last executing test programs:

6m30.480487084s ago: executing program 4 (id=5):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$unlink(0x9, 0x0, 0x0)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m21.24833422s ago: executing program 4 (id=27):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x1, 0x0)
write$binfmt_script(r5, &(0x7f0000000180), 0x4)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0, 0x0, &(0x7f0000000580)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000a80)={[&(0x7f0000000a40)='.^*%$\'-\\:\x00']})

6m19.736372705s ago: executing program 4 (id=29):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000c0001, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1})
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x510a, 0x400, 0x3, 0x288}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35d"}, 0x32)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x40]}})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)

6m4.009339206s ago: executing program 32 (id=29):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000c0001, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1})
r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x510a, 0x400, 0x3, 0x288}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35d"}, 0x32)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x40]}})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10)

4m37.500348418s ago: executing program 0 (id=148):
openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0)
sendfile(r3, r2, 0x0, 0x100000002)

4m37.32856164s ago: executing program 0 (id=149):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
writev(r1, &(0x7f00000002c0), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
writev(r5, 0x0, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x8034, 0x2, 0x2}, 0x18, 0x0)
landlock_restrict_self(r6, 0x7)
landlock_restrict_self(r6, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)

4m36.063834074s ago: executing program 0 (id=152):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xbc1, 0xc0080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = epoll_create1(0x80000)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000))
epoll_wait(r4, &(0x7f0000000280)=[{}], 0x1, 0x86f2)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000240))
r6 = getpid()
sched_setscheduler(r6, 0x3, &(0x7f0000000200)=0x2)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={'\x00', 0x4, 0x8, 0x9, 0x8000, 0x2, r6})
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
tgkill(r2, r6, 0x1a)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080))

4m34.708062538s ago: executing program 0 (id=153):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0x2, r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x5}, 0x50)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x24004040)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd31800280601fc010000000000000000000000000001fe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a01e00009078000013120526fa590013476073e86e"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
timer_settime(0x0, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
gettid()

4m31.539484995s ago: executing program 0 (id=157):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
socket$inet(0x2, 0x80000, 0xfffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x1015a, 0x10002, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
fchdir(r0)
chdir(&(0x7f00000003c0)='./bus\x00')
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

4m29.232474888s ago: executing program 0 (id=160):
r0 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x3, 0x10)
ioperm(0x284, 0x7f, 0xe3)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8)
r8 = gettid()
tkill(r8, 0x12)
rt_sigsuspend(&(0x7f0000000000)={[0x2]}, 0x8)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

4m13.154130424s ago: executing program 33 (id=160):
r0 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0x1, 0x0, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x8, 0x1, 0x6, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]})
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$kcm(0x10, 0x3, 0x10)
ioperm(0x284, 0x7f, 0xe3)
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8)
r8 = gettid()
tkill(r8, 0x12)
rt_sigsuspend(&(0x7f0000000000)={[0x2]}, 0x8)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

1m39.832390054s ago: executing program 1 (id=705):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20)
recvfrom$inet6(r4, &(0x7f0000000180)=""/67, 0x43, 0x142, 0x0, 0x0)

1m39.092347859s ago: executing program 6 (id=713):
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f0000000180)=ANY=[]}]})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="a01302"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000080)={0x20, 0xa, 0xf, "5f13ba3b11720c3f4b2950ce9f43b7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m38.993542168s ago: executing program 3 (id=715):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

1m38.742517942s ago: executing program 3 (id=717):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x582, 0x0, 0x8000000000000000}]})

1m38.564762639s ago: executing program 3 (id=718):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20)

1m37.187917371s ago: executing program 2 (id=724):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x88203, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0))

1m36.794319805s ago: executing program 6 (id=725):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x2404489f, &(0x7f0000b63fe4)={0xa, 0x2, 0x800000, @empty}, 0x1c)

1m36.581971798s ago: executing program 2 (id=726):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m35.536278063s ago: executing program 6 (id=728):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x50, 0x6, 0xfde3996dcd16970f, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x14, 0x80, 0x1, 0x0, 0x3, {[@nop, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "393a3de3d00002000000000000bb15ca"}, @generic={0x4, 0x10, "fd0382ded954b3b3ad2be00f4774"}, @fastopen={0x22, 0x4, "2d01"}, @mptcp=@synack={0x1e, 0x10, 0x6, 0x2, 0x2, 0x20000fd, 0x2}]}}}}}}}}, 0x0)

1m35.015051937s ago: executing program 6 (id=730):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1m35.014542101s ago: executing program 1 (id=731):
r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000003c0)={0xffffffffffffff66, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, 0x0)
r1 = memfd_create(0x0, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r1, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r2, &(0x7f0000000000)="93", 0xf5)

1m34.997490745s ago: executing program 2 (id=732):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x900)
dup3(r1, r0, 0x80000)
ioctl$TIOCGSERIAL(r0, 0x541e, 0x0)

1m33.177057275s ago: executing program 2 (id=733):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000000)={0x24, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000))
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @private0, 0x7, 0x83}, 0x80, 0x0}, 0x800)

1m32.620595956s ago: executing program 2 (id=734):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x1000000000, {0x7, 0x21, 0x0, 0x772d62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000001000500000000000400040000000000100002000000000020"], 0x24, 0x2)
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17e22, 0x40000, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m32.487782745s ago: executing program 3 (id=735):
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$tipc(0x1e, 0x5, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"766cace9c303653f121a2d892000", 0x0, 0x0, {0x1, 0x50000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x104, 0x6, 0x0, 0x400, 0xffffffffffffffff, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x7, 0x9, 0x7]})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

1m32.416464834s ago: executing program 1 (id=736):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b04, 0x0)

1m32.015600996s ago: executing program 2 (id=737):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x1, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x180000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0xffffffff, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x1, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100000, 0x8, 0x752, 0x93, 0x3, 0x0, 0x80000000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x0, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x3, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

1m31.472876713s ago: executing program 5 (id=738):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
listen(r0, 0x3)
ppoll(&(0x7f0000000180)=[{r0, 0x5210}], 0x1, 0x0, 0x0, 0x0)

1m31.036116636s ago: executing program 6 (id=739):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="6004"], 0x460}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)

1m30.329245216s ago: executing program 5 (id=740):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000002a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe}}}}}}, 0x0)

1m30.11656621s ago: executing program 1 (id=741):
unshare(0x20000400)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0)
r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0x20002f7})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffed6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m29.934575541s ago: executing program 1 (id=742):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20)
recvfrom$inet6(r4, &(0x7f0000000180)=""/67, 0x43, 0x142, 0x0, 0x0)

1m28.181650713s ago: executing program 3 (id=743):
mkdir(&(0x7f0000000400)='./file0\x00', 0xec)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002a40)='./file0\x00', 0x0, 0x0)
r1 = fanotify_init(0x0, 0x800)
fanotify_mark(r1, 0x1, 0x4800003a, r0, 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18)
utimensat(r2, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0)

1m28.047115698s ago: executing program 5 (id=744):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x95, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)="c09bd65a75b56b924573f105bd55ef2b455326e4af9f174c2609f3fb9f52493449d9348dc907fab1cb219c4338d1ef214d72554a7db767b6c4b74fc005f33cac1bad692af0fba16f6c77e25b6540fae461dd1e83d815a1c1cd6d9988b2bfb5c01369e75d3ac54670aaf21a2254894e4a313788cd939932e3390182ee9131fcd371b140d5cb11f0e60fc440b0a2eedfe1d9f6f34d3f0990f07a070147f65d6a0ab4d4f581e421cc38f05febcc49d294b7f2975b7a7db908324d64cfcd9307956f05f2dd7b23", 0xc5}], 0x1}}], 0x1, 0x1)
shutdown(r0, 0x0)
shutdown(r0, 0x1)

1m27.836247429s ago: executing program 3 (id=745):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20)

1m27.562400464s ago: executing program 5 (id=746):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000c37000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x5, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x48d, 0x0, 0x7f00000016}]})

1m26.45341922s ago: executing program 5 (id=747):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r2, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x0)

1m26.410948175s ago: executing program 6 (id=748):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1m10.948354696s ago: executing program 1 (id=749):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, &(0x7f0000000000)=""/193, 0xc1)
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
readv(r1, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

57.348801034s ago: executing program 5 (id=750):
recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x100, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x1, 0x91cc, 0x2000000, 0x10000, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe})
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000001480))

38.579275374s ago: executing program 34 (id=748):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

17.959072056s ago: executing program 35 (id=737):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
accept4(r0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x1, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x180000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0xffffffff, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x1, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100000, 0x8, 0x752, 0x93, 0x3, 0x0, 0x80000000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x0, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x3, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

0s ago: executing program 36 (id=745):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts.
[   82.621625][ T5824] cgroup: Unknown subsys name 'net'
[   82.880696][ T5824] cgroup: Unknown subsys name 'cpuset'
[   82.926866][ T5824] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.592313][ T5824] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.949094][   T31] cfg80211: failed to load regulatory.db
[   87.282271][   T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.284370][   T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.285369][   T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.288535][   T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.290817][   T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.438242][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.442823][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.446482][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.467217][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.468000][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.502003][   T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.520848][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.521972][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.523869][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.524595][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.541149][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.546403][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.585539][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.598432][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.603034][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.607722][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.608647][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.609824][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.610632][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.612608][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.362809][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   88.493128][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   88.675074][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   88.711618][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   89.027777][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   89.204070][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.205811][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.218579][ T5835] bridge_slave_0: entered allmulticast mode
[   89.221505][ T5835] bridge_slave_0: entered promiscuous mode
[   89.337140][ T5849] Bluetooth: hci0: command tx timeout
[   89.349957][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.350090][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.350269][ T5835] bridge_slave_1: entered allmulticast mode
[   89.353205][ T5835] bridge_slave_1: entered promiscuous mode
[   89.497052][ T5849] Bluetooth: hci1: command tx timeout
[   89.656818][ T5837] Bluetooth: hci4: command tx timeout
[   89.657034][ T5849] Bluetooth: hci3: command tx timeout
[   89.662981][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.663163][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.663351][ T5840] bridge_slave_0: entered allmulticast mode
[   89.684844][ T5840] bridge_slave_0: entered promiscuous mode
[   89.736199][ T5849] Bluetooth: hci2: command tx timeout
[   89.898524][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.898633][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.899079][ T5840] bridge_slave_1: entered allmulticast mode
[   89.901882][ T5840] bridge_slave_1: entered promiscuous mode
[   90.009783][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.187951][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.188087][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.188333][ T5841] bridge_slave_0: entered allmulticast mode
[   90.191143][ T5841] bridge_slave_0: entered promiscuous mode
[   90.219215][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.219757][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.219903][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.220080][ T5844] bridge_slave_0: entered allmulticast mode
[   90.222744][ T5844] bridge_slave_0: entered promiscuous mode
[   90.328821][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.328960][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.329158][ T5841] bridge_slave_1: entered allmulticast mode
[   90.331880][ T5841] bridge_slave_1: entered promiscuous mode
[   90.517622][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.517761][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.517934][ T5844] bridge_slave_1: entered allmulticast mode
[   90.520644][ T5844] bridge_slave_1: entered promiscuous mode
[   90.584226][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.873022][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.938784][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.938993][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.939224][ T5843] bridge_slave_0: entered allmulticast mode
[   90.941922][ T5843] bridge_slave_0: entered promiscuous mode
[   90.945237][ T5835] team0: Port device team_slave_0 added
[   91.111361][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.111811][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.111960][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.112141][ T5843] bridge_slave_1: entered allmulticast mode
[   91.115880][ T5843] bridge_slave_1: entered promiscuous mode
[   91.120548][ T5835] team0: Port device team_slave_1 added
[   91.127675][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.194067][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.334467][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.341008][ T5840] team0: Port device team_slave_0 added
[   91.416172][ T5849] Bluetooth: hci0: command tx timeout
[   91.576160][ T5849] Bluetooth: hci1: command tx timeout
[   91.609196][ T5840] team0: Port device team_slave_1 added
[   91.672074][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.673304][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.673317][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.673342][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.736405][ T5837] Bluetooth: hci4: command tx timeout
[   91.736501][ T5849] Bluetooth: hci3: command tx timeout
[   91.816230][ T5849] Bluetooth: hci2: command tx timeout
[   92.030323][ T5841] team0: Port device team_slave_0 added
[   92.034608][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.035250][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.035259][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.035274][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.043431][ T5844] team0: Port device team_slave_0 added
[   92.170967][ T5841] team0: Port device team_slave_1 added
[   92.249886][ T5844] team0: Port device team_slave_1 added
[   92.251070][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.251084][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.251109][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.499282][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.499298][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.499313][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   92.600742][ T5843] team0: Port device team_slave_0 added
[   92.704796][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.704808][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.704822][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.820672][ T5843] team0: Port device team_slave_1 added
[   92.910214][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.910229][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.910254][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.915138][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   92.915153][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   92.915178][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.100706][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.100717][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.100731][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.127540][ T5835] hsr_slave_0: entered promiscuous mode
[   93.129000][ T5835] hsr_slave_1: entered promiscuous mode
[   93.284762][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.284774][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.284787][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.394588][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.394605][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.394639][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.408560][ T5840] hsr_slave_0: entered promiscuous mode
[   93.410060][ T5840] hsr_slave_1: entered promiscuous mode
[   93.411185][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   93.411295][ T5840] Cannot create hsr debugfs directory
[   93.496132][ T5849] Bluetooth: hci0: command tx timeout
[   93.657531][ T5849] Bluetooth: hci1: command tx timeout
[   93.816476][ T5849] Bluetooth: hci3: command tx timeout
[   93.816510][ T5849] Bluetooth: hci4: command tx timeout
[   93.862234][ T5841] hsr_slave_0: entered promiscuous mode
[   93.863599][ T5841] hsr_slave_1: entered promiscuous mode
[   93.864282][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   93.864298][ T5841] Cannot create hsr debugfs directory
[   93.897327][ T5837] Bluetooth: hci2: command tx timeout
[   93.952815][ T5844] hsr_slave_0: entered promiscuous mode
[   93.953653][ T5844] hsr_slave_1: entered promiscuous mode
[   93.954235][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   93.954256][ T5844] Cannot create hsr debugfs directory
[   94.535567][ T5843] hsr_slave_0: entered promiscuous mode
[   94.537255][ T5843] hsr_slave_1: entered promiscuous mode
[   94.538175][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   94.538198][ T5843] Cannot create hsr debugfs directory
[   95.576460][ T5837] Bluetooth: hci0: command tx timeout
[   95.736224][ T5837] Bluetooth: hci1: command tx timeout
[   95.779749][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   95.816430][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   95.855885][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   95.897510][ T5837] Bluetooth: hci4: command tx timeout
[   95.897541][ T5837] Bluetooth: hci3: command tx timeout
[   95.930545][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   95.976329][ T5849] Bluetooth: hci2: command tx timeout
[   96.061089][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.109998][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.155591][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.212365][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.387039][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.435537][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.464815][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.532392][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.687200][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.750590][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.774461][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.835971][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.895743][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.043568][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.102696][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.134578][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   97.144672][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.184838][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.251831][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.252431][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.305938][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.306247][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.370785][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.502090][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   97.549775][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.550006][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.555615][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.615752][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.615880][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.714375][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   97.793094][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.793293][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.824193][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.866739][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.866892][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.985271][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   97.991668][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.060339][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.062777][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.149427][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.149573][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.181395][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   98.209592][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.273658][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.273878][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.333410][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.334296][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.630133][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.738614][ T5835] veth0_vlan: entered promiscuous mode
[   98.794288][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.852031][ T5835] veth1_vlan: entered promiscuous mode
[   99.061474][ T5840] veth0_vlan: entered promiscuous mode
[   99.137301][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.158831][ T5840] veth1_vlan: entered promiscuous mode
[   99.187782][ T5835] veth0_macvtap: entered promiscuous mode
[   99.232131][ T5841] veth0_vlan: entered promiscuous mode
[   99.235417][ T5835] veth1_macvtap: entered promiscuous mode
[   99.303481][ T5841] veth1_vlan: entered promiscuous mode
[   99.347440][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.388924][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.408594][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.421613][ T5840] veth0_macvtap: entered promiscuous mode
[   99.464125][ T4346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.488030][ T5840] veth1_macvtap: entered promiscuous mode
[   99.494685][ T4346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.515636][ T5844] veth0_vlan: entered promiscuous mode
[   99.529499][ T4346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.535395][ T4346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.637202][ T5841] veth0_macvtap: entered promiscuous mode
[   99.641698][ T5844] veth1_vlan: entered promiscuous mode
[   99.732979][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.733677][ T5841] veth1_macvtap: entered promiscuous mode
[   99.837420][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.922914][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.962702][   T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.975360][   T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.018952][   T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.035770][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.054211][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.054237][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.155049][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.195507][ T5844] veth0_macvtap: entered promiscuous mode
[  100.279362][   T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.279448][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.279461][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.284305][ T5844] veth1_macvtap: entered promiscuous mode
[  100.285357][   T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.406223][   T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.426925][   T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.574112][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.574132][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.681615][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.841461][ T5843] veth0_vlan: entered promiscuous mode
[  100.845350][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.864275][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.864294][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.949574][ T5953] Bluetooth: MGMT ver 1.23
[  101.004154][ T4466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.032255][ T4466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.032345][ T4466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.032359][ T4466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.034343][ T4466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.050066][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.067630][ T5843] veth1_vlan: entered promiscuous mode
[  101.647509][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.647529][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.583775][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.583796][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.752066][ T5843] veth0_macvtap: entered promiscuous mode
[  103.933409][ T5843] veth1_macvtap: entered promiscuous mode
[  103.935946][  T981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.935963][  T981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.134907][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.278739][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.334993][  T981] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.349586][  T981] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.349941][  T981] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.350196][  T981] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.467505][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.333274][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.880178][    C1] vkms_vblank_simulate: vblank timer overrun
[  105.950761][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.052190][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.163105][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.363036][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.544523][    C1] vkms_vblank_simulate: vblank timer overrun
[  106.800272][ T5849] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  106.800323][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  106.800347][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  106.800361][ T5849] Workqueue: hci4 hci_rx_work
[  106.800448][ T5849] Call Trace:
[  106.800457][ T5849]  <TASK>
[  106.800466][ T5849]  dump_stack_lvl+0x189/0x250
[  106.800513][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.800544][ T5849]  ? __pfx__printk+0x10/0x10
[  106.800573][ T5849]  ? kernfs_path_from_node+0x2c/0x280
[  106.800599][ T5849]  ? kernfs_path_from_node+0x243/0x280
[  106.800619][ T5849]  ? kernfs_path_from_node+0x2c/0x280
[  106.800643][ T5849]  sysfs_create_dir_ns+0x259/0x280
[  106.800675][ T5849]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  106.800706][ T5849]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  106.800739][ T5849]  ? rt_spin_unlock+0x65/0x80
[  106.800767][ T5849]  kobject_add_internal+0x5a5/0xb50
[  106.800796][ T5849]  kobject_add+0x155/0x220
[  106.800822][ T5849]  ? __pfx_kobject_add+0x10/0x10
[  106.800849][ T5849]  ? get_device_parent+0x370/0x3a0
[  106.800873][ T5849]  device_add+0x408/0xb50
[  106.800897][ T5849]  hci_conn_add_sysfs+0xd5/0x1e0
[  106.800923][ T5849]  le_conn_complete_evt+0xc3a/0x1220
[  106.800962][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.800998][ T5849]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  106.801030][ T5849]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  106.801061][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[  106.801103][ T5849]  ? skb_pull_data+0xfb/0x200
[  106.801131][ T5849]  hci_le_conn_complete_evt+0x187/0x450
[  106.801169][ T5849]  hci_event_packet+0x78f/0x1200
[  106.801198][ T5849]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  106.801235][ T5849]  ? __pfx_hci_event_packet+0x10/0x10
[  106.801259][ T5849]  ? __pfx_migrate_enable+0x10/0x10
[  106.801305][ T5849]  ? hci_send_to_monitor+0xe2/0x570
[  106.801340][ T5849]  hci_rx_work+0x46a/0xe80
[  106.801374][ T5849]  ? process_scheduled_works+0x9ef/0x17b0
[  106.801410][ T5849]  process_scheduled_works+0xade/0x17b0
[  106.801470][ T5849]  ? __pfx_process_scheduled_works+0x10/0x10
[  106.801515][ T5849]  worker_thread+0x8a0/0xda0
[  106.801550][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  106.801591][ T5849]  ? __kthread_parkme+0x7b/0x200
[  106.801635][ T5849]  kthread+0x70e/0x8a0
[  106.801668][ T5849]  ? __pfx_worker_thread+0x10/0x10
[  106.801694][ T5849]  ? __pfx_kthread+0x10/0x10
[  106.801729][ T5849]  ? __pfx_kthread+0x10/0x10
[  106.801762][ T5849]  ret_from_fork+0x3f9/0x770
[  106.801797][ T5849]  ? __pfx_ret_from_fork+0x10/0x10
[  106.801834][ T5849]  ? __switch_to_asm+0x39/0x70
[  106.801854][ T5849]  ? __switch_to_asm+0x33/0x70
[  106.801873][ T5849]  ? __pfx_kthread+0x10/0x10
[  106.801904][ T5849]  ret_from_fork_asm+0x1a/0x30
[  106.801942][ T5849]  </TASK>
[  106.801979][ T5849] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  106.802019][ T5849] Bluetooth: hci4: failed to register connection device
[  106.936022][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  107.188947][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.188967][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.594243][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.594263][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.952655][    C1] vkms_vblank_simulate: vblank timer overrun
[  108.598762][    C1] vkms_vblank_simulate: vblank timer overrun
[  108.741427][    C1] vkms_vblank_simulate: vblank timer overrun
[  108.864093][ T5837] Bluetooth: hci4: command tx timeout
[  109.220343][   T37] audit: type=1800 audit(1757553794.452:2): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.16" name="file0" dev="fuse" ino=2 res=0 errno=0
[  109.246062][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.246105][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.246138][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.246178][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.246212][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.246245][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.246278][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.246311][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.246344][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.764766][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.882704][    C0] vkms_vblank_simulate: vblank timer overrun
[  111.276222][ T6025] netlink: 'syz.2.19': attribute type 2 has an invalid length.
[  111.995563][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.256669][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.292013][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.455471][    C0] vkms_vblank_simulate: vblank timer overrun
[  112.613097][    C0] vkms_vblank_simulate: vblank timer overrun
[  113.038575][    C0] vkms_vblank_simulate: vblank timer overrun
[  113.239372][    C0] vkms_vblank_simulate: vblank timer overrun
[  113.350324][    C0] vkms_vblank_simulate: vblank timer overrun
[  113.450816][    C0] vkms_vblank_simulate: vblank timer overrun
[  113.676719][ T6039] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  113.766407][    C0] vkms_vblank_simulate: vblank timer overrun
[  114.032233][    C0] vkms_vblank_simulate: vblank timer overrun
[  128.547107][ T6121] Zero length message leads to an empty skb
[  130.123756][ T6134] =======================================================
[  130.123756][ T6134] WARNING: The mand mount option has been deprecated and
[  130.123756][ T6134]          and is ignored by this kernel. Remove the mand
[  130.123756][ T6134]          option from the mount to silence this warning.
[  130.123756][ T6134] =======================================================
[  135.980542][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  135.980641][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  143.313340][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  143.315526][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  143.322999][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  143.497476][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  143.498285][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  145.812535][ T6191] qnx6: unable to read the first superblock
[  145.822515][ T5849] Bluetooth: hci5: command tx timeout
[  146.418257][ T6191] lo speed is unknown, defaulting to 1000
[  146.418374][ T6191] lo speed is unknown, defaulting to 1000
[  146.422153][ T6191] lo speed is unknown, defaulting to 1000
[  146.430415][ T6191] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  146.444148][ T6191] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  146.528183][ T6191] lo speed is unknown, defaulting to 1000
[  146.531335][ T6191] lo speed is unknown, defaulting to 1000
[  146.534356][ T6191] lo speed is unknown, defaulting to 1000
[  146.537306][ T6191] lo speed is unknown, defaulting to 1000
[  146.540304][ T6191] lo speed is unknown, defaulting to 1000
[  146.543193][ T6191] lo speed is unknown, defaulting to 1000
[  148.046934][ T5849] Bluetooth: hci5: command tx timeout
[  148.991624][ T6210] random: crng reseeded on system resumption
[  150.866740][ T5849] Bluetooth: hci5: command tx timeout
[  152.963990][ T5849] Bluetooth: hci5: command tx timeout
[  154.473857][ T6227] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  154.838642][    T9] libceph: connect (1)[c::]:6789 error -101
[  154.839350][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  155.467641][ T6226] ceph: No mds server is up or the cluster is laggy
[  155.519129][    T9] libceph: connect (1)[c::]:6789 error -101
[  155.519342][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  162.115848][    C1] vkms_vblank_simulate: vblank timer overrun
[  162.321806][    C1] vkms_vblank_simulate: vblank timer overrun
[  162.358751][    C1] vkms_vblank_simulate: vblank timer overrun
[  162.792687][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.071477][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.146880][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.511696][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.758966][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.974208][    C1] vkms_vblank_simulate: vblank timer overrun
[  165.198480][    C1] vkms_vblank_simulate: vblank timer overrun
[  165.207627][    T9] libceph: connect (1)[b::]:6789 error -101
[  165.207842][    T9] libceph: mon0 (1)[b::]:6789 connect error
[  165.556311][    T9] libceph: connect (1)[b::]:6789 error -101
[  165.556544][    T9] libceph: mon0 (1)[b::]:6789 connect error
[  165.772715][ T6294] ceph: No mds server is up or the cluster is laggy
[  166.473878][    C1] vkms_vblank_simulate: vblank timer overrun
[  166.478707][ T6307] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  166.632776][ T6293] ceph: No mds server is up or the cluster is laggy
[  166.634851][ T5910] libceph: connect (1)[c::]:6789 error -101
[  166.635070][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  166.636612][    T9] libceph: connect (1)[b::]:6789 error -101
[  166.636826][    T9] libceph: mon0 (1)[b::]:6789 connect error
[  166.769727][   T83] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.950859][ T6169] chnl_net:caif_netlink_parms(): no params data found
[  170.090543][ T5836] hid-generic 0000:0003:0001.0001: item fetching failed at offset 0/2
[  170.097955][ T5836] hid-generic 0000:0003:0001.0001: probe with driver hid-generic failed with error -22
[  171.203573][ T6331] Process accounting resumed
[  172.598689][ T6342] process 'syz.1.86' launched '/dev/fd/5' with NULL argv: empty string added
[  176.260502][ T6348] Driver unsupported XDP return value 0 on prog  (id 28) dev N/A, expect packet loss!
[  177.533989][    C1] vkms_vblank_simulate: vblank timer overrun
[  177.943099][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.122300][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.145665][   T83] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.311113][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.510568][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.753117][    C1] vkms_vblank_simulate: vblank timer overrun
[  179.607568][    C1] vkms_vblank_simulate: vblank timer overrun
[  179.769475][    C1] vkms_vblank_simulate: vblank timer overrun
[  179.864367][ T5910] libceph: connect (1)[c::]:6789 error -101
[  179.866934][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  179.909229][ T5910] libceph: connect (1)[c::]:6789 error -101
[  179.909447][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  179.978790][ T5910] libceph: connect (1)[b::]:6789 error -101
[  179.978934][ T5910] libceph: mon0 (1)[b::]:6789 connect error
[  179.983967][ T5910] libceph: connect (1)[b::]:6789 error -101
[  179.984103][ T5910] libceph: mon0 (1)[b::]:6789 connect error
[  180.082285][ T6365] ceph: No mds server is up or the cluster is laggy
[  180.173519][ T5910] libceph: connect (1)[c::]:6789 error -101
[  180.173743][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  180.196188][ T6363] ceph: No mds server is up or the cluster is laggy
[  180.385545][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.540398][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.976652][    C1] vkms_vblank_simulate: vblank timer overrun
[  181.256595][    C1] vkms_vblank_simulate: vblank timer overrun
[  181.282274][ T5910] libceph: connect (1)[b::]:6789 error -101
[  181.282525][ T5910] libceph: mon0 (1)[b::]:6789 connect error
[  181.910397][   T44] libceph: connect (1)[c::]:6789 error -101
[  181.910610][   T44] libceph: mon0 (1)[c::]:6789 connect error
[  182.316768][    C1] vkms_vblank_simulate: vblank timer overrun
[  185.772123][ T6399] syz.2.99 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  188.710542][ T6424] netlink: 68 bytes leftover after parsing attributes in process `syz.2.103'.
[  189.563681][   T83] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.086327][ T6434] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  191.138876][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.139021][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.139289][ T6169] bridge_slave_0: entered allmulticast mode
[  191.142194][ T6169] bridge_slave_0: entered promiscuous mode
[  191.895138][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.895581][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.930195][ T6169] bridge_slave_1: entered allmulticast mode
[  192.075390][ T6169] bridge_slave_1: entered promiscuous mode
[  192.568862][ T6037] libceph: connect (1)[c::]:6789 error -101
[  192.670719][ T6037] libceph: mon0 (1)[c::]:6789 connect error
[  192.725728][    T9] libceph: connect (1)[b::]:6789 error -101
[  192.733280][    T9] libceph: mon0 (1)[b::]:6789 connect error
[  193.067495][    T9] libceph: connect (1)[c::]:6789 error -101
[  193.067722][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  193.068263][    T9] libceph: connect (1)[b::]:6789 error -101
[  193.102417][    T9] libceph: mon0 (1)[b::]:6789 connect error
[  193.216772][ T6450] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  193.217101][ T6450] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  193.283998][ T6442] ceph: No mds server is up or the cluster is laggy
[  193.568878][ T6445] ceph: No mds server is up or the cluster is laggy
[  193.613558][ T5836] libceph: connect (1)[b::]:6789 error -101
[  193.613778][ T5836] libceph: mon0 (1)[b::]:6789 connect error
[  193.614179][ T5836] libceph: connect (1)[c::]:6789 error -101
[  193.614374][ T5836] libceph: mon0 (1)[c::]:6789 connect error
[  194.285722][    C0] vkms_vblank_simulate: vblank timer overrun
[  194.541538][    C0] vkms_vblank_simulate: vblank timer overrun
[  195.276833][   T83] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.854470][   T37] audit: type=1326 audit(1757553880.883:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6456 comm="syz.2.111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb99ffaeba9 code=0x0
[  196.015325][    C0] vkms_vblank_simulate: vblank timer overrun
[  196.019633][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  196.019713][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  196.115660][ T6462] tty tty25: ldisc open failed (-12), clearing slot 24
[  196.119172][ T6451] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  196.173224][    C0] vkms_vblank_simulate: vblank timer overrun
[  196.194842][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.217029][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.792379][    C0] vkms_vblank_simulate: vblank timer overrun
[  199.090088][ T6451] usb 4-1: device not accepting address 2, error -71
[  199.319904][ T6479] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  201.170202][ T6481] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  201.171450][ T6481] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  201.351502][ T6481] vhci_hcd vhci_hcd.0: Device attached
[  201.897322][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  201.936252][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  201.942642][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  201.944022][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  201.959372][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  202.046114][ T6037] usb 39-1: new high-speed USB device number 2 using vhci_hcd
[  202.291675][ T6503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.060469][ T6490] vhci_hcd: connection reset by peer
[  205.075107][  T981] vhci_hcd: stop threads
[  205.085268][  T981] vhci_hcd: release socket
[  205.176160][ T5837] Bluetooth: hci3: command tx timeout
[  205.289680][  T981] vhci_hcd: disconnect device
[  205.306791][   T83] bridge_slave_1: left allmulticast mode
[  205.307344][   T83] bridge_slave_1: left promiscuous mode
[  205.334495][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.420030][   T83] bridge_slave_0: left allmulticast mode
[  206.420063][   T83] bridge_slave_0: left promiscuous mode
[  206.420391][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.306729][ T5837] Bluetooth: hci3: command tx timeout
[  208.234869][ T6037] vhci_hcd: vhci_device speed not set
[  209.336231][ T5837] Bluetooth: hci3: command tx timeout
[  210.946670][ T6547] tipc: Can't bind to reserved service type 0
[  211.416063][ T5848] Bluetooth: hci3: command tx timeout
[  212.744182][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  212.759442][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  212.760633][ T5848] Bluetooth: hci4: command 0x0406 tx timeout
[  212.761797][ T5848] Bluetooth: hci2: command 0x0406 tx timeout
[  218.083026][ T6615] vivid-000: disconnect
[  218.549990][ T6601] vivid-000: reconnect
[  219.472963][ T6622] Bluetooth: MGMT ver 1.23
[  225.781596][ T1820] libceph: connect (1)[c::]:6789 error -101
[  225.781896][ T1820] libceph: mon0 (1)[c::]:6789 connect error
[  225.873450][ T1820] libceph: connect (1)[b::]:6789 error -101
[  225.873658][ T1820] libceph: mon0 (1)[b::]:6789 connect error
[  225.874197][ T1820] libceph: connect (1)[b::]:6789 error -101
[  225.874391][ T1820] libceph: mon0 (1)[b::]:6789 connect error
[  226.036539][ T1820] libceph: connect (1)[c::]:6789 error -101
[  226.036758][ T1820] libceph: mon0 (1)[c::]:6789 connect error
[  226.059640][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.126595][ T1820] libceph: connect (1)[b::]:6789 error -101
[  226.126816][ T1820] libceph: mon0 (1)[b::]:6789 connect error
[  226.154082][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.191832][   T83] bond0 (unregistering): Released all slaves
[  226.547275][ T1820] libceph: connect (1)[c::]:6789 error -101
[  226.547417][ T1820] libceph: mon0 (1)[c::]:6789 connect error
[  226.605237][ T6659] ceph: No mds server is up or the cluster is laggy
[  226.605660][ T6662] ceph: No mds server is up or the cluster is laggy
[  226.636538][ T6004] libceph: connect (1)[b::]:6789 error -101
[  226.636760][ T6004] libceph: mon0 (1)[b::]:6789 connect error
[  227.356216][ T6673] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes
[  229.357193][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'.
[  229.357425][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'.
[  230.944923][ T6685] evm: overlay not supported
[  231.399864][ T6682] bridge0: port 3(vlan2) entered blocking state
[  231.399950][ T6682] bridge0: port 3(vlan2) entered disabled state
[  231.401893][ T6682] vlan2: entered allmulticast mode
[  231.401912][ T6682] bridge0: entered allmulticast mode
[  231.571803][ T6691] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  231.573991][ T6691] FAT-fs (loop5): unable to read boot sector
[  232.247272][ T6682] vlan2: left allmulticast mode
[  232.247295][ T6682] bridge0: left allmulticast mode
[  232.531207][ T6494] lo speed is unknown, defaulting to 1000
[  232.698229][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  232.891386][    T9] usb 3-1: Using ep0 maxpacket: 16
[  233.114475][    T9] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  233.114545][    T9] usb 3-1: config 0 has no interface number 0
[  233.139058][    T9] usb 3-1: config 0 interface 48 has no altsetting 0
[  233.185728][    T9] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  233.185758][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.185864][    T9] usb 3-1: Product: syz
[  233.187667][    T9] usb 3-1: Manufacturer: syz
[  233.187733][    T9] usb 3-1: SerialNumber: syz
[  233.665286][    T9] usb 3-1: config 0 descriptor??
[  235.272482][ T1820] usb 3-1: USB disconnect, device number 2
[  242.836746][ T6735] loop2: detected capacity change from 0 to 7
[  242.850841][ T6735]  loop2:
[  242.850885][ T6735] loop2: partition table partially beyond EOD, truncated
[  244.293182][ T6758] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  249.071193][   T83] hsr_slave_0: left promiscuous mode
[  249.146063][   T83] hsr_slave_1: left promiscuous mode
[  249.147487][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.147540][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.202856][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.202877][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.225844][   T37] audit: type=1326 audit(1757553934.453:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6787 comm="syz.2.180" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb99ffaeba9 code=0x0
[  249.285881][   T83] veth1_macvtap: left promiscuous mode
[  249.286327][   T83] veth0_macvtap: left promiscuous mode
[  249.286539][   T83] veth1_vlan: left promiscuous mode
[  249.286730][   T83] veth0_vlan: left promiscuous mode
[  249.426118][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  249.649890][ T5909] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  249.649911][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.668365][ T5909] usb 2-1: config 0 descriptor??
[  250.176109][ T5909] ath6kl: Unsupported hardware version: 0x0
[  250.220225][ T5909] ath6kl: Failed to init ath6kl core: -22
[  250.221295][ T5909] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22
[  250.458085][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  250.487087][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  250.490159][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  250.492678][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  250.495769][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  252.928783][ T5849] Bluetooth: hci2: command tx timeout
[  253.269592][ T5909] usb 2-1: USB disconnect, device number 2
[  254.728375][ T6818] blktrace: Concurrent blktraces are not allowed on loop9
[  256.256359][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  256.256436][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  256.278694][ T5849] Bluetooth: hci2: command tx timeout
[  257.567336][   T83] team0 (unregistering): Port device team_slave_1 removed
[  258.340864][ T5849] Bluetooth: hci2: command tx timeout
[  258.362568][ T6834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.188'.
[  259.006725][   T44] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  259.496068][   T44] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  259.496097][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.496116][   T44] usb 3-1: Product: syz
[  259.496130][   T44] usb 3-1: Manufacturer: syz
[  259.496142][   T44] usb 3-1: SerialNumber: syz
[  259.500691][   T83] team0 (unregistering): Port device team_slave_0 removed
[  259.903860][   T44] usb 3-1: config 0 descriptor??
[  260.468428][ T5837] Bluetooth: hci2: command tx timeout
[  260.524779][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  260.544471][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  260.545700][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  260.562280][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  260.563704][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  260.746098][   T44] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  260.891825][ T6846] fuse: Bad value for 'fd'
[  262.558200][   T44] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  262.571303][   T44] usb 3-1: USB disconnect, device number 3
[  262.616202][ T5155] Bluetooth: hci5: command tx timeout
[  264.696321][ T5155] Bluetooth: hci5: command tx timeout
[  265.412991][ T6840] lo speed is unknown, defaulting to 1000
[  267.097509][ T5155] Bluetooth: hci5: command tx timeout
[  267.448231][ T6796] lo speed is unknown, defaulting to 1000
[  269.245464][ T5155] Bluetooth: hci5: command tx timeout
[  274.200222][ T6903] binder_alloc: 6900: binder_alloc_buf size 12280 failed, no address space
[  274.200287][ T6903] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184)
[  275.706701][ T6953] binder: 6951:6953 ioctl 541b 200000000140 returned -22
[  276.350803][ T6840] chnl_net:caif_netlink_parms(): no params data found
[  278.539681][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.209'.
[  280.706206][ T6796] chnl_net:caif_netlink_parms(): no params data found
[  282.001598][ T5155] Bluetooth: hci1: unexpected event for opcode 0x2006
[  282.446663][ T6037] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  283.236027][ T6037] usb 3-1: Using ep0 maxpacket: 16
[  283.238487][ T6037] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.238513][ T6037] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  283.243744][ T6037] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  283.243774][ T6037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.243794][ T6037] usb 3-1: Product: syz
[  283.243809][ T6037] usb 3-1: Manufacturer: syz
[  283.243823][ T6037] usb 3-1: SerialNumber: syz
[  283.666632][ T5155] Bluetooth: hci0: Malformed Event: 0x2f
[  283.773883][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'.
[  283.773989][ T7032] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  284.477435][ T6037] usb 3-1: skipping empty audio interface (v1)
[  284.565247][ T5155] Bluetooth: hci4: unexpected event for opcode 0x203b
[  284.622178][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.622318][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.622552][ T6840] bridge_slave_0: entered allmulticast mode
[  284.631031][ T6840] bridge_slave_0: entered promiscuous mode
[  284.692417][ T6037] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  284.725489][ T6037] usb 3-1: USB disconnect, device number 4
[  284.795266][ T6513] udevd[6513]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  285.188211][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.188355][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.188594][ T6840] bridge_slave_1: entered allmulticast mode
[  285.196964][ T6840] bridge_slave_1: entered promiscuous mode
[  286.776092][ T6037] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  287.778330][ T6037] usb 3-1: config 1 interface 0 has no altsetting 0
[  287.783483][ T6037] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  287.783512][ T6037] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.783531][ T6037] usb 3-1: Product: syz
[  287.783545][ T6037] usb 3-1: Manufacturer: syz
[  287.783560][ T6037] usb 3-1: SerialNumber: syz
[  287.870981][ T5155] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  288.115662][ T5155] Bluetooth: hci4: Malformed LE Event: 0x0d
[  288.315664][   T83] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.659341][ T6037] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  288.688448][   T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  288.721432][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.726122][   T44] usb 2-1: Using ep0 maxpacket: 8
[  289.730898][   T44] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  289.730926][   T44] usb 2-1: config 0 has no interface number 0
[  289.730975][   T44] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  289.730998][   T44] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  289.731021][   T44] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  289.731045][   T44] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  289.731066][   T44] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  289.731106][   T44] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  289.731128][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.839481][   T44] usb 2-1: config 0 descriptor??
[  289.891720][   T44] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[  289.897417][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.910330][ T6796] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.910484][ T6796] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.910736][ T6796] bridge_slave_0: entered allmulticast mode
[  289.916769][ T6796] bridge_slave_0: entered promiscuous mode
[  290.072599][   T44] usb 2-1: USB disconnect, device number 3
[  290.114006][   T44] ldusb 2-1:0.55: LD USB Device #1 now disconnected
[  290.146994][ T5929] usb 3-1: USB disconnect, device number 5
[  290.286663][ T7051] usblp0: removed
[  290.376434][   T83] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.451774][ T6796] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.451916][ T6796] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.452155][ T6796] bridge_slave_1: entered allmulticast mode
[  290.476212][ T6796] bridge_slave_1: entered promiscuous mode
[  291.137831][ T6840] team0: Port device team_slave_0 added
[  291.786072][ T6037] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  292.132018][ T6037] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  292.132050][ T6037] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  292.132104][ T6037] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  292.132147][ T6037] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  292.132170][ T6037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.445074][ T6037] usb 3-1: config 0 descriptor??
[  292.773435][ T6037] usb-storage 3-1:0.0: USB Mass Storage device detected
[  292.801751][ T5155] Bluetooth: hci0: unexpected event for opcode 0x1405
[  292.918266][ T6037] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  293.141437][ T6037] usb 3-1: USB disconnect, device number 6
[  293.250493][   T83] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.312740][ T6840] team0: Port device team_slave_1 added
[  293.327129][ T6796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.349981][ T7129] capability: warning: `syz.3.260' uses deprecated v2 capabilities in a way that may be insecure
[  293.519705][ T6796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.758593][   T83] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.872144][ T7155] overlayfs: missing 'lowerdir'
[  300.078071][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.078089][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  300.078112][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.369281][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.369307][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.369332][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.413284][ T6796] team0: Port device team_slave_0 added
[  301.657745][ T6796] team0: Port device team_slave_1 added
[  304.185002][ T6840] hsr_slave_0: entered promiscuous mode
[  304.200508][ T6840] hsr_slave_1: entered promiscuous mode
[  304.202750][ T6840] debugfs: 'hsr0' already exists in 'hsr'
[  304.202777][ T6840] Cannot create hsr debugfs directory
[  304.211442][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.211459][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.211483][ T6796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.422249][ T6796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.422265][ T6796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.422288][ T6796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.624385][ T6796] hsr_slave_0: entered promiscuous mode
[  308.641572][ T6796] hsr_slave_1: entered promiscuous mode
[  308.642555][ T6796] debugfs: 'hsr0' already exists in 'hsr'
[  308.642578][ T6796] Cannot create hsr debugfs directory
[  309.168828][   T83] bridge_slave_1: left allmulticast mode
[  309.168863][   T83] bridge_slave_1: left promiscuous mode
[  309.169114][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.388622][   T83] bridge_slave_0: left allmulticast mode
[  309.388657][   T83] bridge_slave_0: left promiscuous mode
[  309.388963][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.703602][ T5155] Bluetooth: hci4: unexpected event for opcode 0x2027
[  309.715798][   T83] bridge_slave_1: left allmulticast mode
[  309.715832][   T83] bridge_slave_1: left promiscuous mode
[  309.756363][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.834037][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  309.856317][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  309.864894][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  309.880278][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  309.886900][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  309.941626][   T83] bridge_slave_0: left allmulticast mode
[  309.941657][   T83] bridge_slave_0: left promiscuous mode
[  309.941905][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.196538][ T5849] Bluetooth: hci0: unexpected event for opcode 0x0404
[  312.029646][   T83] bond0 (unregistering): Released all slaves
[  312.056421][ T5849] Bluetooth: hci3: command tx timeout
[  312.809547][   T37] audit: type=1326 audit(1757553997.062:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  312.814221][   T37] audit: type=1326 audit(1757553997.062:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  312.855175][   T37] audit: type=1326 audit(1757553997.102:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  312.855343][   T37] audit: type=1326 audit(1757553997.102:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  312.855442][   T37] audit: type=1326 audit(1757553997.102:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.2.313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  314.043419][ T7292] syz.1.312 (7292) used greatest stack depth: 18872 bytes left
[  314.136201][ T5849] Bluetooth: hci3: command tx timeout
[  316.216157][ T5849] Bluetooth: hci3: command tx timeout
[  316.988894][ T5849] Bluetooth: hci1: unexpected event for opcode 0x0402
[  317.435737][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  317.435830][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  318.296141][ T5849] Bluetooth: hci3: command tx timeout
[  318.458520][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.516966][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.560903][   T83] bond0 (unregistering): Released all slaves
[  318.757024][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.846954][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.938773][   T83] bond0 (unregistering): Released all slaves
[  320.769086][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  320.787052][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  320.789015][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  320.810003][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  320.819507][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  320.969907][ T7255] lo speed is unknown, defaulting to 1000
[  321.097179][ T7350] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  321.134150][ T7341] lo speed is unknown, defaulting to 1000
[  321.478818][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[  321.825521][ T7355] veth1: entered promiscuous mode
[  321.926183][ T7355] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  322.174430][   T37] audit: type=1326 audit(1757554006.422:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  322.174480][   T37] audit: type=1326 audit(1757554006.422:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  322.198294][   T37] audit: type=1326 audit(1757554006.452:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  322.198346][   T37] audit: type=1326 audit(1757554006.452:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  322.198385][   T37] audit: type=1326 audit(1757554006.452:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.2.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99ffaeba9 code=0x7ffc0000
[  322.946996][ T5849] Bluetooth: hci2: command tx timeout
[  324.706143][ T6037] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  324.859333][ T6037] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  324.859361][ T6037] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  324.859380][ T6037] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  324.859436][ T6037] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  324.859462][ T6037] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  324.861806][ T6037] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  324.861835][ T6037] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  324.861855][ T6037] usb 2-1: Product: syz
[  324.861869][ T6037] usb 2-1: Manufacturer: syz
[  324.959878][ T6037] cdc_wdm 2-1:1.0: skipping garbage
[  324.959898][ T6037] cdc_wdm 2-1:1.0: skipping garbage
[  324.984004][ T6037] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  324.984036][ T6037] cdc_wdm 2-1:1.0: Unknown control protocol
[  325.016082][ T5849] Bluetooth: hci2: command tx timeout
[  326.642723][   T83] hsr_slave_0: left promiscuous mode
[  326.796140][   T83] hsr_slave_1: left promiscuous mode
[  326.797167][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.797194][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.881299][   T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.881331][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.106311][ T5155] Bluetooth: hci2: command tx timeout
[  327.112413][   T83] veth1_macvtap: left promiscuous mode
[  327.113592][   T83] veth0_macvtap: left promiscuous mode
[  327.118074][   T83] veth1_vlan: left promiscuous mode
[  327.120447][   T83] veth0_vlan: left promiscuous mode
[  327.420074][ T6578] usb 2-1: USB disconnect, device number 4
[  329.186080][ T5155] Bluetooth: hci2: command tx timeout
[  332.216603][   T83] team0 (unregistering): Port device team_slave_1 removed
[  332.423362][   T83] team0 (unregistering): Port device team_slave_0 removed
[  336.013036][ T7255] chnl_net:caif_netlink_parms(): no params data found
[  336.639085][ T7341] chnl_net:caif_netlink_parms(): no params data found
[  337.465709][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state
[  337.473838][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.474095][ T7255] bridge_slave_0: entered allmulticast mode
[  337.503818][ T7255] bridge_slave_0: entered promiscuous mode
[  337.520618][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.520727][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.520914][ T7255] bridge_slave_1: entered allmulticast mode
[  337.545946][ T7255] bridge_slave_1: entered promiscuous mode
[  338.429470][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.429737][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.429882][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.430077][ T7341] bridge_slave_0: entered allmulticast mode
[  338.481721][ T7341] bridge_slave_0: entered promiscuous mode
[  338.500427][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.501409][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.501628][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.501819][ T7341] bridge_slave_1: entered allmulticast mode
[  338.519339][ T7341] bridge_slave_1: entered promiscuous mode
[  339.159654][ T7255] team0: Port device team_slave_0 added
[  339.163806][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.223395][ T7255] team0: Port device team_slave_1 added
[  339.246311][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.770282][ T5917] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  339.869560][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.869576][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.869601][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.928488][ T5917] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  339.928520][ T5917] usb 2-1: config 0 interface 0 has no altsetting 0
[  339.935358][ T5917] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  339.935387][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.935407][ T5917] usb 2-1: Product: syz
[  339.935421][ T5917] usb 2-1: Manufacturer: syz
[  339.935435][ T5917] usb 2-1: SerialNumber: syz
[  339.958342][ T5917] usb 2-1: config 0 descriptor??
[  340.018724][ T5917] usb 2-1: selecting invalid altsetting 0
[  340.083410][ T7341] team0: Port device team_slave_0 added
[  340.088580][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.088595][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.088620][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.109730][ T7341] team0: Port device team_slave_1 added
[  340.476001][ T5917] usb 2-1: USB disconnect, device number 5
[  340.676576][ T7606] udevd[7606]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  340.689974][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.689989][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.690013][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.079851][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.079867][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.079892][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.360416][ T7626] netlink: 32 bytes leftover after parsing attributes in process `syz.1.425'.
[  341.360440][ T7626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.425'.
[  341.427686][ T7255] hsr_slave_0: entered promiscuous mode
[  341.430583][ T7255] hsr_slave_1: entered promiscuous mode
[  341.434327][ T7255] debugfs: 'hsr0' already exists in 'hsr'
[  341.434351][ T7255] Cannot create hsr debugfs directory
[  343.218554][   T83] bridge_slave_1: left allmulticast mode
[  343.218586][   T83] bridge_slave_1: left promiscuous mode
[  343.218832][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.297687][   T83] bridge_slave_0: left allmulticast mode
[  343.297720][   T83] bridge_slave_0: left promiscuous mode
[  343.298007][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.560580][   T83] bridge_slave_1: left allmulticast mode
[  343.560613][   T83] bridge_slave_1: left promiscuous mode
[  343.560864][   T83] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.650236][   T83] bridge_slave_0: left allmulticast mode
[  343.650269][   T83] bridge_slave_0: left promiscuous mode
[  343.651154][   T83] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.026779][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  344.295222][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  344.325701][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.437'.
[  344.401501][   T83] bond0 (unregistering): Released all slaves
[  344.709002][   T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  344.989923][   T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  345.120235][   T83] bond0 (unregistering): Released all slaves
[  345.430445][ T7341] hsr_slave_0: entered promiscuous mode
[  345.431659][ T7341] hsr_slave_1: entered promiscuous mode
[  345.432549][ T7341] debugfs: 'hsr0' already exists in 'hsr'
[  345.432570][ T7341] Cannot create hsr debugfs directory
[  346.556275][   T83] hsr_slave_0: left promiscuous mode
[  346.596141][   T83] hsr_slave_1: left promiscuous mode
[  346.597034][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.669214][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.757704][   T83] hsr_slave_0: left promiscuous mode
[  346.877083][   T83] hsr_slave_1: left promiscuous mode
[  346.877986][   T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.907018][   T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.024418][ T7704] capability: warning: `syz.3.454' uses 32-bit capabilities (legacy support in use)
[  347.559214][ T7718] netlink: 'syz.3.461': attribute type 1 has an invalid length.
[  347.676111][ T5917] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  347.852984][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.853063][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  347.853091][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  347.853115][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  347.854849][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  347.854877][ T5917] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  347.854898][ T5917] usb 2-1: Manufacturer: syz
[  347.927828][ T5917] usb 2-1: config 0 descriptor??
[  348.168652][   T83] team0 (unregistering): Port device team_slave_1 removed
[  348.266223][ T5917] rc_core: IR keymap rc-hauppauge not found
[  348.266244][ T5917] Registered IR keymap rc-empty
[  348.272198][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.289464][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.324813][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  348.331808][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5
[  348.345619][   T83] team0 (unregistering): Port device team_slave_0 removed
[  348.398116][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.416528][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.446634][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.476512][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.508892][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.540076][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.556590][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.586450][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.616752][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.636489][ T5917] mceusb 2-1:0.0: Error: mce write urb status = -71
[  348.671658][ T5917] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  348.671682][ T5917] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  348.712596][ T5917] usb 2-1: USB disconnect, device number 6
[  349.309738][   T83] team0 (unregistering): Port device team_slave_1 removed
[  349.443589][   T83] team0 (unregistering): Port device team_slave_0 removed
[  350.806115][   T44] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  350.958970][   T44] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  350.959003][   T44] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.959026][   T44] usb 2-1: config 0 interface 0 has no altsetting 0
[  350.959058][   T44] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  350.959082][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.031457][   T44] usb 2-1: config 0 descriptor??
[  351.531010][ T7255] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  351.679621][   T44] lenovo 0003:17EF:60EE.0002: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0
[  351.691373][ T7255] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  351.754489][   T44] lenovo 0003:17EF:60EE.0002: Failed to switch middle button: -71
[  351.776660][   T44] lenovo 0003:17EF:60EE.0002: Fn-lock setting failed: -71
[  351.790319][   T44] lenovo 0003:17EF:60EE.0002: Sensitivity setting failed: -71
[  351.936063][   T44] usb 2-1: USB disconnect, device number 7
[  351.989148][ T7255] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  352.033957][ T7755] fido_id[7755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  352.086182][ T7255] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  352.454160][   T37] audit: type=1326 audit(1757554036.702:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e8b7eba9 code=0x7ffc0000
[  352.505662][   T37] audit: type=1326 audit(1757554036.702:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e8b7eba9 code=0x7ffc0000
[  352.531191][   T37] audit: type=1326 audit(1757554036.752:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f22e8b7eba9 code=0x7ffc0000
[  352.531242][   T37] audit: type=1326 audit(1757554036.782:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e8b7eba9 code=0x7ffc0000
[  352.535773][   T37] audit: type=1326 audit(1757554036.782:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f22e8b7eba9 code=0x7ffc0000
[  352.535822][   T37] audit: type=1326 audit(1757554036.782:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7770 comm="syz.1.474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22e8b7eba9 code=0x7ffc0000
[  352.584055][ T7341] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  352.718180][ T7341] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  352.824607][ T7341] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  352.968645][ T7341] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  353.922627][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.063453][ T7255] 8021q: adding VLAN 0 to HW filter on device team0
[  354.124622][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.125343][ T6323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.221413][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.221558][ T6323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.314220][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0
[  354.465078][ T7341] 8021q: adding VLAN 0 to HW filter on device team0
[  354.507631][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.507947][ T6323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.561242][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.561467][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.786076][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  355.824190][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.936144][    T9] usb 3-1: Using ep0 maxpacket: 8
[  355.938505][    T9] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  355.938530][    T9] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[  355.938550][    T9] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[  355.938572][    T9] usb 3-1: config 250 has no interface number 0
[  355.938618][    T9] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  355.938646][    T9] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  355.938671][    T9] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  355.938694][    T9] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  355.938721][    T9] usb 3-1: config 250 interface 228 has no altsetting 0
[  355.941217][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  355.941243][    T9] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  355.941264][    T9] usb 3-1: Product: syz
[  355.941278][    T9] usb 3-1: SerialNumber: syz
[  356.091255][    T9] hub 3-1:250.228: bad descriptor, ignoring hub
[  356.091296][    T9] hub 3-1:250.228: probe with driver hub failed with error -5
[  356.366586][    T9] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  356.374655][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.848112][    C0] usblp0: nonzero read bulk status received: -71
[  356.907906][ T6051] usb 3-1: USB disconnect, device number 7
[  357.012888][ T6051] usblp0: removed
[  357.202463][ T7255] veth0_vlan: entered promiscuous mode
[  357.221283][ T7255] veth1_vlan: entered promiscuous mode
[  357.342437][ T7255] veth0_macvtap: entered promiscuous mode
[  357.409303][ T7255] veth1_macvtap: entered promiscuous mode
[  357.574654][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  357.638188][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  357.749296][   T83] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.766357][   T83] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.773943][ T7341] veth0_vlan: entered promiscuous mode
[  357.811846][   T83] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.839456][   T83] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  357.959350][ T7341] veth1_vlan: entered promiscuous mode
[  358.470959][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.470978][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.523312][ T7341] veth0_macvtap: entered promiscuous mode
[  358.561753][ T7341] veth1_macvtap: entered promiscuous mode
[  358.650862][ T6323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.650881][ T6323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.726646][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.755597][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.795487][ T4346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.808343][ T6324] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.810566][ T6324] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.810610][ T6324] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.618010][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.618029][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.771467][ T6323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  359.771479][ T6323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.928028][   T37] audit: type=1326 audit(1757554044.182:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7893 comm="syz.6.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  359.928275][   T37] audit: type=1326 audit(1757554044.182:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7893 comm="syz.6.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  359.997572][   T37] audit: type=1326 audit(1757554044.232:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7893 comm="syz.6.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  360.041514][   T37] audit: type=1326 audit(1757554044.252:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7893 comm="syz.6.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  360.075333][   T37] audit: type=1326 audit(1757554044.322:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7893 comm="syz.6.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  361.026114][ T5917] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  362.017182][ T5917] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  362.017212][ T5917] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  362.017231][ T5917] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  362.017250][ T5917] usb 3-1: config 220 has no interface number 2
[  362.017333][ T5917] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  362.017361][ T5917] usb 3-1: config 220 interface 0 has no altsetting 0
[  362.017378][ T5917] usb 3-1: config 220 interface 76 has no altsetting 0
[  362.017394][ T5917] usb 3-1: config 220 interface 1 has no altsetting 0
[  362.096289][ T5917] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  362.096307][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.096317][ T5917] usb 3-1: Product: syz
[  362.096325][ T5917] usb 3-1: Manufacturer: syz
[  362.096332][ T5917] usb 3-1: SerialNumber: syz
[  362.327619][ T7918] syz.5.44 (7918) used greatest stack depth: 17800 bytes left
[  362.379450][ T5917] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  362.379499][ T5917] usb 3-1: No valid video chain found.
[  362.379652][ T5917] usb 3-1: selecting invalid altsetting 0
[  362.429487][ T5917] usb 3-1: selecting invalid altsetting 0
[  362.429526][ T5917] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  362.452622][ T5917] usb 3-1: USB disconnect, device number 8
[  364.370023][ T7956] program syz.2.525 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  367.543224][ T7984] bond0: option primary_reselect: invalid value (255)
[  371.046704][   T37] audit: type=1326 audit(1757554055.292:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8013 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  371.050034][   T37] audit: type=1326 audit(1757554055.302:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8013 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  371.053709][   T37] audit: type=1326 audit(1757554055.302:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8013 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  371.054014][   T37] audit: type=1326 audit(1757554055.302:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8013 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  371.156059][   T37] audit: type=1326 audit(1757554055.302:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8013 comm="syz.6.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  375.143950][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.573'.
[  376.876047][ T6004] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  377.032704][ T6004] usb 7-1: Using ep0 maxpacket: 8
[  377.050146][ T6004] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  377.050183][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.050204][ T6004] usb 7-1: Product: syz
[  377.050219][ T6004] usb 7-1: Manufacturer: syz
[  377.050233][ T6004] usb 7-1: SerialNumber: syz
[  377.178750][ T6004] usb 7-1: config 0 descriptor??
[  377.243224][ T6004] gspca_main: se401-2.14.0 probing 047d:5003
[  377.624676][ T6004] gspca_se401: ExtraFeatures: 24
[  377.860149][ T6004] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6
[  377.952959][ T6004] usb 7-1: USB disconnect, device number 2
[  378.314083][   T37] audit: type=1326 audit(1757554062.562:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8140 comm="syz.3.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85d793eba9 code=0x7fc00000
[  378.783116][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  378.783189][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  379.176126][ T5917] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  379.338495][ T5917] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  379.338605][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.338631][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.338653][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  379.340176][ T5917] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  379.340203][ T5917] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  379.340222][ T5917] usb 3-1: Manufacturer: syz
[  379.350508][ T5917] usb 3-1: config 0 descriptor??
[  379.866108][   T44] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  380.009592][ T5917] appleir 0003:05AC:8243.0003: item fetching failed at offset 0/1
[  380.010390][ T5917] appleir 0003:05AC:8243.0003: parse failed
[  380.010500][ T5917] appleir 0003:05AC:8243.0003: probe with driver appleir failed with error -22
[  380.042748][   T44] usb 2-1: Using ep0 maxpacket: 16
[  380.045433][   T44] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  380.045460][   T44] usb 2-1: config 0 has no interface number 0
[  380.045511][   T44] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  380.045537][   T44] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  380.091352][   T44] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  380.091380][   T44] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  380.091401][   T44] usb 2-1: Product: syz
[  380.091415][   T44] usb 2-1: SerialNumber: syz
[  380.131940][   T44] usb 2-1: config 0 descriptor??
[  380.139875][   T44] cm109 2-1:0.8: invalid payload size 0, expected 4
[  380.143277][   T44] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input7
[  380.271047][ T5917] usb 3-1: USB disconnect, device number 9
[  380.441209][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  380.670568][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.673199][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.673467][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.673714][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.674772][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.675029][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.675431][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.676542][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.676788][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.677096][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  380.678197][ T5917] usb 2-1: USB disconnect, device number 8
[  380.678286][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  380.766329][ T5917] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  382.096087][ T5917] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  382.256033][ T5917] usb 6-1: Using ep0 maxpacket: 8
[  382.258655][ T5917] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  382.258683][ T5917] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  382.258720][ T5917] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  382.258745][ T5917] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  382.258788][ T5917] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  382.258811][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.457104][ T5155] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  382.577169][ T5917] usb 6-1: GET_CAPABILITIES returned 0
[  382.577218][ T5917] usbtmc 6-1:16.0: can't read capabilities
[  382.792180][ T5917] usb 6-1: USB disconnect, device number 2
[  383.669264][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.669303][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.669327][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.669352][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.669377][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.669401][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.669425][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.669450][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.669475][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.669501][ T6051] hid-generic 0008:0006:0007.0004: unknown main item tag 0x0
[  383.807928][ T6051] hid-generic 0008:0006:0007.0004: hidraw0: <UNKNOWN> HID v0.0b Device [syz1] on syz1
[  384.130965][ T8268] fido_id[8268]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  386.087125][   T37] audit: type=1326 audit(1757554070.342:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76523ada9 code=0x7ffc0000
[  386.087178][   T37] audit: type=1326 audit(1757554070.342:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  386.087271][   T37] audit: type=1326 audit(1757554070.342:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  386.101839][   T37] audit: type=1326 audit(1757554070.352:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76523ada9 code=0x7ffc0000
[  386.102478][   T37] audit: type=1326 audit(1757554070.352:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76523ada9 code=0x7ffc0000
[  386.103720][   T37] audit: type=1326 audit(1757554070.352:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76523ada9 code=0x7ffc0000
[  386.109065][   T37] audit: type=1326 audit(1757554070.362:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76523ada9 code=0x7ffc0000
[  386.113079][   T37] audit: type=1326 audit(1757554070.362:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76523ada9 code=0x7ffc0000
[  386.113499][   T37] audit: type=1326 audit(1757554070.362:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76523ada9 code=0x7ffc0000
[  386.113847][   T37] audit: type=1326 audit(1757554070.362:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8293 comm="syz.6.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76523ada9 code=0x7ffc0000
[  390.366356][ T6004] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  390.520223][ T6004] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  390.520271][ T6004] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  390.520295][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.526757][ T6004] usb 7-1: config 0 descriptor??
[  390.527732][ T8335] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  390.616193][ T8339] netlink: 'syz.3.643': attribute type 9 has an invalid length.
[  390.947546][ T5929] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  391.041685][ T6004] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0
[  391.118540][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.118573][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.118596][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  391.118637][ T5929] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  391.118661][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.185501][ T5929] usb 3-1: config 0 descriptor??
[  391.221794][  T980] usb 7-1: USB disconnect, device number 3
[  392.183681][ T8351] fido_id[8351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  392.489621][ T5929] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  392.564671][ T5929] usb 3-1: USB disconnect, device number 10
[  393.045619][ T8370] fido_id[8370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  393.218760][ T6004] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  393.370821][ T6004] usb 7-1: Using ep0 maxpacket: 32
[  393.381936][ T6004] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  393.381967][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.393331][ T6004] usb 7-1: config 0 descriptor??
[  393.636017][ T6004] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  393.679628][ T6004] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  393.687522][ T6004] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  393.687611][ T6004] usb 7-1: media controller created
[  393.795107][   T37] kauditd_printk_skb: 43 callbacks suppressed
[  393.795123][   T37] audit: type=1400 audit(1757554078.032:85): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8382 comm="syz.2.660" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  393.899675][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  394.026028][   T37] audit: type=1400 audit(1757554078.272:86): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16 comm="ktimers/0" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  394.182969][ T5929] IPVS: starting estimator thread 0...
[  394.257419][   T37] audit: type=1400 audit(1757554078.512:87): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16 comm="ktimers/0" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  394.297136][ T8391] IPVS: using max 6 ests per chain, 14400 per kthread
[  394.502813][ T6004] az6027: usb out operation failed. (-71)
[  394.504153][ T6004] az6027: usb out operation failed. (-71)
[  394.504169][ T6004] stb0899_attach: Driver disabled by Kconfig
[  394.504177][ T6004] az6027: no front-end attached
[  394.504177][ T6004] 
[  394.505332][ T6004] az6027: usb out operation failed. (-71)
[  394.505359][ T6004] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  394.563247][ T6004] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8
[  394.584497][ T6004] dvb-usb: schedule remote query interval to 400 msecs.
[  394.584518][ T6004] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  394.649722][ T6004] usb 7-1: USB disconnect, device number 4
[  394.706776][   T37] audit: type=1400 audit(1757554078.962:88): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16 comm="ktimers/0" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  394.841153][ T8403] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  394.982667][ T6004] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  395.139355][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.668'.
[  395.232385][ T8413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'.
[  395.234549][ T8411] netlink: 'syz.6.671': attribute type 34 has an invalid length.
[  395.659912][   T37] audit: type=1400 audit(1757554079.912:89): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16 comm="ktimers/0" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  397.500002][   T37] audit: type=1400 audit(1757554081.752:90): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16 comm="ktimers/0" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  398.776743][ T5917] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  398.931635][   T37] audit: type=1326 audit(1757554083.182:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.6.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  398.931688][   T37] audit: type=1326 audit(1757554083.182:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.6.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  398.931732][   T37] audit: type=1326 audit(1757554083.182:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.6.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  398.931770][   T37] audit: type=1326 audit(1757554083.182:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.6.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  398.932995][   T37] audit: type=1326 audit(1757554083.182:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.6.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  398.933749][   T37] audit: type=1326 audit(1757554083.182:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.6.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  398.934271][   T37] audit: type=1326 audit(1757554083.182:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.6.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  398.935310][   T37] audit: type=1326 audit(1757554083.182:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8462 comm="syz.6.691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76529eba9 code=0x7ffc0000
[  398.962089][ T5917] usb 3-1: Using ep0 maxpacket: 8
[  399.013161][ T5917] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  399.013192][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  399.013217][ T5917] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  399.013241][ T5917] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  399.013284][ T5917] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  399.013308][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.400906][ T5917] usb 3-1: GET_CAPABILITIES returned 0
[  399.400953][ T5917] usbtmc 3-1:16.0: can't read capabilities
[  399.621569][ T5917] usb 3-1: USB disconnect, device number 11
[  401.096892][   T37] audit: type=1400 audit(1757554085.352:99): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16 comm="ktimers/0" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  401.776098][ T5917] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  402.078240][ T5917] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  402.078269][ T5917] usb 7-1: config 0 has no interface number 0
[  402.078322][ T5917] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  402.078346][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.148606][ T5917] usb 7-1: config 0 descriptor??
[  402.153208][ T5917] cp210x 7-1:0.1: cp210x converter detected
[  402.553161][ T5917] cp210x 7-1:0.1: failed to get vendor val 0x000e size 3: -32
[  402.820952][ T5917] usb 7-1: cp210x converter now attached to ttyUSB0
[  402.969662][ T1820] usb 7-1: USB disconnect, device number 5
[  403.010314][ T1820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  403.136020][  T980] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  403.170254][ T1820] cp210x 7-1:0.1: device disconnected
[  403.298766][  T980] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64
[  403.298801][  T980] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  403.298829][  T980] usb 6-1: config 0 interface 0 has no altsetting 0
[  403.298863][  T980] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  403.298886][  T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.355243][  T980] usb 6-1: config 0 descriptor??
[  403.357662][ T8543] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  403.825456][  T980] kye 0003:0458:5015.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  403.856648][  T980] kye 0003:0458:5015.0007: hidraw0: USB HID v1.03 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0
[  403.856690][  T980] kye 0003:0458:5015.0007: tablet-enabling feature report not found
[  403.856931][  T980] kye 0003:0458:5015.0007: tablet enabling failed
[  404.031161][  T980] usb 6-1: USB disconnect, device number 3
[  404.587908][ T8555] fido_id[8555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  405.139357][ T8559] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  405.866036][  T980] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  406.016007][  T980] usb 2-1: Using ep0 maxpacket: 8
[  406.065673][  T980] usb 2-1: config 0 has an invalid interface number: 186 but max is 0
[  406.065700][  T980] usb 2-1: config 0 has no interface number 0
[  406.104976][  T980] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  406.105008][  T980] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  406.105034][  T980] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  406.105061][  T980] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  406.187508][  T980] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  406.187539][  T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.187566][  T980] usb 2-1: Product: syz
[  406.187580][  T980] usb 2-1: Manufacturer: syz
[  406.187595][  T980] usb 2-1: SerialNumber: syz
[  406.308656][  T980] usb 2-1: config 0 descriptor??
[  406.724712][  T980] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  407.327015][   T44] usb 2-1: USB disconnect, device number 9
[  408.228709][   T37] audit: type=1400 audit(1757554092.472:100): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16 comm="ktimers/0" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  408.395992][   T44] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  408.559587][   T44] usb 2-1: Using ep0 maxpacket: 8
[  408.562381][   T44] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  408.562438][   T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  408.562461][   T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  408.562486][   T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  408.562509][   T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  408.562551][   T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  408.562574][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.011883][   T44] usb 2-1: usb_control_msg returned -32
[  409.011936][   T44] usbtmc 2-1:16.0: can't read capabilities
[  409.485335][ T8582] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  409.696086][   T44] usb 2-1: USB disconnect, device number 10
[  415.784726][ T8607] sctp: failed to load transform for md5: -2
[  423.002305][   T37] audit: type=1400 audit(1757554107.202:101): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16 comm="ktimers/0" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  436.342895][    C0] sched: DL replenish lagged too much
[  439.437170][ T5849] Bluetooth: hci3: command 0x0406 tx timeout
[  448.540704][   T59] Bluetooth: hci2: command 0x0406 tx timeout
[  451.849286][   T37] audit: type=1400 audit(1757554136.062:102): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=16 comm="ktimers/0" saddr=172.20.20.170 src=16385 daddr=172.20.20.170 dest=59110 netif=lo
[  457.818964][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  457.842515][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  520.623005][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  520.631258][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  564.919479][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  564.934148][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  616.232491][   T38] INFO: task kworker/0:8:8588 blocked for more than 143 seconds.
[  616.232516][   T38]       Not[  616.232516][   T38]       Not tainted syzkaller #0
[  616.232526][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  616.232539][   T38] task:kworker/0:8     state:D stack:21912 pid:8588  tgid:8588  ppid:2      task_flags:0x4208060 flags:0x00004000
[  616.232589][   T38] Workqueue: events switchdev_deferred_process_work
[  616.232623][   T38] Call Trace:
[  616.232630][   T38]  <TASK>
[  616.232645][   T38]  __schedule+0x16f3/0x4c20
[  616.232700][   T38]  ? __pfx___schedule+0x10/0x10
[  616.232753][   T38]  rt_mutex_schedule+0x77/0xf0
[  616.232772][   T38]  rt_mutex_slowlock_block+0x5ba/0x6d0
[  616.232810][   T38]  ? rt_mutex_slowlock_block+0x351/0x6d0
[  616.232837][   T38]  rt_mutex_slowlock+0x2b1/0x6e0
[  616.232862][   T38]  ? rt_mutex_slowlock+0x1c9/0x6e0
[  616.232892][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  616.232927][   T38]  ? switchdev_deferred_process_work+0xe/0x20
[  616.232954][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[  616.232983][   T38]  ? switchdev_deferred_process_work+0xe/0x20
[  616.233000][   T38]  mutex_lock_nested+0x16a/0x1d0
[  616.233021][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[  616.233047][   T38]  ? process_scheduled_works+0x9ef/0x17b0
[  616.233072][   T38]  switchdev_deferred_process_work+0xe/0x20
[  616.233091][   T38]  process_scheduled_works+0xade/0x17b0
[  616.233145][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[  616.233187][   T38]  worker_thread+0x8a0/0xda0
[  616.233239][   T38]  kthread+0x70e/0x8a0
[  616.233271][   T38]  ? __pfx_worker_thread+0x10/0x10
[  616.233293][   T38]  ? __pfx_kthread+0x10/0x10
[  616.233326][   T38]  ? __pfx_kthread+0x10/0x10
[  616.233354][   T38]  ret_from_fork+0x3f9/0x770
[  616.233382][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  616.233413][   T38]  ? __switch_to_asm+0x39/0x70
[  616.233430][   T38]  ? __switch_to_asm+0x33/0x70
[  616.233447][   T38]  ? __pfx_kthread+0x10/0x10
[  616.233474][   T38]  ret_from_fork_asm+0x1a/0x30
[  616.233510][   T38]  </TASK>
[  616.233534][   T38] 
[  616.233534][   T38] Showing all locks held in the system:
[  616.233543][   T38] 4 locks held by kworker/0:0/9:
[  616.233553][   T38]  #0: ffff88805c6d6538 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.233607][   T38]  #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.233669][   T38]  #2: ffff888035ba95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900
[  616.233717][   T38]  #3: ffff88805e651928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900
[  616.233765][   T38] 6 locks held by kworker/u8:0/12:
[  616.233776][   T38]  #0: ffff88805c88a138 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.233827][   T38]  #1: ffffc90000117bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.233875][   T38]  #2: ffff888035ba95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0
[  616.233926][   T38]  #3: ffff88805e651928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0
[  616.233972][   T38]  #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.234019][   T38]  #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.234067][   T38] 2 locks held by ksoftirqd/0/15:
[  616.234078][   T38] 2 locks held by rcuc/1/28:
[  616.234088][   T38]  #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.234134][   T38]  #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.234180][   T38] 7 locks held by ktimers/1/29:
[  616.234191][   T38] 2 locks held by ksoftirqd/1/30:
[  616.234201][   T38]  #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.234247][   T38]  #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.234295][   T38] 1 lock held by khungtaskd/38:
[  616.234305][   T38]  #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  616.234348][   T38] 4 locks held by kworker/1:1/44:
[  616.234359][   T38]  #0: ffff88805bf26d38 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.234410][   T38]  #1: ffffc90000b57bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.234470][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.234516][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.234564][   T38] 6 locks held by kworker/u8:3/49:
[  616.234574][   T38]  #0: ffff88814db01138 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.234622][   T38]  #1: ffffc90000bb7bc0 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.234670][   T38]  #2: ffff88804ca6c078 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x15e/0x680
[  616.234718][   T38]  #3: ffff8880391a4f90 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: __inet_bind+0x392/0xa90
[  616.234763][   T38]  #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.234809][   T38]  #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.234857][   T38] 5 locks held by kworker/u8:5/83:
[  616.234868][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.234922][   T38]  #1: ffffc900015afbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.234969][   T38]  #2: ffff88804ad90898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[  616.235018][   T38]  #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.235063][   T38]  #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.235114][   T38] 4 locks held by kworker/1:2/980:
[  616.235125][   T38]  #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.235172][   T38]  #1: ffffc900049dfbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.235220][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.235265][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.235312][   T38] 5 locks held by kworker/u8:6/981:
[  616.235322][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.235369][   T38]  #1: ffffc90004a47bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.235416][   T38]  #2: ffff88805f1b0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[  616.235465][   T38]  #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.235511][   T38]  #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.235559][   T38] 4 locks held by kworker/u8:7/1127:
[  616.235570][   T38]  #0: ffff888029bc9938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.235617][   T38]  #1: ffffc90004e57bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.235664][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.235709][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.235844][   T38] 5 locks held by kworker/u8:8/1150:
[  616.235856][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.235910][   T38]  #1: ffffc90004ec7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.235957][   T38]  #2: ffff8880589f0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[  616.236006][   T38]  #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.236052][   T38]  #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.236111][   T38] 6 locks held by kworker/u8:10/4346:
[  616.236122][   T38]  #0: ffff88803520f138 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.236168][   T38]  #1: ffffc9000f0dfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.236216][   T38]  #2: ffff8880359f95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0
[  616.236262][   T38]  #3: ffff88801a7203f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0
[  616.236306][   T38]  #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.236352][   T38]  #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.236400][   T38] 2 locks held by udevd/5206:
[  616.236411][   T38] 2 locks held by dhcpcd/5500:
[  616.236421][   T38]  #0: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  616.236467][   T38]  #1: ffff88801ced6858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390
[  616.236510][   T38] 5 locks held by dhcpcd/5501:
[  616.236520][   T38]  #0: ffffffff8da61750 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x131/0x4b0
[  616.236568][   T38]  #1: ffff8880232bf2d0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x12e/0x1a90
[  616.236618][   T38]  #2: ffff88803c450d90 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x217/0x1a90
[  616.236671][   T38]  #3: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  616.236715][   T38]  #4: ffff88801ced6858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390
[  616.236758][   T38] 2 locks held by getty/5598:
[  616.236768][   T38]  #0: ffff88823bf480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  616.236820][   T38]  #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410
[  616.236868][   T38] 1 lock held by syz-executor/5824:
[  616.236878][   T38] 6 locks held by kworker/0:2/5836:
[  616.236894][   T38]  #0: ffff88805e033138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.236947][   T38]  #1: ffffc90004b47bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.237012][   T38]  #2: ffff88803da3d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970
[  616.237060][   T38]  #3: ffff88805e6558b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970
[  616.237106][   T38]  #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.237153][   T38]  #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.237201][   T38] 4 locks held by kworker/u9:5/5849:
[  616.237212][   T38]  #0: ffff888038109938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.237259][   T38]  #1: ffffc90004c97bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.237307][   T38]  #2: ffff888062d10e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  616.237353][   T38]  #3: ffff888062d100a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  616.237405][   T38] 4 locks held by kworker/1:5/5910:
[  616.237416][   T38]  #0: ffff88805e033138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.237468][   T38]  #1: ffffc90005047bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.237532][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.237575][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.237625][   T38] 5 locks held by kworker/0:5/5929:
[  616.237636][   T38]  #0: ffff888019f07938 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.237688][   T38]  #1: ffffc90005217bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.237752][   T38]  #2: ffff88801a724388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0
[  616.237798][   T38]  #3: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  616.237843][   T38]  #4: ffff88801ced6858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390
[  616.237892][   T38] 2 locks held by kworker/0:7/6037:
[  616.237904][   T38] 4 locks held by kworker/1:7/6051:
[  616.237915][   T38] 5 locks held by kworker/u8:13/6055:
[  616.237925][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.237974][   T38]  #1: ffffc900055e7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.238021][   T38]  #2: ffff88804a5b0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[  616.238071][   T38]  #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.238117][   T38]  #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.238164][   T38] 5 locks held by kworker/u8:14/6105:
[  616.238175][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.238222][   T38]  #1: ffffc90005ad7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.238271][   T38]  #2: ffff8880357c0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470
[  616.238320][   T38]  #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.238366][   T38]  #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.238413][   T38] 7 locks held by kworker/u8:15/6106:
[  616.238424][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.238472][   T38]  #1: ffffc90005b57bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.238522][   T38]  #2: ffff88805e122300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[  616.238580][   T38]  #3: ffff8880601f0520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[  616.238631][   T38]  #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  616.238678][   T38]  #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.238724][   T38]  #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.238772][   T38] 3 locks held by kworker/u8:16/6286:
[  616.238783][   T38]  #0: ffff88814d706938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.238831][   T38]  #1: ffffc90005fd7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.238879][   T38]  #2: ffffffff8ecd3278 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  616.238933][   T38] 5 locks held by kworker/u8:17/6323:
[  616.238944][   T38] 4 locks held by kworker/u8:18/6324:
[  616.238955][   T38]  #0: ffff88814db20938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.239002][   T38]  #1: ffffc9000620fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.239051][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.239097][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.239145][   T38] 7 locks held by kworker/u8:19/6392:
[  616.239156][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.239204][   T38]  #1: ffffc90006337bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.239254][   T38]  #2: ffff88805dfdc300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[  616.239310][   T38]  #3: ffff88805e004920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[  616.239361][   T38]  #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  616.239407][   T38]  #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.239454][   T38]  #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.239502][   T38] 5 locks held by kworker/1:8/6451:
[  616.239513][   T38]  #0: ffff88805c34c138 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.239564][   T38]  #1: ffffc90008777bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.239627][   T38]  #2: ffff88805e0fae58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0
[  616.239674][   T38]  #3: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  616.239718][   T38]  #4: ffff88801ced6858 (&n->list_lock){+.+.}-{3:3}, at: __put_partials+0x5f/0x1a0
[  616.239760][   T38] 4 locks held by kworker/1:9/6578:
[  616.239770][   T38]  #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.239818][   T38]  #1: ffffc900043dfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.239864][   T38]  #2: ffffffff8ecd3278 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30
[  616.239921][   T38]  #3: ffff8880357c0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30
[  616.239972][   T38] 4 locks held by syz.2.180/6789:
[  616.239982][   T38]  #0: ffff88803ec8ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  616.240029][   T38]  #1: ffff88803ec8c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  616.240078][   T38]  #2: ffffffff8ee3ac38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  616.240122][   T38]  #3: ffff888027c0b358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[  616.240177][   T38] 6 locks held by kworker/u8:21/6943:
[  616.240188][   T38]  #0: ffff888029bcd938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.240241][   T38]  #1: ffffc90005117bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.240290][   T38]  #2: ffff8880295855f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0
[  616.240336][   T38]  #3: ffff88805e0f9928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0
[  616.240384][   T38]  #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.240430][   T38]  #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.240478][   T38] 7 locks held by kworker/u8:24/6949:
[  616.240489][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.240537][   T38]  #1: ffffc9000426fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.240586][   T38]  #2: ffff88805e4e2300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[  616.240642][   T38]  #3: ffff88803674f920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[  616.240693][   T38]  #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  616.240739][   T38]  #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.240785][   T38]  #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.240833][   T38] 7 locks held by kworker/u8:25/6950:
[  616.240843][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.240896][   T38]  #1: ffffc90003c9fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.240946][   T38]  #2: ffff88805dd2e300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[  616.240997][   T38]  #3: ffff88805dc5a120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[  616.241049][   T38]  #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  616.241095][   T38]  #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.241142][   T38]  #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.241189][   T38] 3 locks held by syz-executor/7255:
[  616.241200][   T38]  #0: ffff888027e10e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  616.241247][   T38]  #1: ffff888027e100a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  616.241297][   T38]  #2: ffffffff8ee3ac38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  616.241345][   T38] 3 locks held by syz.3.579/8114:
[  616.241356][   T38]  #0: ffff88803ec80e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[  616.241402][   T38]  #1: ffff88803ec800a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[  616.241451][   T38]  #2: ffffffff8ee3ac38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[  616.241494][   T38] 3 locks held by kworker/0:8/8588:
[  616.241505][   T38]  #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.241554][   T38]  #1: ffffc90004a2fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.241600][   T38]  #2: ffffffff8ecd3278 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  616.241645][   T38] 2 locks held by kworker/0:9/8593:
[  616.241656][   T38] 5 locks held by kworker/1:10/8622:
[  616.241666][   T38]  #0: ffff888019f07938 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.241719][   T38]  #1: ffffc90003fdfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.241783][   T38]  #2: ffff88801a726350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0
[  616.241831][   T38]  #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.241878][   T38]  #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.241931][   T38] 5 locks held by kworker/0:10/8623:
[  616.241942][   T38]  #0: ffff888031392538 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.241994][   T38]  #1: ffffc90005287bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.242057][   T38]  #2: ffff88801a720e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0
[  616.242104][   T38]  #3: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  616.242148][   T38]  #4: ffff88801ced6858 (&n->list_lock){+.+.}-{3:3}, at: __put_partials+0x5f/0x1a0
[  616.242190][   T38] 1 lock held by syz.5.750/8628:
[  616.242200][   T38]  #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  616.242245][   T38] 4 locks held by kworker/0:13/8630:
[  616.242256][   T38]  #0: ffff888039716938 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.242307][   T38]  #1: ffffc90004ba7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.242371][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.242417][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.242465][   T38] 2 locks held by kworker/0:14/8633:
[  616.242476][   T38]  #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.242523][   T38]  #1: ffffc90004ad7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.242571][   T38] 4 locks held by kworker/u8:26/8634:
[  616.242582][   T38]  #0: ffff88805df9b938 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.242633][   T38]  #1: ffffc90005557bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.242681][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.242728][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.242776][   T38] 5 locks held by syz-executor/8635:
[  616.242787][   T38]  #0: ffffffff8da61750 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x131/0x4b0
[  616.242835][   T38]  #1: ffff8880359f0250 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x12e/0x1a90
[  616.242890][   T38]  #2: ffff88803c453a90 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x217/0x1a90
[  616.242944][   T38]  #3: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  616.242989][   T38]  #4: ffff88801ced6858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390
[  616.243032][   T38] 4 locks held by kworker/1:11/8636:
[  616.243043][   T38]  #0: ffff888031392538 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.243095][   T38]  #1: ffffc90005547bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.243157][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.243204][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.243251][   T38] 4 locks held by kworker/1:12/8638:
[  616.243261][   T38]  #0: ffff888039716938 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.243313][   T38]  #1: ffffc90005517bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.243377][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.243424][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.243471][   T38] 4 locks held by kworker/u8:27/8639:
[  616.243482][   T38]  #0: ffff8880286ff938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.243534][   T38]  #1: ffffc90005507bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.243583][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.243629][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.243677][   T38] 2 locks held by kworker/1:13/8641:
[  616.243689][   T38] 7 locks held by kworker/u8:28/8642:
[  616.243699][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.243747][   T38]  #1: ffffc90005477bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.243796][   T38]  #2: ffff88805e34a300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[  616.243851][   T38]  #3: ffff88805e21bd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[  616.243909][   T38]  #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  616.243956][   T38]  #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.244003][   T38]  #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.244050][   T38] 6 locks held by kworker/1:14/8644:
[  616.244061][   T38]  #0: ffff88805e196d38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.244114][   T38]  #1: ffffc9000640fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.244182][   T38]  #2: ffff8880616995f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970
[  616.244229][   T38]  #3: ffff88805e0fc388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970
[  616.244276][   T38]  #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.244322][   T38]  #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.244371][   T38] 4 locks held by kworker/0:18/8645:
[  616.244381][   T38]  #0: ffff88805bf26d38 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.244433][   T38]  #1: ffffc900063bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.244496][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.244542][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.244589][   T38] 2 locks held by syz-executor/8646:
[  616.244600][   T38]  #0: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  616.244645][   T38]  #1: ffff88801ced6858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390
[  616.244688][   T38] 6 locks held by kworker/u8:29/8647:
[  616.244699][   T38]  #0: ffff8880602a2938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.244751][   T38]  #1: ffffc900061bfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.244799][   T38]  #2: ffff8880616455f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0
[  616.244847][   T38]  #3: ffff88801a727880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0
[  616.244921][   T38]  #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.244967][   T38]  #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.245015][   T38] 4 locks held by kworker/0:19/8648:
[  616.245025][   T38]  #0: ffff88805c34c138 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.245077][   T38]  #1: ffffc9000641fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.245141][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.245186][   T38]  #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.245234][   T38] 4 locks held by kworker/1:15/8649:
[  616.245245][   T38]  #0: ffff88805c34c538 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.245297][   T38]  #1: ffffc90004c57bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.245345][   T38]  #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.245392][   T38]  #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.245439][   T38] 1 lock held by dhcpcd/8650:
[  616.245450][   T38]  #0: ffff888021ed4350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  616.245499][   T38] 3 locks held by kworker/1:16/8651:
[  616.245510][   T38] 3 locks held by udevd/8652:
[  616.245520][   T38]  #0: ffffffff8e0b07b0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x1e3/0x4b0
[  616.245566][   T38]  #1: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  616.245611][   T38]  #2: ffff88801ced6858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390
[  616.245655][   T38] 3 locks held by syz-executor/8653:
[  616.245664][   T38]  #0: ffff88803c450250 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0
[  616.245713][   T38]  #1: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  616.742354][   T38]  #2: ffff88801ced6858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390
[  616.742417][   T38] 7 locks held by kworker/u8:30/8654:
[  616.742429][   T38]  #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  616.742480][   T38]  #1: ffffc900047cfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  616.742530][   T38]  #2: ffff88805bc8c300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0
[  616.742588][   T38]  #3: ffff8880249c4120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0
[  616.742640][   T38]  #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0
[  616.742686][   T38]  #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400
[  616.742733][   T38]  #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400
[  616.742782][   T38] 
[  616.742787][   T38] =============================================
[  616.742787][   T38] 
[  616.742811][   T38] NMI backtrace for cpu 0
[  616.742838][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  616.742860][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  616.742871][   T38] Call Trace:
[  616.742879][   T38]  <TASK>
[  616.742888][   T38]  dump_stack_lvl+0x189/0x250
[  616.742918][   T38]  ? __pfx_dump_stack_lvl+0x10/0x10
[  616.742944][   T38]  ? __pfx__printk+0x10/0x10
[  616.742977][   T38]  nmi_cpu_backtrace+0x39e/0x3d0
[  616.743003][   T38]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  616.743030][   T38]  ? __pfx__printk+0x10/0x10
[  616.743055][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  616.743080][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  616.743106][   T38]  watchdog+0xf93/0xfe0
[  616.743133][   T38]  ? watchdog+0x1de/0xfe0
[  616.743162][   T38]  kthread+0x70e/0x8a0
[  616.743191][   T38]  ? __pfx_watchdog+0x10/0x10
[  616.743213][   T38]  ? __pfx_kthread+0x10/0x10
[  616.743244][   T38]  ? __pfx_kthread+0x10/0x10
[  616.743272][   T38]  ret_from_fork+0x3f9/0x770
[  616.743299][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  616.743328][   T38]  ? __switch_to_asm+0x39/0x70
[  616.743345][   T38]  ? __switch_to_asm+0x33/0x70
[  616.743361][   T38]  ? __pfx_kthread+0x10/0x10
[  616.743389][   T38]  ret_from_fork_asm+0x1a/0x30
[  616.743422][   T38]  </TASK>
[  616.743429][   T38] Sending NMI from CPU 0 to CPUs 1:
[  616.743454][    C1] NMI backtrace for cpu 1
[  616.743468][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  616.743486][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  616.743502][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0xa0
[  616.743524][    C1] Code: 48 89 44 0a 20 e9 88 1d 3c 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 10 f6 91 65 44 8b 05 27 ad 37 10 41 81 e0 00 00
[  616.743537][    C1] RSP: 0018:ffffc90000a3ea40 EFLAGS: 00000202
[  616.743551][    C1] RAX: ffffffff8966fe8f RBX: 0000000080000000 RCX: ffffffff8966fe75
[  616.743564][    C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000002
[  616.743574][    C1] RBP: dffffc0000000000 R08: ffff88803580f543 R09: 1ffff11006b01ea8
[  616.743586][    C1] R10: dffffc0000000000 R11: ffffed1006b01ea9 R12: ffffc90000a3ecd3
[  616.743598][    C1] R13: 0000000000000000 R14: ffff88803580f500 R15: ffff88803580f540
[  616.743610][    C1] FS:  0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000
[  616.743623][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  616.743635][    C1] CR2: 00007ffde7b2eff8 CR3: 0000000034700000 CR4: 00000000003526f0
[  616.743650][    C1] Call Trace:
[  616.743656][    C1]  <TASK>
[  616.743662][    C1]  ip_route_output_key_hash_rcu+0x13ff/0x23e0
[  616.743686][    C1]  ? ip_route_output_key_hash+0xde/0x2e0
[  616.743704][    C1]  ip_route_output_key_hash+0x1b9/0x2e0
[  616.743720][    C1]  ? __lock_acquire+0xab9/0xd20
[  616.743740][    C1]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  616.743761][    C1]  ? ip_route_me_harder+0x4ad/0x1030
[  616.743783][    C1]  ip_route_output_flow+0x2a/0x150
[  616.743798][    C1]  ? ip_route_me_harder+0x6c0/0x1030
[  616.743816][    C1]  ip_route_me_harder+0x6d2/0x1030
[  616.743840][    C1]  ? __pfx_ip_route_me_harder+0x10/0x10
[  616.743872][    C1]  synproxy_send_tcp+0x359/0x6c0
[  616.743898][    C1]  synproxy_send_client_synack+0x8bb/0xe20
[  616.743927][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  616.743948][    C1]  ? nft_jhash_eval+0x988/0xa80
[  616.743969][    C1]  ? synproxy_pernet+0x45/0x270
[  616.743988][    C1]  nft_synproxy_eval_v4+0x36e/0x560
[  616.744008][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  616.744026][    C1]  ? nf_ip_checksum+0x13c/0x510
[  616.744045][    C1]  nft_synproxy_do_eval+0x345/0x570
[  616.744065][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  616.744087][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  616.744113][    C1]  nft_do_chain+0x409/0x1920
[  616.744135][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  616.744170][    C1]  nft_do_chain_inet+0x25d/0x340
[  616.744186][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  616.744202][    C1]  ? __lock_acquire+0xab9/0xd20
[  616.744226][    C1]  ? NF_HOOK+0x9a/0x3a0
[  616.744247][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  616.744263][    C1]  nf_hook_slow+0xc2/0x220
[  616.744286][    C1]  NF_HOOK+0x206/0x3a0
[  616.744306][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  616.744327][    C1]  ? NF_HOOK+0x9a/0x3a0
[  616.744345][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  616.744363][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  616.744385][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  616.744406][    C1]  ? skb_dst+0x4f/0xd0
[  616.744425][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  616.744447][    C1]  NF_HOOK+0x30c/0x3a0
[  616.744467][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  616.744486][    C1]  ? NF_HOOK+0x9a/0x3a0
[  616.744505][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  616.744525][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  616.744551][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  616.744569][    C1]  __netif_receive_skb+0x143/0x380
[  616.744588][    C1]  ? rt_spin_unlock+0x65/0x80
[  616.744608][    C1]  ? process_backlog+0x27b/0x900
[  616.744627][    C1]  process_backlog+0x31e/0x900
[  616.744653][    C1]  __napi_poll+0xb3/0x540
[  616.744673][    C1]  net_rx_action+0x707/0xe00
[  616.744692][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  616.744721][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  616.744758][    C1]  handle_softirqs+0x22f/0x710
[  616.744780][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  616.744804][    C1]  run_ktimerd+0xcf/0x190
[  616.744842][    C1]  ? __pfx_run_ktimerd+0x10/0x10
[  616.744860][    C1]  ? schedule+0x91/0x360
[  616.744883][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  616.744901][    C1]  smpboot_thread_fn+0x53f/0xa60
[  616.744920][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  616.744943][    C1]  kthread+0x70e/0x8a0
[  616.744965][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  616.744983][    C1]  ? __pfx_kthread+0x10/0x10
[  616.745006][    C1]  ? __pfx_kthread+0x10/0x10
[  616.745027][    C1]  ret_from_fork+0x3f9/0x770
[  616.745047][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  616.745069][    C1]  ? __switch_to_asm+0x39/0x70
[  616.745090][    C1]  ? __switch_to_asm+0x33/0x70
[  616.745104][    C1]  ? __pfx_kthread+0x10/0x10
[  616.745126][    C1]  ret_from_fork_asm+0x1a/0x30
[  616.745148][    C1]  </TASK>
[  616.745456][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  616.745471][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  616.745493][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  616.745503][   T38] Call Trace:
[  616.745510][   T38]  <TASK>
[  616.745518][   T38]  dump_stack_lvl+0x99/0x250
[  616.745544][   T38]  ? __asan_memcpy+0x40/0x70
[  616.745565][   T38]  ? __pfx_dump_stack_lvl+0x10/0x10
[  616.745591][   T38]  ? __pfx__printk+0x10/0x10
[  616.745623][   T38]  vpanic+0x281/0x750
[  616.745652][   T38]  ? __pfx_vpanic+0x10/0x10
[  616.745675][   T38]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  616.745695][   T38]  ? lockdep_hardirqs_on+0x9c/0x150
[  616.745733][   T38]  panic+0xb9/0xc0
[  616.745759][   T38]  ? __pfx_panic+0x10/0x10
[  616.745785][   T38]  ? irq_work_queue+0xc3/0x140
[  616.745812][   T38]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  616.745845][   T38]  watchdog+0xfd2/0xfe0
[  616.745874][   T38]  ? watchdog+0x1de/0xfe0
[  616.745903][   T38]  kthread+0x70e/0x8a0
[  616.745932][   T38]  ? __pfx_watchdog+0x10/0x10
[  616.745955][   T38]  ? __pfx_kthread+0x10/0x10
[  616.745986][   T38]  ? __pfx_kthread+0x10/0x10
[  616.746014][   T38]  ret_from_fork+0x3f9/0x770
[  616.746039][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  616.746069][   T38]  ? __switch_to_asm+0x39/0x70
[  616.746086][   T38]  ? __switch_to_asm+0x33/0x70
[  616.746103][   T38]  ? __pfx_kthread+0x10/0x10
[  616.746131][   T38]  ret_from_fork_asm+0x1a/0x30
[  616.746165][   T38]  </TASK>
[  616.746423][   T38] Kernel Offset: disabled