout
[  729.173081][ T7910] Bluetooth: hci7: command tx timeout
[  730.773251][ T7910] Bluetooth: hci6: command tx timeout
[  731.252901][ T7910] Bluetooth: hci7: command tx timeout
[  732.852799][ T7910] Bluetooth: hci6: command tx timeout
[  733.333037][ T7910] Bluetooth: hci7: command tx timeout
[  753.607706][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  753.628159][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  757.024527][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  757.077986][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  757.080898][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  757.115264][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  757.116243][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  758.624509][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  758.647892][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  758.649890][ T5853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  758.651887][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  758.686085][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  759.172688][ T7910] Bluetooth: hci2: command tx timeout
[  760.692976][ T7910] Bluetooth: hci8: command tx timeout
[  760.767835][ T5853] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  760.794096][ T5853] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  760.824539][ T5853] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  760.826889][ T5853] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  760.827822][ T5853] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  761.258102][ T5853] Bluetooth: hci2: command tx timeout
[  762.774492][ T5853] Bluetooth: hci8: command tx timeout
[  762.933111][ T7910] Bluetooth: hci9: command tx timeout
[  763.334300][ T7910] Bluetooth: hci2: command tx timeout
[  764.852880][ T7910] Bluetooth: hci8: command tx timeout
[  765.012761][ T7910] Bluetooth: hci9: command tx timeout
[  765.414065][ T7910] Bluetooth: hci2: command tx timeout
[  766.932872][ T7910] Bluetooth: hci8: command tx timeout
[  767.092993][ T7910] Bluetooth: hci9: command tx timeout
[  769.172638][ T7910] Bluetooth: hci9: command tx timeout
[  775.752633][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  785.420517][ T7734] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  785.446869][ T7734] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  785.448288][ T7734] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  785.449643][ T7734] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  785.476870][ T7734] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  786.431147][ T8437] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  786.451766][ T8437] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  786.462573][ T8437] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  786.465529][ T8437] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  786.466597][ T8437] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  814.694318][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  814.694408][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  818.882356][ T8437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  818.926345][ T8437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  818.927908][ T8437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  818.930314][ T8437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  818.932208][ T8437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  819.013815][ T5853] Bluetooth: hci10: command tx timeout
[  819.104519][ T8437] Bluetooth: hci11: command tx timeout
[  820.039666][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  820.063225][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  820.065358][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  820.099561][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  820.101460][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  821.095154][ T5853] Bluetooth: hci10: command tx timeout
[  821.172895][ T5853] Bluetooth: hci11: command tx timeout
[  822.224998][ T7734] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  822.253044][ T7734] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  822.256874][ T7734] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  822.288695][ T7734] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  822.310075][ T7734] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  823.172734][ T7734] Bluetooth: hci10: command tx timeout
[  823.252775][ T7734] Bluetooth: hci11: command tx timeout
[  825.257746][ T7734] Bluetooth: hci10: command tx timeout
[  825.342713][ T7734] Bluetooth: hci11: command tx timeout
[  845.480772][ T8472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  845.505896][ T8472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  845.507542][ T8472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  845.509078][ T8472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  845.510093][ T8472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  847.127727][ T7910] Bluetooth: hci0: command tx timeout
[  847.380265][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  847.406330][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  847.408849][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  847.437622][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  847.439317][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  849.173087][ T5853] Bluetooth: hci4: command tx timeout
[  849.173447][ T5853] Bluetooth: hci0: command tx timeout
[  849.252692][ T5853] Bluetooth: hci12: command tx timeout
[  851.263163][ T8437] Bluetooth: hci4: command tx timeout
[  851.264923][ T5853] Bluetooth: hci0: command tx timeout
[  851.335478][ T5853] Bluetooth: hci12: command tx timeout
[  853.336458][ T8437] Bluetooth: hci4: command tx timeout
[  853.352777][ T5853] Bluetooth: hci0: command tx timeout
[  853.415978][ T5853] Bluetooth: hci12: command tx timeout
[  854.663588][ T8472] Bluetooth: hci1: command tx timeout
[  855.412637][ T5853] Bluetooth: hci4: command tx timeout
[  855.492774][ T5853] Bluetooth: hci12: command tx timeout
[  856.692955][ T5853] Bluetooth: hci5: command tx timeout
[  856.693311][ T5853] Bluetooth: hci1: command tx timeout
[  858.775211][ T7734] Bluetooth: hci1: command tx timeout
[  858.775250][ T7734] Bluetooth: hci5: command tx timeout
[  860.855208][ T5853] Bluetooth: hci5: command tx timeout
[  860.855249][ T5853] Bluetooth: hci1: command tx timeout
[  862.932990][ T5853] Bluetooth: hci5: command tx timeout
[  866.223360][ T8419] chnl_net:caif_netlink_parms(): no params data found
[  876.066509][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  876.066617][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  881.864899][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  881.896758][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  881.922229][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  881.938795][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  881.939841][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  882.507799][ T8437] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  882.511901][ T8437] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  882.530307][ T8437] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  882.542139][ T8437] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  882.565646][ T8437] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  883.268410][ T8437] Bluetooth: hci9: command 0x0406 tx timeout
[  883.268462][ T8437] Bluetooth: hci2: command 0x0406 tx timeout
[  883.268490][ T8437] Bluetooth: hci8: command 0x0406 tx timeout
[  884.132817][ T5844] Bluetooth: hci6: command tx timeout
[  884.702890][ T5844] Bluetooth: hci7: command tx timeout
[  884.928042][ T8437] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  884.947250][ T8437] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  884.966535][ T8437] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  884.968060][ T8437] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  884.969028][ T8437] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  886.220280][ T5844] Bluetooth: hci6: command tx timeout
[  886.772884][ T5844] Bluetooth: hci7: command tx timeout
[  888.314584][ T5844] Bluetooth: hci6: command tx timeout
[  888.872569][ T5844] Bluetooth: hci7: command tx timeout
[  890.453101][ T5844] Bluetooth: hci6: command tx timeout
[  890.932808][ T5844] Bluetooth: hci7: command tx timeout
[  905.476726][ T7734] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  905.479670][ T7734] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  905.499401][ T7734] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  905.521910][ T7734] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  905.531288][ T7734] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  909.794355][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  909.826304][ T5844] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  909.832091][ T5844] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  909.855370][ T5844] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  909.856413][ T5844] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  916.376567][   T39] INFO: task kworker/u8:3:57 blocked for more than 143 seconds.
[  916.376596][   T39]       Not tainted syzkaller #0
[  916.376608][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  916.376618][   T39] task:kworker/u8:3    state:D stack:20464 pid:57    tgid:57    ppid:2      task_flags:0x4208160 flags:0x00004000
[  916.376680][   T39] Workqueue: netns cleanup_net
[  916.376712][   T39] Call Trace:
[  916.376720][   T39]  <TASK>
[  916.376735][   T39]  __schedule+0x16f3/0x4c20
[  916.376792][   T39]  ? __lock_acquire+0xab9/0xd20
[  916.376822][   T39]  ? __pfx___schedule+0x10/0x10
[  916.376868][   T39]  ? schedule+0x91/0x360
[  916.376895][   T39]  schedule+0x165/0x360
[  916.376924][   T39]  schedule_timeout+0x9a/0x270
[  916.376949][   T39]  ? __pfx_schedule_timeout+0x10/0x10
[  916.376990][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  916.377018][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[  916.377043][   T39]  ? wait_for_completion+0x267/0x5d0
[  916.377073][   T39]  wait_for_completion+0x2b[  916.377073][   T39]  wait_for_completion+0x2bf/0x5d0
[  916.377116][   T39]  ? __pfx_wait_for_completion+0x10/0x10
[  916.377146][   T39]  ? __raw_spin_lock_init+0x45/0x100
[  916.377173][   T39]  ? __init_swait_queue_head+0xa9/0x150
[  916.377211][   T39]  rcu_barrier+0x463/0x570
[  916.377247][   T39]  wg_destruct+0x21e/0x2f0
[  916.377270][   T39]  ? __pfx_wg_destruct+0x10/0x10
[  916.377292][   T39]  netdev_run_todo+0xcd7/0xea0
[  916.377332][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  916.377360][   T39]  ? unregister_netdevice_queue+0x1b3/0x380
[  916.377396][   T39]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  916.377426][   T39]  ? batadv_meshif_vlan_put+0x131/0x1e0
[  916.377459][   T39]  ? batadv_meshif_destroy_netlink+0x125/0x160
[  916.377494][   T39]  default_device_exit_batch+0x81e/0x890
[  916.377530][   T39]  ? __pfx___might_resched+0x10/0x10
[  916.377554][   T39]  ? __pfx_default_device_exit_batch+0x10/0x10
[  916.377581][   T39]  ? cfg802154_pernet_exit+0x19/0xe0
[  916.377602][   T39]  ? mutex_lock_nested+0x16a/0x1d0
[  916.377634][   T39]  ? __pfx_default_device_exit_batch+0x10/0x10
[  916.377660][   T39]  ops_undo_list+0x522/0x990
[  916.377694][   T39]  ? __pfx_ops_undo_list+0x10/0x10
[  916.377735][   T39]  cleanup_net+0x4cb/0x800
[  916.377765][   T39]  ? __pfx_cleanup_net+0x10/0x10
[  916.377795][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  916.377820][   T39]  ? process_scheduled_works+0x9ef/0x17b0
[  916.377846][   T39]  ? process_scheduled_works+0x9ef/0x17b0
[  916.377875][   T39]  process_scheduled_works+0xade/0x17b0
[  916.377936][   T39]  ? __pfx_process_scheduled_works+0x10/0x10
[  916.377982][   T39]  worker_thread+0x8a0/0xda0
[  916.378042][   T39]  kthread+0x711/0x8a0
[  916.378076][   T39]  ? __pfx_worker_thread+0x10/0x10
[  916.378102][   T39]  ? __pfx_kthread+0x10/0x10
[  916.378139][   T39]  ? __pfx_kthread+0x10/0x10
[  916.378172][   T39]  ret_from_fork+0x3fc/0x770
[  916.378211][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  916.378246][   T39]  ? __switch_to_asm+0x39/0x70
[  916.378266][   T39]  ? __switch_to_asm+0x33/0x70
[  916.378284][   T39]  ? __pfx_kthread+0x10/0x10
[  916.378316][   T39]  ret_from_fork_asm+0x1a/0x30
[  916.378356][   T39]  </TASK>
[  916.378499][   T39] 
[  916.378499][   T39] Showing all locks held in the system:
[  916.378509][   T39] 2 locks held by kworker/0:1/10:
[  916.378523][   T39] 2 locks held by ksoftirqd/0/15:
[  916.378534][   T39] 7 locks held by ktimers/0/16:
[  916.378546][   T39] 2 locks held by rcuc/0/20:
[  916.378557][   T39]  #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  916.522542][   T39]  #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  916.522603][   T39] 1 lock held by khungtaskd/39:
[  916.522615][   T39]  #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  916.522668][   T39] 5 locks held by kworker/u8:3/57:
[  916.522681][   T39]  #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  916.522734][   T39]  #1: ffffc9000123fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  916.522785][   T39]  #2: ffffffff8ecc53c0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  916.522838][   T39]  #3: ffff888067e2d7b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0
[  916.522887][   T39]  #4: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  916.522950][   T39] 3 locks held by kworker/u8:10/1506:
[  916.522962][   T39]  #0: ffff888030431938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  916.523015][   T39]  #1: ffffc90005a67bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  916.523069][   T39]  #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  916.523132][   T39] 3 locks held by kworker/u8:12/4145:
[  916.523144][   T39]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  916.523204][   T39]  #1: ffffc9000ece7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  916.523255][   T39]  #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  916.523313][   T39] 1 lock held by syslogd/5188:
[  916.523324][   T39]  #0: ffff888034058098 (&ei->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbf/0x1f0
[  916.523376][   T39] 3 locks held by klogd/5195:
[  916.523388][   T39] 2 locks held by dhcpcd/5500:
[  916.523399][   T39]  #0: ffffffff8ed382c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  916.523452][   T39]  #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930
[  916.523499][   T39] 2 locks held by getty/5598:
[  916.523510][   T39]  #0: ffff88823bf8e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  916.523565][   T39]  #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410
[  916.523625][   T39] 1 lock held by syz-executor/5827:
[  916.523637][   T39] 4 locks held by kworker/u9:2/5844:
[  916.523648][   T39]  #0: ffff88801cbc1138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  916.523706][   T39]  #1: ffffc90004647bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  916.523759][   T39]  #2: ffff88806b8a80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  916.523808][   T39]  #3: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  916.523858][   T39] 4 locks held by kworker/u9:5/5853:
[  916.523869][   T39]  #0: ffff88802fd04938 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  916.523921][   T39]  #1: ffffc900046b7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  916.523975][   T39]  #2: ffff88802a66ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  916.524038][   T39]  #3: ffff88802a66c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  916.524095][   T39] 4 locks held by kworker/0:6/5979:
[  916.524107][   T39]  #0: ffff88805bc09938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  916.524159][   T39]  #1: ffffc90005157bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  916.524224][   T39]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  916.524276][   T39]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  916.524330][   T39] 2 locks held by kworker/u8:17/6039:
[  916.524342][   T39] 1 lock held by syz.2.152/6604:
[  916.524353][   T39]  #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  916.524407][   T39] 1 lock held by syz-executor/8154:
[  916.524418][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  916.524472][   T39] 1 lock held by syz-executor/8274:
[  916.524484][   T39]  #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  916.524531][   T39] 1 lock held by syz-executor/8285:
[  916.524542][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  916.524594][   T39] 1 lock held by syz-executor/8294:
[  916.524605][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  916.524661][   T39] 4 locks held by kworker/0:7/8408:
[  916.524673][   T39]  #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  916.524724][   T39]  #1: ffffc90003bb7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  916.524777][   T39]  #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  916.524827][   T39]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  916.524879][   T39] 3 locks held by syz-executor/8419:
[  916.524890][   T39]  #0: ffff888073d00e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  916.524940][   T39]  #1: ffff888073d000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  916.524992][   T39]  #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  916.525049][   T39] 3 locks held by syz-executor/8424:
[  916.525060][   T39]  #0: ffff888032f1ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  916.525105][   T39]  #1: ffff888032f1c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  916.525154][   T39]  #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  916.525215][   T39] 4 locks held by syz-executor/8433:
[  916.525226][   T39]  #0: ffff8880557bce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  916.525271][   T39]  #1: ffff8880557bc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  916.525322][   T39]  #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  916.525376][   T39]  #3: ffff888024401b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  916.525435][   T39] 3 locks held by syz-executor/8435:
[  916.525446][   T39]  #0: ffff8880780dce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  916.525492][   T39]  #1: ffff8880780dc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  916.525541][   T39]  #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  916.525594][   T39] 4 locks held by kworker/u9:3/8437:
[  916.525605][   T39]  #0: ffff88803dcb0138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  916.525661][   T39]  #1: ffffc90004437bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  916.525710][   T39]  #2: ffff888069f180a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220
[  916.525756][   T39]  #3: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140
[  916.525804][   T39] 1 lock held by syz-executor/8459:
[  916.525816][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.525871][   T39] 1 lock held by syz-executor/8462:
[  916.525882][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.525939][   T39] 1 lock held by syz-executor/8465:
[  916.525950][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.526007][   T39] 1 lock held by syz-executor/8471:
[  916.526018][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.526074][   T39] 4 locks held by kworker/u9:4/8472:
[  916.526085][   T39]  #0: ffff88805e87f938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  916.526143][   T39]  #1: ffffc90004187bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  916.526205][   T39]  #2: ffff88806f3b80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0
[  916.526250][   T39]  #3: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0
[  916.526299][   T39] 1 lock held by syz-executor/8475:
[  916.526311][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.526368][   T39] 1 lock held by syz-executor/8483:
[  916.526379][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.526434][   T39] 1 lock held by syz-executor/8487:
[  916.526446][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.526503][   T39] 1 lock held by syz-executor/8493:
[  916.526514][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.526571][   T39] 1 lock held by syz-executor/8499:
[  916.526582][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.526639][   T39] 1 lock held by syz-executor/8502:
[  916.526651][   T39]  #0: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  916.526710][   T39] 
[  916.526716][   T39] =============================================
[  916.526716][   T39] 
[  916.526725][   T39] NMI backtrace for cpu 1
[  916.526742][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  916.526765][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  916.526777][   T39] Call Trace:
[  916.526786][   T39]  <TASK>
[  916.526796][   T39]  dump_stack_lvl+0x189/0x250
[  916.526831][   T39]  ? __pfx_dump_stack_lvl+0x10/0x10
[  916.526861][   T39]  ? __pfx__printk+0x10/0x10
[  916.526897][   T39]  nmi_cpu_backtrace+0x39e/0x3d0
[  916.526925][   T39]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  916.526950][   T39]  ? __pfx__printk+0x10/0x10
[  916.526977][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  916.527005][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  916.527031][   T39]  watchdog+0xf93/0xfe0
[  916.527063][   T39]  ? watchdog+0x1de/0xfe0
[  916.527094][   T39]  kthread+0x711/0x8a0
[  916.527127][   T39]  ? __pfx_watchdog+0x10/0x10
[  916.527152][   T39]  ? __pfx_kthread+0x10/0x10
[  916.527195][   T39]  ? __pfx_kthread+0x10/0x10
[  916.527226][   T39]  ret_from_fork+0x3fc/0x770
[  916.527254][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  916.527285][   T39]  ? __switch_to_asm+0x39/0x70
[  916.527302][   T39]  ? __switch_to_asm+0x33/0x70
[  916.527319][   T39]  ? __pfx_kthread+0x10/0x10
[  916.527350][   T39]  ret_from_fork_asm+0x1a/0x30
[  916.527387][   T39]  </TASK>
[  916.527395][   T39] Sending NMI from CPU 1 to CPUs 0:
[  916.527429][    C0] NMI backtrace for cpu 0
[  916.527445][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  916.527464][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  916.527473][    C0] RIP: 0010:__lock_acquire+0x50c/0xd20
[  916.527497][    C0] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 a4 9a 61 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 f0 92 9e 92 eb 40 83 3d 4b 2a
[  916.527510][    C0] RSP: 0018:ffffc90000156548 EFLAGS: 00000007
[  916.527526][    C0] RAX: 00000000000000e7 RBX: 0000000000000000 RCX: 00000000ffffffff
[  916.527537][    C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88801ae85940
[  916.527548][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172b165
[  916.527558][    C0] R10: ffffc90000156798 R11: ffffffff81aae030 R12: ffffffffffffff05
[  916.527570][    C0] R13: 0000000000000001 R14: ffff88801ae86578 R15: ffff88801ae86480
[  916.527581][    C0] FS:  0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000
[  916.527595][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  916.527606][    C0] CR2: 00007f16fd00fff8 CR3: 000000000d7a6000 CR4: 00000000003526f0
[  916.527623][    C0] Call Trace:
[  916.527629][    C0]  <TASK>
[  916.527639][    C0]  ? unwind_next_frame+0xa5/0x2390
[  916.527660][    C0]  lock_acquire+0x120/0x360
[  916.527679][    C0]  ? unwind_next_frame+0xa5/0x2390
[  916.527701][    C0]  ? unwind_next_frame+0xa5/0x2390
[  916.527721][    C0]  ? NF_HOOK+0x30c/0x3a0
[  916.527739][    C0]  ? unwind_next_frame+0xa5/0x2390
[  916.527759][    C0]  unwind_next_frame+0xc2/0x2390
[  916.527779][    C0]  ? unwind_next_frame+0xa5/0x2390
[  916.527800][    C0]  ? unwind_next_frame+0xa5/0x2390
[  916.527821][    C0]  ? NF_HOOK+0x206/0x3a0
[  916.527839][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  916.527857][    C0]  arch_stack_walk+0x11c/0x150
[  916.527881][    C0]  ? NF_HOOK+0x30c/0x3a0
[  916.527899][    C0]  stack_trace_save+0x9c/0xe0
[  916.527916][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  916.527935][    C0]  ref_tracker_alloc+0x195/0x450
[  916.527993][    C0]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  916.528012][    C0]  ? dst_init+0xd9/0x450
[  916.528033][    C0]  ? dst_alloc+0x12a/0x170
[  916.528053][    C0]  ? ip_route_output_key_hash_rcu+0x1560/0x23e0
[  916.528076][    C0]  ? ip_route_output_key_hash+0x1b9/0x2e0
[  916.528097][    C0]  ? ip_route_output_flow+0x2a/0x150
[  916.528117][    C0]  ? ip_route_me_harder+0x6d2/0x1030
[  916.528132][    C0]  ? synproxy_send_tcp+0x359/0x6c0
[  916.528151][    C0]  ? synproxy_send_client_synack+0x8bb/0xe20
[  916.528170][    C0]  ? nft_synproxy_eval_v4+0x36e/0x560
[  916.528191][    C0]  ? nft_synproxy_do_eval+0x345/0x570
[  916.528212][    C0]  ? nft_do_chain+0x409/0x1920
[  916.528232][    C0]  ? nft_do_chain_inet+0x25d/0x340
[  916.528253][    C0]  ? nf_hook_slow+0xc5/0x220
[  916.528271][    C0]  ? NF_HOOK+0x206/0x3a0
[  916.528288][    C0]  ? NF_HOOK+0x30c/0x3a0
[  916.528304][    C0]  ? dst_alloc+0x105/0x170
[  916.528325][    C0]  ? dst_alloc+0x105/0x170
[  916.528346][    C0]  dst_init+0xd9/0x450
[  916.528369][    C0]  dst_alloc+0x12a/0x170
[  916.528391][    C0]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  916.528417][    C0]  ? ip_route_output_key_hash+0xde/0x2e0
[  916.528449][    C0]  ip_route_output_key_hash+0x1b9/0x2e0
[  916.528471][    C0]  ? __lock_acquire+0xab9/0xd20
[  916.528490][    C0]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  916.528515][    C0]  ? ip_route_me_harder+0x4ad/0x1030
[  916.528533][    C0]  ip_route_output_flow+0x2a/0x150
[  916.528553][    C0]  ? ip_route_me_harder+0x6c0/0x1030
[  916.528569][    C0]  ip_route_me_harder+0x6d2/0x1030
[  916.528588][    C0]  ? __pfx_ip_route_me_harder+0x10/0x10
[  916.528613][    C0]  synproxy_send_tcp+0x359/0x6c0
[  916.528636][    C0]  synproxy_send_client_synack+0x8bb/0xe20
[  916.528660][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  916.528680][    C0]  ? nft_osf_dump+0x98/0x220
[  916.528700][    C0]  ? synproxy_pernet+0x45/0x270
[  916.528724][    C0]  nft_synproxy_eval_v4+0x36e/0x560
[  916.528748][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  916.528771][    C0]  ? nf_ip_checksum+0x13c/0x510
[  916.528794][    C0]  nft_synproxy_do_eval+0x345/0x570
[  916.528818][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  916.528847][    C0]  nft_do_chain+0x409/0x1920
[  916.528867][    C0]  ? rcu_is_watching+0x15/0xb0
[  916.528890][    C0]  ? __schedule+0x1709/0x4c20
[  916.528911][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  916.528934][    C0]  ? __asan_memcpy+0x40/0x70
[  916.528957][    C0]  ? try_to_take_rt_mutex+0x840/0xb00
[  916.528977][    C0]  nft_do_chain_inet+0x25d/0x340
[  916.528999][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  916.529020][    C0]  ? __lock_acquire+0xab9/0xd20
[  916.529043][    C0]  ? NF_HOOK+0x9a/0x3a0
[  916.529060][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  916.529081][    C0]  nf_hook_slow+0xc5/0x220
[  916.529101][    C0]  NF_HOOK+0x206/0x3a0
[  916.529119][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  916.529137][    C0]  ? NF_HOOK+0x9a/0x3a0
[  916.529154][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  916.529170][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  916.529190][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  916.529209][    C0]  ? skb_dst+0x4f/0xd0
[  916.529226][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  916.529245][    C0]  NF_HOOK+0x30c/0x3a0
[  916.529262][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  916.529279][    C0]  ? NF_HOOK+0x9a/0x3a0
[  916.529295][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  916.529313][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  916.529335][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  916.529351][    C0]  __netif_receive_skb+0x143/0x380
[  916.529368][    C0]  ? rt_spin_unlock+0x65/0x80
[  916.529385][    C0]  ? process_backlog+0x27b/0x900
[  916.529402][    C0]  process_backlog+0x31e/0x900
[  916.529437][    C0]  __napi_poll+0xb6/0x540
[  916.529455][    C0]  net_rx_action+0x707/0xe00
[  916.529471][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  916.529496][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  916.529526][    C0]  handle_softirqs+0x22c/0x710
[  916.529548][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  916.529569][    C0]  run_ktimerd+0xcf/0x190
[  916.529587][    C0]  ? __pfx_run_ktimerd+0x10/0x10
[  916.529608][    C0]  ? preempt_schedule_thunk+0x16/0x30
[  916.529626][    C0]  ? smpboot_thread_fn+0x5f4/0xa60
[  916.529645][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  916.529662][    C0]  smpboot_thread_fn+0x542/0xa60
[  916.529681][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  916.529702][    C0]  kthread+0x711/0x8a0
[  916.529730][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  916.529749][    C0]  ? __pfx_kthread+0x10/0x10
[  916.529771][    C0]  ? __pfx_kthread+0x10/0x10
[  916.529793][    C0]  ret_from_fork+0x3fc/0x770
[  916.529812][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  916.529833][    C0]  ? __switch_to_asm+0x39/0x70
[  916.529848][    C0]  ? __switch_to_asm+0x33/0x70
[  916.529861][    C0]  ? __pfx_kthread+0x10/0x10
[  916.529882][    C0]  ret_from_fork_asm+0x1a/0x30
[  916.529903][    C0]  </TASK>
[  916.530422][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  916.530439][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  916.530462][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  916.530474][   T39] Call Trace:
[  916.530482][   T39]  <TASK>
[  916.530491][   T39]  dump_stack_lvl+0x99/0x250
[  916.530522][   T39]  ? __asan_memcpy+0x40/0x70
[  916.530545][   T39]  ? __pfx_dump_stack_lvl+0x10/0x10
[  916.530573][   T39]  ? __pfx__printk+0x10/0x10
[  916.530608][   T39]  vpanic+0x281/0x750
[  916.530641][   T39]  ? __pfx_vpanic+0x10/0x10
[  916.530668][   T39]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  916.530690][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[  916.530728][   T39]  panic+0xb9/0xc0
[  916.530757][   T39]  ? __pfx_panic+0x10/0x10
[  916.530790][   T39]  ? irq_work_queue+0xc3/0x140
[  916.530820][   T39]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  916.530847][   T39]  watchdog+0xfd2/0xfe0
[  916.530878][   T39]  ? watchdog+0x1de/0xfe0
[  916.530910][   T39]  kthread+0x711/0x8a0
[  916.530943][   T39]  ? __pfx_watchdog+0x10/0x10
[  916.530968][   T39]  ? __pfx_kthread+0x10/0x10
[  916.531004][   T39]  ? __pfx_kthread+0x10/0x10
[  916.531034][   T39]  ret_from_fork+0x3fc/0x770
[  916.531063][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  916.531096][   T39]  ? __switch_to_asm+0x39/0x70
[  916.531114][   T39]  ? __switch_to_asm+0x33/0x70
[  916.531133][   T39]  ? __pfx_kthread+0x10/0x10
[  916.531164][   T39]  ret_from_fork_asm+0x1a/0x30
[  916.531368][   T39]  </TASK>
[  916.533562][   T39] Kernel Offset: disabled