last executing test programs:

14m44.275189458s ago: executing program 3 (id=114):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

14m44.207630949s ago: executing program 3 (id=115):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), r0)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x4000040)

14m44.075241263s ago: executing program 3 (id=117):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death={0x400c630e}], 0xfc, 0x1000000, 0x0})

14m43.137943507s ago: executing program 3 (id=123):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000380)='./file0/../file0\x00')
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)

14m43.056563597s ago: executing program 3 (id=124):
r0 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000000)="62afbcf72be129300800000000fbffff04cc886371faffffff6196ef1844a5a6f885ff24465925", 0x27}], 0x1}, 0x800)

14m42.762524538s ago: executing program 2 (id=126):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

14m42.630723655s ago: executing program 2 (id=128):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

14m42.024359061s ago: executing program 32 (id=127):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2f, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x4, 0xfff3}}}, 0x24}}, 0x4000010)

14m41.949836017s ago: executing program 2 (id=132):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000940)="d4339a45d350bf80b3ea7af5fd2aa0d92b3c3e377739b24d24affcf105f29a1c95f8a5e0c1391ad665195fb62dbd918e575eeda72709aa51056c78f591095a6520d9a872c3470f1e1d07e1fa336f95519baec480e0", 0x55}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)="0ee2bf19b279d008b4b3c2c0f33c56838598f6e56a1f5076d1641b3bf377471fcee2bdfd5568f42fc1114bdeecc92a1ed3641688291ff6a3a6a2bfcda34bf3184e8ac60c074e2cb905095f4d275defd87618b5631bc4fd8ce8e266a5d9a265d0dddc0834de29a67d03d6b39fd0704d3360dedc094c26f4c00a7a4ebc623d52f3f718862507abe11d2cce0112805408f503bc595b5801ff3d8b6cea6151fcf5a0e95463b168b95ebb07f84ae76f", 0xad}, {&(0x7f0000000ac0)="74f3ac24c2adedcc42eb25fe17780208c12494dfff178344ed7f5e3ae3d6e6d0b5ac4728ee29da63e992", 0x2a}, {&(0x7f0000000b00)="75450873a1feaca6456a7c6a375dd74ba104eb8d6e884577b2cb7ea624093ca78c7788cd249fb34fadf054e992c3a269d21f8b", 0x33}, {&(0x7f0000000b40)="d2004ec9c445f5b0d3aaab13192712dc813c107c181167442f1cf54de77c5511f9e315c222978f6a3fdc937fcc49fbdfcd39fce1f29778613afd1ea86e1ade3c1ed04a86ec97e76204159292cf952142bf4ca2dac184620d1b41de1b4731a897efb90c5639c87b8d850cf527df5eec91162fdbb4da50d3fe73fdcc09264540ce5347e51e51deadc571e26644630fd513de5629fa380728e52255284a79d9a79bb19889fa37f384c5ebfe3b095a2a9e18498058f017c356e74f8c8f2f95a0", 0xbe}], 0x4}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001380)="1debd9659435fb0b35d4fd87cb488adf9011412ff107ae126376c45bcb260eac232707a014dec1f8024eb3fec09df51c6936aaf24c01678701756a38be2cea8fc54eec883891932198833378508aba906c6e9d74e3fcf6a059d75ccab6060c56f782c2b0303c313870bad3e0840bffadd67bc198df749038e072477cd92b50c80d433a77e0002cedbcd544faeee7e04afa5713cffa46e4a667", 0x99}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000037c0)="0c73c649f55dafa9f64c2a3570d21628ed6126bfdfd7621b37a46ec947aa51e01c4f4523da29a6c597a7ce809c8335e2f88bf399ede02fd5c9469210b8ae0de5b6ab3b96dc8e2f366565df76d48eea2f814e274e266b8c066a6257ff65fb845b15acf663986204c0c5d609d1627a67440bb00cbb2a7c0ec5cab10b8fbe7769d2179b144fe84fb713b4cc34bbec005eab206d6a2fca10d88ee941f1df34ae3933edcf04a00febd0b0d27e605a6455b380421e835bb245b4a85cf23f8a21f77cfe03d89025c0464f1e67c89d65697dc3c80058a96dbbda5d994ffd3fdb85b32e37c02c28dfd2f9", 0xe6}, {&(0x7f00000038c0)="30806623109122bf8ef478e9700010607388d558c15e29", 0x17}, {&(0x7f0000003900)="d0a709d2f4b6f73c606c2da8fe783eea52b158d64b8ed3310b5ebf1ef9dea4f1fce50c542946d43b9ecf61c01b9841d93b1a13f187c85aad639ac9ae4b21530e5f62aeb9f49b8e3aec4ff5e41d470ba8cc08bca4e9cacafc5900737a57663c42d13b2e454799286c466bd7b46de19750a4ec24721fe26a033b6b5b", 0x7b}, {&(0x7f0000003980)="0095a25eaa11f77977beb0f20b1689a1fe6dae588c2f17bf2df2b06256fe0ce447a1cfb1ae90642ffb3c20dd42094bd63017e6bf3082d9b1ab4aa61d98207d95103424fd75dff679acb5571b5aec46b812f03c94c7781bfc0c23be64b2378ab12825a20c47877c6e678590fbf84ed86c2478edac10f55fffaf100362c9e8a1fd19e0a8335acde1ca77e44acd2bf2bc803ae0441aba63f4282ca08c660faf0313ca991024c1d4ab54fa452cf8d73e912797880a7d3e42f321f885dd2193488b37eac0a0", 0xc3}, {&(0x7f0000003a80)="3aa3d6392a0e2043b90e25554d28fba6a8b1750346eca2dbf1910e559e2ab7659a36f4ff6c2c179b67b9dc4370279d497ceb08f1b4f1bcb8d0bd27bb2bcd93e90ac6b1eb9fbea03d447fb79a83", 0x4d}, {&(0x7f0000003b00)="da3d0b87765e00f1cd34dd94493d87c2947c9ea4c73f4c867f5b0b96c73a3eb4fac786faa21b629e1ef7cc94af48c3f147b0bb7dad2085dd2b2ea2cb5fa00b3baaa7853b74cf842d03e2cc62d88c4cda2ce730c70fbec25e57f71c57efb3e5d671be6046b93e342c3ca871c488d87cc0c8dd600a755816492bc0817493eee7", 0x7f}], 0x6}}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000003f40)="84aedd1a4a856657d4f570561e760724ef55eac47e721f43699b8788f0b85e36cb1489e67ef37b0a65583c9e7d47534539a7e935308b8ff09785847be9333ae834842366db33791a9c632aa93571d6565ee90e81bb126fcc502e090399ee8335d04d99fdd5fd6ffa82b2230a47b2fd2e702b1d9923bd2276a547866dc478053ba5f5b7b77f48d54cab8b", 0x8a}], 0x1}}], 0x5, 0x24040001)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240)=0xe0, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getae={0x40, 0x1f, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast1, 0x4d3, 0xa, 0x2b}, @in6=@private2, 0x80000000, 0x3502}}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0xc000)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1}}], 0x1, 0x4c800)

14m41.777116945s ago: executing program 2 (id=134):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8)
mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0)
chroot(&(0x7f0000001140)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000380)='./file0/../file0\x00')
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)

14m41.477098121s ago: executing program 2 (id=135):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="201705"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

14m41.084083313s ago: executing program 3 (id=136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

14m40.86316987s ago: executing program 33 (id=136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

14m40.400311211s ago: executing program 2 (id=140):
syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000001dc0)=ANY=[@ANYBLOB="120100030000004035121d824000010203010902750003010c2081080b0001010520b50904000000010120"], &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x84000)
syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7})
syz_usb_connect$uac3(0x7, 0x90, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x1, 0x10, 0x3c, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x68}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x38, 0xc5, 0xb, "2ed1c634b18253"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x5, 0x40, {0xa, 0x25, 0x25, 0x8001, 0x3, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x6, 0xfa, 0x9, {0xa, 0x25, 0x25, 0xee, 0x3, 0x3}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1ff7, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2c, 0x33af43fb828d1b8, 0x8, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x40, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0xd93}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x6, 0x21}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0xb, 0x6}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x5, 0x4, 0x0, 0xff, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x81, 0xda, 0x3}]}, 0xa, [{0xa6, &(0x7f0000000640)=@string={0xa6, 0x3, "99c5073dbd26401da76a56b1f4838159e3c289384822501702eec0d9842dad854690ac432c4f9885b00363ecdbc510d5c818da07034a28ea881b4bcd6f40aa3507915158a126102637349395b230e321e32a25e47b10a14398c6c5125a052b5ea5447cb69fc485e24caef9dc74bd7ff1a123cdc4ac65876da48e6e8cdedda543325eb8bcf03041dc89c544d91a3bfebbde0ed192349d424058de676d2487bcd10e70f227"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x2, &(0x7f00000008c0)=@string={0x2}}, {0x85, &(0x7f0000000980)=@string={0x85, 0x3, "76c1a786a03b65631759e1345457e99076bcdfe47be06c8ef08b54c52843da7e920a6fb8202f7be9d85285be2f9311228fa7cb7c5cd28d4db10f2afcb7065ae83f1b663405c6e15202db4f889f2300cc4c32933974dfe150d464a7b1a52a48cd21e00973978530c4b4d6cced430ed2b4e24bf8c718925b8738c6178bd7bc1906d464e8"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x44f}}]})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

14m40.051067211s ago: executing program 34 (id=140):
syz_usb_connect$uac2(0x0, 0x87, &(0x7f0000001dc0)=ANY=[@ANYBLOB="120100030000004035121d824000010203010902750003010c2081080b0001010520b50904000000010120"], &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x84000)
syz_usb_ep_read(0xffffffffffffffff, 0x2, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7})
syz_usb_connect$uac3(0x7, 0x90, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x1, 0x10, 0x3c, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x68}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x38, 0xc5, 0xb, "2ed1c634b18253"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x5, 0x40, {0xa, 0x25, 0x25, 0x8001, 0x3, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x6, 0xfa, 0x9, {0xa, 0x25, 0x25, 0xee, 0x3, 0x3}}}}}}}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1ff7, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2c, 0x33af43fb828d1b8, 0x8, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x40, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0xd93}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x6, 0x21}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0xb, 0x6}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x5, 0x4, 0x0, 0xff, 0x5}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x81, 0xda, 0x3}]}, 0xa, [{0xa6, &(0x7f0000000640)=@string={0xa6, 0x3, "99c5073dbd26401da76a56b1f4838159e3c289384822501702eec0d9842dad854690ac432c4f9885b00363ecdbc510d5c818da07034a28ea881b4bcd6f40aa3507915158a126102637349395b230e321e32a25e47b10a14398c6c5125a052b5ea5447cb69fc485e24caef9dc74bd7ff1a123cdc4ac65876da48e6e8cdedda543325eb8bcf03041dc89c544d91a3bfebbde0ed192349d424058de676d2487bcd10e70f227"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x2, &(0x7f00000008c0)=@string={0x2}}, {0x85, &(0x7f0000000980)=@string={0x85, 0x3, "76c1a786a03b65631759e1345457e99076bcdfe47be06c8ef08b54c52843da7e920a6fb8202f7be9d85285be2f9311228fa7cb7c5cd28d4db10f2afcb7065ae83f1b663405c6e15202db4f889f2300cc4c32933974dfe150d464a7b1a52a48cd21e00973978530c4b4d6cced430ed2b4e24bf8c718925b8738c6178bd7bc1906d464e8"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x44f}}]})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

11m25.412286407s ago: executing program 7 (id=1010):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000600)={0x40, 0xf, 0x5, "ae2964eb4f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000200)={0x0, 0x5, 0x2, "6af6"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

11m20.123255104s ago: executing program 7 (id=1046):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
accept4$inet6(r2, 0x0, &(0x7f00000001c0), 0x100000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
syz_open_dev$vcsu(&(0x7f0000000340), 0x8, 0x440041)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8080)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc]p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab?P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb8\x10\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\x03\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7vC\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r4)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd0, &(0x7f0000000040), 0x4)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44081)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

11m16.428059469s ago: executing program 7 (id=1060):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10)
close(r2)

11m16.096170672s ago: executing program 7 (id=1064):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0xa, 0x10}, {0xfff1}, {0x4, 0xfff2}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20044900)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

11m15.807711721s ago: executing program 7 (id=1066):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

11m14.764756518s ago: executing program 7 (id=1074):
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x10002, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000200)={0x2, 0xffffffff, 0x2, 0x7f, 0x9, 0x4})
read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_TDX_FINALIZE_VM(r2, 0xc004aeba, &(0x7f0000000000))
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

10m58.931462406s ago: executing program 35 (id=1074):
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x10002, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000200)={0x2, 0xffffffff, 0x2, 0x7f, 0x9, 0x4})
read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_TDX_FINALIZE_VM(r2, 0xc004aeba, &(0x7f0000000000))
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m44.256222416s ago: executing program 5 (id=2120):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

5m43.176781402s ago: executing program 5 (id=2122):
socket$nl_generic(0x10, 0x3, 0x10)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e23, 0x10000, @mcast1, 0x6}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000100)="4a60c9ccd9b4c3a2bfa8e5dfd10dc592b159a967fe5c127752c95cced19d63fb0365df1174aeded54ab30db9b129587a3b3eaf2ec6fb09dc3cc6700d3de6e7240db815e891f4d35cc16ffbc12144d516c7b4cae9b2592a53f6788a69e7441a49", 0x60}, {&(0x7f00000003c0)="3e64a824a14b6fc11e83aeea7913b1d3e9bce9c837ca2f9049aaec4cf824922cce3d76e066e4543c026a8db0156ad68006698139782aca9970e4d40f379b33f10c8346dc54ae73986e666e7d4a1e0c583d01eeb1ec54f76f0697017572f2f09a3e9a75f5181139bd76a29f72", 0x6c}, {&(0x7f0000000500)="fadd4abf5c2d3522488db86f68026d62e8898fc5aedc8bad9f05c7c5a9cc90398c633180f5a15ca229855aa1a03a31e4909f36ec8f0b5c63928f121d3490ba0e7f3d4a664d8c39f7bdb741a0b2428bf2a949cc7b04", 0x55}, {&(0x7f0000000580)="c83b01ad38e2ecf04ac9d2e53fe44e36", 0x10}], 0x4, &(0x7f0000000600)=[@flowinfo={{0x10, 0x29, 0xb, 0x1}}], 0x10}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r3, 0x4b63, 0x4)
r4 = syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000026c0)={0x0, &(0x7f0000002600)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, r5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3, 0x4, 0x0, 0x10000, 0x406, 0x0, "427f4d0561864078b7f952fc7ebbfea1deee063e520cc38c6a002000"}})
setresuid(0x0, 0x0, 0xee01)
close(r4)
socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)={0x54, 0x12, 0x101, 0x0, 0x0, {0x0, 0xfe, 0x4, 0x0, {0x0, 0x2000, [0x0, 0x0, 0x1], [0x8, 0x0, 0x0, 0x100]}, 0x400}, [@INET_DIAG_REQ_BYTECODE={0x7, 0x1, "4cbdf7"}]}, 0x54}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)

5m40.805530517s ago: executing program 5 (id=2125):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1001}}}}}}, 0x0)

5m39.447060733s ago: executing program 5 (id=2130):
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)

5m37.838550333s ago: executing program 5 (id=2132):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)

5m36.641524032s ago: executing program 1 (id=2135):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r1, 0x1, 0x4000, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xfffffa80}]}, 0x34}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x80, 0x7, 0x4, 0x0, {{0x11, 0x4, 0x0, 0x4, 0x44, 0x68, 0x0, 0xc1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0xb, "ef0e866da0eb5bbff4"}, @rr={0x7, 0x23, 0x5e, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @empty, @multicast1]}, @end]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0xac, 0x1, 0x8, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x80, 0x9, 0x8}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00'})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@initdev, @initdev}, &(0x7f0000000280)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x0, 0x7, 0x7, 0x1, {{0xa, 0x4, 0x1, 0x6, 0x28, 0x67, 0x0, 0x2, 0x29, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x13, 0x33, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010100, @remote]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0xb, 0x5d8cdd73, 0x40, @dev={0xfe, 0x80, '\x00', 0xd}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x3, 0x80}})
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00'})

5m36.602482752s ago: executing program 5 (id=2137):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)}], 0x1}, 0x4000)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1f, &(0x7f0000000100), 0x4)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x10e, 0x4)
syz_pidfd_open(r2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

5m31.977829276s ago: executing program 1 (id=2140):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000000c0)={0xdb, 0x0, 0x6c1a})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x2, 0x10, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0x4000, 0x43180})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m21.292683034s ago: executing program 36 (id=2137):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)}], 0x1}, 0x4000)
setsockopt$sock_attach_bpf(r3, 0x84, 0x1f, &(0x7f0000000100), 0x4)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x10e, 0x4)
syz_pidfd_open(r2, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

5m20.802054183s ago: executing program 1 (id=2147):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff)
fcntl$setlease(r1, 0x400, 0x1)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

5m19.013382053s ago: executing program 1 (id=2149):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f", 0x45}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac"], 0x1a0}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5m17.468667401s ago: executing program 1 (id=2154):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

5m15.825308241s ago: executing program 1 (id=2157):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000940)={{}, {0x20}, 0x0, 0x4})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}}, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)

4m59.489855365s ago: executing program 37 (id=2157):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000940)={{}, {0x20}, 0x0, 0x4})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x6}}]}}]}, 0x48}}, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)

4m27.704402531s ago: executing program 4 (id=2214):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

4m23.439665562s ago: executing program 4 (id=2218):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
fsopen(0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480))
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x40000000, 0x5, 0x0, 0x0, 0x5a1}, 0x9c)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)

4m22.087247786s ago: executing program 6 (id=2220):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
connect$qrtr(0xffffffffffffffff, 0x0, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r2 = socket(0x2d, 0x2, 0x0)
bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x30}, 0x10)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x3f)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=<r4=>0x0)
r5 = syz_open_procfs(r4, 0x0)
write$binfmt_script(r5, 0x0, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdf", 0x3}], 0x1}, 0x0)
r6 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
r7 = dup(r6)
read(r7, &(0x7f0000000040), 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6)
ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f046})
read$FUSE(r7, &(0x7f0000008180)={0x2020}, 0xfffffdfc)

4m21.919493974s ago: executing program 6 (id=2221):
r0 = syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x5}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x200, 0x420400)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r5 = gettid()
ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94})
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000))
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f0000000300), 0x1}, 0x20)

4m19.695138611s ago: executing program 8 (id=2222):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008810}, 0x40000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10040003}, 0x4008850)
r1 = socket$alg(0x26, 0x5, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="0517", 0x2, 0x50, &(0x7f0000000080)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={<r2=>0x0, @local, @local}, &(0x7f00000009c0)=0xc)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x109000, 0x800, 0x3, 0x1}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r5=>0x0})
bind$xdp(r3, &(0x7f00000004c0)={0x2c, 0x5, r2, 0x2a, r0}, 0xfffffffffffffcdb)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000a40)={0x1c8, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa4df55d506200c70}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af", 0x7)
r7 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

4m18.111842858s ago: executing program 6 (id=2223):
openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101402, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r1], 0x0)

4m17.913355056s ago: executing program 4 (id=2224):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
splice(r0, 0x0, r1, 0x0, 0x7c1f, 0x8)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

4m16.575366596s ago: executing program 6 (id=2225):
sched_setattr(0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x5)
bpf$MAP_CREATE(0x1101000000000000, 0x0, 0x0)
syz_emit_ethernet(0x2e, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m16.398084744s ago: executing program 4 (id=2226):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f", 0x45}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac"], 0x1a0}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m15.529628012s ago: executing program 6 (id=2227):
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"})
close_range(r2, 0xffffffffffffffff, 0x0)

4m14.957097868s ago: executing program 8 (id=2228):
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x3)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x2)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
close(r2)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)

4m13.977744802s ago: executing program 4 (id=2229):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
listen(r1, 0x10040)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1001}}}}}}, 0x0)

4m13.576805187s ago: executing program 8 (id=2230):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0x2, 0x0, 0x1000, 0x800000c00, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x2, 0x4, 0x3, 0x8], 0xeeee7ffb, 0x400})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x41000, 0x2000, &(0x7f0000000000/0x2000)=nil})

4m12.913836181s ago: executing program 4 (id=2231):
r0 = syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x5}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x200, 0x420400)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r5 = gettid()
ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94})
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000))
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f0000000300), 0x1}, 0x20)

4m11.664471335s ago: executing program 8 (id=2232):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
fsopen(0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480))
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x40000000, 0x5, 0x0, 0x0, 0x5a1}, 0x9c)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

4m10.253096794s ago: executing program 8 (id=2233):
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x400, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382cff20010000000000000000000000000001ff0200000000000000000000000000013a"], 0x0)

4m7.736457054s ago: executing program 6 (id=2234):
r0 = syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x5}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x200, 0x420400)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r5 = gettid()
ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94})
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000))
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f0000000300), 0x1}, 0x20)

4m7.557938549s ago: executing program 8 (id=2235):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a)
mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805)
fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
r2 = epoll_create1(0x80000)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xe000001b})
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044)

3m50.473854032s ago: executing program 38 (id=2231):
r0 = syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x5}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x200, 0x420400)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r5 = gettid()
ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94})
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000))
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f0000000300), 0x1}, 0x20)

3m48.649327582s ago: executing program 39 (id=2235):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a)
mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x20004805)
fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
r2 = epoll_create1(0x80000)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180), 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0xe000001b})
syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20004044)

3m45.716936938s ago: executing program 40 (id=2234):
r0 = syz_io_uring_setup(0x3ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x5}, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
listen(0xffffffffffffffff, 0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
syz_open_dev$vcsn(0x0, 0x200, 0x420400)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
r5 = gettid()
ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000500)={&(0x7f00000003c0)=""/148, 0x94})
sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f0000000000))
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f0000000300), 0x1}, 0x20)

1m27.113695862s ago: executing program 9 (id=2291):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xfffffffffffffcfd)
syz_emit_vhci(0x0, 0x1d)
r1 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r1, 0x0, 0x0, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xd)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0xc0002009})
epoll_pwait(r4, &(0x7f0000000540)=[{}], 0x1, 0x4000a, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0)

1m25.748056111s ago: executing program 9 (id=2292):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0xf}, 0x0, 0x0)

1m22.463877062s ago: executing program 9 (id=2294):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024)

1m21.091060731s ago: executing program 9 (id=2295):
r0 = socket$inet6(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x34}, 0x28)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c)

1m20.117905685s ago: executing program 9 (id=2297):
r0 = inotify_init()
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
sendmsg$nl_route_sched(r2, 0x0, 0x2400c800)
sendmsg$alg(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000500)="4c8a4dd798", 0x5}], 0x1, 0x0, 0x0, 0x1}, 0x4005)
close_range(r0, 0xffffffffffffffff, 0x0)

1m19.693824695s ago: executing program 9 (id=2299):
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe4)
r3 = add_key$keyring(&(0x7f00000006c0), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_persistent(0x16, r2, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4)
r5 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x6a4503, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}])

1m3.710821629s ago: executing program 41 (id=2299):
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe4)
r3 = add_key$keyring(&(0x7f00000006c0), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_persistent(0x16, r2, r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x4)
r5 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x6a4503, 0x0)
io_setup(0x202, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x20, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x407f0b00}])

24.318817396s ago: executing program 0 (id=2331):
sched_setattr(0x0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x5)
bpf$MAP_CREATE(0x1101000000000000, 0x0, 0x0)
syz_emit_ethernet(0x2e, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

23.657868461s ago: executing program 0 (id=2332):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_emit_ethernet(0xb6, &(0x7f0000000600)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x80, 0x3a, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [@dstopts={0x87, 0x7, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x1, 0x6, [0xdb37]}}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x0, [0x5, 0x3, 0x0, 0x3]}}]}, @fragment={0x0, 0x0, 0x4}]}}}}}}}, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket(0x2, 0x3, 0xf8)
sendto$unix(r2, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
connect$pppl2tp(r2, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x5, 0x3, 0x4, {0xa, 0x4e24, 0x5, @remote, 0xff000000}}}, 0x32)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd2b, 0x25dfdbf9, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004844}, 0x4008004)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

21.091482628s ago: executing program 0 (id=2333):
pipe(0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x4000, 0x41, @default, @void, @void}}]}, 0x40}}, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_open_dev$vcsu(0x0, 0x3, 0x10040)
fallocate(0xffffffffffffffff, 0x0, 0xa20, 0x8000c64)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = getpid()
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r3, 0x1)
bind$inet6(r3, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240c089d)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x0, r2})
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1)
writev(r4, &(0x7f0000000240)=[{&(0x7f0000000480)="9586a26e2862e86c8e4f12d8f826", 0xe}, {&(0x7f0000000b40)="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", 0x4f5}, {&(0x7f0000000140)='ZK', 0x2}], 0x3)

17.092443807s ago: executing program 0 (id=2334):
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000006c0)={0x0, 0x2, &(0x7f0000000540)=""/235, &(0x7f0000000640)=""/29, &(0x7f0000000680)=""/39, 0x9000})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000003c0)={'gretap0\x00', <r1=>0x0, 0x10, 0x0, 0x8, 0xb, {{0x1d, 0x4, 0x2, 0x7, 0x74, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @rr={0x7, 0x7, 0x75, [@broadcast]}, @noop, @rr={0x7, 0x1b, 0x63, [@multicast1, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @lsrr={0x83, 0x1f, 0x6a, [@remote, @broadcast, @private=0xa010100, @broadcast, @multicast1, @remote, @multicast1]}, @lsrr={0x83, 0x1b, 0x2a, [@multicast2, @local, @broadcast, @local, @loopback, @local]}]}}}}})
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x88, 0x0, 0x0, 0x70bd2a, 0x25dfdc01, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x800}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x20000040)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, r0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000001c0), 0x4)
r2 = openat$ttyprintk(0xffffff9c, &(0x7f0000000040), 0x20800, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0xe, 0xef39, 0x7fffffff, 0x1, 0x8, "f82a155ac4254ad9c8ddd5f4c5535fa5aa58c3"})
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x401}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

15.812800516s ago: executing program 0 (id=2335):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000e96000/0x1000)=nil})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0xed, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x0, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623e, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x5ab2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x21, 0x3, 0x8000, 0xfffffffd, 0x3, 0xfffffffe, 0xf9dc, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xe, 0x2, 0xfffffffe, 0x981, 0x4, 0x0, 0x402, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x6, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x1000, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xd1c, 0x7, 0x1f, 0x404, 0x4, 0x6, 0xc, 0x7, 0x9, 0xe8b, 0x6, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0x1ea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413fd, 0x2, 0x20006, 0x8a5, 0x86, 0x1, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffefff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7f]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
readv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="8d76dabc169637c3d08377112e76b19a448253f417cf1f6ed2478401417aeb84209879cb171e735bf6647b762be14db8f6c8c797a7faed648073a442b2d3f6c3e49c71be23e1829f17c71fe8b30bd8fdf0314c28d0473bb216e8b51c38fbb64969f949c0d9c42d74040c0895567667aef57ae8901cfbffffff4c27af8474"], 0xff2e)
r1 = socket$unix(0x1, 0x5, 0x0)
listen(r1, 0x7)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x3, 0xfffffffffffffffe})
unshare(0x22020400)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

15.181760625s ago: executing program 0 (id=2336):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e3100000000000000000000004c2dcdc0bb651d8040d483a86601a9c48f6f0677f8a9c21367d1e03e1efa4428d9e4a4c1096126dabcdc2e33fcc7"], 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000000)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)

0s ago: executing program 42 (id=2336):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
r3 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e3100000000000000000000004c2dcdc0bb651d8040d483a86601a9c48f6f0677f8a9c21367d1e03e1efa4428d9e4a4c1096126dabcdc2e33fcc7"], 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000000)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)

kernel console output (not intermixed with test programs):

z.4.1916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcec868cdd9 code=0x7ffc0000
[  552.402594][   T36] audit: type=1326 audit(1778537967.878:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11843 comm="syz.4.1916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec868cdd9 code=0x7ffc0000
[  552.407615][   T36] audit: type=1326 audit(1778537967.878:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11843 comm="syz.4.1916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcec868cdd9 code=0x7ffc0000
[  552.484937][   T36] audit: type=1326 audit(1778537967.908:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11843 comm="syz.4.1916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec862e159 code=0x7ffc0000
[  552.486235][   T36] audit: type=1326 audit(1778537967.918:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11843 comm="syz.4.1916" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcec862e159 code=0x7ffc0000
[  553.001109][T11850] random: crng reseeded on system resumption
[  554.447428][  T107] team0 (unregistering): Port device team_slave_1 removed
[  554.930314][  T107] team0 (unregistering): Port device team_slave_0 removed
[  555.496164][T11892] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1922'.
[  555.746004][T11812] warning: `syz.8.1909' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  555.750838][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17
[  556.790283][T11905] hsr0 speed is unknown, defaulting to 1000
[  556.966452][T11911] 9pnet_virtio: no channels available for device syz
[  558.391777][T11922] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.1932'.
[  559.353470][T11942] input: syz0 as /devices/virtual/input/input29
[  562.921488][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  562.921555][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  562.982019][ T1335] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  564.294976][T11963] netlink: 212344 bytes leftover after parsing attributes in process `syz.8.1942'.
[  564.722850][ T5837] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  564.872842][ T5837] usb 9-1: Using ep0 maxpacket: 32
[  564.875354][ T5837] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  564.877989][ T5837] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  564.878014][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  564.878032][ T5837] usb 9-1: Product: syz
[  564.878045][ T5837] usb 9-1: Manufacturer: syz
[  564.878057][ T5837] usb 9-1: SerialNumber: syz
[  564.940518][ T5837] usb 9-1: config 0 descriptor??
[  564.951355][T11966] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  565.175089][T11966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.201270][ T5715] libceph: connect (1)[c::]:6789 error -101
[  565.201464][ T5715] libceph: mon0 (1)[c::]:6789 connect error
[  565.216186][T11966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.234902][T11961] ceph: No mds server is up or the cluster is laggy
[  565.866741][ T5715] libceph: connect (1)[c::]:6789 error -101
[  565.866917][ T5715] libceph: mon0 (1)[c::]:6789 connect error
[  565.873425][ T5715] libceph: connect (1)[c::]:6789 error -101
[  565.873611][ T5715] libceph: mon0 (1)[c::]:6789 connect error
[  565.962821][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18
[  566.228551][ T5709] libceph: connect (1)[c::]:6789 error -101
[  566.228725][ T5709] libceph: mon0 (1)[c::]:6789 connect error
[  566.697313][T11991] hsr0 speed is unknown, defaulting to 1000
[  567.259410][ T5709] libceph: connect (1)[c::]:6789 error -101
[  567.259595][ T5709] libceph: mon0 (1)[c::]:6789 connect error
[  567.602835][ T5709] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  567.752817][ T5709] usb 2-1: Using ep0 maxpacket: 16
[  567.756335][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.756386][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  567.756412][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  567.756431][ T5709] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  567.756452][ T5709] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  567.757724][ T5709] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  567.757747][ T5709] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  567.757764][ T5709] usb 2-1: Manufacturer: syz
[  567.855922][ T5709] usb 2-1: config 0 descriptor??
[  568.208818][ T5709] rc_core: IR keymap rc-hauppauge not found
[  568.208837][ T5709] Registered IR keymap rc-empty
[  568.208987][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.232887][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.256957][ T5709] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  568.261392][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  568.283440][ T5709] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30
[  568.286731][   T48] usb 9-1: USB disconnect, device number 6
[  568.317442][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  568.331940][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.349239][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  568.350686][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  568.351578][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  568.361065][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.408398][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.445905][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.508678][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.543291][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.563502][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.595331][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.614454][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.696689][ T5709] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  568.716611][T11978] ceph: No mds server is up or the cluster is laggy
[  568.781550][ T5709] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  568.781574][ T5709] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  568.793687][ T5709] usb 2-1: USB disconnect, device number 54
[  568.794667][ T5715] libceph: connect (1)[c::]:6789 error -101
[  568.794869][ T5715] libceph: mon0 (1)[c::]:6789 connect error
[  568.979260][ T5837] libceph: connect (1)[c::]:6789 error -101
[  568.979464][ T5837] libceph: mon0 (1)[c::]:6789 connect error
[  569.491961][T12016] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1952'.
[  569.826104][T12018] input: syz0 as /devices/virtual/input/input31
[  570.451114][ T4911] Bluetooth: hci4: unexpected event for opcode 0x0009
[  570.867765][T12047] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  570.867825][T12047] overlayfs: overlapping lowerdir path
[  571.253077][ T4911] Bluetooth: hci5: command tx timeout
[  572.450483][T11996] hsr0 speed is unknown, defaulting to 1000
[  572.642573][T12065] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.1962'.
[  573.312986][ T4911] Bluetooth: hci5: command tx timeout
[  573.934923][ T5889] libceph: connect (1)[c::]:6789 error -101
[  573.935103][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  573.941149][ T5889] libceph: connect (1)[c::]:6789 error -101
[  573.941321][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  573.941392][T12063] ceph: No mds server is up or the cluster is laggy
[  574.514656][T12089] input: syz0 as /devices/virtual/input/input32
[  575.393353][ T4911] Bluetooth: hci5: command tx timeout
[  576.290054][T12102] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  576.290090][T12102] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  576.290127][T12102] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  576.303065][T12102] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  576.831316][T12115] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.1972'.
[  577.553145][T12121] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  577.553461][T12121] overlayfs: overlapping lowerdir path
[  578.409556][ T4911] Bluetooth: hci5: command tx timeout
[  579.507619][T11996] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.507759][T11996] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.507950][T11996] bridge_slave_0: entered allmulticast mode
[  579.539681][T11996] bridge_slave_0: entered promiscuous mode
[  579.555786][T11996] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.555998][T11996] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.556179][T11996] bridge_slave_1: entered allmulticast mode
[  579.583309][T11996] bridge_slave_1: entered promiscuous mode
[  579.814915][T11996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.893550][T11996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  579.946391][ T4911] Bluetooth: hci2: unexpected event for opcode 0x0009
[  581.068842][T12150] ceph: No mds server is up or the cluster is laggy
[  581.069350][   T10] libceph: connect (1)[c::]:6789 error -101
[  581.069569][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  581.323278][   T10] libceph: connect (1)[c::]:6789 error -101
[  581.323453][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  581.325512][   T67] bridge_slave_1: left allmulticast mode
[  581.325556][   T67] bridge_slave_1: left promiscuous mode
[  581.325798][   T67] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.644082][   T67] bridge_slave_0: left allmulticast mode
[  581.644114][   T67] bridge_slave_0: left promiscuous mode
[  581.645882][   T67] bridge0: port 1(bridge_slave_0) entered disabled state
[  581.805116][T12171] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  583.600941][ T4911] Bluetooth: hci1: unexpected event for opcode 0x1009
[  583.724196][T12180] overlayfs: missing 'lowerdir'
[  584.137668][   T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  584.223493][   T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  584.316582][   T67] bond0 (unregistering): Released all slaves
[  584.381670][T11996] team0: Port device team_slave_0 added
[  584.394493][T11996] team0: Port device team_slave_1 added
[  584.539131][T11996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.539142][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.539157][T11996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  584.543319][T11996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  584.543329][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.543343][T11996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.851860][T11996] hsr_slave_0: entered promiscuous mode
[  584.860042][T11996] hsr_slave_1: entered promiscuous mode
[  585.135241][ T4911] Bluetooth: hci1: unexpected event for opcode 0x0009
[  585.234843][   T67] hsr_slave_0: left promiscuous mode
[  585.273300][   T67] hsr_slave_1: left promiscuous mode
[  585.276100][   T67] batman_adv: batadv0: Removing interface: batadv_slave_0
[  585.374421][   T67] batman_adv: batadv0: Removing interface: batadv_slave_1
[  585.947622][ T5837] libceph: connect (1)[c::]:6789 error -101
[  585.947758][ T5837] libceph: mon0 (1)[c::]:6789 connect error
[  585.952162][ T5837] libceph: connect (1)[c::]:6789 error -101
[  585.952992][ T5837] libceph: mon0 (1)[c::]:6789 connect error
[  585.980361][T12201] ceph: No mds server is up or the cluster is laggy
[  586.245855][ T5889] libceph: connect (1)[c::]:6789 error -101
[  586.269075][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  586.961227][T12210] input: syz0 as /devices/virtual/input/input33
[  587.042796][ T5889] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  587.195684][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  587.195716][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  587.201840][ T5889] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  587.201867][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.201885][ T5889] usb 7-1: Product: syz
[  587.201897][ T5889] usb 7-1: Manufacturer: syz
[  587.201910][ T5889] usb 7-1: SerialNumber: syz
[  587.283591][ T5889] usb 7-1: config 0 descriptor??
[  587.299031][ T5889] hub 7-1:0.0: bad descriptor, ignoring hub
[  587.299067][ T5889] hub 7-1:0.0: probe with driver hub failed with error -5
[  587.330681][ T5889] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input34
[  588.884175][ T5889] usb 7-1: USB disconnect, device number 18
[  588.961780][   T67] team0 (unregistering): Port device team_slave_1 removed
[  589.059008][   T67] team0 (unregistering): Port device team_slave_0 removed
[  589.213877][   T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  589.372786][   T10] usb 2-1: Using ep0 maxpacket: 8
[  589.375132][   T10] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.375160][   T10] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  589.375180][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  589.375210][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  589.375230][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.939024][T12221] netlink: 'syz.6.1996': attribute type 4 has an invalid length.
[  590.939084][T12221] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1996'.
[  591.482402][   T10] usb 2-1: config 0 descriptor??
[  591.486315][ T4911] Bluetooth: hci3: unexpected event for opcode 0x1009
[  592.282815][   T10] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  592.282856][   T10] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  592.282881][   T10] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  592.282905][   T10] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  592.283017][   T10] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0
[  592.418891][   T10] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  594.809996][   T10] usb 2-1: USB disconnect, device number 55
[  594.837939][T12254] input: syz0 as /devices/virtual/input/input35
[  596.192639][ T4911] Bluetooth: hci1: unexpected event for opcode 0x1009
[  597.453364][T11996] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  597.690619][T11996] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  597.821561][T11996] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  598.086393][T11996] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  598.164889][T11996] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  598.439831][T11996] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  598.459323][T11996] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  600.196925][T11996] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  600.727947][T12310] input: syz0 as /devices/virtual/input/input36
[  601.011151][T11996] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.064960][T11996] 8021q: adding VLAN 0 to HW filter on device team0
[  601.104521][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.104699][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.106893][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.106992][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.732846][T12322] ceph: No mds server is up or the cluster is laggy
[  601.736576][ T5715] libceph: connect (1)[c::]:6789 error -101
[  601.736764][ T5715] libceph: mon0 (1)[c::]:6789 connect error
[  601.992206][ T4911] Bluetooth: hci4: unexpected event for opcode 0x1009
[  602.454746][T12341] random: crng reseeded on system resumption
[  604.842912][   T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  604.902004][T11996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  604.992957][   T10] usb 2-1: Using ep0 maxpacket: 16
[  604.996388][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.996415][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  604.996451][   T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  604.996472][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.050019][   T10] usb 2-1: config 0 descriptor??
[  605.801836][   T10] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  606.067949][   T10] corsair 0003:1B1C:1B02.0005: Read invalid backlight brightness: 1a.
[  606.085284][T12393] hsr0 speed is unknown, defaulting to 1000
[  606.110198][T12395] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  606.110558][T12395] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  606.283508][   T10] usb 2-1: USB disconnect, device number 56
[  606.357864][T11996] veth0_vlan: entered promiscuous mode
[  606.380355][T11996] veth1_vlan: entered promiscuous mode
[  606.827160][T12395] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  606.832407][T12395] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  606.938805][T12395] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  606.938936][T12395] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  607.046334][T12395] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  607.162822][T12395] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  607.162965][T12395] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  607.198211][T11996] veth0_macvtap: entered promiscuous mode
[  607.234115][T12395] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  607.234244][T12395] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  607.234901][T11996] veth1_macvtap: entered promiscuous mode
[  607.329084][T11996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  607.365582][T12395] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  607.398871][T11996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.426072][   T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.426538][   T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.427319][   T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.427537][   T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  608.105621][ T4911] Bluetooth: hci2: command 0x0406 tx timeout
[  608.556327][ T5831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.556345][ T5831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.741442][ T5689] libceph: connect (1)[c::]:6789 error -101
[  608.741645][ T5689] libceph: mon0 (1)[c::]:6789 connect error
[  608.779011][ T4911] Bluetooth: hci2: unexpected event for opcode 0x1009
[  608.822875][ T4911] Bluetooth: hci3: command 0x0406 tx timeout
[  608.985529][ T4911] Bluetooth: hci1: command 0x0406 tx timeout
[  609.054675][ T5889] libceph: connect (1)[c::]:6789 error -101
[  609.055470][ T5889] libceph: mon0 (1)[c::]:6789 connect error
[  609.222925][ T4911] Bluetooth: hci4: command 0x0406 tx timeout
[  609.330767][ T4911] Bluetooth: hci5: command 0x0c1a tx timeout
[  609.472972][T12422] ceph: No mds server is up or the cluster is laggy
[  609.565765][ T5689] libceph: connect (1)[c::]:6789 error -101
[  609.566339][ T5689] libceph: mon0 (1)[c::]:6789 connect error
[  610.902884][ T4911] Bluetooth: hci3: command 0x0406 tx timeout
[  611.064626][ T4911] Bluetooth: hci1: command 0x0406 tx timeout
[  611.305355][ T4911] Bluetooth: hci4: command 0x0406 tx timeout
[  611.392516][ T4911] Bluetooth: hci5: command 0x0c1a tx timeout
[  612.005175][ T7536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  612.005195][ T7536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  612.386933][T12448] input: syz0 as /devices/virtual/input/input38
[  613.143511][ T4911] Bluetooth: hci1: command 0x0406 tx timeout
[  613.462961][ T4911] Bluetooth: hci5: command 0x0c1a tx timeout
[  614.016095][ T5716] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  616.337043][ T5716] usb 9-1: Using ep0 maxpacket: 8
[  616.338193][ T5716] usb 9-1: device descriptor read/all, error -71
[  616.661934][ T4911] Bluetooth: hci1: unexpected event for opcode 0x1009
[  616.951705][ T5714] libceph: connect (1)[c::]:6789 error -101
[  616.951891][ T5714] libceph: mon0 (1)[c::]:6789 connect error
[  616.985846][ T5714] libceph: connect (1)[c::]:6789 error -101
[  616.986031][ T5714] libceph: mon0 (1)[c::]:6789 connect error
[  617.291544][ T5689] libceph: connect (1)[c::]:6789 error -101
[  617.291724][ T5689] libceph: mon0 (1)[c::]:6789 connect error
[  617.375957][T12469] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  617.376172][T12469] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  617.376345][T12469] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  617.376519][T12469] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  617.376697][T12469] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  617.462437][T12465] hsr0 speed is unknown, defaulting to 1000
[  617.638781][T12472] ceph: No mds server is up or the cluster is laggy
[  617.798071][ T5689] libceph: connect (1)[c::]:6789 error -101
[  617.808915][ T5689] libceph: mon0 (1)[c::]:6789 connect error
[  618.887168][ T5689] libceph: connect (1)[c::]:6789 error -101
[  618.889015][ T5689] libceph: mon0 (1)[c::]:6789 connect error
[  619.205941][ T4911] Bluetooth: hci2: command 0x0406 tx timeout
[  619.453096][ T4911] Bluetooth: hci5: command 0x0c1a tx timeout
[  619.453136][ T4911] Bluetooth: hci4: command 0x0406 tx timeout
[  619.453163][ T4911] Bluetooth: hci3: command 0x0406 tx timeout
[  619.453189][ T4911] Bluetooth: hci1: command 0x0406 tx timeout
[  620.037679][T12498] input: syz0 as /devices/virtual/input/input40
[  620.222826][T12418] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  620.326160][T12499] input: syz0 as /devices/virtual/input/input39
[  620.373066][T12418] usb 5-1: Using ep0 maxpacket: 16
[  620.377881][T12418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.377909][T12418] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.377942][T12418] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  620.377962][T12418] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.597182][T12418] usb 5-1: config 0 descriptor??
[  621.637144][T12418] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0
[  621.675113][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2056'.
[  621.798477][T12418] corsair 0003:1B1C:1B02.0006: Read invalid backlight brightness: 1a.
[  622.008259][T12418] usb 5-1: USB disconnect, device number 37
[  622.067214][T12511] syzkaller0: entered promiscuous mode
[  622.067237][T12511] syzkaller0: entered allmulticast mode
[  622.629434][ T5597] Bluetooth: hci3: unexpected event for opcode 0x1009
[  624.366458][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  624.366498][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  624.367068][ T1335] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  624.947319][T12554] input: syz0 as /devices/virtual/input/input41
[  625.923612][ T5786] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  626.975157][ T5786] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  626.975188][ T5786] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  626.977739][ T5786] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[  626.977764][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.977781][ T5786] usb 6-1: Product: syz
[  626.977794][ T5786] usb 6-1: Manufacturer: syz
[  626.977807][ T5786] usb 6-1: SerialNumber: syz
[  627.183611][ T5786] usb 6-1: config 0 descriptor??
[  627.190721][ T5786] hub 6-1:0.0: bad descriptor, ignoring hub
[  627.190756][ T5786] hub 6-1:0.0: probe with driver hub failed with error -5
[  627.223418][ T5786] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input42
[  627.712968][ T5597] Bluetooth: hci1: unexpected event for opcode 0x1009
[  629.155914][T12605] random: crng reseeded on system resumption
[  633.338745][T12640] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  633.606148][T12644] random: crng reseeded on system resumption
[  634.006294][T12630] 9pnet_virtio: no channels available for device syz
[  634.827287][ T5597] Bluetooth: hci2: unexpected event for opcode 0x1009
[  635.172778][ T5786] usb 6-1: USB disconnect, device number 9
[  635.237509][T12655] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  635.385293][T12673] 9pnet_virtio: no channels available for device syz
[  635.387733][T12673] 9pnet_virtio: no channels available for device ./file0/file0
[  637.016686][T12686] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  637.161429][T12669] hsr0 speed is unknown, defaulting to 1000
[  637.606454][T12696] random: crng reseeded on system resumption
[  639.368052][T12739] random: crng reseeded on system resumption
[  641.508856][T12763] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  641.742838][  T820] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  641.892818][  T820] usb 2-1: Using ep0 maxpacket: 16
[  641.897717][  T820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.897745][  T820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.897780][  T820] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  641.897799][  T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.010746][  T820] usb 2-1: config 0 descriptor??
[  643.476160][  T820] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  643.497113][  T820] corsair 0003:1B1C:1B02.0007: Read invalid backlight brightness: 1a.
[  643.902349][  T820] usb 2-1: USB disconnect, device number 57
[  645.164021][T12812] random: crng reseeded on system resumption
[  646.261025][T12798] fido_id[12798]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  649.362804][T12811] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  649.537613][T12811] usb 5-1: Using ep0 maxpacket: 32
[  649.540069][T12811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  649.559991][T12811] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  649.560019][T12811] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  649.560029][T12811] usb 5-1: Product: syz
[  649.560036][T12811] usb 5-1: Manufacturer: syz
[  649.560042][T12811] usb 5-1: SerialNumber: syz
[  649.647520][T12811] usb 5-1: config 0 descriptor??
[  649.648641][T12857] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  649.985698][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.986290][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.085438][T12811] usb 5-1: USB disconnect, device number 38
[  651.827966][T12881] random: crng reseeded on system resumption
[  663.579578][T12920] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  668.426852][ T5597] Bluetooth: hci2: unexpected event for opcode 0x1009
[  668.566067][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  668.628721][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  668.654539][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  668.662199][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  668.666164][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  670.168887][T12950] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  671.017991][ T4911] Bluetooth: hci0: command tx timeout
[  671.162786][T12811] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  671.342795][T12811] usb 5-1: Using ep0 maxpacket: 8
[  671.345199][T12811] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  671.345227][T12811] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  671.345248][T12811] usb 5-1: config 0 interface 0 has no altsetting 0
[  671.345279][T12811] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  671.345305][T12811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.364975][T12811] usb 5-1: config 0 descriptor??
[  671.961912][T12811] usbhid 5-1:0.0: can't add hid device: -71
[  671.962055][T12811] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  671.988327][T12811] usb 5-1: USB disconnect, device number 39
[  673.072814][ T4911] Bluetooth: hci0: command tx timeout
[  674.229528][ T4911] Bluetooth: hci3: unexpected event for opcode 0x1009
[  675.218263][ T4911] Bluetooth: hci0: command tx timeout
[  675.932857][T12988] input: syz0 as /devices/virtual/input/input43
[  677.222811][ T4911] Bluetooth: hci0: command tx timeout
[  679.066905][T12991] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  679.715341][T12999] random: crng reseeded on system resumption
[  681.409311][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2169'.
[  682.395504][ T1485] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.107657][   T31] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  684.107959][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  684.672826][   T31] usb 5-1: device descriptor read/64, error -32
[  684.998595][   T48] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  685.447405][   T31] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  685.773437][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  685.773504][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  685.904214][ T1335] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  687.051387][   T48] usb 7-1: device descriptor read/all, error -71
[  691.038529][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  691.111101][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  691.122291][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  691.221049][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  691.233288][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  691.932128][T13084] random: crng reseeded on system resumption
[  692.362837][ T5714] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  692.536317][ T5714] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  692.536345][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.536362][ T5714] usb 5-1: Product: syz
[  692.536373][ T5714] usb 5-1: Manufacturer: syz
[  692.536386][ T5714] usb 5-1: SerialNumber: syz
[  693.739822][ T4911] Bluetooth: hci5: command tx timeout
[  693.971430][ T5714] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  693.971486][ T5714] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  693.971964][ T1485] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.525456][T12811] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  694.664460][T12934] hsr0 speed is unknown, defaulting to 1000
[  694.938551][T12811] usb 7-1: Using ep0 maxpacket: 16
[  695.493025][T12811] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  695.493077][T12811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  695.493104][T12811] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  695.493123][T12811] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  695.493143][T12811] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  695.494658][T12811] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  695.494682][T12811] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  695.494700][T12811] usb 7-1: Manufacturer: syz
[  695.504695][T12811] usb 7-1: config 0 descriptor??
[  696.380046][ T4911] Bluetooth: hci5: command tx timeout
[  697.469762][ T5714] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  697.471354][ T5714] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  697.471934][ T5714] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  697.471993][ T5714] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  697.516579][ T5714] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  697.705516][ T5714] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  697.812535][ T5714] usb 5-1: USB disconnect, device number 42
[  697.832809][T12811] rc_core: IR keymap rc-hauppauge not found
[  697.832828][T12811] Registered IR keymap rc-empty
[  697.832979][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  697.852988][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  698.176832][T12811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  700.175173][ T4911] Bluetooth: hci5: command tx timeout
[  701.748497][T12811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input44
[  701.787295][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  701.910139][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  701.977883][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  702.001650][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  702.012903][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  702.035390][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  702.052862][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  702.072880][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  702.092877][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  702.113218][T12811] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  702.146203][T12811] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[  702.146225][T12811] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  702.187017][T12811] usb 7-1: USB disconnect, device number 21
[  702.364487][ T4911] Bluetooth: hci5: command tx timeout
[  702.671164][ T1485] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.220134][ T5714] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  704.579165][ T5714] usb 9-1: Using ep0 maxpacket: 32
[  704.590398][ T5714] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  704.609199][ T5714] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  704.609225][ T5714] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  704.609243][ T5714] usb 9-1: Product: syz
[  704.609255][ T5714] usb 9-1: Manufacturer: syz
[  704.609267][ T5714] usb 9-1: SerialNumber: syz
[  704.719172][ T5714] usb 9-1: config 0 descriptor??
[  704.720244][T13138] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  704.892833][ T5889] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  705.335437][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.361007][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.441371][  T820] usb 9-1: USB disconnect, device number 9
[  705.524837][ T5889] usb 7-1: Using ep0 maxpacket: 16
[  705.538033][ T5889] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  705.538085][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  705.538110][ T5889] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  705.538133][ T5889] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  705.538153][ T5889] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  705.540735][ T5889] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  705.540759][ T5889] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  705.540777][ T5889] usb 7-1: Manufacturer: syz
[  706.020226][ T5889] usb 7-1: config 0 descriptor??
[  708.213422][ T5889] rc_core: IR keymap rc-hauppauge not found
[  708.213482][ T5889] Registered IR keymap rc-empty
[  708.213705][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  708.250100][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  708.289128][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  708.371896][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input45
[  708.885072][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  708.902991][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  708.922814][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  708.978147][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  709.014555][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  709.032809][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  709.052872][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  709.072908][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  709.097569][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  709.114963][ T5889] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  709.278182][ T1485] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.494240][ T5889] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  709.494264][ T5889] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  709.572333][ T5889] usb 7-1: USB disconnect, device number 22
[  713.126367][T13190] 9pnet_virtio: no channels available for device syz
[  716.862741][T12811] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  721.293750][T13209] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  721.514534][T13212] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2216'.
[  721.964869][T13215] input: syz1 as /devices/virtual/input/input46
[  723.651720][T13072] hsr0 speed is unknown, defaulting to 1000
[  730.033152][ T5786] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  730.292726][ T5786] usb 9-1: Using ep0 maxpacket: 16
[  730.301044][ T5786] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  730.301093][ T5786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  730.301118][ T5786] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  730.301137][ T5786] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  730.301157][ T5786] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  730.303912][ T5786] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  730.303936][ T5786] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  730.303953][ T5786] usb 9-1: Manufacturer: syz
[  730.457476][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  730.503097][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  730.506131][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  730.601764][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  730.602765][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  731.059171][ T5786] usb 9-1: config 0 descriptor??
[  731.411662][ T5786] usb 9-1: can't set config #0, error -71
[  731.488979][ T5786] usb 9-1: USB disconnect, device number 10
[  732.750283][ T4911] Bluetooth: hci2: command tx timeout
[  734.822980][ T4911] Bluetooth: hci2: command tx timeout
[  735.103209][ T1485] bridge_slave_1: left allmulticast mode
[  735.103241][ T1485] bridge_slave_1: left promiscuous mode
[  735.103494][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.904886][ T4911] Bluetooth: hci2: command tx timeout
[  738.960621][ T1485] bridge_slave_0: left allmulticast mode
[  738.960653][ T1485] bridge_slave_0: left promiscuous mode
[  738.984107][ T4911] Bluetooth: hci2: command tx timeout
[  739.019326][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.919329][T13315] random: crng reseeded on system resumption
[  747.285752][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  747.285814][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  747.286809][ T1335] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  765.699750][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  765.803813][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  765.831734][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  765.836696][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  765.837426][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  767.785166][ T4911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  767.840702][ T4911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  768.004125][ T4911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  768.016668][ T4911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  768.046709][ T4911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  768.120827][ T4911] Bluetooth: hci0: command tx timeout
[  768.831350][ T4911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  768.897811][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  768.901573][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  768.903220][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  768.904064][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  770.202719][ T5597] Bluetooth: hci0: command tx timeout
[  770.262969][ T5597] Bluetooth: hci1: command tx timeout
[  770.629701][ T4911] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  770.678779][ T4911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  770.693260][ T4911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  770.697768][ T4911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  770.698819][ T4911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  771.065236][ T5597] Bluetooth: hci3: command tx timeout
[  772.283016][ T5597] Bluetooth: hci0: command tx timeout
[  772.403960][ T5597] Bluetooth: hci1: command tx timeout
[  772.823923][ T5597] Bluetooth: hci4: command tx timeout
[  773.142974][ T5597] Bluetooth: hci3: command tx timeout
[  774.363909][ T5597] Bluetooth: hci0: command tx timeout
[  774.422833][ T5597] Bluetooth: hci1: command tx timeout
[  774.660902][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  774.903530][ T5597] Bluetooth: hci4: command tx timeout
[  774.950830][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  775.222773][ T5597] Bluetooth: hci3: command tx timeout
[  775.649012][ T1485] bond0 (unregistering): Released all slaves
[  776.503299][ T5597] Bluetooth: hci1: command tx timeout
[  776.983379][ T5597] Bluetooth: hci4: command tx timeout
[  777.578559][ T5597] Bluetooth: hci3: command tx timeout
[  779.072447][ T5597] Bluetooth: hci4: command tx timeout
[  786.362575][T13260] hsr0 speed is unknown, defaulting to 1000
[  788.947599][ T4911] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  789.003179][ T4911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  789.056068][ T4911] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  789.061074][ T4911] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  789.064433][ T4911] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  791.142996][ T5597] Bluetooth: hci5: command tx timeout
[  791.190778][T13348] hsr0 speed is unknown, defaulting to 1000
[  793.240274][ T4911] Bluetooth: hci5: command tx timeout
[  793.301666][ T5256] 8021q: adding VLAN 0 to HW filter on device eth17
[  793.317282][T13359] hsr0 speed is unknown, defaulting to 1000
[  794.467769][T13355] hsr0 speed is unknown, defaulting to 1000
[  794.799278][T13364] hsr0 speed is unknown, defaulting to 1000
[  795.302962][ T4911] Bluetooth: hci5: command tx timeout
[  795.556986][ T1485] hsr_slave_0: left promiscuous mode
[  795.594619][ T1485] hsr_slave_1: left promiscuous mode
[  795.596153][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  795.596177][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  795.643859][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  795.643886][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  796.763763][ T1485] veth1_macvtap: left promiscuous mode
[  796.763865][ T1485] veth0_macvtap: left promiscuous mode
[  796.766583][ T1485] veth1_vlan: left promiscuous mode
[  796.766782][ T1485] veth0_vlan: left promiscuous mode
[  797.383033][ T4911] Bluetooth: hci5: command tx timeout
[  806.138846][ T1485] team0 (unregistering): Port device team_slave_1 removed
[  806.666984][ T1485] team0 (unregistering): Port device team_slave_0 removed
[  808.590845][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  808.590912][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  808.611416][ T1335] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  808.802815][T13407] hsr0 speed is unknown, defaulting to 1000
[  814.864788][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  814.882102][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  814.889490][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  814.921885][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  814.925332][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  815.661702][ T5256] 8021q: adding VLAN 0 to HW filter on device eth18
[  816.098945][ T1485] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.488281][ T1485] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.618311][T13355] bridge0: port 1(bridge_slave_0) entered blocking state
[  816.618513][T13355] bridge0: port 1(bridge_slave_0) entered disabled state
[  816.618695][T13355] bridge_slave_0: entered allmulticast mode
[  816.621531][T13355] bridge_slave_0: entered promiscuous mode
[  816.831684][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  816.892291][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  816.903618][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  816.906118][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  816.906797][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  817.072657][ T5597] Bluetooth: hci2: command tx timeout
[  817.173965][ T1485] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.213088][T13460] hsr0 speed is unknown, defaulting to 1000
[  817.230207][T13359] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.230326][T13359] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.230472][T13359] bridge_slave_0: entered allmulticast mode
[  817.232547][T13359] bridge_slave_0: entered promiscuous mode
[  817.300800][T13359] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.301141][T13359] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.301306][T13359] bridge_slave_1: entered allmulticast mode
[  817.304695][T13359] bridge_slave_1: entered promiscuous mode
[  817.330037][T13364] bridge0: port 1(bridge_slave_0) entered blocking state
[  817.330160][T13364] bridge0: port 1(bridge_slave_0) entered disabled state
[  817.330369][T13364] bridge_slave_0: entered allmulticast mode
[  817.344565][T13364] bridge_slave_0: entered promiscuous mode
[  817.458431][T13364] bridge0: port 2(bridge_slave_1) entered blocking state
[  817.458528][T13364] bridge0: port 2(bridge_slave_1) entered disabled state
[  817.458673][T13364] bridge_slave_1: entered allmulticast mode
[  817.460890][T13364] bridge_slave_1: entered promiscuous mode
[  817.919063][ T1485] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.974203][T13359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  818.056366][T13359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  818.066566][T13364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  818.127783][T13364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  818.131942][T13407] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.132107][T13407] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.132212][T13407] bridge_slave_0: entered allmulticast mode
[  818.135322][T13407] bridge_slave_0: entered promiscuous mode
[  818.225565][T13407] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.225680][T13407] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.225851][T13407] bridge_slave_1: entered allmulticast mode
[  818.247168][T13407] bridge_slave_1: entered promiscuous mode
[  818.264751][T13359] team0: Port device team_slave_0 added
[  818.398197][T13359] team0: Port device team_slave_1 added
[  818.414214][T13364] team0: Port device team_slave_0 added
[  818.499840][T13364] team0: Port device team_slave_1 added
[  818.552447][T13407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  818.849852][ T4911] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  818.891231][ T4911] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  818.895967][ T4911] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  818.896967][ T4911] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  818.897920][ T4911] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  819.024612][T13490] hsr0 speed is unknown, defaulting to 1000
[  819.031965][T13407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  819.062975][ T5597] Bluetooth: hci0: command tx timeout
[  819.069001][T13359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  819.069016][T13359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.069039][T13359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  819.122342][ T5256] 8021q: adding VLAN 0 to HW filter on device eth19
[  819.142904][ T5597] Bluetooth: hci2: command tx timeout
[  819.366976][T13364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  819.366991][T13364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.367015][T13364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  819.445677][T13364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  819.445693][T13364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.445717][T13364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  819.473695][T13407] team0: Port device team_slave_0 added
[  819.614911][T13407] team0: Port device team_slave_1 added
[  820.105447][T13407] batman_adv: batadv0: Adding interface: batadv_slave_0
[  820.105461][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.105474][T13407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  820.190634][T13407] batman_adv: batadv0: Adding interface: batadv_slave_1
[  820.190648][T13407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  820.190661][T13407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  820.242338][T13364] hsr_slave_0: entered promiscuous mode
[  820.244025][T13364] hsr_slave_1: entered promiscuous mode
[  820.298442][T13519] hsr0 speed is unknown, defaulting to 1000
[  820.413919][ T1485] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.504388][T13407] hsr_slave_0: entered promiscuous mode
[  820.506855][T13407] hsr_slave_1: entered promiscuous mode
[  820.507899][T13407] debugfs: 'hsr0' already exists in 'hsr'
[  820.507923][T13407] Cannot create hsr debugfs directory
[  820.790733][ T1485] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.982929][ T5597] Bluetooth: hci1: command tx timeout
[  821.152831][ T5597] Bluetooth: hci0: command tx timeout
[  821.172695][ T1485] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.224330][ T5597] Bluetooth: hci2: command tx timeout
[  821.269723][T13460] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.269930][T13460] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.270109][T13460] bridge_slave_0: entered allmulticast mode
[  821.293283][T13460] bridge_slave_0: entered promiscuous mode
[  821.320864][T13460] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.326568][T13460] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.326758][T13460] bridge_slave_1: entered allmulticast mode
[  821.348308][T13460] bridge_slave_1: entered promiscuous mode
[  821.435761][ T1485] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.550012][T13460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.809179][ T4911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  821.856608][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  821.857919][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  821.859973][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  821.865117][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  822.207874][T13460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  822.818643][T13460] team0: Port device team_slave_0 added
[  822.954045][T13460] team0: Port device team_slave_1 added
[  823.069021][ T4911] Bluetooth: hci1: command tx timeout
[  823.173915][ T5256] 8021q: adding VLAN 0 to HW filter on device eth20
[  823.174748][T13490] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.175634][T13490] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.175837][T13490] bridge_slave_0: entered allmulticast mode
[  823.178503][T13490] bridge_slave_0: entered promiscuous mode
[  823.181155][T13460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  823.181164][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.181181][T13460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  823.222759][ T4911] Bluetooth: hci0: command tx timeout
[  823.300252][T13460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  823.300266][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  823.300281][T13460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  823.300731][T13490] bridge0: port 2(bridge_slave_1) entered blocking state
[  823.300872][T13490] bridge0: port 2(bridge_slave_1) entered disabled state
[  823.300985][T13490] bridge_slave_1: entered allmulticast mode
[  823.302383][T13490] bridge_slave_1: entered promiscuous mode
[  823.310085][ T4911] Bluetooth: hci2: command tx timeout
[  823.488242][T13542] hsr0 speed is unknown, defaulting to 1000
[  823.537846][T13490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  823.585205][T13490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  823.867830][ T1485] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.921803][T13460] hsr_slave_0: entered promiscuous mode
[  823.928614][T13460] hsr_slave_1: entered promiscuous mode
[  823.930780][T13460] debugfs: 'hsr0' already exists in 'hsr'
[  823.930802][T13460] Cannot create hsr debugfs directory
[  823.959549][T13519] bridge0: port 1(bridge_slave_0) entered blocking state
[  823.959634][T13519] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.959753][T13519] bridge_slave_0: entered allmulticast mode
[  823.966648][T13519] bridge_slave_0: entered promiscuous mode
[  823.988086][T13490] team0: Port device team_slave_0 added
[  824.009046][T13519] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.009208][T13519] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.009408][T13519] bridge_slave_1: entered allmulticast mode
[  824.012275][T13519] bridge_slave_1: entered promiscuous mode
[  824.025757][ T4911] Bluetooth: hci3: command tx timeout
[  824.040096][T13490] team0: Port device team_slave_1 added
[  824.446082][T13519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  824.624643][T13490] batman_adv: batadv0: Adding interface: batadv_slave_0
[  824.624660][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  824.624686][T13490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  824.677334][T13519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  824.869297][ T1485] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.915762][T13490] batman_adv: batadv0: Adding interface: batadv_slave_1
[  824.915772][T13490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  824.915786][T13490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  825.152626][ T4911] Bluetooth: hci1: command tx timeout
[  825.204676][T13519] team0: Port device team_slave_0 added
[  825.225478][T13519] team0: Port device team_slave_1 added
[  825.302828][ T4911] Bluetooth: hci0: command tx timeout
[  825.418048][ T1485] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.598533][T13490] hsr_slave_0: entered promiscuous mode
[  825.599320][T13490] hsr_slave_1: entered promiscuous mode
[  825.599854][T13490] debugfs: 'hsr0' already exists in 'hsr'
[  825.599870][T13490] Cannot create hsr debugfs directory
[  825.614699][T13519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  825.614711][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.614735][T13519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  825.647404][T13519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  825.647420][T13519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  825.647444][T13519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  826.018077][ T1485] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  826.117144][ T4911] Bluetooth: hci3: command tx timeout
[  826.387983][T13519] hsr_slave_0: entered promiscuous mode
[  826.388807][T13519] hsr_slave_1: entered promiscuous mode
[  826.389339][T13519] debugfs: 'hsr0' already exists in 'hsr'
[  826.389358][T13519] Cannot create hsr debugfs directory
[  827.046946][T13407] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  827.076106][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  827.118167][T13407] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  827.149214][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  827.222842][ T4911] Bluetooth: hci1: command tx timeout
[  827.479287][T13407] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  827.515538][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  827.545020][T13407] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  827.577580][T13407] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  827.596649][T13542] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.596832][T13542] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.596999][T13542] bridge_slave_0: entered allmulticast mode
[  827.598455][T13542] bridge_slave_0: entered promiscuous mode
[  827.643823][T13542] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.643903][T13542] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.644022][T13542] bridge_slave_1: entered allmulticast mode
[  827.645525][T13542] bridge_slave_1: entered promiscuous mode
[  827.918994][ T1485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  827.991058][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  828.016579][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  828.182695][ T4911] Bluetooth: hci3: command tx timeout
[  828.288311][T13542] team0: Port device team_slave_0 added
[  828.292253][T13542] team0: Port device team_slave_1 added
[  828.333326][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  828.333342][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  828.333365][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  828.337647][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  828.337656][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  828.337669][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  828.582218][ T1485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  828.793110][T13542] hsr_slave_0: entered promiscuous mode
[  828.794545][T13542] hsr_slave_1: entered promiscuous mode
[  828.796543][T13542] debugfs: 'hsr0' already exists in 'hsr'
[  828.796558][T13542] Cannot create hsr debugfs directory
[  829.261372][ T1485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.832229][ T1485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.050798][T13407] 8021q: adding VLAN 0 to HW filter on device bond0
[  830.087732][T13407] 8021q: adding VLAN 0 to HW filter on device team0
[  830.102481][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  830.109451][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  830.164389][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state
[  830.164610][ T9543] bridge0: port 2(bridge_slave_1) entered forwarding state
[  830.273268][ T4911] Bluetooth: hci3: command tx timeout
[  830.329097][ T5256] 8021q: adding VLAN 0 to HW filter on device eth21
[  831.133804][ T1485] bridge_slave_1: left allmulticast mode
[  831.133840][ T1485] bridge_slave_1: left promiscuous mode
[  831.134087][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.213674][ T1485] bridge_slave_0: left allmulticast mode
[  831.213697][ T1485] bridge_slave_0: left promiscuous mode
[  831.213884][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state
[  831.575515][ T1485] bridge_slave_1: left allmulticast mode
[  831.575538][ T1485] bridge_slave_1: left promiscuous mode
[  831.575690][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state
[  831.634346][ T1485] bridge_slave_0: left allmulticast mode
[  831.634379][ T1485] bridge_slave_0: left promiscuous mode
[  831.634535][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state
[  831.993014][ T1485] bridge_slave_1: left allmulticast mode
[  831.993038][ T1485] bridge_slave_1: left promiscuous mode
[  831.993182][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.053617][ T1485] bridge_slave_0: left allmulticast mode
[  832.053638][ T1485] bridge_slave_0: left promiscuous mode
[  832.053779][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.392961][ T1485] vlan2: left allmulticast mode
[  832.392979][ T1485] geneve0: left allmulticast mode
[  832.393005][ T1485] vlan2: left promiscuous mode
[  832.393011][ T1485] geneve0: left promiscuous mode
[  832.393842][ T1485] bridge0: port 3(vlan2) entered disabled state
[  832.474554][ T1485] bridge_slave_1: left allmulticast mode
[  832.474578][ T1485] bridge_slave_1: left promiscuous mode
[  832.474782][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.534227][ T1485] bridge_slave_0: left allmulticast mode
[  832.534291][ T1485] bridge_slave_0: left promiscuous mode
[  832.534437][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state
[  834.073773][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  834.153886][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  834.175035][ T1485] bond0 (unregistering): Released all slaves
[  834.663936][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  834.723257][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  834.748134][ T1485] bond0 (unregistering): Released all slaves
[  835.183603][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  835.243381][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  835.286465][ T1485] bond0 (unregistering): Released all slaves
[  835.293351][ T1485] bond1 (unregistering): Released all slaves
[  835.309927][ T1485] bond2 (unregistering): Released all slaves
[  835.323843][ T1485] bond3 (unregistering): Released all slaves
[  835.339354][ T1485] bond4 (unregistering): Released all slaves
[  835.488436][ T1485] bond0 (unregistering): Released all slaves
[  836.043237][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  836.107049][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  836.124900][ T1485] bond0 (unregistering): Released all slaves
[  837.686124][ T5256] 8021q: adding VLAN 0 to HW filter on device eth22
[  837.854573][ T1485] tipc: Disabling bearer <udp:syz0>
[  837.860003][ T1485] tipc: Left network mode
[  838.680180][T13407] 8021q: adding VLAN 0 to HW filter on device batadv0
[  839.044260][ T5256] 8021q: adding VLAN 0 to HW filter on device eth23
[  840.140899][ T5256] 8021q: adding VLAN 0 to HW filter on device eth24
[  841.412099][T13407] veth0_vlan: entered promiscuous mode
[  841.441846][T13407] veth1_vlan: entered promiscuous mode
[  842.098387][T13407] veth0_macvtap: entered promiscuous mode
[  842.106240][T13407] veth1_macvtap: entered promiscuous mode
[  842.152474][T13407] batman_adv: batadv0: Interface activated: batadv_slave_0
[  843.309456][T13407] batman_adv: batadv0: Interface activated: batadv_slave_1
[  843.445628][ T3511] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  843.843604][ T3511] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  843.844886][ T3511] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  843.846419][ T3511] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  845.508950][ T9543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  845.508970][ T9543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.303719][T12375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.303739][T12375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.305865][T13460] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  846.441729][T13460] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  846.565547][T13460] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  846.630515][T13460] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  846.634674][T13460] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  846.702013][T13460] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  847.114585][T13460] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  847.177309][T13460] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  850.441680][T13490] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  850.498351][T13490] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  850.789600][T13490] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  850.826402][T13490] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  850.914361][T13490] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  850.978624][T13490] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  851.019079][T13490] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  851.036624][T13490] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  851.413507][ T1485] hsr_slave_0: left promiscuous mode
[  851.472851][ T1485] hsr_slave_1: left promiscuous mode
[  851.473682][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  851.473701][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  851.537181][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  851.537207][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  852.426249][ T1485] hsr_slave_0: left promiscuous mode
[  852.443544][ T1485] hsr_slave_1: left promiscuous mode
[  852.449955][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  852.449980][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  852.485898][T13755] 9pnet_virtio: no channels available for device syz
[  852.514407][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  852.514434][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  852.902764][ T1485] hsr_slave_0: left promiscuous mode
[  852.944238][ T1485] hsr_slave_1: left promiscuous mode
[  852.947851][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  852.947868][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  852.976957][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  852.977144][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  853.134261][ T1485] hsr_slave_0: left promiscuous mode
[  853.153294][ T1485] hsr_slave_1: left promiscuous mode
[  853.154690][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  853.154705][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  853.206130][ T1485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  853.206155][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  853.971873][ T1485] veth1_macvtap: left promiscuous mode
[  853.971936][ T1485] veth0_macvtap: left promiscuous mode
[  853.972216][ T1485] veth1_vlan: left promiscuous mode
[  853.972307][ T1485] veth0_vlan: left promiscuous mode
[  854.153103][ T1485] veth1_macvtap: left promiscuous mode
[  854.153205][ T1485] veth0_macvtap: left promiscuous mode
[  854.153525][ T1485] veth0_vlan: left promiscuous mode
[  855.385035][ T1485] veth1_macvtap: left promiscuous mode
[  855.385158][ T1485] veth0_macvtap: left promiscuous mode
[  855.385397][ T1485] veth1_vlan: left promiscuous mode
[  855.385562][ T1485] veth0_vlan: left promiscuous mode
[  855.472974][ T1485] veth1_macvtap: left promiscuous mode
[  855.473073][ T1485] veth0_macvtap: left promiscuous mode
[  855.473346][ T1485] veth1_vlan: left promiscuous mode
[  855.473511][ T1485] veth0_vlan: left promiscuous mode
[  856.943694][ T1485] team0 (unregistering): Port device team_slave_1 removed
[  856.986116][ T1485] team0 (unregistering): Port device team_slave_0 removed
[  857.460314][T12374] smbdirect: ib_dev[syz0] removed
[  857.643714][ T1485] team0 (unregistering): Port device team_slave_1 removed
[  857.683479][ T1485] team0 (unregistering): Port device team_slave_0 removed
[  858.231962][T12371] smbdirect: ib_dev[syz2] removed
[  858.333819][ T1485] team0 (unregistering): Port device team_slave_1 removed
[  858.364637][ T1485] team0 (unregistering): Port device team_slave_0 removed
[  859.263304][ T1485] team0 (unregistering): Port device team_slave_1 removed
[  859.283113][ T1485] team0 (unregistering): Port device team_slave_0 removed
[  859.577781][   T31] hsr0 speed is unknown, defaulting to 1000
[  859.577808][   T31] infiniband syz2: ib_query_port failed (-19)
[  859.577883][ T5709] infiniband syz0: ib_query_port failed (-19)
[  859.842258][T13542] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  859.908396][T13542] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  859.939612][T13542] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  859.984322][T13542] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  860.076271][T13779] 9pnet_virtio: no channels available for device syz
[  860.126404][T13542] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  860.214110][T13542] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  860.333797][T13542] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  860.367595][T13542] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  860.400554][T13460] 8021q: adding VLAN 0 to HW filter on device bond0
[  862.063955][T13460] 8021q: adding VLAN 0 to HW filter on device team0
[  862.263372][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.263506][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  862.281654][T13519] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  862.315667][T13519] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  862.320275][T13519] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  862.384264][T13519] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  862.391220][T13519] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  862.436921][T13519] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  862.443930][T13519] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  862.478322][T13519] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  862.480201][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.480282][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  862.739988][T13490] 8021q: adding VLAN 0 to HW filter on device bond0
[  862.813195][T13490] 8021q: adding VLAN 0 to HW filter on device team0
[  862.892701][ T5889] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  862.897009][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[  862.897135][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  862.942896][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[  862.943015][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  863.039547][T13542] 8021q: adding VLAN 0 to HW filter on device bond0
[  863.042881][ T5889] usb 10-1: Using ep0 maxpacket: 32
[  863.151992][ T5889] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  863.166698][ T5889] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  863.166723][ T5889] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  863.166740][ T5889] usb 10-1: Product: syz
[  863.166750][ T5889] usb 10-1: Manufacturer: syz
[  863.166765][ T5889] usb 10-1: SerialNumber: syz
[  863.208341][ T5889] usb 10-1: config 0 descriptor??
[  863.210239][T13803] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  863.293692][T13542] 8021q: adding VLAN 0 to HW filter on device team0
[  863.411468][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.411593][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  863.507311][T12371] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.507445][T12371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  863.531846][T13519] 8021q: adding VLAN 0 to HW filter on device bond0
[  863.871276][T13519] 8021q: adding VLAN 0 to HW filter on device team0
[  863.911994][T12375] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.912124][T12375] bridge0: port 1(bridge_slave_0) entered forwarding state
[  863.945979][ T9543] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.946105][ T9543] bridge0: port 2(bridge_slave_1) entered forwarding state
[  864.535252][T13460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  865.013233][T13460] veth0_vlan: entered promiscuous mode
[  865.060514][T13460] veth1_vlan: entered promiscuous mode
[  865.447503][T13460] veth0_macvtap: entered promiscuous mode
[  865.487685][T13460] veth1_macvtap: entered promiscuous mode
[  865.673659][ T5709] usb 10-1: USB disconnect, device number 2
[  865.693333][T13460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  865.768250][T13460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  865.860728][T12371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  865.861473][T12371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  865.861709][T12371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  865.861951][T12371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  869.636812][T13490] 8021q: adding VLAN 0 to HW filter on device batadv0
[  869.653342][T13542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.004361][T13519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  870.030974][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  870.031038][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  870.364811][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  870.364831][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  870.464613][T13490] veth0_vlan: entered promiscuous mode
[  870.604221][T13490] veth1_vlan: entered promiscuous mode
[  871.207641][T13336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  871.207660][T13336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  871.333307][T13519] veth0_vlan: entered promiscuous mode
[  871.452907][T13519] veth1_vlan: entered promiscuous mode
[  871.576794][T13490] veth0_macvtap: entered promiscuous mode
[  871.660867][T13490] veth1_macvtap: entered promiscuous mode
[  871.811044][T13907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2175'.
[  871.900874][T13542] veth0_vlan: entered promiscuous mode
[  871.994529][T13490] batman_adv: batadv0: Interface activated: batadv_slave_0
[  872.066142][T13519] veth0_macvtap: entered promiscuous mode
[  872.117135][T13490] batman_adv: batadv0: Interface activated: batadv_slave_1
[  872.137877][T13542] veth1_vlan: entered promiscuous mode
[  872.154822][T13519] veth1_macvtap: entered promiscuous mode
[  872.157681][T13336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  872.168572][T13336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  872.202351][T13336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  872.232191][T13336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  872.403383][T13519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  874.692829][ T1485] bridge_slave_1: left allmulticast mode
[  874.692861][ T1485] bridge_slave_1: left promiscuous mode
[  874.696654][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state
[  874.794933][ T1485] bridge_slave_0: left allmulticast mode
[  874.794972][ T1485] bridge_slave_0: left promiscuous mode
[  874.795227][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.023602][ T1485] bridge_slave_1: left allmulticast mode
[  875.023634][ T1485] bridge_slave_1: left promiscuous mode
[  875.023873][ T1485] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.172029][ T1485] bridge_slave_0: left allmulticast mode
[  876.172059][ T1485] bridge_slave_0: left promiscuous mode
[  876.172289][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state
[  877.589397][ T5597] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  877.622454][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  877.654260][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  877.656268][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  877.656908][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  877.740343][ T1485] bridge_slave_0: left allmulticast mode
[  877.740374][ T1485] bridge_slave_0: left promiscuous mode
[  877.740633][ T1485] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.098712][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  878.196079][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  878.258815][ T1485] bond0 (unregistering): Released all slaves
[  880.301659][T13987] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  880.321347][ T5597] Bluetooth: hci4: command tx timeout
[  881.009982][ T1485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  881.355351][ T1485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  881.700003][ T1485] bond0 (unregistering): Released all slaves
[  882.353096][ T5597] Bluetooth: hci4: command tx timeout
[  882.625728][ T4911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  882.682418][ T4911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  882.691031][ T4911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  882.703912][ T4911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  882.704669][ T4911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  882.895218][ T1485] bond0 (unregistering): Released all slaves
[  883.034337][ T4911] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  883.041805][ T4911] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  883.076225][ T4911] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  883.077573][ T4911] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  883.105044][ T4911] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  883.200795][T14003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2273'.
[  883.237397][ T1485] bond0 (unregistering): Released all slaves
[  883.452129][T13937] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  884.440654][ T4911] Bluetooth: hci4: command tx timeout
[  884.902794][ T4911] Bluetooth: hci6: command tx timeout
[  885.228753][ T4911] Bluetooth: hci7: command tx timeout
[  886.732802][ T4911] Bluetooth: hci4: command tx timeout
[  887.172749][ T4911] Bluetooth: hci6: command tx timeout
[  887.303414][ T4911] Bluetooth: hci7: command tx timeout
[  887.671379][ T1485] hsr_slave_0: left promiscuous mode
[  887.720985][ T1485] hsr_slave_1: left promiscuous mode
[  887.721889][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  887.777585][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  887.819137][ T1485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  887.912200][T14035] "syz.9.2278" (14035) uses obsolete ecb(arc4) skcipher
[  888.256956][T14057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2281'.
[  888.923120][ T1485] team0 (unregistering): Port device team_slave_1 removed
[  889.015048][ T1485] team0 (unregistering): Port device team_slave_0 removed
[  889.222770][ T4911] Bluetooth: hci6: command tx timeout
[  889.345019][ T1485] team0 (unregistering): Port device team_slave_1 removed
[  889.382733][ T4911] Bluetooth: hci7: command tx timeout
[  889.403339][ T1485] team0 (unregistering): Port device team_slave_0 removed
[  891.335690][ T4911] Bluetooth: hci6: command tx timeout
[  891.474985][ T4911] Bluetooth: hci7: command tx timeout
[  899.092677][   T36] kauditd_printk_skb: 19 callbacks suppressed
[  899.092696][   T36] audit: type=1800 audit(1778538314.608:212): pid=14136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2290" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  899.110353][T14136] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  899.110405][T14136] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  899.110422][T14136] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  901.155888][T13990] bridge0: port 1(bridge_slave_0) entered blocking state
[  901.156072][T13990] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.162313][T13990] bridge_slave_0: entered allmulticast mode
[  901.171216][T13990] bridge_slave_0: entered promiscuous mode
[  901.288502][T14136] syz.0.2290 (14136) used greatest stack depth: 16672 bytes left
[  902.943867][T13990] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.943978][T13990] bridge0: port 2(bridge_slave_1) entered disabled state
[  902.944161][T13990] bridge_slave_1: entered allmulticast mode
[  902.946680][T13990] bridge_slave_1: entered promiscuous mode
[  903.074944][T13999] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.075053][T13999] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.075244][T13999] bridge_slave_0: entered allmulticast mode
[  903.265554][T13999] bridge_slave_0: entered promiscuous mode
[  903.311249][T13975] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.311367][T13975] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.311581][T13975] bridge_slave_0: entered allmulticast mode
[  904.283189][T13975] bridge_slave_0: entered promiscuous mode
[  905.214791][T13975] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.214911][T13975] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.215096][T13975] bridge_slave_1: entered allmulticast mode
[  905.246994][T13975] bridge_slave_1: entered promiscuous mode
[  905.279532][T13999] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.279652][T13999] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.279870][T13999] bridge_slave_1: entered allmulticast mode
[  905.304377][T13999] bridge_slave_1: entered promiscuous mode
[  906.054208][T13990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  906.981107][T13990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  906.985355][T13975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  906.992867][T13999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  907.136501][T13975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  907.172089][T13999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  907.589197][T14211] 9pnet_virtio: no channels available for device syz
[  907.621238][T14210] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2299'.
[  908.318571][T13990] team0: Port device team_slave_0 added
[  908.994478][T14219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2300'.
[  909.378896][T13990] team0: Port device team_slave_1 added
[  909.386256][T13975] team0: Port device team_slave_0 added
[  909.389408][T13999] team0: Port device team_slave_0 added
[  909.640047][T13975] team0: Port device team_slave_1 added
[  909.675074][T13999] team0: Port device team_slave_1 added
[  910.578367][T13990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  910.578382][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  910.580239][T13990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  911.068322][T13990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  911.068335][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  911.068349][T13990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  911.073311][T13999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  911.073324][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  911.073347][T13999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  911.077514][T13975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  911.077526][T13975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  911.077549][T13975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  911.105543][T13999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  911.105557][T13999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  911.105581][T13999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  911.329852][T13975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  911.329866][T13975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  911.329890][T13975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  913.062647][ T5597] Bluetooth: hci5: command 0x0406 tx timeout
[  913.449585][T13990] hsr_slave_0: entered promiscuous mode
[  913.461491][T13990] hsr_slave_1: entered promiscuous mode
[  914.952428][T13999] hsr_slave_0: entered promiscuous mode
[  914.966188][T13999] hsr_slave_1: entered promiscuous mode
[  914.967097][T13999] debugfs: 'hsr0' already exists in 'hsr'
[  914.990421][T13999] Cannot create hsr debugfs directory
[  915.120855][T14242] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  915.191059][T13975] hsr_slave_0: entered promiscuous mode
[  915.200382][T13975] hsr_slave_1: entered promiscuous mode
[  915.201307][T13975] debugfs: 'hsr0' already exists in 'hsr'
[  915.201328][T13975] Cannot create hsr debugfs directory
[  916.704601][T14251] 9pnet_virtio: no channels available for device syz
[  918.180342][T14263] input: syz0 as /devices/virtual/input/input47
[  922.231599][T14273] ip6erspan0: entered promiscuous mode
[  926.404086][ T5597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  926.483336][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  926.505986][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  926.512362][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  926.596377][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  927.088828][T14301] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  928.830441][ T4911] Bluetooth: hci0: command tx timeout
[  930.903676][ T4911] Bluetooth: hci0: command tx timeout
[  931.473502][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  931.473570][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  932.804557][T14319] 9pnet_virtio: no channels available for device syz
[  932.982682][ T4911] Bluetooth: hci0: command tx timeout
[  935.190263][ T4911] Bluetooth: hci0: command tx timeout
[  938.903473][ T5597] Bluetooth: hci2: command 0x0406 tx timeout
[  939.769218][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  939.859990][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  939.885029][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  939.919526][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  939.921680][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  942.022649][ T5597] Bluetooth: hci1: command tx timeout
[  942.441402][ T4911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  942.521201][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  942.524260][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  942.529109][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  942.534945][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  943.831143][T14292] bridge0: port 1(bridge_slave_0) entered blocking state
[  943.831320][T14292] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.831519][T14292] bridge_slave_0: entered allmulticast mode
[  943.862791][T14292] bridge_slave_0: entered promiscuous mode
[  943.882589][T14292] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.882747][T14292] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.882932][T14292] bridge_slave_1: entered allmulticast mode
[  943.914962][T14292] bridge_slave_1: entered promiscuous mode
[  944.036706][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  944.066231][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  944.106476][ T5597] Bluetooth: hci1: command tx timeout
[  944.192253][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  944.255325][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  944.256240][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  944.664381][ T5597] Bluetooth: hci3: command tx timeout
[  944.782253][T14292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  944.816378][T14292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  946.184015][ T5597] Bluetooth: hci1: command tx timeout
[  946.294041][T14292] team0: Port device team_slave_0 added
[  946.583036][ T5597] Bluetooth: hci5: command tx timeout
[  946.632481][T14409] input: syz0 as /devices/virtual/input/input48
[  946.713600][T14292] team0: Port device team_slave_1 added
[  946.742681][ T5597] Bluetooth: hci3: command tx timeout
[  948.283698][ T5597] Bluetooth: hci1: command tx timeout
[  948.464059][T14292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  948.464076][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.464100][T14292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  948.628299][T14292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  948.628341][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  948.628367][T14292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  948.662782][ T5597] Bluetooth: hci5: command tx timeout
[  948.823050][ T5597] Bluetooth: hci3: command tx timeout
[  950.749504][ T5597] Bluetooth: hci5: command tx timeout
[  950.826946][T14292] hsr_slave_0: entered promiscuous mode
[  950.903055][ T5597] Bluetooth: hci3: command tx timeout
[  951.016572][T14292] hsr_slave_1: entered promiscuous mode
[  951.017605][T14292] debugfs: 'hsr0' already exists in 'hsr'
[  951.017627][T14292] Cannot create hsr debugfs directory
[  952.832824][ T5597] Bluetooth: hci5: command tx timeout
[  954.590255][T14470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2325'.
[  960.700623][T14492] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  960.700657][T14492] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  960.700693][T14492] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  961.155045][T14492] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  962.382290][T14354] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.456402][T14354] bridge0: port 1(bridge_slave_0) entered disabled state
[  962.456693][T14354] bridge_slave_0: entered allmulticast mode
[  962.654656][T14354] bridge_slave_0: entered promiscuous mode
[  963.034502][T14354] bridge0: port 2(bridge_slave_1) entered blocking state
[  963.034618][T14354] bridge0: port 2(bridge_slave_1) entered disabled state
[  963.034844][T14354] bridge_slave_1: entered allmulticast mode
[  963.076975][T14354] bridge_slave_1: entered promiscuous mode
[  963.389819][T14526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2332'.
[  965.387913][T14354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  965.733308][T14354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  966.253944][T14373] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.300587][T14373] bridge0: port 1(bridge_slave_0) entered disabled state
[  966.325289][T14373] bridge_slave_0: entered allmulticast mode
[  966.544171][T14373] bridge_slave_0: entered promiscuous mode
[  966.855971][T14373] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.856089][T14373] bridge0: port 2(bridge_slave_1) entered disabled state
[  966.856314][T14373] bridge_slave_1: entered allmulticast mode
[  966.894241][T14373] bridge_slave_1: entered promiscuous mode
[  967.138031][T14354] team0: Port device team_slave_0 added
[  967.468934][T14354] team0: Port device team_slave_1 added
[  968.138565][T14373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  968.899389][T14373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  969.029892][T14354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  969.029908][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  969.029932][T14354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  969.130929][T14396] bridge0: port 1(bridge_slave_0) entered blocking state
[  969.131048][T14396] bridge0: port 1(bridge_slave_0) entered disabled state
[  969.131269][T14396] bridge_slave_0: entered allmulticast mode
[  969.146315][T14396] bridge_slave_0: entered promiscuous mode
[  969.157809][T14354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  969.157823][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  969.157847][T14354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  969.572997][T14396] bridge0: port 2(bridge_slave_1) entered blocking state
[  969.573119][T14396] bridge0: port 2(bridge_slave_1) entered disabled state
[  969.573383][T14396] bridge_slave_1: entered allmulticast mode
[  969.643301][T14396] bridge_slave_1: entered promiscuous mode
[  970.107114][T14373] team0: Port device team_slave_0 added
[  970.560248][T14373] team0: Port device team_slave_1 added
[  970.585967][T14396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  971.597153][T14396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  972.163175][T14354] hsr_slave_0: entered promiscuous mode
[  972.169449][T14354] hsr_slave_1: entered promiscuous mode
[  972.182800][T14354] debugfs: 'hsr0' already exists in 'hsr'
[  972.182824][T14354] Cannot create hsr debugfs directory
[  972.212379][T14373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  972.212394][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  972.212417][T14373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  972.667258][T14373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  972.667281][T14373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  972.667305][T14373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  972.680126][T14396] team0: Port device team_slave_0 added
[  972.907342][T14396] team0: Port device team_slave_1 added
[  974.269308][T14396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  974.269324][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  974.269348][T14396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  974.522297][T14396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  974.522312][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  974.522336][T14396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  974.833937][T14373] hsr_slave_0: entered promiscuous mode
[  974.836909][T14373] hsr_slave_1: entered promiscuous mode
[  974.875391][T14373] debugfs: 'hsr0' already exists in 'hsr'
[  974.875418][T14373] Cannot create hsr debugfs directory
[  976.475251][T14396] hsr_slave_0: entered promiscuous mode
[  976.593306][T14396] hsr_slave_1: entered promiscuous mode
[  976.594340][T14396] debugfs: 'hsr0' already exists in 'hsr'
[  976.594365][T14396] Cannot create hsr debugfs directory
[  984.510171][ T4911] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  984.546644][ T4911] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  984.580633][ T4911] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  984.581813][ T4911] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  984.702862][ T4911] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  986.902698][ T5597] Bluetooth: hci8: command tx timeout
[  988.097289][ T4911] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  988.172009][ T4911] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  988.189985][ T4911] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  988.200390][ T4911] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  988.231109][ T4911] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  989.002702][ T4911] Bluetooth: hci8: command tx timeout
[  990.343531][ T4911] Bluetooth: hci9: command tx timeout
[  991.062736][ T4911] Bluetooth: hci8: command tx timeout
[  992.422646][ T4911] Bluetooth: hci9: command tx timeout
[  992.908431][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  992.908497][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  993.142699][ T4911] Bluetooth: hci8: command tx timeout
[  994.248124][T14612] bridge0: port 1(bridge_slave_0) entered blocking state
[  994.248330][T14612] bridge0: port 1(bridge_slave_0) entered disabled state
[  994.248618][T14612] bridge_slave_0: entered allmulticast mode
[  994.261084][T14612] bridge_slave_0: entered promiscuous mode
[  994.301330][T14612] bridge0: port 2(bridge_slave_1) entered blocking state
[  994.301445][T14612] bridge0: port 2(bridge_slave_1) entered disabled state
[  994.301670][T14612] bridge_slave_1: entered allmulticast mode
[  994.310731][T14612] bridge_slave_1: entered promiscuous mode
[  994.513071][ T4911] Bluetooth: hci9: command tx timeout
[  995.544613][T14612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  995.574903][T14612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  996.074105][T14612] team0: Port device team_slave_0 added
[  996.096324][T14612] team0: Port device team_slave_1 added
[  996.430941][T14612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  996.430957][T14612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  996.430982][T14612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  996.511597][T14612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  996.511613][T14612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  996.511636][T14612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  996.582785][ T4911] Bluetooth: hci9: command tx timeout
[  997.940189][T14612] hsr_slave_0: entered promiscuous mode
[  997.941642][T14612] hsr_slave_1: entered promiscuous mode
[  997.947524][T14612] debugfs: 'hsr0' already exists in 'hsr'
[  997.947547][T14612] Cannot create hsr debugfs directory
[ 1000.111589][ T5597] Bluetooth: hci4: command 0x0406 tx timeout
[ 1000.377810][T13350] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1000.389914][T13350] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1000.407446][T13350] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1000.449300][T13350] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1000.449975][T13350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1001.405604][T14633] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1001.405809][T14633] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1001.406033][T14633] bridge_slave_0: entered allmulticast mode
[ 1001.442471][T14633] bridge_slave_0: entered promiscuous mode
[ 1001.611175][T14633] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1001.611295][T14633] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1001.611559][T14633] bridge_slave_1: entered allmulticast mode
[ 1001.814384][T14633] bridge_slave_1: entered promiscuous mode
[ 1002.368409][T14633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1002.389220][T14633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1002.675993][T14633] team0: Port device team_slave_0 added
[ 1002.700054][T14633] team0: Port device team_slave_1 added
[ 1002.742768][ T5597] Bluetooth: hci2: command tx timeout
[ 1003.064411][T14633] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1003.064427][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.064451][T14633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1003.126572][T14633] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1003.126588][T14633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1003.126614][T14633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1004.087434][T13350] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1004.272696][T13350] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1004.281127][T13350] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1004.289258][T13350] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1004.292712][T13350] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1004.553039][T14633] hsr_slave_0: entered promiscuous mode
[ 1004.570843][T14633] hsr_slave_1: entered promiscuous mode
[ 1004.571927][T14633] debugfs: 'hsr0' already exists in 'hsr'
[ 1004.571950][T14633] Cannot create hsr debugfs directory
[ 1004.824416][ T5597] Bluetooth: hci2: command tx timeout
[ 1005.229088][ T5597] Bluetooth: hci6: command 0x0406 tx timeout
[ 1006.215054][T13350] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1006.269391][T13350] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1006.282391][T13350] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1006.295593][T13350] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1006.302287][T13350] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1006.353377][T13350] Bluetooth: hci10: command tx timeout
[ 1006.952620][ T4911] Bluetooth: hci2: command tx timeout
[ 1008.422810][T13350] Bluetooth: hci10: command tx timeout
[ 1008.512698][T13350] Bluetooth: hci11: command tx timeout
[ 1008.982731][T13350] Bluetooth: hci2: command tx timeout
[ 1010.342604][T13350] Bluetooth: hci7: command 0x0406 tx timeout
[ 1010.503106][T13350] Bluetooth: hci10: command tx timeout
[ 1010.592713][T13350] Bluetooth: hci11: command tx timeout
[ 1012.612720][ T4911] Bluetooth: hci10: command tx timeout
[ 1012.662693][ T4911] Bluetooth: hci11: command tx timeout
[ 1014.752858][ T4911] Bluetooth: hci11: command tx timeout
[ 1016.581574][T14702] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1016.581769][T14702] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1016.582034][T14702] bridge_slave_0: entered allmulticast mode
[ 1016.618941][T14702] bridge_slave_0: entered promiscuous mode
[ 1016.790953][T14702] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1016.791064][T14702] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1016.791309][T14702] bridge_slave_1: entered allmulticast mode
[ 1016.817186][T14702] bridge_slave_1: entered promiscuous mode
[ 1017.547063][T14702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1017.906223][T14702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1019.183507][T14702] team0: Port device team_slave_0 added
[ 1019.349600][T14702] team0: Port device team_slave_1 added
[ 1020.455447][T14702] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1020.455463][T14702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1020.455488][T14702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1020.935875][T14702] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1020.935891][T14702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1020.935916][T14702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1021.178337][T14730] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1021.178557][T14730] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1021.178807][T14730] bridge_slave_0: entered allmulticast mode
[ 1021.189126][T14730] bridge_slave_0: entered promiscuous mode
[ 1021.242147][T14730] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1021.242283][T14730] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1021.242988][T14730] bridge_slave_1: entered allmulticast mode
[ 1021.257082][T14730] bridge_slave_1: entered promiscuous mode
[ 1022.907626][T14730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1022.964834][T14702] hsr_slave_0: entered promiscuous mode
[ 1022.966336][T14702] hsr_slave_1: entered promiscuous mode
[ 1022.967369][T14702] debugfs: 'hsr0' already exists in 'hsr'
[ 1022.967392][T14702] Cannot create hsr debugfs directory
[ 1023.106099][T14730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1024.547883][T14730] team0: Port device team_slave_0 added
[ 1024.827500][T14730] team0: Port device team_slave_1 added
[ 1026.050944][T14744] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1026.051063][T14744] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1026.051263][T14744] bridge_slave_0: entered allmulticast mode
[ 1026.061903][T14744] bridge_slave_0: entered promiscuous mode
[ 1026.115512][T14730] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1026.115527][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1026.115552][T14730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1026.118389][T14744] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1026.118507][T14744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1026.118718][T14744] bridge_slave_1: entered allmulticast mode
[ 1026.133970][T14744] bridge_slave_1: entered promiscuous mode
[ 1026.220611][T14730] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1026.220626][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1026.220650][T14730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1026.717222][T14744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1026.827397][T14744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1028.014182][T14730] hsr_slave_0: entered promiscuous mode
[ 1028.015660][T14730] hsr_slave_1: entered promiscuous mode
[ 1028.016633][T14730] debugfs: 'hsr0' already exists in 'hsr'
[ 1028.016654][T14730] Cannot create hsr debugfs directory
[ 1028.080993][T14744] team0: Port device team_slave_0 added
[ 1028.139907][T14744] team0: Port device team_slave_1 added
[ 1028.820476][T14744] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1028.820493][T14744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1028.820524][T14744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1029.092070][T14744] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1029.092086][T14744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1029.092109][T14744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1030.468906][T14744] hsr_slave_0: entered promiscuous mode
[ 1030.472763][T14744] hsr_slave_1: entered promiscuous mode
[ 1030.477467][T14744] debugfs: 'hsr0' already exists in 'hsr'
[ 1030.477491][T14744] Cannot create hsr debugfs directory
[ 1045.262206][T13350] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1045.302441][T13350] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1045.317312][T13350] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1045.346659][T13350] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1045.347503][T13350] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1047.462678][T13350] Bluetooth: hci6: command tx timeout
[ 1049.552579][T13350] Bluetooth: hci6: command tx timeout
[ 1049.811413][ T5597] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1049.863148][ T5597] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1049.865726][ T5597] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1049.887436][ T5597] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1049.888197][ T5597] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1051.550047][T13350] Bluetooth: hci0: command 0x0406 tx timeout
[ 1051.626985][T13350] Bluetooth: hci6: command tx timeout
[ 1052.092310][T13350] Bluetooth: hci12: command tx timeout
[ 1053.703003][T13350] Bluetooth: hci6: command tx timeout
[ 1054.552594][ T4911] Bluetooth: hci12: command tx timeout
[ 1054.674990][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.687864][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.782930][   T67] kworker/u8:4 (67) used greatest stack depth: 14912 bytes left
[ 1055.558623][T14906] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1055.558790][T14906] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.559065][T14906] bridge_slave_0: entered allmulticast mode
[ 1055.592347][T14906] bridge_slave_0: entered promiscuous mode
[ 1055.775912][T14906] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1055.776046][T14906] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1055.776325][T14906] bridge_slave_1: entered allmulticast mode
[ 1055.804008][T14906] bridge_slave_1: entered promiscuous mode
[ 1056.164169][T14906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1056.216111][T14906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1056.219648][ T5831] kworker/u8:13 (5831) used greatest stack depth: 13992 bytes left
[ 1056.582636][ T4911] Bluetooth: hci12: command tx timeout
[ 1057.052245][T14906] team0: Port device team_slave_0 added
[ 1057.076205][T14906] team0: Port device team_slave_1 added
[ 1057.304664][T14906] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1057.304680][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1057.304703][T14906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1057.432729][T14906] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1057.432745][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1057.432770][T14906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1058.297783][T14906] hsr_slave_0: entered promiscuous mode
[ 1058.329147][T14906] hsr_slave_1: entered promiscuous mode
[ 1058.330503][T14906] debugfs: 'hsr0' already exists in 'hsr'
[ 1058.330528][T14906] Cannot create hsr debugfs directory
[ 1058.662710][ T4911] Bluetooth: hci12: command tx timeout
[ 1061.908012][T13350] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1061.983438][T13350] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1061.988697][T13350] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1061.989925][T13350] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1061.992004][T13350] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1062.412981][T14924] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1062.413104][T14924] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1062.413387][T14924] bridge_slave_0: entered allmulticast mode
[ 1062.449641][T14924] bridge_slave_0: entered promiscuous mode
[ 1062.734580][T14924] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1062.734703][T14924] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1062.735351][T14924] bridge_slave_1: entered allmulticast mode
[ 1062.738128][T14924] bridge_slave_1: entered promiscuous mode
[ 1063.418276][T14924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1063.446936][T14924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1064.102906][T13350] Bluetooth: hci13: command tx timeout
[ 1064.616973][T14924] team0: Port device team_slave_0 added
[ 1064.635691][T14924] team0: Port device team_slave_1 added
[ 1065.275269][T11998] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1065.306260][T11998] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1065.313463][T11998] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1065.315084][T11998] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1065.315781][T11998] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1065.604210][T14924] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1065.604227][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1065.604251][T14924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1065.661387][T14924] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1065.661403][T14924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1065.661427][T14924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1065.862784][   T37] INFO: task syz-executor:13975 blocked for more than 143 seconds.
[ 1065.862809][   T37]       Not tainted syzkaller #0
[ 1065.862818][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1065.862828][   T37] task:syz-executor    state:D stack:18336 pid:13975 tgid:13975 ppid:1      task_flags:0x400140 flags:0x00080002
[ 1065.862882][   T37] Call Trace:
[ 1065.862889][   T37]  <TASK>
[ 1065.862902][   T37]  __schedule+0x16ec/0x5620
[ 1065.863110][   T37]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1065.863168][   T37]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1065.863191][   T37]  ? __pfx___schedule+0x10/0x10
[ 1065.863227][   T37]  rt_mutex_schedule+0x76/0xf0
[ 1065.863318][   T37]  rt_mutex_slowlock_block+0x508/0x680
[ 1065.863362][   T37]  rt_mutex_slowlock+0x2dc/0x780
[ 1065.863383][   T37]  ? rt_mutex_slowlock+0x1fd/0x780
[ 1065.863401][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1065.863429][   T37]  ? del_device_store+0xd7/0x370
[ 1065.863519][   T37]  ? del_device_store+0xd7/0x370
[ 1065.863542][   T37]  ? del_device_store+0xd7/0x370
[ 1065.863559][   T37]  mutex_lock_nested+0x168/0x1d0
[ 1065.863588][   T37]  del_device_store+0xd7/0x370
[ 1065.863605][   T37]  ? sysfs_file_kobj+0x1a/0x230
[ 1065.863685][   T37]  ? __pfx_del_device_store+0x10/0x10
[ 1065.863702][   T37]  ? sysfs_file_kobj+0x1e4/0x230
[ 1065.863726][   T37]  ? sysfs_kf_write+0x166/0x260
[ 1065.863752][   T37]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1065.863773][   T37]  kernfs_fop_write_iter+0x3b0/0x540
[ 1065.863802][   T37]  vfs_write+0x629/0xba0
[ 1065.863904][   T37]  ? __pfx_vfs_write+0x10/0x10
[ 1065.863927][   T37]  ? do_sys_openat2+0x14c/0x200
[ 1065.863949][   T37]  ? kmem_cache_free+0x187/0x6c0
[ 1065.864026][   T37]  ksys_write+0x156/0x270
[ 1065.864049][   T37]  ? __pfx_ksys_write+0x10/0x10
[ 1065.864077][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1065.864120][   T37]  do_syscall_64+0x15f/0xf80
[ 1065.864166][   T37]  ? trace_irq_disable+0x3b/0x140
[ 1065.864227][   T37]  ? clear_bhb_loop+0x40/0x90
[ 1065.864249][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1065.864271][   T37] RIP: 0033:0x7f6d8af0d60e
[ 1065.864294][   T37] RSP: 002b:00007ffeef3312d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1065.864312][   T37] RAX: ffffffffffffffda RBX: 00005555911ef500 RCX: 00007f6d8af0d60e
[ 1065.864326][   T37] RDX: 0000000000000001 RSI: 00007ffeef331360 RDI: 0000000000000005
[ 1065.864337][   T37] RBP: 00007f6d8afe35ec R08: 0000000000000000 R09: 0000000000000000
[ 1065.864348][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1065.864359][   T37] R13: 00007ffeef331360 R14: 00007f6d8bcf4620 R15: 0000000000000003
[ 1065.864388][   T37]  </TASK>
[ 1065.864447][   T37] 
[ 1065.864447][   T37] Showing all locks held in the system:
[ 1065.864456][   T37] 5 locks held by ktimers/0/16:
[ 1065.864470][   T37] 4 locks held by rcuc/0/20:
[ 1065.864482][   T37] 4 locks held by rcuc/1/28:
[ 1065.864492][   T37] 1 lock held by khungtaskd/37:
[ 1065.864502][   T37]  #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1065.864566][   T37] 2 locks held by kworker/u8:2/42:
[ 1065.864576][   T37]  #0: ffff88801a074938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1065.864638][   T37]  #1: ffffc90000b47c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1065.864693][   T37] 4 locks held by kworker/u8:10/1485:
[ 1065.864703][   T37]  #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1065.864745][   T37]  #1: ffffc9000716fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1065.864786][   T37]  #2: ffffffff8f3487a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1065.864927][   T37]  #3: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1065.865012][   T37] 3 locks held by kworker/u9:1/4911:
[ 1065.865030][   T37]  #0: ffff8880213e2138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1065.865072][   T37]  #1: ffffc90010b47c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1065.865115][   T37]  #2: ffff888035224f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1065.865213][   T37] 2 locks held by getty/5350:
[ 1065.865223][   T37]  #0: ffff88803666c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1065.865318][   T37]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[ 1065.865395][   T37] 3 locks held by kworker/u9:2/5597:
[ 1065.865406][   T37]  #0: ffff888034425938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1065.865448][   T37]  #1: ffffc90005457c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1065.865490][   T37]  #2: ffff888027afcf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1065.865534][   T37] 2 locks held by kworker/u8:18/9543:
[ 1065.865544][   T37]  #0: ffff88801a074938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1065.865590][   T37]  #1: ffffc9000690fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1065.865632][   T37] 7 locks held by kworker/u8:19/9545:
[ 1065.865642][   T37] 4 locks held by kworker/u8:20/9673:
[ 1065.865654][   T37] 3 locks held by kworker/u9:3/13350:
[ 1065.865663][   T37]  #0: ffff88803c074138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[ 1065.865705][   T37]  #1: ffffc9000714fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[ 1065.865748][   T37]  #2: ffff888060e78f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[ 1065.865796][   T37] 4 locks held by syz-executor/13975:
[ 1065.865806][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.865851][   T37]  #1: ffff888060552c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.865895][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.865942][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.865983][   T37] 7 locks held by syz-executor/13999:
[ 1065.865993][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.866046][   T37]  #1: ffff888038a00878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.866089][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.866136][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.866175][   T37]  #4: ffff88805bbf4160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[ 1065.866293][   T37]  #5: ffff888078772310 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[ 1065.866366][   T37]  #6: ffffffff8dfce2f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1065.866410][   T37] 4 locks held by syz-executor/14292:
[ 1065.866420][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.866463][   T37]  #1: ffff888027498078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.866505][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.866551][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.866592][   T37] 4 locks held by syz-executor/14354:
[ 1065.866602][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.866646][   T37]  #1: ffff88806072dc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.866688][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.866736][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.866776][   T37] 4 locks held by syz-executor/14373:
[ 1065.866786][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.866830][   T37]  #1: ffff888035e86478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.866873][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.866919][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.866961][   T37] 4 locks held by syz-executor/14396:
[ 1065.866971][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.867015][   T37]  #1: ffff888040da2078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.867063][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.867110][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.867152][   T37] 4 locks held by syz-executor/14612:
[ 1065.867162][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.867206][   T37]  #1: ffff888061141878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.867248][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.867295][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.867335][   T37] 4 locks held by syz-executor/14633:
[ 1065.867345][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.867390][   T37]  #1: ffff88802a784878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.867432][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.867479][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.867518][   T37] 4 locks held by syz-executor/14702:
[ 1065.867528][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.867572][   T37]  #1: ffff8880606a3878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.867615][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.867661][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.867701][   T37] 4 locks held by syz-executor/14730:
[ 1065.867710][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.867754][   T37]  #1: ffff88803c331c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.867796][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.867842][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.867883][   T37] 4 locks held by syz-executor/14744:
[ 1065.867892][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.867936][   T37]  #1: ffff88805ffed478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.867979][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.868031][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.868074][   T37] 4 locks held by syz-executor/14906:
[ 1065.868084][   T37]  #0: ffff888037022480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[ 1065.868128][   T37]  #1: ffff88802a3bbc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[ 1065.868172][   T37]  #2: ffff888026631788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[ 1065.868219][   T37]  #3: ffffffff8ebcf8d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[ 1065.868259][   T37] 4 locks held by syz-executor/14924:
[ 1065.868271][   T37] 2 locks held by modprobe/15016:
[ 1065.868281][   T37] 2 locks held by modprobe/15017:
[ 1065.868291][   T37] 1 lock held by dhcpcd-run-hook/15018:
[ 1065.868303][   T37] 
[ 1065.868308][   T37] =============================================
[ 1065.868308][   T37] 
[ 1065.868323][   T37] NMI backtrace for cpu 1
[ 1065.868347][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1065.868397][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1065.868420][   T37] Call Trace:
[ 1065.868436][   T37]  <TASK>
[ 1065.868453][   T37]  dump_stack_lvl+0xe8/0x150
[ 1065.868491][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[ 1065.868548][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1065.868580][   T37]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1065.868607][   T37]  sys_info+0x135/0x170
[ 1065.868655][   T37]  watchdog+0xfd3/0x1030
[ 1065.868708][   T37]  ? watchdog+0x1c9/0x1030
[ 1065.868732][   T37]  kthread+0x388/0x470
[ 1065.868754][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1065.868771][   T37]  ? __pfx_kthread+0x10/0x10
[ 1065.868794][   T37]  ret_from_fork+0x514/0xb70
[ 1065.868826][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1065.868845][   T37]  ? __switch_to+0xc79/0x1410
[ 1065.868871][   T37]  ? __pfx_kthread+0x10/0x10
[ 1065.868894][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1065.868929][   T37]  </TASK>
[ 1065.868936][   T37] Sending NMI from CPU 1 to CPUs 0:
[ 1065.868961][    C0] NMI backtrace for cpu 0
[ 1065.868978][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1065.869018][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1065.869031][    C0] RIP: 0010:memset_orig+0x72/0xb0
[ 1065.869053][    C0] Code: 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 <48> 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01
[ 1065.869066][    C0] RSP: 0018:ffffc90000157138 EFLAGS: 00000246
[ 1065.869080][    C0] RAX: 0000000000000000 RBX: 1ffff9200002ae34 RCX: 0000000000000000
[ 1065.869090][    C0] RDX: 0000000000000028 RSI: 0000000000000000 RDI: ffffc900001571e0
[ 1065.869101][    C0] RBP: ffffc90000157270 R08: ffffc900001571e7 R09: 0000000000000000
[ 1065.869111][    C0] R10: ffffc900001571c0 R11: fffff5200002ae3d R12: dffffc0000000000
[ 1065.869123][    C0] R13: ffffc900001571c0 R14: 1ffff9200002ae34 R15: 0000000000000014
[ 1065.869134][    C0] FS:  0000000000000000(0000) GS:ffff888126176000(0000) knlGS:0000000000000000
[ 1065.869147][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1065.869158][    C0] CR2: 00007fef893c6890 CR3: 000000004cda8000 CR4: 00000000003526f0
[ 1065.869172][    C0] Call Trace:
[ 1065.869178][    C0]  <TASK>
[ 1065.869183][    C0]  synproxy_parse_options+0xfa/0x900
[ 1065.869258][    C0]  ? nft_synproxy_eval_v6+0x352/0x4e0
[ 1065.869338][    C0]  ? __pfx_synproxy_parse_options+0x10/0x10
[ 1065.869359][    C0]  ? nf_ip_checksum+0x13c/0x510
[ 1065.869403][    C0]  ? nf_ip_checksum+0x13c/0x510
[ 1065.869418][    C0]  nft_synproxy_do_eval+0x29c/0x580
[ 1065.869438][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1065.869460][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1065.869487][    C0]  nft_do_chain+0x48d/0x1ae0
[ 1065.869533][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[ 1065.869555][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[ 1065.869585][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1065.869633][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1065.869655][    C0]  nft_do_chain_inet+0x360/0x4b0
[ 1065.869720][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1065.869744][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1065.869798][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1065.869812][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1065.869833][    C0]  nf_hook_slow+0xc5/0x220
[ 1065.869877][    C0]  NF_HOOK+0x21f/0x3c0
[ 1065.869892][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1065.869906][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1065.869919][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1065.869932][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[ 1065.869971][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1065.869988][    C0]  ? ip_local_deliver+0x12a/0x1b0
[ 1065.870004][    C0]  NF_HOOK+0x336/0x3c0
[ 1065.870017][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1065.870037][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1065.870050][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1065.870063][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1065.870078][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1065.870095][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1065.870108][    C0]  ? process_backlog+0x271/0xc60
[ 1065.870156][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1065.870170][    C0]  process_backlog+0x569/0xc60
[ 1065.870193][    C0]  __napi_poll+0xab/0x550
[ 1065.870240][    C0]  net_rx_action+0x696/0xe00
[ 1065.870255][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1065.870283][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1065.870311][    C0]  handle_softirqs+0x1de/0x6d0
[ 1065.870333][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[ 1065.870373][    C0]  run_ktimerd+0x69/0x100
[ 1065.870390][    C0]  smpboot_thread_fn+0x541/0xa50
[ 1065.870408][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[ 1065.870429][    C0]  kthread+0x388/0x470
[ 1065.870447][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1065.870463][    C0]  ? __pfx_kthread+0x10/0x10
[ 1065.870481][    C0]  ret_from_fork+0x514/0xb70
[ 1065.870498][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1065.870514][    C0]  ? __switch_to+0xc79/0x1410
[ 1065.870536][    C0]  ? __pfx_kthread+0x10/0x10
[ 1065.870554][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1065.870579][    C0]  </TASK>
[ 1065.870968][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[ 1065.870983][   T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1065.871003][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1065.871012][   T37] Call Trace:
[ 1065.871025][   T37]  <TASK>
[ 1065.871033][   T37]  vpanic+0x56c/0xa60
[ 1065.871058][   T37]  ? __pfx_vpanic+0x10/0x10
[ 1065.871087][   T37]  panic+0xc5/0xd0
[ 1065.871107][   T37]  ? __pfx_panic+0x10/0x10
[ 1065.871136][   T37]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[ 1065.871165][   T37]  watchdog+0x102c/0x1030
[ 1065.871191][   T37]  ? watchdog+0x1c9/0x1030
[ 1065.871216][   T37]  kthread+0x388/0x470
[ 1065.871238][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1065.871255][   T37]  ? __pfx_kthread+0x10/0x10
[ 1065.871278][   T37]  ret_from_fork+0x514/0xb70
[ 1065.871300][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1065.871319][   T37]  ? __switch_to+0xc79/0x1410
[ 1065.871346][   T37]  ? __pfx_kthread+0x10/0x10
[ 1065.871369][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1065.871404][   T37]  </TASK>
[ 1065.871776][   T37] Kernel Offset: disabled