last executing test programs:

5.360991905s ago: executing program 3 (id=28):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x40045b17, 0x0)

3.073735098s ago: executing program 1 (id=42):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

2.847556519s ago: executing program 1 (id=44):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
listen(r0, 0x10)

2.62974893s ago: executing program 1 (id=46):
read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020)

2.419860719s ago: executing program 1 (id=47):
r0 = fanotify_init(0xf00, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x2c)
fanotify_mark(r0, 0x1, 0x800002b, r1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)

2.250154622s ago: executing program 1 (id=48):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x1, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0xcfe0e00906b7197}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
listen(r1, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)

2.101919906s ago: executing program 3 (id=49):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdc00, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000894)

1.887837311s ago: executing program 0 (id=51):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

1.855989362s ago: executing program 3 (id=52):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x88802)
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}})

1.658426157s ago: executing program 3 (id=54):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x98d0d9, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INIT(r0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

1.54923012s ago: executing program 0 (id=55):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
listen(r0, 0x10)

1.40842103s ago: executing program 0 (id=57):
fanotify_init(0xf00, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x2c)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)

1.338920337s ago: executing program 2 (id=58):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r1 = socket$netlink(0x10, 0x3, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=""/26, 0x1a}], 0x1, 0x0, 0x20001)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

1.317402203s ago: executing program 1 (id=59):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x40045b17, 0x0)

1.276685001s ago: executing program 3 (id=60):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'dummy0\x00', &(0x7f0000000140)=@ethtool_gfeatures={0x1f}})

1.27586591s ago: executing program 0 (id=61):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0)

1.114354317s ago: executing program 0 (id=62):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdc00, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000894)

871.454356ms ago: executing program 2 (id=63):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}})

822.349529ms ago: executing program 0 (id=64):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0)

575.942612ms ago: executing program 2 (id=65):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
listen(r0, 0x10)

410.182046ms ago: executing program 2 (id=66):
read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020}, 0x2020)

289.207072ms ago: executing program 2 (id=67):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc0}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x80)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

256.666358ms ago: executing program 2 (id=68):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x1411, 0x1, 0x0, 0x1, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0xcfe0e00906b7197}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
listen(r1, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0)

0s ago: executing program 3 (id=69):
r0 = socket$inet(0x2, 0x3, 0x30)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x5)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts.
[  345.352720][ T5639] cgroup: Unknown subsys name 'net'
[  345.602778][ T5639] cgroup: Unknown subsys name 'cpuset'
[  345.648888][ T5639] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  347.575363][ T5639] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  351.166855][ T5656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  351.187216][ T5656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  351.200897][ T5656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  351.202667][ T5656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  351.227421][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  351.233965][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  351.234351][ T4927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  351.237308][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  351.241451][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  351.242214][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  351.351579][ T4927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  351.368952][ T5663] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  351.372751][ T5663] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  351.375521][ T5663] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  351.376876][ T5663] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  351.390272][ T5660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  351.436189][ T5660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  351.441314][ T5660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  351.459153][ T5660] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  351.463414][ T5660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  353.409375][ T5663] Bluetooth: hci1: command tx timeout
[  353.409383][ T5660] Bluetooth: hci0: command tx timeout
[  353.490859][ T5660] Bluetooth: hci2: command tx timeout
[  353.521697][ T5652] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.522952][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.523153][ T5652] bridge_slave_0: entered allmulticast mode
[  353.526054][ T5652] bridge_slave_0: entered promiscuous mode
[  353.577377][ T5652] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.577756][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.578420][ T5660] Bluetooth: hci3: command tx timeout
[  353.588533][ T5652] bridge_slave_1: entered allmulticast mode
[  353.592157][ T5652] bridge_slave_1: entered promiscuous mode
[  353.662416][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.662629][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.662816][ T5659] bridge_slave_0: entered allmulticast mode
[  353.667074][ T5659] bridge_slave_0: entered promiscuous mode
[  353.729160][ T5659] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.729452][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.731663][ T5659] bridge_slave_1: entered allmulticast mode
[  353.733770][ T5659] bridge_slave_1: entered promiscuous mode
[  353.735750][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.735951][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.736117][ T5661] bridge_slave_0: entered allmulticast mode
[  353.738755][ T5661] bridge_slave_0: entered promiscuous mode
[  353.761055][ T5652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.812695][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.812921][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.813089][ T5661] bridge_slave_1: entered allmulticast mode
[  353.815230][ T5661] bridge_slave_1: entered promiscuous mode
[  353.823776][ T5652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.824260][ T5651] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.824579][ T5651] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.824822][ T5651] bridge_slave_0: entered allmulticast mode
[  353.829535][ T5651] bridge_slave_0: entered promiscuous mode
[  353.921891][ T5651] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.922122][ T5651] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.922305][ T5651] bridge_slave_1: entered allmulticast mode
[  353.924424][ T5651] bridge_slave_1: entered promiscuous mode
[  353.974524][ T5659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.029433][ T5659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.034387][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.039577][ T5652] team0: Port device team_slave_0 added
[  354.085036][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.089554][ T5652] team0: Port device team_slave_1 added
[  354.098551][ T5651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.156332][ T5651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.163178][ T5659] team0: Port device team_slave_0 added
[  354.216622][ T5659] team0: Port device team_slave_1 added
[  354.224312][ T5661] team0: Port device team_slave_0 added
[  354.226463][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.226474][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.226490][ T5652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.283551][ T5661] team0: Port device team_slave_1 added
[  354.285031][ T5652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.285042][ T5652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.285058][ T5652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.299428][ T5651] team0: Port device team_slave_0 added
[  354.362340][ T5651] team0: Port device team_slave_1 added
[  354.363881][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.363891][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.363908][ T5659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.426199][ T5659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.426218][ T5659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.426247][ T5659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.430751][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.430766][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.430790][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.480683][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.480699][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.480723][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.508798][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.508814][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.508839][ T5651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.575201][ T5651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.575219][ T5651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.575244][ T5651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.599107][ T5652] hsr_slave_0: entered promiscuous mode
[  354.602493][ T5652] hsr_slave_1: entered promiscuous mode
[  354.712789][ T5659] hsr_slave_0: entered promiscuous mode
[  354.714183][ T5659] hsr_slave_1: entered promiscuous mode
[  354.715440][ T5659] debugfs: 'hsr0' already exists in 'hsr'
[  354.715545][ T5659] Cannot create hsr debugfs directory
[  354.792598][ T5661] hsr_slave_0: entered promiscuous mode
[  354.794066][ T5661] hsr_slave_1: entered promiscuous mode
[  354.795268][ T5661] debugfs: 'hsr0' already exists in 'hsr'
[  354.795293][ T5661] Cannot create hsr debugfs directory
[  354.847621][ T5651] hsr_slave_0: entered promiscuous mode
[  354.850287][ T5651] hsr_slave_1: entered promiscuous mode
[  354.852024][ T5651] debugfs: 'hsr0' already exists in 'hsr'
[  354.852047][ T5651] Cannot create hsr debugfs directory
[  355.490237][ T5660] Bluetooth: hci0: command tx timeout
[  355.500055][ T5660] Bluetooth: hci1: command tx timeout
[  355.568136][ T5660] Bluetooth: hci2: command tx timeout
[  355.648224][ T5660] Bluetooth: hci3: command tx timeout
[  355.961415][ T5652] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  356.030310][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  356.049096][ T5652] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  356.083086][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  356.097204][ T5652] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  356.123903][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  356.146894][ T5652] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  356.175632][ T5652] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  356.286981][ T5661] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  356.322306][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  356.331412][ T5661] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  356.380785][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  356.393103][ T5661] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  356.433702][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  356.455540][ T5661] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  356.487255][ T5661] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  356.675328][ T5651] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  356.705011][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  356.720640][ T5651] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  356.762669][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  356.795166][ T5651] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  356.825129][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  356.853823][ T5651] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  356.883573][ T5651] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  357.027356][ T5659] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  357.064020][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  357.075901][ T5659] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  357.103145][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  357.112717][ T5659] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  357.143022][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  357.153582][ T5659] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  357.194275][ T5659] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  357.310335][ T5652] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.417527][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.431176][ T5652] 8021q: adding VLAN 0 to HW filter on device team0
[  357.476111][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.476942][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.536048][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.536157][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.568332][ T5663] Bluetooth: hci0: command tx timeout
[  357.568434][ T5660] Bluetooth: hci1: command tx timeout
[  357.599570][ T5661] 8021q: adding VLAN 0 to HW filter on device team0
[  357.646902][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.647101][ T5671] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.658445][ T5660] Bluetooth: hci2: command tx timeout
[  357.697968][ T5651] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.706013][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.706142][ T5671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  357.728938][ T5660] Bluetooth: hci3: command tx timeout
[  357.842970][ T5651] 8021q: adding VLAN 0 to HW filter on device team0
[  357.869714][ T5659] 8021q: adding VLAN 0 to HW filter on device bond0
[  357.925795][ T5671] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.925913][ T5671] bridge0: port 1(bridge_slave_0) entered forwarding state
[  357.995733][ T5671] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.995920][ T5671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.093804][ T5659] 8021q: adding VLAN 0 to HW filter on device team0
[  358.228604][ T5681] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.228776][ T5681] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.334838][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.335099][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.366947][ T5652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.627019][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.648963][ T5663] Bluetooth: hci0: command tx timeout
[  359.649018][ T5660] Bluetooth: hci1: command tx timeout
[  359.728200][ T5660] Bluetooth: hci2: command tx timeout
[  359.808342][ T5660] Bluetooth: hci3: command tx timeout
[  359.835838][ T5652] veth0_vlan: entered promiscuous mode
[  359.935700][ T5652] veth1_vlan: entered promiscuous mode
[  359.964448][ T5651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.132881][ T5661] veth0_vlan: entered promiscuous mode
[  360.216183][ T5661] veth1_vlan: entered promiscuous mode
[  360.273883][ T5659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.276716][ T5652] veth0_macvtap: entered promiscuous mode
[  360.323718][ T5652] veth1_macvtap: entered promiscuous mode
[  360.376963][ T5651] veth0_vlan: entered promiscuous mode
[  360.427259][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.446973][ T5661] veth0_macvtap: entered promiscuous mode
[  360.467267][ T5651] veth1_vlan: entered promiscuous mode
[  360.498398][ T5652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.503988][ T5661] veth1_macvtap: entered promiscuous mode
[  360.568456][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.590870][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.607896][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.631859][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.634081][ T5659] veth0_vlan: entered promiscuous mode
[  360.728102][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.831562][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.854223][ T5659] veth1_vlan: entered promiscuous mode
[  361.016099][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.057908][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.060236][ T5651] veth0_macvtap: entered promiscuous mode
[  361.067522][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.114121][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.125661][ T5651] veth1_macvtap: entered promiscuous mode
[  361.246286][ T5769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.246309][ T5769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.572599][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.610947][ T5681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.610990][ T5681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.615675][ T5659] veth0_macvtap: entered promiscuous mode
[  361.667624][ T5651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.747668][ T5659] veth1_macvtap: entered promiscuous mode
[  361.760564][ T5671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.760587][ T5671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.805727][ T5681] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.825942][ T5681] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.854077][ T5681] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.863094][ T5681] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.979224][ T5671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.979245][ T5671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.026452][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.230337][ T5659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.472763][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.475671][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.483871][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.493671][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.643529][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.643551][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.581006][ T5764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.581028][ T5764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.232264][ T5764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.232280][ T5764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.739822][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.739845][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.176789][ T5822] 9p: Bad value for 'rfdno'
[  365.948187][ T5828] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET)
[  366.649899][ T5744] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  366.705336][ T5344] libceph: connect (1)[c::]:6789 error -101
[  366.705842][ T5344] libceph: mon0 (1)[c::]:6789 connect error
[  366.761287][ T5344] libceph: connect (1)[c::]:6789 error -101
[  366.761434][ T5344] libceph: mon0 (1)[c::]:6789 connect error
[  366.767867][ T5827] ceph: No mds server is up or the cluster is laggy
[  367.041583][ T5664] libceph: connect (1)[c::]:6789 error -101
[  367.041717][ T5664] libceph: mon0 (1)[c::]:6789 connect error
[  367.319336][ T5744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.319376][ T5744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.319399][ T5744] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  367.319447][ T5744] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  367.319472][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.619616][ T5744] usb 4-1: config 0 descriptor??
[  368.623302][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.623349][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.623375][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.623400][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.623425][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.623450][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.623476][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.623511][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.623537][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.623561][ T5744] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  368.872151][ T5744] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  368.983771][ T5744] usb 4-1: USB disconnect, device number 2
[  369.189085][  T823] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  369.389448][  T823] usb 1-1: Using ep0 maxpacket: 8
[  369.711768][ T5852] fido_id[5852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  369.757545][  T823] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  369.757739][  T823] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  369.757763][  T823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  369.757787][  T823] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  369.757810][  T823] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  369.757851][  T823] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  369.757872][  T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.019742][ T5856] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  370.693243][  T823] usb 1-1: usb_control_msg returned -32
[  370.693302][  T823] usbtmc 1-1:16.0: can't read capabilities
[  371.781321][ T5858] syz.3.15 (5858) used greatest stack depth: 17280 bytes left
[  372.238864][ T5641] usb 1-1: USB disconnect, device number 2
[  373.282863][ T5888] mmap: syz.0.26 (5888) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  373.362090][ T5888] =======================================================
[  373.362090][ T5888] WARNING: The mand mount option has been deprecated and
[  373.362090][ T5888]          and is ignored by this kernel. Remove the mand
[  373.362090][ T5888]          option from the mount to silence this warning.
[  373.362090][ T5888] =======================================================
[  373.479636][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'.
[  373.620386][ T5901] 9p: Bad value for 'rfdno'
[  373.730477][  T823] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  373.921379][  T823] usb 4-1: Using ep0 maxpacket: 8
[  373.933255][  T823] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  373.933315][  T823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  373.933338][  T823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  373.933361][  T823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  373.933383][  T823] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  373.933427][  T823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  373.933452][  T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.374593][  T823] usb 4-1: usb_control_msg returned -32
[  374.374667][  T823] usbtmc 4-1:16.0: can't read capabilities
[  375.226761][ T5919] 9pnet_virtio: no channels available for device syz
[  375.631857][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'.
[  375.717603][ T5927] 9p: Bad value for 'rfdno'
[  376.599098][    T9] usb 4-1: USB disconnect, device number 3
[  376.941881][ T5951] 9p: Bad value for 'rfdno'
[  376.956033][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.51'.
[  377.738114][ T5853] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  377.866349][ T5975] 9p: Bad value for 'wfdno'
[  377.899419][ T5853] usb 2-1: Using ep0 maxpacket: 8
[  377.902738][ T5853] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  377.902798][ T5853] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  377.902820][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  377.902844][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  377.902868][ T5853] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  377.902912][ T5853] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  377.902934][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.119038][ T5744] libceph: connect (1)[c::]:6789 error -101
[  378.119274][ T5744] libceph: mon0 (1)[c::]:6789 connect error
[  378.190284][ T5853] usb 2-1: usb_control_msg returned -32
[  378.190339][ T5853] usbtmc 2-1:16.0: can't read capabilities
[  378.406408][    T9] libceph: connect (1)[c::]:6789 error -101
[  378.421654][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  378.717273][ T5977] ceph: No mds server is up or the cluster is laggy
[  378.795930][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[  378.797240][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[  378.797240][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[  378.806770][ T1332] ------------[ cut here ]------------
[  378.806783][ T1332] !skb_transport_header_was_set(skb)
[  378.806792][ T1332] WARNING: ./include/linux/skbuff.h:3241 at lowpan_xmit+0xdfe/0x1420, CPU#1: aoe_tx0/1332
[  378.806834][ T1332] Modules linked in:
[  378.806852][ T1332] CPU: 1 UID: 0 PID: 1332 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  378.806874][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  378.806885][ T1332] RIP: 0010:lowpan_xmit+0xdfe/0x1420
[  378.806911][ T1332] Code: 3c 02 00 00 49 89 c6 e8 40 2c d4 f6 4c 8b 7c 24 10 e9 74 f5 ff ff e8 31 2c d4 f6 90 0f 0b 90 e9 59 f6 ff ff e8 23 2c d4 f6 90 <0f> 0b 90 e9 24 f7 ff ff e8 15 2c d4 f6 e9 f5 fb ff ff 90 0f 0b 90
[  378.806927][ T1332] RSP: 0018:ffffc90006337720 EFLAGS: 00010293
[  378.806944][ T1332] RAX: ffffffff8af16e7d RBX: ffff888029b02b40 RCX: ffff888029310000
[  378.806958][ T1332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  378.806970][ T1332] RBP: ffffc900063378f8 R08: 0000000000000000 R09: 0000000000000000
[  378.806982][ T1332] R10: ffffc900063375d0 R11: fffff52000c66ec0 R12: ffffc90006337800
[  378.806996][ T1332] R13: 0000000000000020 R14: dffffc0000000000 R15: 000000000000ffff
[  378.807010][ T1332] FS:  0000000000000000(0000) GS:ffff888125d7e000(0000) knlGS:0000000000000000
[  378.807025][ T1332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  378.807039][ T1332] CR2: 00007f49cfb58d50 CR3: 0000000037510000 CR4: 00000000003526f0
[  378.807058][ T1332] Call Trace:
[  378.807066][ T1332]  <TASK>
[  378.807088][ T1332]  ? __pfx_lowpan_xmit+0x10/0x10
[  378.807123][ T1332]  ? rt_spin_lock+0x1e0/0x400
[  378.807167][ T1332]  dev_hard_start_xmit+0x2df/0x860
[  378.807204][ T1332]  __dev_queue_xmit+0x1428/0x3900
[  378.807234][ T1332]  ? __lock_acquire+0x6b5/0x2d10
[  378.807267][ T1332]  ? __dev_queue_xmit+0x2b3/0x3900
[  378.807287][ T1332]  ? __lock_acquire+0x6b5/0x2d10
[  378.807316][ T1332]  ? do_raw_spin_lock+0x12b/0x2f0
[  378.807339][ T1332]  ? __pfx___dev_queue_xmit+0x10/0x10
[  378.807366][ T1332]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  378.807394][ T1332]  ? lockdep_hardirqs_on+0x7a/0x110
[  378.807422][ T1332]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  378.807449][ T1332]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  378.807472][ T1332]  ? reacquire_held_locks+0x104/0x190
[  378.807497][ T1332]  ? rt_spin_lock+0x1e0/0x400
[  378.807522][ T1332]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  378.807548][ T1332]  ? rt_spin_unlock+0x14f/0x200
[  378.807576][ T1332]  ? rt_spin_unlock+0x160/0x200
[  378.807601][ T1332]  tx+0x6b/0x190
[  378.807620][ T1332]  ? __pfx_tx+0x10/0x10
[  378.807637][ T1332]  kthread+0x1e0/0x3f0
[  378.807663][ T1332]  ? lock_acquire+0x106/0x350
[  378.807697][ T1332]  ? __pfx_kthread+0x10/0x10
[  378.807727][ T1332]  ? __pfx_default_wake_function+0x10/0x10
[  378.807757][ T1332]  ? __kthread_parkme+0x7a/0x1f0
[  378.807802][ T1332]  kthread+0x388/0x470
[  378.807824][ T1332]  ? __pfx_kthread+0x10/0x10
[  378.807847][ T1332]  ? __pfx_kthread+0x10/0x10
[  378.807871][ T1332]  ret_from_fork+0x514/0xb70
[  378.807898][ T1332]  ? __pfx_ret_from_fork+0x10/0x10
[  378.807978][ T1332]  ? __switch_to+0xc79/0x1410
[  378.808006][ T1332]  ? __pfx_kthread+0x10/0x10
[  378.808029][ T1332]  ret_from_fork_asm+0x1a/0x30
[  378.808072][ T1332]  </TASK>
[  378.808082][ T1332] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  378.808096][ T1332] CPU: 1 UID: 0 PID: 1332 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  378.808117][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  378.808128][ T1332] Call Trace:
[  378.808135][ T1332]  <TASK>
[  378.808143][ T1332]  vpanic+0x56c/0xa60
[  378.808171][ T1332]  ? __pfx__printk+0x10/0x10
[  378.808191][ T1332]  ? __pfx_vpanic+0x10/0x10
[  378.808223][ T1332]  ? is_bpf_text_address+0x292/0x2b0
[  378.808248][ T1332]  ? is_bpf_text_address+0x26/0x2b0
[  378.808280][ T1332]  panic+0xc5/0xd0
[  378.808306][ T1332]  ? __pfx_panic+0x10/0x10
[  378.808352][ T1332]  ? ret_from_fork_asm+0x1a/0x30
[  378.808386][ T1332]  __warn+0x315/0x4c0
[  378.808414][ T1332]  ? lowpan_xmit+0xdfe/0x1420
[  378.808443][ T1332]  ? lowpan_xmit+0xdfe/0x1420
[  378.808472][ T1332]  __report_bug+0x339/0x540
[  378.808513][ T1332]  ? lowpan_xmit+0xdfe/0x1420
[  378.808541][ T1332]  ? __pfx___report_bug+0x10/0x10
[  378.808596][ T1332]  ? lowpan_xmit+0xdfe/0x1420
[  378.808624][ T1332]  report_bug+0x16a/0x220
[  378.808658][ T1332]  ? lowpan_xmit+0xdfe/0x1420
[  378.808684][ T1332]  ? lowpan_xmit+0xe00/0x1420
[  378.808710][ T1332]  handle_bug+0x9c/0x200
[  378.808734][ T1332]  exc_invalid_op+0x1a/0x50
[  378.808757][ T1332]  asm_exc_invalid_op+0x1a/0x20
[  378.808779][ T1332] RIP: 0010:lowpan_xmit+0xdfe/0x1420
[  378.808808][ T1332] Code: 3c 02 00 00 49 89 c6 e8 40 2c d4 f6 4c 8b 7c 24 10 e9 74 f5 ff ff e8 31 2c d4 f6 90 0f 0b 90 e9 59 f6 ff ff e8 23 2c d4 f6 90 <0f> 0b 90 e9 24 f7 ff ff e8 15 2c d4 f6 e9 f5 fb ff ff 90 0f 0b 90
[  378.808827][ T1332] RSP: 0018:ffffc90006337720 EFLAGS: 00010293
[  378.808846][ T1332] RAX: ffffffff8af16e7d RBX: ffff888029b02b40 RCX: ffff888029310000
[  378.808861][ T1332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  378.808875][ T1332] RBP: ffffc900063378f8 R08: 0000000000000000 R09: 0000000000000000
[  378.808888][ T1332] R10: ffffc900063375d0 R11: fffff52000c66ec0 R12: ffffc90006337800
[  378.808904][ T1332] R13: 0000000000000020 R14: dffffc0000000000 R15: 000000000000ffff
[  378.808928][ T1332]  ? lowpan_xmit+0xdfd/0x1420
[  378.808978][ T1332]  ? __pfx_lowpan_xmit+0x10/0x10
[  378.809017][ T1332]  ? rt_spin_lock+0x1e0/0x400
[  378.809062][ T1332]  dev_hard_start_xmit+0x2df/0x860
[  378.809101][ T1332]  __dev_queue_xmit+0x1428/0x3900
[  378.809125][ T1332]  ? __lock_acquire+0x6b5/0x2d10
[  378.809160][ T1332]  ? __dev_queue_xmit+0x2b3/0x3900
[  378.809183][ T1332]  ? __lock_acquire+0x6b5/0x2d10
[  378.809220][ T1332]  ? do_raw_spin_lock+0x12b/0x2f0
[  378.809246][ T1332]  ? __pfx___dev_queue_xmit+0x10/0x10
[  378.809276][ T1332]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  378.809308][ T1332]  ? lockdep_hardirqs_on+0x7a/0x110
[  378.809339][ T1332]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  378.809372][ T1332]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  378.809399][ T1332]  ? reacquire_held_locks+0x104/0x190
[  378.809428][ T1332]  ? rt_spin_lock+0x1e0/0x400
[  378.809456][ T1332]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  378.809484][ T1332]  ? rt_spin_unlock+0x14f/0x200
[  378.809516][ T1332]  ? rt_spin_unlock+0x160/0x200
[  378.809545][ T1332]  tx+0x6b/0x190
[  378.809565][ T1332]  ? __pfx_tx+0x10/0x10
[  378.809585][ T1332]  kthread+0x1e0/0x3f0
[  378.809614][ T1332]  ? lock_acquire+0x106/0x350
[  378.809649][ T1332]  ? __pfx_kthread+0x10/0x10
[  378.809680][ T1332]  ? __pfx_default_wake_function+0x10/0x10
[  378.809712][ T1332]  ? __kthread_parkme+0x7a/0x1f0
[  378.809757][ T1332]  kthread+0x388/0x470
[  378.809782][ T1332]  ? __pfx_kthread+0x10/0x10
[  378.809808][ T1332]  ? __pfx_kthread+0x10/0x10
[  378.809833][ T1332]  ret_from_fork+0x514/0xb70
[  378.809859][ T1332]  ? __pfx_ret_from_fork+0x10/0x10
[  378.809882][ T1332]  ? __switch_to+0xc79/0x1410
[  378.809904][ T1332]  ? __pfx_kthread+0x10/0x10
[  378.809927][ T1332]  ret_from_fork_asm+0x1a/0x30
[  378.809989][ T1332]  </TASK>
[  378.810434][ T1332] Kernel Offset: disabled