last executing test programs:

3m8.852212281s ago: executing program 1 (id=394):
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x3a, 0x2001)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3m6.339962359s ago: executing program 1 (id=399):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827", 0x45}], 0x1}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000000008", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d36726567", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3m2.596669266s ago: executing program 1 (id=405):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)

2m59.898172978s ago: executing program 1 (id=411):
r0 = socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, 0x0, 0x0)

2m54.795049435s ago: executing program 1 (id=415):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = shmget$private(0x0, 0x400000, 0x1000, &(0x7f0000bfd000/0x400000)=nil)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1, 0x1)
mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0)
shmctl$SHM_LOCK(r2, 0xb)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000700000000000000000000009500000000f8ff00"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00010002"], 0x8)

2m50.994915109s ago: executing program 1 (id=418):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000200))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setreuid(0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"})

2m46.898556026s ago: executing program 3 (id=423):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
syz_usb_connect(0x3, 0x62, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507", @ANYRES32=r0], 0x0)

2m35.39040686s ago: executing program 32 (id=418):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000200))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setreuid(0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)="b3"})

2m35.308460955s ago: executing program 3 (id=431):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000005a80)=[{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000180)="f732fbbf6723bf1a185c7ce975fbfbf659788e5753809f90858d", 0x1a}, {&(0x7f00000003c0)="3e312095ba46f324a74e29a80803ba9800b11570daad53b8646da7df69ff4a6186b15ef4cdc9768103b31ac3b50acf0f2f6ba657cc1a130a31187ef86d5b397427a7e174e4a2aee43cea7dd9c0249ee2f4ab7b6578f9c957c4164db4d93b3a9bfe2ae3f7410c4ea1c1e68a0f623a4ade526b57c33be251bef771234fc83f95e609ad46632f791150f3", 0x89}, {&(0x7f0000000480)="94acb1e3f6e2f98f22e035591f68c891242a98309e512bad3237f172a6c69bdd036d333b3afe61569c9837d79561490754d24fae6f52", 0x36}, {&(0x7f00000005c0)="35c899219a456f28fc47b03998311290900241a020dd3040bbafc9639af93c236185147511a1fb54543902bacc4fdd33696a67a26b6f78bd9ef7993dfe080c6ef3a926e57f4c0c10e5014b0eea28a23c41c46b59f6f595d12c9482dd63fed05cc67a48181a6f369a3a9302dce0d3a867", 0x70}, {&(0x7f0000000940)="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", 0x939}], 0x5, 0x0, 0x0, 0x20000804}], 0x1, 0x40800)
readv(r1, &(0x7f0000000900)=[{&(0x7f0000000300)=""/89, 0xffffff43}, {&(0x7f0000000540)=""/117, 0x75}], 0x2)

2m33.314951443s ago: executing program 3 (id=432):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000002400)=""/4060, 0xffe9)

2m30.945800453s ago: executing program 3 (id=435):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010", 0x1e}], 0x1}, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x9)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r3)
sendmsg$NFC_CMD_DEP_LINK_UP(r3, 0x0, 0x4000010)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0x0}, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000300))

2m21.85399842s ago: executing program 3 (id=443):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00', <r0=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d36726567", @ANYRES32, @ANYRES32=r0, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2m18.727669223s ago: executing program 3 (id=447):
kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5", 0xeb, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add0bb6", 0x80, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e", 0xb3, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m3.037124111s ago: executing program 33 (id=447):
kexec_load(0x3, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5", 0xeb, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add0bb6", 0x80, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e198aa55b403df846ce1732f7cf4c12d92aece1289b4b10b7d84532a07762548e3f3915b6575e8ef8130395476b9a721a7668c608c4d2f70aee2be4ae96ff0e", 0xb3, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m55.756889407s ago: executing program 2 (id=461):
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_dev$loop(&(0x7f0000000100), 0x3a, 0x2001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m52.21555433s ago: executing program 2 (id=464):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x110)

1m47.539299072s ago: executing program 2 (id=467):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28)

1m43.528875046s ago: executing program 2 (id=469):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41)
recvmsg$can_j1939(r0, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/4096, 0x1000}, 0x20)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000084}, 0x40880)

1m41.535157258s ago: executing program 2 (id=471):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)

1m36.946613441s ago: executing program 2 (id=474):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c00018008000300010000007400018014000200776732000000000000000000000000000800030002000000140002007069", @ANYRES32, @ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1m33.951304588s ago: executing program 4 (id=475):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}}, 0x0)
close(0x3)

1m27.056441797s ago: executing program 4 (id=477):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
getpid()
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x2)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4}, 0x10)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r4, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cbc(serpent),tgr192)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beeb915d564c90c200", 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x2}], 0x1, 0x40800)

1m21.319388682s ago: executing program 34 (id=474):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c00018008000300010000007400018014000200776732000000000000000000000000000800030002000000140002007069", @ANYRES32, @ANYRES32], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

1m21.259678174s ago: executing program 4 (id=479):
syz_clone3(&(0x7f00000002c0)={0x41000, 0x0, 0x0, 0x0, {0x27}, &(0x7f0000000180)=""/162, 0xa2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58)
r0 = syz_io_uring_complete(0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c90002"], 0x22)

1m18.719354921s ago: executing program 4 (id=481):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0)
getpid()
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x2)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="69642cbd7000fcdbdf25120000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r5, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(cbc(serpent),tgr192)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beeb915d564c90c200", 0x18)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0xff8d, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647", 0x9}], 0x2}], 0x1, 0x40800)

1m12.245734852s ago: executing program 4 (id=483):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

1m7.603394934s ago: executing program 4 (id=484):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40880)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x20000844)
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x3, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x210)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32)

51.225977113s ago: executing program 35 (id=484):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40880)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x20000844)
r3 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x3, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x210)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r4, &(0x7f0000000280)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x8}}}}}}, 0x32)

26.752874149s ago: executing program 0 (id=495):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000001c0)={0x2f, 0x4, 0xd, 0x1d, 0x7, 0xac, 0x7, 0x2, 0x1})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r1=>0x0}, 0x6)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r1, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r2, 0x20, &(0x7f00000007c0)={&(0x7f0000000800)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

24.529141742s ago: executing program 0 (id=496):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000000)=0x9, 0x4)

23.05620484s ago: executing program 0 (id=497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040800)

21.782241645s ago: executing program 0 (id=498):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r1, 0x10c, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x804c8d1}, 0x20040844)

19.167897699s ago: executing program 0 (id=499):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f0000002e80)="b31ec69c2edb", 0x6}], 0x1}, 0x220040c0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1)

16.932388557s ago: executing program 0 (id=500):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000037ec000000000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020)

0s ago: executing program 36 (id=500):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000037ec000000000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020)

kernel console output (not intermixed with test programs):

 deprecated and
[  116.172755][ T5947]          and is ignored by this kernel. Remove the mand
[  116.172755][ T5947]          option from the mount to silence this warning.
[  116.172755][ T5947] =======================================================
[  118.109364][ T5958] netlink: 'syz.3.51': attribute type 2 has an invalid length.
[  118.109386][ T5958] netlink: 164 bytes leftover after parsing attributes in process `syz.3.51'.
[  120.296533][ T5970] binder: 5969:5970 ioctl 4018620d 0 returned -22
[  120.297035][ T5970] binder: 5969:5970 ioctl 4008941a 200000000200 returned -22
[  123.091597][ T5992] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  126.369181][ T6019] netlink: 92 bytes leftover after parsing attributes in process `syz.2.66'.
[  126.369231][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'.
[  127.011506][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  127.241251][ T6025] binder: 6022:6025 ioctl 4018620d 0 returned -22
[  127.241755][ T6025] binder: 6022:6025 ioctl 4008941a 200000000200 returned -22
[  129.588802][ T5711] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  129.760430][ T5711] usb 5-1: Using ep0 maxpacket: 16
[  129.768557][ T5711] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.770550][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  129.770626][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  129.770687][ T5711] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  129.770750][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  129.832148][ T5711] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  129.832169][ T5711] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  129.832183][ T5711] usb 5-1: Manufacturer: syz
[  129.965394][ T5711] usb 5-1: config 0 descriptor??
[  130.024940][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  130.188777][    T9] usb 2-1: Using ep0 maxpacket: 16
[  130.191493][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.191565][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  130.191604][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  130.191627][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  130.191652][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  130.194675][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  130.194730][    T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  130.194750][    T9] usb 2-1: Manufacturer: syz
[  130.498653][    T9] usb 2-1: config 0 descriptor??
[  130.608691][ T5711] rc_core: IR keymap rc-hauppauge not found
[  130.608711][ T5711] Registered IR keymap rc-empty
[  130.660831][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  130.679761][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  130.796218][ T5711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  130.838312][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5
[  130.878688][    T9] rc_core: IR keymap rc-hauppauge not found
[  130.878708][    T9] Registered IR keymap rc-empty
[  130.878884][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  130.908944][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  130.931645][    T9] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1
[  130.953824][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input6
[  131.180408][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.199524][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.208481][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.218934][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.239318][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.259074][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.278763][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.298777][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.318860][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.338749][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.358977][ T5711] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  131.381253][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.398841][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.428779][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.459750][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.489066][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.520202][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.525727][ T5711] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  131.525753][ T5711] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  131.538819][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.570367][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.588772][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  131.624261][    T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  131.624282][    T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  131.688081][    T9] usb 2-1: USB disconnect, device number 2
[  131.704495][ T5711] usb 5-1: USB disconnect, device number 2
[  132.796558][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  132.796657][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  134.551857][ T6081] netlink: 92 bytes leftover after parsing attributes in process `syz.2.87'.
[  134.551887][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[  134.616574][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  135.888638][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  135.908628][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  135.918626][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  135.928631][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  135.938619][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  135.948624][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  135.958623][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  135.968625][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  135.978626][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  135.988634][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  138.458740][    T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  138.661365][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  138.661401][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.661440][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  138.661466][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.793208][    T9] usb 3-1: config 0 descriptor??
[  139.832827][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  139.832951][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  140.228477][    T9] usb 3-1: USB disconnect, device number 2
[  140.326850][ T6117] mmap: syz.4.99 (6117) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  142.285675][ T6122] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  142.628770][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  142.726425][ T5609] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  142.818846][    T9] usb 1-1: Using ep0 maxpacket: 16
[  142.821027][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.821074][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  142.821104][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  142.821118][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  142.821133][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  142.824694][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  142.824720][    T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  142.824733][    T9] usb 1-1: Manufacturer: syz
[  143.330061][ T5609] usb 5-1: Using ep0 maxpacket: 16
[  143.453083][    T9] usb 1-1: config 0 descriptor??
[  143.469571][ T5609] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.470088][ T5609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.470115][ T5609] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  143.470345][ T5609] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  143.470368][ T5609] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  143.472897][ T5609] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  143.472923][ T5609] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  143.473185][ T5609] usb 5-1: Manufacturer: syz
[  143.687434][ T5609] usb 5-1: config 0 descriptor??
[  143.978744][    T9] rc_core: IR keymap rc-hauppauge not found
[  143.978766][    T9] Registered IR keymap rc-empty
[  143.978918][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  143.992073][ T5609] rc_core: IR keymap rc-hauppauge not found
[  143.992089][ T5609] Registered IR keymap rc-empty
[  143.992219][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.008778][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.015915][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.039191][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  144.078831][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[  144.106251][ T5609] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1
[  144.134899][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.151048][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.169720][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.190407][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.208967][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.239119][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.256689][ T5609] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc1/input8
[  144.259241][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.279191][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.300751][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.328976][    T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  144.392201][    T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  144.392235][    T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  144.432121][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.459176][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.478872][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.503330][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.522481][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.541918][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.559005][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.582415][    T9] usb 1-1: USB disconnect, device number 3
[  144.589074][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.610342][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.629919][ T5609] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  144.715919][ T5609] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  144.715942][ T5609] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  144.831761][ T5609] usb 5-1: USB disconnect, device number 3
[  146.158683][  T870] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  146.954462][  T870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.954494][  T870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.954514][  T870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  146.954601][  T870] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  146.954623][  T870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.978707][  T870] usb 2-1: config 0 descriptor??
[  147.623798][  T870] usbhid 2-1:0.0: can't add hid device: -71
[  147.623897][  T870] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  147.693698][  T870] usb 2-1: USB disconnect, device number 3
[  148.488709][ T5736] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  148.858900][ T5736] usb 4-1: Using ep0 maxpacket: 16
[  148.861016][ T5736] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.861063][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  148.861089][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  148.861109][ T5736] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  148.861130][ T5736] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.862285][ T5736] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  148.862308][ T5736] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  148.862344][ T5736] usb 4-1: Manufacturer: syz
[  149.828356][ T5736] usb 4-1: config 0 descriptor??
[  150.118850][ T5736] rc_core: IR keymap rc-hauppauge not found
[  150.118874][ T5736] Registered IR keymap rc-empty
[  150.119007][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.140123][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.160144][ T5736] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  150.163859][ T5736] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9
[  150.167208][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.180153][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.199733][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.219552][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.239641][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.259101][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.280269][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.299351][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.318794][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.338753][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  150.454037][ T5736] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  150.454058][ T5736] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  150.530754][ T5736] usb 4-1: USB disconnect, device number 2
[  153.718721][ T5711] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  153.798212][ T6266] netlink: 92 bytes leftover after parsing attributes in process `syz.1.146'.
[  153.798237][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[  153.820895][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  153.868656][ T5711] usb 3-1: Using ep0 maxpacket: 16
[  153.871390][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.871436][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  153.871460][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  153.871480][ T5711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  153.871511][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  153.873780][ T5711] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  153.873805][ T5711] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  153.873823][ T5711] usb 3-1: Manufacturer: syz
[  153.962899][ T5711] usb 3-1: config 0 descriptor??
[  154.038730][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  154.193581][    T9] usb 1-1: Using ep0 maxpacket: 32
[  154.197223][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[  154.197255][    T9] usb 1-1: can't read configurations, error -61
[  154.268755][ T5711] rc_core: IR keymap rc-hauppauge not found
[  154.268772][ T5711] Registered IR keymap rc-empty
[  154.268929][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.290013][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.310096][ T5711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  154.314979][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10
[  154.350961][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  154.355789][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.370929][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.439461][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.458905][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.481091][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.498793][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.498900][    T9] usb 1-1: Using ep0 maxpacket: 32
[  154.519528][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.532235][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[  154.532279][    T9] usb 1-1: can't read configurations, error -61
[  154.537343][    T9] usb usb1-port1: attempt power cycle
[  154.550275][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.578790][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.603602][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  154.624600][ T5711] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  154.624622][ T5711] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  154.672809][ T5711] usb 3-1: USB disconnect, device number 3
[  154.998725][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  155.022609][    T9] usb 1-1: Using ep0 maxpacket: 32
[  155.024916][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[  155.024951][    T9] usb 1-1: can't read configurations, error -61
[  155.178792][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  155.202655][    T9] usb 1-1: Using ep0 maxpacket: 32
[  155.212124][    T9] usb 1-1: unable to read config index 0 descriptor/start: -61
[  155.212210][    T9] usb 1-1: can't read configurations, error -61
[  155.214746][    T9] usb usb1-port1: unable to enumerate USB device
[  157.170810][ T5609] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  157.318704][ T5609] usb 3-1: Using ep0 maxpacket: 16
[  157.320930][ T5609] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.320979][ T5609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  157.321007][ T5609] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  157.321027][ T5609] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  157.321049][ T5609] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  157.322357][ T5609] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  157.322379][ T5609] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  157.322397][ T5609] usb 3-1: Manufacturer: syz
[  157.329177][ T5609] usb 3-1: config 0 descriptor??
[  157.600019][ T6325] netlink: 92 bytes leftover after parsing attributes in process `syz.1.170'.
[  157.611328][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'.
[  157.628048][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  157.678667][ T5609] rc_core: IR keymap rc-hauppauge not found
[  157.678683][ T5609] Registered IR keymap rc-empty
[  157.678836][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.708765][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.740502][ T5609] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  157.762094][ T5609] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11
[  157.766162][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.789394][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.808844][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.833042][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.848738][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.878916][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.898785][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.918751][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.942311][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  157.958698][ T5609] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  158.008557][ T5609] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  158.009063][ T5609] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  158.047001][ T5609] usb 3-1: USB disconnect, device number 4
[  160.504738][ T6340] netlink: 120 bytes leftover after parsing attributes in process `syz.3.179'.
[  160.504759][ T6340] netlink: 'syz.3.179': attribute type 1 has an invalid length.
[  160.504768][ T6340] netlink: 64 bytes leftover after parsing attributes in process `syz.3.179'.
[  160.507996][   T37] audit: type=1326 audit(1779256185.324:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.3.179" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdc6b4ce59 code=0x0
[  162.908690][ T5736] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  163.079161][ T5736] usb 4-1: Using ep0 maxpacket: 16
[  163.096216][ T5736] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.096263][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.096288][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  163.096308][ T5736] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  163.096329][ T5736] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.097708][ T5736] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  163.097732][ T5736] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  163.097750][ T5736] usb 4-1: Manufacturer: syz
[  163.414949][ T5736] usb 4-1: config 0 descriptor??
[  165.228675][ T5736] rc_core: IR keymap rc-hauppauge not found
[  165.228688][ T5736] Registered IR keymap rc-empty
[  165.229861][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.288676][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.310645][ T5736] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  165.312816][ T5736] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12
[  165.467240][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.478768][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.498734][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.518739][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.731820][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.748734][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.768707][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.788722][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.811892][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.829003][ T5736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  165.852964][ T5736] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  165.852984][ T5736] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  165.868768][   T36] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  165.913979][ T5736] usb 4-1: USB disconnect, device number 3
[  166.208696][   T36] usb 2-1: Using ep0 maxpacket: 16
[  166.215100][   T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.215151][   T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  166.215178][   T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  166.215198][   T36] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  166.215220][   T36] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.216375][   T36] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  166.216401][   T36] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  166.216421][   T36] usb 2-1: Manufacturer: syz
[  166.280492][   T36] usb 2-1: config 0 descriptor??
[  166.901445][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  166.908644][   T36] rc_core: IR keymap rc-hauppauge not found
[  166.908659][   T36] Registered IR keymap rc-empty
[  166.909071][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  166.928901][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  166.950090][   T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  166.953057][   T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13
[  167.026734][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.038848][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.058835][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.192567][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.208699][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  167.488200][ T6398] netlink: 92 bytes leftover after parsing attributes in process `syz.4.197'.
[  167.488225][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'.
[  167.491323][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  168.014090][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  168.028731][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  168.052224][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  168.072609][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  168.088713][   T36] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  168.114510][   T36] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  168.114530][   T36] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  168.175375][   T36] usb 2-1: USB disconnect, device number 4
[  171.724432][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  171.952271][  T820] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  172.098641][  T820] usb 1-1: Using ep0 maxpacket: 16
[  172.106121][  T820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.106167][  T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  172.106192][  T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  172.106211][  T820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  172.106231][  T820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.179106][  T820] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  172.179131][  T820] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  172.179149][  T820] usb 1-1: Manufacturer: syz
[  172.187702][  T820] usb 1-1: config 0 descriptor??
[  172.588628][  T820] rc_core: IR keymap rc-hauppauge not found
[  172.588644][  T820] Registered IR keymap rc-empty
[  172.588750][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.608708][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.679957][  T820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  172.707741][  T820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14
[  172.739139][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.763743][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.795193][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.809682][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.839931][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.860155][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.878815][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.898907][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.920881][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  172.954185][  T820] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  173.060132][  T820] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  173.060154][  T820] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  173.093132][  T820] usb 1-1: USB disconnect, device number 8
[  174.167300][ T6454] netlink: 92 bytes leftover after parsing attributes in process `syz.3.212'.
[  174.167326][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'.
[  174.169630][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  175.956536][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  176.750708][  T820] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  176.909512][  T820] usb 5-1: Using ep0 maxpacket: 16
[  176.911707][  T820] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.911752][  T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  176.911778][  T820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  176.911797][  T820] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  176.911817][  T820] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  176.912888][  T820] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  176.912911][  T820] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  176.912929][  T820] usb 5-1: Manufacturer: syz
[  176.987616][  T820] usb 5-1: config 0 descriptor??
[  177.508880][  T820] rc_core: IR keymap rc-hauppauge not found
[  177.508899][  T820] Registered IR keymap rc-empty
[  177.509630][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.541617][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.570305][  T820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  177.617852][  T820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15
[  177.646289][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.672235][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.698934][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.735666][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.749289][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.778722][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.798770][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.834618][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.860873][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.878753][  T820] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  177.923776][  T820] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  177.923795][  T820] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  177.981572][  T820] usb 5-1: USB disconnect, device number 4
[  178.331130][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  178.939432][ T6524] netlink: 92 bytes leftover after parsing attributes in process `syz.2.237'.
[  178.939462][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'.
[  178.941243][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  183.437125][ T6562] netlink: 92 bytes leftover after parsing attributes in process `syz.2.256'.
[  183.437151][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'.
[  183.464091][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  183.492727][  T870] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  183.779432][  T870] usb 4-1: Using ep0 maxpacket: 16
[  183.781736][  T870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.781782][  T870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.781807][  T870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  183.781826][  T870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  183.781847][  T870] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.784311][  T870] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  183.784337][  T870] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  183.784363][  T870] usb 4-1: Manufacturer: syz
[  183.909338][  T870] usb 4-1: config 0 descriptor??
[  184.398709][  T870] rc_core: IR keymap rc-hauppauge not found
[  184.398724][  T870] Registered IR keymap rc-empty
[  184.398850][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.458964][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.480615][  T870] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  184.485884][  T870] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16
[  184.505889][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.529039][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.553429][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.568842][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.589014][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.609310][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.656444][ T6577] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  184.779868][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.798708][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.818796][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.838697][  T870] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  184.862927][  T870] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  184.862947][  T870] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  185.191237][  T870] usb 4-1: USB disconnect, device number 4
[  187.656424][ T6622] netlink: 92 bytes leftover after parsing attributes in process `syz.3.277'.
[  187.656451][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'.
[  187.667912][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  188.521664][ T6625] netlink: 120 bytes leftover after parsing attributes in process `syz.4.279'.
[  188.521680][ T6625] netlink: 'syz.4.279': attribute type 1 has an invalid length.
[  188.521688][ T6625] netlink: 64 bytes leftover after parsing attributes in process `syz.4.279'.
[  188.565942][   T37] audit: type=1326 audit(1779256213.384:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6624 comm="syz.4.279" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d54ebce59 code=0x0
[  192.277236][ T6662] netlink: 120 bytes leftover after parsing attributes in process `syz.4.294'.
[  192.277252][ T6662] netlink: 'syz.4.294': attribute type 1 has an invalid length.
[  192.277260][ T6662] netlink: 64 bytes leftover after parsing attributes in process `syz.4.294'.
[  192.335037][   T37] audit: type=1326 audit(1779256217.154:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6661 comm="syz.4.294" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d54ebce59 code=0x0
[  193.387015][ T6683] binder: 6681:6683 ioctl 4018620d 0 returned -22
[  193.387334][ T6683] binder: 6681:6683 ioctl 4008941a 200000000200 returned -22
[  193.841783][ T6687] netlink: 92 bytes leftover after parsing attributes in process `syz.1.302'.
[  193.841809][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'.
[  193.848307][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  194.008860][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  194.112631][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  194.112690][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  194.188748][   T10] usb 3-1: Using ep0 maxpacket: 16
[  194.191110][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.191155][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.191180][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  194.191198][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  194.191218][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  194.206380][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  194.206405][   T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  194.206423][   T10] usb 3-1: Manufacturer: syz
[  194.320592][   T10] usb 3-1: config 0 descriptor??
[  194.671231][   T10] rc_core: IR keymap rc-hauppauge not found
[  194.671249][   T10] Registered IR keymap rc-empty
[  194.671392][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.701720][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.720489][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  194.754118][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17
[  194.825531][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.853442][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.891345][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.908758][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.938797][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.959742][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.979573][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  194.999401][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  195.021673][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  195.048754][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  195.216999][   T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  195.217022][   T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  195.278134][   T10] usb 3-1: USB disconnect, device number 5
[  197.959981][ T6706] netlink: 120 bytes leftover after parsing attributes in process `syz.3.309'.
[  197.959996][ T6706] netlink: 'syz.3.309': attribute type 1 has an invalid length.
[  197.960004][ T6706] netlink: 64 bytes leftover after parsing attributes in process `syz.3.309'.
[  197.968343][   T37] audit: type=1326 audit(1779256222.784:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6705 comm="syz.3.309" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdc6b4ce59 code=0x0
[  206.458709][ T6744] netlink: 92 bytes leftover after parsing attributes in process `syz.3.322'.
[  206.458738][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'.
[  206.601074][ T4916] Bluetooth: Frame is too long (len 18, expected len 4)
[  212.628679][ T5613] Bluetooth: hci0: command 0x0406 tx timeout
[  212.628888][ T5613] Bluetooth: hci1: command 0x0406 tx timeout
[  212.629043][ T5613] Bluetooth: hci4: command 0x0406 tx timeout
[  212.629211][ T5613] Bluetooth: hci2: command 0x0406 tx timeout
[  212.629233][ T5613] Bluetooth: hci3: command 0x0406 tx timeout
[  214.828654][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  215.068631][    T9] usb 4-1: Using ep0 maxpacket: 8
[  215.070520][    T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  215.070543][    T9] usb 4-1: config 0 has no interface number 0
[  215.072789][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  215.072813][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.072831][    T9] usb 4-1: Product: syz
[  215.072844][    T9] usb 4-1: Manufacturer: syz
[  215.072857][    T9] usb 4-1: SerialNumber: syz
[  215.135266][    T9] usb 4-1: config 0 descriptor??
[  215.734676][    T9] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  215.734770][    T9] uvcvideo 4-1:0.31: No valid video chain found.
[  215.829320][    T9] usb 4-1: USB disconnect, device number 5
[  218.961651][ T6786] binder: 6785:6786 ioctl 4018620d 0 returned -22
[  218.963113][ T6786] binder: 6785:6786 ioctl 4008941a 200000000200 returned -22
[  225.114469][ T6812] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  225.118028][ T6812] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  225.137318][ T6812] vhci_hcd vhci_hcd.0: Device attached
[  225.437236][ T6813] vhci_hcd: connection closed
[  225.579287][ T1128] vhci_hcd vhci_hcd.2: stop threads
[  225.579968][ T1128] vhci_hcd vhci_hcd.2: release socket
[  225.580602][ T1128] vhci_hcd vhci_hcd.2: disconnect device
[  226.381092][ T5736] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  227.008744][ T5736] usb 2-1: device not accepting address 5, error -71
[  228.590870][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'.
[  228.692794][ T5711] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  228.858641][ T5711] usb 5-1: Using ep0 maxpacket: 8
[  228.861112][ T5711] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  228.861135][ T5711] usb 5-1: config 0 has no interface number 0
[  228.919234][ T5711] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  228.919258][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.919275][ T5711] usb 5-1: Product: syz
[  228.919288][ T5711] usb 5-1: Manufacturer: syz
[  228.919301][ T5711] usb 5-1: SerialNumber: syz
[  229.859716][ T5711] usb 5-1: config 0 descriptor??
[  230.054181][ T6833] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  230.054204][ T6833] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  230.099173][ T5711] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  230.099243][ T5711] uvcvideo 5-1:0.31: No valid video chain found.
[  230.159762][ T6833] vhci_hcd vhci_hcd.0: Device attached
[  230.169110][ T5711] usb 5-1: USB disconnect, device number 5
[  230.174373][ T6834] vhci_hcd: connection closed
[  230.218516][ T1513] vhci_hcd vhci_hcd.3: stop threads
[  230.218613][ T1513] vhci_hcd vhci_hcd.3: release socket
[  230.218648][ T1513] vhci_hcd vhci_hcd.3: disconnect device
[  230.902883][ T5604] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  231.269281][ T5604] usb 1-1: Using ep0 maxpacket: 16
[  231.276464][ T5604] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  231.276530][ T5604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  231.276556][ T5604] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  231.276576][ T5604] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  231.276598][ T5604] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.278302][ T5604] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  231.278327][ T5604] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  231.278346][ T5604] usb 1-1: Manufacturer: syz
[  231.439245][ T5604] usb 1-1: config 0 descriptor??
[  231.949738][ T5604] rc_core: IR keymap rc-hauppauge not found
[  231.949758][ T5604] Registered IR keymap rc-empty
[  231.949913][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  231.976813][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  231.990486][ T5604] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  232.111962][ T5604] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18
[  232.141787][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  232.168088][    C0] rc rc0: IR event FIFO is full!
[  232.168103][    C0] rc rc0: IR event FIFO is full!
[  232.168115][    C0] rc rc0: IR event FIFO is full!
[  232.168127][    C0] rc rc0: IR event FIFO is full!
[  232.168138][    C0] rc rc0: IR event FIFO is full!
[  232.168151][    C0] rc rc0: IR event FIFO is full!
[  232.168162][    C0] rc rc0: IR event FIFO is full!
[  232.168366][    C0] rc rc0: IR event FIFO is full!
[  232.168378][    C0] rc rc0: IR event FIFO is full!
[  232.168388][    C0] rc rc0: IR event FIFO is full!
[  232.168398][    C0] rc rc0: IR event FIFO is full!
[  232.168408][    C0] rc rc0: IR event FIFO is full!
[  232.168418][    C0] rc rc0: IR event FIFO is full!
[  232.168887][    C0] rc rc0: IR event FIFO is full!
[  232.169108][    C0] rc rc0: IR event FIFO is full!
[  232.169120][    C0] rc rc0: IR event FIFO is full!
[  232.169130][    C0] rc rc0: IR event FIFO is full!
[  232.169141][    C0] rc rc0: IR event FIFO is full!
[  232.169152][    C0] rc rc0: IR event FIFO is full!
[  232.169163][    C0] rc rc0: IR event FIFO is full!
[  232.169575][    C0] rc rc0: IR event FIFO is full!
[  232.169802][    C0] rc rc0: IR event FIFO is full!
[  232.169814][    C0] rc rc0: IR event FIFO is full!
[  232.169824][    C0] rc rc0: IR event FIFO is full!
[  232.169836][    C0] rc rc0: IR event FIFO is full!
[  232.170060][    C0] rc rc0: IR event FIFO is full!
[  232.170073][    C0] rc rc0: IR event FIFO is full!
[  232.170085][    C0] rc rc0: IR event FIFO is full!
[  232.170094][    C0] rc rc0: IR event FIFO is full!
[  232.170104][    C0] rc rc0: IR event FIFO is full!
[  232.170315][    C0] rc rc0: IR event FIFO is full!
[  232.170554][    C0] rc rc0: IR event FIFO is full!
[  232.170567][    C0] rc rc0: IR event FIFO is full!
[  232.170579][    C0] rc rc0: IR event FIFO is full!
[  232.170592][    C0] rc rc0: IR event FIFO is full!
[  232.171029][    C0] rc rc0: IR event FIFO is full!
[  232.171883][    C0] rc rc0: IR event FIFO is full!
[  232.172105][    C0] rc rc0: IR event FIFO is full!
[  232.172117][    C0] rc rc0: IR event FIFO is full!
[  232.172127][    C0] rc rc0: IR event FIFO is full!
[  232.172139][    C0] rc rc0: IR event FIFO is full!
[  232.172150][    C0] rc rc0: IR event FIFO is full!
[  232.172160][    C0] rc rc0: IR event FIFO is full!
[  232.172171][    C0] rc rc0: IR event FIFO is full!
[  232.172394][    C0] rc rc0: IR event FIFO is full!
[  232.172406][    C0] rc rc0: IR event FIFO is full!
[  232.172416][    C0] rc rc0: IR event FIFO is full!
[  232.172634][    C0] rc rc0: IR event FIFO is full!
[  232.172646][    C0] rc rc0: IR event FIFO is full!
[  232.172656][    C0] rc rc0: IR event FIFO is full!
[  232.172665][    C0] rc rc0: IR event FIFO is full!
[  232.172677][    C0] rc rc0: IR event FIFO is full!
[  232.172688][    C0] rc rc0: IR event FIFO is full!
[  232.172698][    C0] rc rc0: IR event FIFO is full!
[  232.172708][    C0] rc rc0: IR event FIFO is full!
[  232.172720][    C0] rc rc0: IR event FIFO is full!
[  232.172956][    C0] rc rc0: IR event FIFO is full!
[  232.172969][    C0] rc rc0: IR event FIFO is full!
[  232.173388][    C0] rc rc0: IR event FIFO is full!
[  232.173614][    C0] rc rc0: IR event FIFO is full!
[  232.173627][    C0] rc rc0: IR event FIFO is full!
[  232.173640][    C0] rc rc0: IR event FIFO is full!
[  232.173651][    C0] rc rc0: IR event FIFO is full!
[  232.173662][    C0] rc rc0: IR event FIFO is full!
[  232.173672][    C0] rc rc0: IR event FIFO is full!
[  232.173682][    C0] rc rc0: IR event FIFO is full!
[  232.173691][    C0] rc rc0: IR event FIFO is full!
[  232.173702][    C0] rc rc0: IR event FIFO is full!
[  232.173946][    C0] rc rc0: IR event FIFO is full!
[  232.173960][    C0] rc rc0: IR event FIFO is full!
[  232.173972][    C0] rc rc0: IR event FIFO is full!
[  232.174189][    C0] rc rc0: IR event FIFO is full!
[  232.174201][    C0] rc rc0: IR event FIFO is full!
[  232.174212][    C0] rc rc0: IR event FIFO is full!
[  232.174425][    C0] rc rc0: IR event FIFO is full!
[  232.174438][    C0] rc rc0: IR event FIFO is full!
[  232.174449][    C0] rc rc0: IR event FIFO is full!
[  232.174460][    C0] rc rc0: IR event FIFO is full!
[  232.174472][    C0] rc rc0: IR event FIFO is full!
[  232.174483][    C0] rc rc0: IR event FIFO is full!
[  232.174495][    C0] rc rc0: IR event FIFO is full!
[  232.174504][    C0] rc rc0: IR event FIFO is full!
[  232.174514][    C0] rc rc0: IR event FIFO is full!
[  232.174523][    C0] rc rc0: IR event FIFO is full!
[  232.174772][    C0] rc rc0: IR event FIFO is full!
[  232.174787][    C0] rc rc0: IR event FIFO is full!
[  232.174802][    C0] rc rc0: IR event FIFO is full!
[  232.174815][    C0] rc rc0: IR event FIFO is full!
[  232.175055][    C0] rc rc0: IR event FIFO is full!
[  232.175071][    C0] rc rc0: IR event FIFO is full!
[  232.175086][    C0] rc rc0: IR event FIFO is full!
[  232.175100][    C0] rc rc0: IR event FIFO is full!
[  232.175113][    C0] rc rc0: IR event FIFO is full!
[  232.175348][    C0] rc rc0: IR event FIFO is full!
[  232.175364][    C0] rc rc0: IR event FIFO is full!
[  232.175378][    C0] rc rc0: IR event FIFO is full!
[  232.175621][    C0] rc rc0: IR event FIFO is full!
[  232.175637][    C0] rc rc0: IR event FIFO is full!
[  232.175653][    C0] rc rc0: IR event FIFO is full!
[  232.175667][    C0] rc rc0: IR event FIFO is full!
[  232.175682][    C0] rc rc0: IR event FIFO is full!
[  232.175695][    C0] rc rc0: IR event FIFO is full!
[  232.175709][    C0] rc rc0: IR event FIFO is full!
[  232.176167][    C0] rc rc0: IR event FIFO is full!
[  232.176183][    C0] rc rc0: IR event FIFO is full!
[  232.176197][    C0] rc rc0: IR event FIFO is full!
[  232.176210][    C0] rc rc0: IR event FIFO is full!
[  232.176223][    C0] rc rc0: IR event FIFO is full!
[  232.176674][    C0] rc rc0: IR event FIFO is full!
[  232.176688][    C0] rc rc0: IR event FIFO is full!
[  232.176701][    C0] rc rc0: IR event FIFO is full!
[  232.176714][    C0] rc rc0: IR event FIFO is full!
[  232.176728][    C0] rc rc0: IR event FIFO is full!
[  232.176741][    C0] rc rc0: IR event FIFO is full!
[  232.176755][    C0] rc rc0: IR event FIFO is full!
[  232.176769][    C0] rc rc0: IR event FIFO is full!
[  232.176998][    C0] rc rc0: IR event FIFO is full!
[  232.177013][    C0] rc rc0: IR event FIFO is full!
[  232.177027][    C0] rc rc0: IR event FIFO is full!
[  232.177040][    C0] rc rc0: IR event FIFO is full!
[  232.177054][    C0] rc rc0: IR event FIFO is full!
[  232.177288][    C0] rc rc0: IR event FIFO is full!
[  232.177518][    C0] rc rc0: IR event FIFO is full!
[  232.177533][    C0] rc rc0: IR event FIFO is full!
[  232.177547][    C0] rc rc0: IR event FIFO is full!
[  232.177561][    C0] rc rc0: IR event FIFO is full!
[  232.177577][    C0] rc rc0: IR event FIFO is full!
[  232.177591][    C0] rc rc0: IR event FIFO is full!
[  232.177611][    C0] rc rc0: IR event FIFO is full!
[  232.177866][    C0] rc rc0: IR event FIFO is full!
[  232.178317][    C0] rc rc0: IR event FIFO is full!
[  232.178333][    C0] rc rc0: IR event FIFO is full!
[  232.178348][    C0] rc rc0: IR event FIFO is full!
[  232.178362][    C0] rc rc0: IR event FIFO is full!
[  232.178376][    C0] rc rc0: IR event FIFO is full!
[  232.178409][    C0] rc rc0: IR event FIFO is full!
[  232.178695][    C0] rc rc0: IR event FIFO is full!
[  232.178711][    C0] rc rc0: IR event FIFO is full!
[  232.178725][    C0] rc rc0: IR event FIFO is full!
[  232.178739][    C0] rc rc0: IR event FIFO is full!
[  232.178753][    C0] rc rc0: IR event FIFO is full!
[  232.178766][    C0] rc rc0: IR event FIFO is full!
[  232.179229][    C0] rc rc0: IR event FIFO is full!
[  232.179245][    C0] rc rc0: IR event FIFO is full!
[  232.179258][    C0] rc rc0: IR event FIFO is full!
[  232.179481][    C0] rc rc0: IR event FIFO is full!
[  232.179496][    C0] rc rc0: IR event FIFO is full!
[  232.179511][    C0] rc rc0: IR event FIFO is full!
[  232.179524][    C0] rc rc0: IR event FIFO is full!
[  232.179538][    C0] rc rc0: IR event FIFO is full!
[  232.179552][    C0] rc rc0: IR event FIFO is full!
[  232.179565][    C0] rc rc0: IR event FIFO is full!
[  232.179578][    C0] rc rc0: IR event FIFO is full!
[  232.179592][    C0] rc rc0: IR event FIFO is full!
[  232.179835][    C0] rc rc0: IR event FIFO is full!
[  232.179850][    C0] rc rc0: IR event FIFO is full!
[  232.180313][    C0] rc rc0: IR event FIFO is full!
[  232.180329][    C0] rc rc0: IR event FIFO is full!
[  232.180342][    C0] rc rc0: IR event FIFO is full!
[  232.180357][    C0] rc rc0: IR event FIFO is full!
[  232.180371][    C0] rc rc0: IR event FIFO is full!
[  232.180385][    C0] rc rc0: IR event FIFO is full!
[  232.180617][    C0] rc rc0: IR event FIFO is full!
[  232.180633][    C0] rc rc0: IR event FIFO is full!
[  232.180647][    C0] rc rc0: IR event FIFO is full!
[  232.180660][    C0] rc rc0: IR event FIFO is full!
[  232.180674][    C0] rc rc0: IR event FIFO is full!
[  232.180687][    C0] rc rc0: IR event FIFO is full!
[  232.180701][    C0] rc rc0: IR event FIFO is full!
[  232.180715][    C0] rc rc0: IR event FIFO is full!
[  232.180953][    C0] rc rc0: IR event FIFO is full!
[  232.180968][    C0] rc rc0: IR event FIFO is full!
[  232.180980][    C0] rc rc0: IR event FIFO is full!
[  232.181205][    C0] rc rc0: IR event FIFO is full!
[  232.181220][    C0] rc rc0: IR event FIFO is full!
[  232.181233][    C0] rc rc0: IR event FIFO is full!
[  232.181247][    C0] rc rc0: IR event FIFO is full!
[  232.181261][    C0] rc rc0: IR event FIFO is full!
[  232.181274][    C0] rc rc0: IR event FIFO is full!
[  232.181288][    C0] rc rc0: IR event FIFO is full!
[  232.181301][    C0] rc rc0: IR event FIFO is full!
[  232.181315][    C0] rc rc0: IR event FIFO is full!
[  232.181328][    C0] rc rc0: IR event FIFO is full!
[  232.181342][    C0] rc rc0: IR event FIFO is full!
[  232.181578][    C0] rc rc0: IR event FIFO is full!
[  232.181593][    C0] rc rc0: IR event FIFO is full!
[  232.181612][    C0] rc rc0: IR event FIFO is full!
[  232.181625][    C0] rc rc0: IR event FIFO is full!
[  232.182275][    C0] rc rc0: IR event FIFO is full!
[  232.182291][    C0] rc rc0: IR event FIFO is full!
[  232.182305][    C0] rc rc0: IR event FIFO is full!
[  232.182318][    C0] rc rc0: IR event FIFO is full!
[  232.182332][    C0] rc rc0: IR event FIFO is full!
[  232.182346][    C0] rc rc0: IR event FIFO is full!
[  232.182360][    C0] rc rc0: IR event FIFO is full!
[  232.182374][    C0] rc rc0: IR event FIFO is full!
[  232.182387][    C0] rc rc0: IR event FIFO is full!
[  232.182643][    C0] rc rc0: IR event FIFO is full!
[  232.182659][    C0] rc rc0: IR event FIFO is full!
[  232.182674][    C0] rc rc0: IR event FIFO is full!
[  232.182687][    C0] rc rc0: IR event FIFO is full!
[  232.182701][    C0] rc rc0: IR event FIFO is full!
[  232.182933][    C0] rc rc0: IR event FIFO is full!
[  232.182948][    C0] rc rc0: IR event FIFO is full!
[  232.182961][    C0] rc rc0: IR event FIFO is full!
[  232.182975][    C0] rc rc0: IR event FIFO is full!
[  232.182988][    C0] rc rc0: IR event FIFO is full!
[  232.183002][    C0] rc rc0: IR event FIFO is full!
[  232.183016][    C0] rc rc0: IR event FIFO is full!
[  232.183029][    C0] rc rc0: IR event FIFO is full!
[  232.183043][    C0] rc rc0: IR event FIFO is full!
[  232.183266][    C0] rc rc0: IR event FIFO is full!
[  232.183930][    C0] rc rc0: IR event FIFO is full!
[  232.183946][    C0] rc rc0: IR event FIFO is full!
[  232.183960][    C0] rc rc0: IR event FIFO is full!
[  232.183974][    C0] rc rc0: IR event FIFO is full!
[  232.183987][    C0] rc rc0: IR event FIFO is full!
[  232.184001][    C0] rc rc0: IR event FIFO is full!
[  232.184014][    C0] rc rc0: IR event FIFO is full!
[  232.184028][    C0] rc rc0: IR event FIFO is full!
[  232.184253][    C0] rc rc0: IR event FIFO is full!
[  232.184267][    C0] rc rc0: IR event FIFO is full!
[  232.184281][    C0] rc rc0: IR event FIFO is full!
[  232.184532][    C0] rc rc0: IR event FIFO is full!
[  232.184547][    C0] rc rc0: IR event FIFO is full!
[  232.184561][    C0] rc rc0: IR event FIFO is full!
[  232.184594][    C0] rc rc0: IR event FIFO is full!
[  232.184618][    C0] rc rc0: IR event FIFO is full!
[  232.184632][    C0] rc rc0: IR event FIFO is full!
[  232.184646][    C0] rc rc0: IR event FIFO is full!
[  232.185090][    C0] rc rc0: IR event FIFO is full!
[  232.185105][    C0] rc rc0: IR event FIFO is full!
[  232.185119][    C0] rc rc0: IR event FIFO is full!
[  232.185136][    C0] rc rc0: IR event FIFO is full!
[  232.185150][    C0] rc rc0: IR event FIFO is full!
[  232.185388][    C0] rc rc0: IR event FIFO is full!
[  232.185411][    C0] rc rc0: IR event FIFO is full!
[  232.185425][    C0] rc rc0: IR event FIFO is full!
[  232.185438][    C0] rc rc0: IR event FIFO is full!
[  232.185452][    C0] rc rc0: IR event FIFO is full!
[  232.185466][    C0] rc rc0: IR event FIFO is full!
[  232.185480][    C0] rc rc0: IR event FIFO is full!
[  232.185493][    C0] rc rc0: IR event FIFO is full!
[  232.185507][    C0] rc rc0: IR event FIFO is full!
[  232.185521][    C0] rc rc0: IR event FIFO is full!
[  232.185778][    C0] rc rc0: IR event FIFO is full!
[  232.185793][    C0] rc rc0: IR event FIFO is full!
[  232.185807][    C0] rc rc0: IR event FIFO is full!
[  232.185822][    C0] rc rc0: IR event FIFO is full!
[  232.185836][    C0] rc rc0: IR event FIFO is full!
[  232.185850][    C0] rc rc0: IR event FIFO is full!
[  232.185864][    C0] rc rc0: IR event FIFO is full!
[  232.185878][    C0] rc rc0: IR event FIFO is full!
[  232.185892][    C0] rc rc0: IR event FIFO is full!
[  232.186128][    C0] rc rc0: IR event FIFO is full!
[  232.186143][    C0] rc rc0: IR event FIFO is full!
[  232.186157][    C0] rc rc0: IR event FIFO is full!
[  232.186402][    C0] rc rc0: IR event FIFO is full!
[  232.186418][    C0] rc rc0: IR event FIFO is full!
[  232.186433][    C0] rc rc0: IR event FIFO is full!
[  232.186447][    C0] rc rc0: IR event FIFO is full!
[  232.558652][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  232.620993][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.136906][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.206783][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.233242][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.261720][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.289594][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.308657][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.348685][ T5604] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  233.610646][ T5604] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  233.610668][ T5604] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  233.740078][ T5604] usb 1-1: USB disconnect, device number 9
[  239.838654][   T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  240.258702][   T31] usb 4-1: Using ep0 maxpacket: 16
[  240.280226][   T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.280288][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  240.280315][   T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  240.280335][   T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  240.280356][   T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.286887][   T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  240.286911][   T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  240.286928][   T31] usb 4-1: Manufacturer: syz
[  240.614399][   T31] usb 4-1: config 0 descriptor??
[  241.136068][   T31] rc_core: IR keymap rc-hauppauge not found
[  241.136087][   T31] Registered IR keymap rc-empty
[  241.136214][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.159040][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.374307][   T31] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  241.377265][   T31] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19
[  241.489352][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.508706][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.577355][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.588818][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.608749][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.841666][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.861245][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.887685][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.917712][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  241.964906][   T31] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  242.717597][   T31] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  242.717620][   T31] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  242.920542][   T31] usb 4-1: USB disconnect, device number 6
[  251.228793][ T5604] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  251.939276][ T5604] usb 5-1: Using ep0 maxpacket: 16
[  252.121994][ T5604] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.122049][ T5604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  252.122077][ T5604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  252.122099][ T5604] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  252.122122][ T5604] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  252.129217][ T5604] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  252.129243][ T5604] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  252.129263][ T5604] usb 5-1: Manufacturer: syz
[  252.376421][ T5604] usb 5-1: config 0 descriptor??
[  253.749220][ T5604] rc_core: IR keymap rc-hauppauge not found
[  253.749238][ T5604] Registered IR keymap rc-empty
[  253.749374][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  253.771554][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  253.790092][ T5604] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  253.793045][ T5604] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20
[  254.022691][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  254.038673][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  254.849823][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  254.868847][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  254.888696][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  254.908678][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  254.929801][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  254.954109][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  254.968658][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  254.992092][ T5604] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  255.344437][ T5604] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  255.344459][ T5604] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  255.457749][ T5604] usb 5-1: USB disconnect, device number 6
[  255.513959][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  255.514020][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  257.954870][ T6968] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  257.955013][ T6968] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  257.955390][ T6968] vhci_hcd vhci_hcd.0: Device attached
[  258.076176][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.387'.
[  258.362973][  T820] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  258.472971][  T820] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  260.688332][ T6971] vhci_hcd: connection reset by peer
[  260.699214][  T209] vhci_hcd vhci_hcd.2: stop threads
[  260.699236][  T209] vhci_hcd vhci_hcd.2: release socket
[  260.699509][  T209] vhci_hcd vhci_hcd.2: disconnect device
[  263.700617][  T820] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  264.017551][ T6994] netlink: 'syz.1.394': attribute type 6 has an invalid length.
[  270.818381][ T7040] netlink: 'syz.3.409': attribute type 6 has an invalid length.
[  270.968784][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.408'.
[  271.049226][ T7041] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  271.049300][ T7041] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  271.054635][ T7041] vhci_hcd vhci_hcd.0: Device attached
[  271.507238][  T870] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  271.860739][  T870] usb 37-1: new full-speed USB device number 3 using vhci_hcd
[  274.704344][ T7042] vhci_hcd: connection reset by peer
[  274.706921][ T3398] vhci_hcd vhci_hcd.2: stop threads
[  274.706943][ T3398] vhci_hcd vhci_hcd.2: release socket
[  274.707006][ T3398] vhci_hcd vhci_hcd.2: disconnect device
[  277.118675][  T870] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  291.599182][ T5604] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  291.948585][ T5604] usb 4-1: Using ep0 maxpacket: 8
[  291.950285][ T5604] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  291.950308][ T5604] usb 4-1: config 0 has an invalid interface descriptor of length 7, skipping
[  291.950325][ T5604] usb 4-1: config 0 has no interface number 0
[  291.952486][ T5604] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  291.952509][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.952527][ T5604] usb 4-1: Product: syz
[  291.952540][ T5604] usb 4-1: Manufacturer: syz
[  291.952552][ T5604] usb 4-1: SerialNumber: syz
[  291.957501][ T5604] usb 4-1: config 0 descriptor??
[  292.273107][ T5604] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  292.273205][ T5604] uvcvideo 4-1:0.31: No valid video chain found.
[  292.370197][ T5604] usb 4-1: USB disconnect, device number 7
[  293.084358][ T7112] binder: 7108:7112 ioctl 4018620d 0 returned -22
[  293.084635][ T7112] binder: 7108:7112 ioctl 4008941a 200000000200 returned -22
[  297.063083][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  297.121073][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  297.165017][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  297.186049][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  297.190936][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  299.281935][ T5606] Bluetooth: hci5: command tx timeout
[  300.817616][ T7148] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  300.817641][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  300.817727][ T7148] vhci_hcd vhci_hcd.0: Device attached
[  300.818414][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.433'.
[  301.348711][ T5606] Bluetooth: hci5: command tx timeout
[  301.707480][ T5835] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  301.788964][ T5835] usb 37-1: new full-speed USB device number 4 using vhci_hcd
[  303.428607][ T5606] Bluetooth: hci5: command tx timeout
[  303.486738][ T7149] vhci_hcd: connection reset by peer
[  303.487699][ T1141] vhci_hcd vhci_hcd.2: stop threads
[  303.487719][ T1141] vhci_hcd vhci_hcd.2: release socket
[  303.487787][ T1141] vhci_hcd vhci_hcd.2: disconnect device
[  305.533834][ T5606] Bluetooth: hci5: command tx timeout
[  307.108729][ T5835] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  307.213773][ T7169] netlink: 'syz.4.438': attribute type 6 has an invalid length.
[  310.958631][ T5835] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  311.278548][ T5835] usb 5-1: Using ep0 maxpacket: 16
[  311.281050][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.281096][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  311.281121][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  311.281140][ T5835] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  311.281161][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.282246][ T5835] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  311.282270][ T5835] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  311.282288][ T5835] usb 5-1: Manufacturer: syz
[  311.398052][ T5835] usb 5-1: config 0 descriptor??
[  312.109343][ T5835] rc_core: IR keymap rc-hauppauge not found
[  312.109362][ T5835] Registered IR keymap rc-empty
[  312.109500][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.139473][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.170231][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  312.176962][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21
[  312.219843][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.242034][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.269601][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.291931][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.309251][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.496608][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.508730][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.528711][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.580611][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.862786][ T5835] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  312.930185][ T5835] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  312.930207][ T5835] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  313.598673][ T5835] usb 5-1: USB disconnect, device number 7
[  316.956751][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  316.956818][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  317.033800][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.033917][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.034145][ T7125] bridge_slave_0: entered allmulticast mode
[  317.173360][ T7125] bridge_slave_0: entered promiscuous mode
[  318.228369][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.228483][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.228716][ T7125] bridge_slave_1: entered allmulticast mode
[  318.268871][ T7125] bridge_slave_1: entered promiscuous mode
[  320.874247][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.513000][ T7217] netlink: 'syz.0.450': attribute type 6 has an invalid length.
[  324.324285][ T7125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.387860][ T7125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.184434][ T7125] team0: Port device team_slave_0 added
[  325.205250][ T7125] team0: Port device team_slave_1 added
[  326.442229][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.442245][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.442270][ T7125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.545841][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.545879][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.545941][ T7125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  327.042782][ T5606] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  327.042829][ T5606] CPU: 1 UID: 0 PID: 5606 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  327.042852][ T5606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  327.042869][ T5606] Workqueue: hci2 hci_rx_work
[  327.042920][ T5606] Call Trace:
[  327.042927][ T5606]  <TASK>
[  327.042935][ T5606]  dump_stack_lvl+0xe8/0x150
[  327.042962][ T5606]  sysfs_create_dir_ns+0x271/0x2a0
[  327.042992][ T5606]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  327.043014][ T5606]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  327.043047][ T5606]  ? rt_spin_unlock+0x160/0x200
[  327.043069][ T5606]  kobject_add_internal+0x631/0xd10
[  327.043106][ T5606]  kobject_add+0x163/0x240
[  327.043139][ T5606]  ? __pfx_kobject_add+0x10/0x10
[  327.043175][ T5606]  ? get_device_parent+0x370/0x3a0
[  327.043201][ T5606]  device_add+0x408/0xbb0
[  327.043227][ T5606]  hci_conn_add_sysfs+0xd5/0x210
[  327.043254][ T5606]  le_conn_complete_evt+0x10e6/0x16b0
[  327.043282][ T5606]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  327.043301][ T5606]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  327.043327][ T5606]  ? lockdep_hardirqs_on+0x7a/0x110
[  327.043354][ T5606]  ? skb_pull_data+0xfb/0x200
[  327.043386][ T5606]  hci_le_enh_conn_complete_evt+0x189/0x490
[  327.043417][ T5606]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  327.043450][ T5606]  hci_event_packet+0x659/0xef0
[  327.043481][ T5606]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  327.043500][ T5606]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  327.043526][ T5606]  ? __pfx_hci_event_packet+0x10/0x10
[  327.043550][ T5606]  ? rt_spin_unlock+0x14f/0x200
[  327.043584][ T5606]  ? hci_send_to_monitor+0xe2/0x590
[  327.043608][ T5606]  hci_rx_work+0x3ee/0x1040
[  327.043639][ T5606]  ? process_scheduled_works+0xa70/0x1860
[  327.043662][ T5606]  process_scheduled_works+0xb5d/0x1860
[  327.043712][ T5606]  ? __pfx_process_scheduled_works+0x10/0x10
[  327.043739][ T5606]  ? assign_work+0x3d5/0x5e0
[  327.043764][ T5606]  worker_thread+0xa53/0xfc0
[  327.043809][ T5606]  kthread+0x388/0x470
[  327.043834][ T5606]  ? __pfx_worker_thread+0x10/0x10
[  327.043853][ T5606]  ? __pfx_kthread+0x10/0x10
[  327.043880][ T5606]  ret_from_fork+0x514/0xb70
[  327.043904][ T5606]  ? __pfx_ret_from_fork+0x10/0x10
[  327.043925][ T5606]  ? __switch_to+0xc79/0x1410
[  327.043956][ T5606]  ? __pfx_kthread+0x10/0x10
[  327.043983][ T5606]  ret_from_fork_asm+0x1a/0x30
[  327.044022][ T5606]  </TASK>
[  327.044053][ T5606] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  327.044087][ T5606] Bluetooth: hci2: failed to register connection device
[  327.772615][ T7125] hsr_slave_0: entered promiscuous mode
[  327.775755][ T7125] hsr_slave_1: entered promiscuous mode
[  327.797188][ T7125] debugfs: 'hsr0' already exists in 'hsr'
[  327.797211][ T7125] Cannot create hsr debugfs directory
[  328.585815][ T4916] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  328.585840][ T4916] CPU: 1 UID: 0 PID: 4916 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  328.585862][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  328.585874][ T4916] Workqueue: hci3 hci_rx_work
[  328.585904][ T4916] Call Trace:
[  328.585912][ T4916]  <TASK>
[  328.585920][ T4916]  dump_stack_lvl+0xe8/0x150
[  328.585945][ T4916]  sysfs_create_dir_ns+0x271/0x2a0
[  328.585975][ T4916]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  328.585998][ T4916]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  328.586030][ T4916]  ? rt_spin_unlock+0x160/0x200
[  328.586054][ T4916]  kobject_add_internal+0x631/0xd10
[  328.586091][ T4916]  kobject_add+0x163/0x240
[  328.586124][ T4916]  ? __pfx_kobject_add+0x10/0x10
[  328.586159][ T4916]  ? get_device_parent+0x370/0x3a0
[  328.586186][ T4916]  device_add+0x408/0xbb0
[  328.586214][ T4916]  hci_conn_add_sysfs+0xd5/0x210
[  328.586242][ T4916]  le_conn_complete_evt+0x10e6/0x16b0
[  328.586271][ T4916]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  328.586290][ T4916]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  328.586316][ T4916]  ? lockdep_hardirqs_on+0x7a/0x110
[  328.586343][ T4916]  ? skb_pull_data+0xfb/0x200
[  328.586375][ T4916]  hci_le_enh_conn_complete_evt+0x189/0x490
[  328.586407][ T4916]  ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10
[  328.586448][ T4916]  hci_event_packet+0x659/0xef0
[  328.586480][ T4916]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  328.586500][ T4916]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  328.586527][ T4916]  ? __pfx_hci_event_packet+0x10/0x10
[  328.586551][ T4916]  ? rt_spin_unlock+0x14f/0x200
[  328.586580][ T4916]  ? hci_send_to_monitor+0xe2/0x590
[  328.586603][ T4916]  hci_rx_work+0x3ee/0x1040
[  328.586634][ T4916]  ? process_scheduled_works+0xa70/0x1860
[  328.586657][ T4916]  process_scheduled_works+0xb5d/0x1860
[  328.586708][ T4916]  ? __pfx_process_scheduled_works+0x10/0x10
[  328.586737][ T4916]  ? assign_work+0x3d5/0x5e0
[  328.586763][ T4916]  worker_thread+0xa53/0xfc0
[  328.586810][ T4916]  kthread+0x388/0x470
[  328.586837][ T4916]  ? __pfx_worker_thread+0x10/0x10
[  328.586856][ T4916]  ? __pfx_kthread+0x10/0x10
[  328.586883][ T4916]  ret_from_fork+0x514/0xb70
[  328.586908][ T4916]  ? __pfx_ret_from_fork+0x10/0x10
[  328.586929][ T4916]  ? __switch_to+0xc79/0x1410
[  328.586961][ T4916]  ? __pfx_kthread+0x10/0x10
[  328.586988][ T4916]  ret_from_fork_asm+0x1a/0x30
[  328.587028][ T4916]  </TASK>
[  328.587056][ T4916] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  328.587092][ T4916] Bluetooth: hci3: failed to register connection device
[  330.065432][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  330.167985][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  330.203761][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  330.223623][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  330.234451][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  331.748695][  T820] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  331.909796][  T820] usb 3-1: Using ep0 maxpacket: 16
[  331.914989][  T820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  331.915034][  T820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  331.915056][  T820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  331.915074][  T820] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  331.915092][  T820] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  331.917578][  T820] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  331.917611][  T820] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  331.917627][  T820] usb 3-1: Manufacturer: syz
[  332.039466][  T820] usb 3-1: config 0 descriptor??
[  332.369900][ T5606] Bluetooth: hci1: command tx timeout
[  334.419354][ T5606] Bluetooth: hci1: command tx timeout
[  335.378619][  T820] rc_core: IR keymap rc-hauppauge not found
[  335.378637][  T820] Registered IR keymap rc-empty
[  335.378779][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.418668][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.440203][  T820] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  335.443183][  T820] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input22
[  335.484396][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.506557][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.518646][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.538640][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.568627][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.588736][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.611198][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.638634][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.658665][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.679604][  T820] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  335.964225][  T820] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  335.964251][  T820] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  336.821292][ T5606] Bluetooth: hci1: command tx timeout
[  337.035516][  T820] usb 3-1: USB disconnect, device number 6
[  337.999752][ T7269] netlink: 'syz.2.461': attribute type 6 has an invalid length.
[  338.559440][ T7125] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  338.800676][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  338.819835][ T7125] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  338.871062][ T5606] Bluetooth: hci1: command tx timeout
[  340.163640][ T7276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.463'.
[  340.254606][ T7275] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  340.254675][ T7275] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  340.262874][ T7275] vhci_hcd vhci_hcd.0: Device attached
[  341.586338][  T870] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  341.678924][  T870] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  342.397657][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  342.427875][ T7125] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  342.539978][ T7277] vhci_hcd: connection reset by peer
[  342.620252][ T3376] vhci_hcd vhci_hcd.0: stop threads
[  342.620276][ T3376] vhci_hcd vhci_hcd.0: release socket
[  342.620340][ T3376] vhci_hcd vhci_hcd.0: disconnect device
[  342.729956][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  342.968008][ T7125] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  343.400102][ T7125] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  347.328613][  T870] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  354.953908][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.805851][ T7319] netlink: 'syz.4.472': attribute type 6 has an invalid length.
[  362.060137][ T4916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  362.092175][ T4916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  362.100066][ T4916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  362.165834][ T4916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  362.168014][ T4916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  363.156981][ T7238] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.157100][ T7238] bridge0: port 1(bridge_slave_0) entered disabled state
[  363.157299][ T7238] bridge_slave_0: entered allmulticast mode
[  363.247749][ T7238] bridge_slave_0: entered promiscuous mode
[  363.332270][ T7238] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.335450][ T7238] bridge0: port 2(bridge_slave_1) entered disabled state
[  363.341873][ T7238] bridge_slave_1: entered allmulticast mode
[  363.367903][ T7238] bridge_slave_1: entered promiscuous mode
[  364.308630][ T5606] Bluetooth: hci4: command tx timeout
[  365.053244][ T7341] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  365.053281][ T7341] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  365.053570][ T7341] vhci_hcd vhci_hcd.0: Device attached
[  365.309900][ T5609] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  365.378687][ T5609] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  366.405925][ T5606] Bluetooth: hci4: command tx timeout
[  368.468646][ T5606] Bluetooth: hci4: command tx timeout
[  368.691318][ T7342] vhci_hcd: connection reset by peer
[  368.695074][ T1513] vhci_hcd vhci_hcd.4: stop threads
[  368.695095][ T1513] vhci_hcd vhci_hcd.4: release socket
[  368.695155][ T1513] vhci_hcd vhci_hcd.4: disconnect device
[  369.556208][ T7238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.002319][ T7238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.033093][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  370.366439][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  370.403619][ T7238] team0: Port device team_slave_0 added
[  370.414446][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  370.426051][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  370.426839][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  371.078315][ T5606] Bluetooth: hci4: command tx timeout
[  371.417743][ T7238] team0: Port device team_slave_1 added
[  371.438387][ T5606] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  371.530569][ T5609] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  372.571535][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.571553][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.571581][ T7238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.870313][ T7238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.870331][ T7238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  372.870359][ T7238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.428669][ T4916] Bluetooth: hci5: command tx timeout
[  374.399610][ T7373] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  374.399685][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  374.400767][ T7373] vhci_hcd vhci_hcd.0: Device attached
[  374.483311][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.481'.
[  374.679670][   T36] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  374.851249][   T36] usb 41-1: new full-speed USB device number 3 using vhci_hcd
[  375.508629][ T4916] Bluetooth: hci5: command tx timeout
[  376.997332][ T7238] hsr_slave_0: entered promiscuous mode
[  377.121037][ T7238] hsr_slave_1: entered promiscuous mode
[  377.261806][ T7238] debugfs: 'hsr0' already exists in 'hsr'
[  377.261834][ T7238] Cannot create hsr debugfs directory
[  377.588703][ T4916] Bluetooth: hci5: command tx timeout
[  377.939065][ T7375] vhci_hcd: connection reset by peer
[  377.962804][   T43] vhci_hcd vhci_hcd.4: stop threads
[  377.962825][   T43] vhci_hcd vhci_hcd.4: release socket
[  377.962885][   T43] vhci_hcd vhci_hcd.4: disconnect device
[  378.393955][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  378.394015][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  379.668960][ T4916] Bluetooth: hci5: command tx timeout
[  380.580213][   T36] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  383.570453][ T7398] syz.4.484 uses obsolete (PF_INET,SOCK_PACKET)
[  389.797368][ T4916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  389.817829][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  389.832442][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  389.837103][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  389.837808][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  391.318655][ T5710] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  391.478722][ T5710] usb 1-1: Using ep0 maxpacket: 16
[  391.482172][ T5710] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  391.482219][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  391.482244][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  391.482263][ T5710] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  391.482284][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  391.488194][ T5710] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  391.488217][ T5710] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  391.488235][ T5710] usb 1-1: Manufacturer: syz
[  391.918338][ T5710] usb 1-1: config 0 descriptor??
[  391.988668][ T5606] Bluetooth: hci3: command tx timeout
[  394.165046][ T5606] Bluetooth: hci3: command tx timeout
[  394.810058][ T5710] rc_core: IR keymap rc-hauppauge not found
[  394.810079][ T5710] Registered IR keymap rc-empty
[  394.811388][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  394.859055][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.443236][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  395.446083][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23
[  395.539549][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.559293][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.660510][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.693054][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.710177][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.728629][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.748690][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.770497][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.788638][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.808697][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  395.972942][ T5710] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  395.972965][ T5710] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  396.127653][ T5710] usb 1-1: USB disconnect, device number 10
[  396.228564][ T5606] Bluetooth: hci3: command tx timeout
[  398.308574][ T5606] Bluetooth: hci3: command tx timeout
[  399.655562][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.655713][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.655886][ T7329] bridge_slave_0: entered allmulticast mode
[  399.687311][ T7329] bridge_slave_0: entered promiscuous mode
[  399.802658][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.802778][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.802970][ T7329] bridge_slave_1: entered allmulticast mode
[  399.896317][ T7329] bridge_slave_1: entered promiscuous mode
[  402.812592][ T4916] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  402.851769][ T4916] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  402.857886][ T4916] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  402.873367][ T4916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  402.874150][ T4916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  403.621961][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.382587][ T7456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.491'.
[  405.038552][ T4916] Bluetooth: hci6: command tx timeout
[  407.109678][ T4916] Bluetooth: hci6: command tx timeout
[  408.270616][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.310173][ T7454] netlink: 244 bytes leftover after parsing attributes in process `syz.0.491'.
[  408.431623][ T7454] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[  408.672718][ T7349] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.710703][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.720195][ T7349] bridge_slave_0: entered allmulticast mode
[  408.786802][ T7349] bridge_slave_0: entered promiscuous mode
[  408.994929][ T7349] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.995041][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.995240][ T7349] bridge_slave_1: entered allmulticast mode
[  409.023903][ T7349] bridge_slave_1: entered promiscuous mode
[  409.208697][ T4916] Bluetooth: hci6: command tx timeout
[  410.769627][ T7329] team0: Port device team_slave_0 added
[  410.868868][ T7329] team0: Port device team_slave_1 added
[  410.930595][ T7349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  411.278648][ T4916] Bluetooth: hci6: command tx timeout
[  413.101319][ T7349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  415.601286][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.601303][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.601328][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  417.021320][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  417.021336][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  417.021361][ T7329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.701636][ T7349] team0: Port device team_slave_0 added
[  418.799384][ T7349] team0: Port device team_slave_1 added
[  419.468153][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.468170][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.468193][ T7349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.660740][ T7125] syz-executor (7125) used greatest stack depth: 17992 bytes left
[  419.868546][ T7349] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.868563][ T7349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.868588][ T7349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  420.146001][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  420.186212][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  420.187328][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  420.208857][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  420.210450][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  422.309086][ T5606] Bluetooth: hci1: command tx timeout
[  422.683429][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.388701][ T5606] Bluetooth: hci1: command tx timeout
[  426.468596][ T5606] Bluetooth: hci1: command tx timeout
[  427.255105][ T7349] hsr_slave_0: entered promiscuous mode
[  427.269981][ T7349] hsr_slave_1: entered promiscuous mode
[  427.274928][ T7349] debugfs: 'hsr0' already exists in 'hsr'
[  427.274951][ T7349] Cannot create hsr debugfs directory
[  428.548723][ T5606] Bluetooth: hci1: command tx timeout
[  431.981749][ T4916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  432.031591][ T4916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  432.040063][ T4916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  432.045504][ T4916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  432.048574][ T4916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  432.119382][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.123451][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.368716][ T7411] bridge_slave_0: entered allmulticast mode
[  432.371143][ T7411] bridge_slave_0: entered promiscuous mode
[  432.652984][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.653111][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.653330][ T7411] bridge_slave_1: entered allmulticast mode
[  432.707615][ T7411] bridge_slave_1: entered promiscuous mode
[  434.148586][ T5606] Bluetooth: hci4: command tx timeout
[  434.464329][ T7518] netlink: 14 bytes leftover after parsing attributes in process `syz.0.500'.
[  435.302181][ T7411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  436.228740][ T5606] Bluetooth: hci4: command tx timeout
[  437.680826][ T7411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.593795][ T5606] Bluetooth: hci4: command tx timeout
[  440.025458][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  440.037351][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  440.650084][ T5606] Bluetooth: hci4: command tx timeout
[  441.577987][ T7411] team0: Port device team_slave_0 added
[  442.362450][ T7411] team0: Port device team_slave_1 added
[  443.629410][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_0
[  443.629426][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.629450][ T7411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  443.732135][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_1
[  443.732150][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  443.732175][ T7411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.762743][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.762874][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.763081][ T7448] bridge_slave_0: entered allmulticast mode
[  444.765447][ T7448] bridge_slave_0: entered promiscuous mode
[  445.373461][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state
[  445.373573][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.373744][ T7448] bridge_slave_1: entered allmulticast mode
[  445.376222][ T7448] bridge_slave_1: entered promiscuous mode
[  446.211408][ T7411] hsr_slave_0: entered promiscuous mode
[  446.212706][ T7411] hsr_slave_1: entered promiscuous mode
[  446.213558][ T7411] debugfs: 'hsr0' already exists in 'hsr'
[  446.213580][ T7411] Cannot create hsr debugfs directory
[  448.958940][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.098311][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  452.385200][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  452.423961][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  452.426540][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  452.448760][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  452.467473][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  452.661581][ T7448] team0: Port device team_slave_0 added
[  453.201629][ T7448] team0: Port device team_slave_1 added
[  453.464710][ T5606] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  453.511509][ T5606] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  453.512568][ T5606] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  453.513634][ T5606] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  453.515180][ T5606] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  454.628663][ T5606] Bluetooth: hci5: command tx timeout
[  455.594438][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.594456][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.594492][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.836662][ T5606] Bluetooth: hci7: command tx timeout
[  455.943417][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.943433][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.943459][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  456.590213][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state
[  456.590327][ T7474] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.590506][ T7474] bridge_slave_0: entered allmulticast mode
[  456.647536][ T7474] bridge_slave_0: entered promiscuous mode
[  456.708985][ T5606] Bluetooth: hci5: command tx timeout
[  457.910412][ T5606] Bluetooth: hci7: command tx timeout
[  458.791030][ T5606] Bluetooth: hci5: command tx timeout
[  459.988620][ T5606] Bluetooth: hci7: command tx timeout
[  460.869753][ T5606] Bluetooth: hci5: command tx timeout
[  461.685744][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.691959][ T7474] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.692638][ T7474] bridge_slave_1: entered allmulticast mode
[  461.707556][ T7474] bridge_slave_1: entered promiscuous mode
[  462.551260][ T5606] Bluetooth: hci7: command tx timeout
[  464.256721][ T7238] syz-executor (7238) used greatest stack depth: 16856 bytes left
[  464.700130][ T4916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  464.734406][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  464.751107][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  464.752112][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  464.752774][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  466.060590][ T7474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  466.236915][ T7474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.038676][ T5606] Bluetooth: hci3: command tx timeout
[  469.020500][ T7474] team0: Port device team_slave_0 added
[  469.118574][ T5606] Bluetooth: hci3: command tx timeout
[  469.208544][ T7474] team0: Port device team_slave_1 added
[  471.189129][ T5606] Bluetooth: hci3: command tx timeout
[  473.269691][ T5606] Bluetooth: hci3: command tx timeout
[  476.857646][ T7474] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.857662][ T7474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  476.857688][ T7474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  477.654452][ T7474] batman_adv: batadv0: Adding interface: batadv_slave_1
[  477.654468][ T7474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  477.654495][ T7474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.352724][ T4916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  480.406530][ T7508] bridge0: port 1(bridge_slave_0) entered blocking state
[  480.406630][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.406794][ T7508] bridge_slave_0: entered allmulticast mode
[  480.411207][ T4916] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  480.413567][ T4916] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  480.418757][ T4916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  480.423454][ T4916] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  480.537318][ T7508] bridge_slave_0: entered promiscuous mode
[  481.426077][ T7508] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.426200][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state
[  481.426454][ T7508] bridge_slave_1: entered allmulticast mode
[  481.457680][ T7508] bridge_slave_1: entered promiscuous mode
[  482.628673][ T4916] Bluetooth: hci2: command tx timeout
[  484.708582][ T4916] Bluetooth: hci2: command tx timeout
[  486.788508][ T4916] Bluetooth: hci2: command tx timeout
[  487.105478][ T7508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  487.236601][ T7508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.011004][ T7508] team0: Port device team_slave_0 added
[  488.449163][ T7508] team0: Port device team_slave_1 added
[  488.868572][ T4916] Bluetooth: hci2: command tx timeout
[  493.742054][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  493.782387][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  493.788287][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  493.794483][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  493.795172][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  495.828860][ T4916] Bluetooth: hci1: command tx timeout
[  497.908642][ T4916] Bluetooth: hci1: command tx timeout
[  499.988527][ T4916] Bluetooth: hci1: command tx timeout
[  501.273764][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  501.273830][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  501.979618][ T7543] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.979730][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.979952][ T7543] bridge_slave_0: entered allmulticast mode
[  501.982456][ T7543] bridge_slave_0: entered promiscuous mode
[  502.109838][ T4916] Bluetooth: hci1: command tx timeout
[  502.362780][ T7543] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.362913][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.363093][ T7543] bridge_slave_1: entered allmulticast mode
[  502.365835][ T7543] bridge_slave_1: entered promiscuous mode
[  503.845886][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.846007][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.846195][ T7548] bridge_slave_0: entered allmulticast mode
[  503.889257][ T7548] bridge_slave_0: entered promiscuous mode
[  505.690969][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.691150][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.691356][ T7548] bridge_slave_1: entered allmulticast mode
[  505.723354][ T7548] bridge_slave_1: entered promiscuous mode
[  506.520703][ T7543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  507.334568][ T7543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  509.149729][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  510.591734][ T7569] bridge0: port 1(bridge_slave_0) entered blocking state
[  510.591855][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.592064][ T7569] bridge_slave_0: entered allmulticast mode
[  510.640034][ T7569] bridge_slave_0: entered promiscuous mode
[  510.657221][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  510.691985][ T7543] team0: Port device team_slave_0 added
[  510.692955][ T7569] bridge0: port 2(bridge_slave_1) entered blocking state
[  510.693143][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.693322][ T7569] bridge_slave_1: entered allmulticast mode
[  510.698539][ T7569] bridge_slave_1: entered promiscuous mode
[  512.380881][ T7543] team0: Port device team_slave_1 added
[  514.370439][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  514.403699][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  514.404866][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  514.426994][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  514.445276][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  514.671881][ T4916] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  514.719743][ T4916] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  514.723786][ T4916] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  514.727235][ T4916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  514.728087][ T4916] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  515.719647][ T7569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  516.594773][ T4916] Bluetooth: hci4: command tx timeout
[  516.847337][ T7569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  516.868623][ T4916] Bluetooth: hci6: command tx timeout
[  518.707724][ T4916] Bluetooth: hci4: command tx timeout
[  518.948856][ T4916] Bluetooth: hci6: command tx timeout
[  520.788671][ T4916] Bluetooth: hci4: command tx timeout
[  521.028712][ T4916] Bluetooth: hci6: command tx timeout
[  522.869125][ T4916] Bluetooth: hci4: command tx timeout
[  523.120498][ T4916] Bluetooth: hci6: command tx timeout
[  523.475711][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  523.931341][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  523.977161][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  524.017912][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  524.049810][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  526.228691][ T5606] Bluetooth: hci5: command tx timeout
[  528.308706][ T5606] Bluetooth: hci5: command tx timeout
[  530.388758][ T5606] Bluetooth: hci5: command tx timeout
[  532.473956][ T5606] Bluetooth: hci5: command tx timeout
[  533.305390][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.305594][ T7594] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.305842][ T7594] bridge_slave_0: entered allmulticast mode
[  533.337417][ T7594] bridge_slave_0: entered promiscuous mode
[  533.613802][ T7594] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.613960][ T7594] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.614200][ T7594] bridge_slave_1: entered allmulticast mode
[  533.673461][ T7594] bridge_slave_1: entered promiscuous mode
[  538.542808][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  539.526560][ T7594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  540.803185][ T4916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  540.877173][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  540.924659][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  541.358876][ T7705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  541.359897][ T7705] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  543.428574][ T7705] Bluetooth: hci3: command tx timeout
[  544.153995][ T7613] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.154145][ T7613] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.154402][ T7613] bridge_slave_0: entered allmulticast mode
[  544.186505][ T7613] bridge_slave_0: entered promiscuous mode
[  544.367838][ T7613] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.367951][ T7613] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.368194][ T7613] bridge_slave_1: entered allmulticast mode
[  544.405457][ T7613] bridge_slave_1: entered promiscuous mode
[  545.513914][ T7705] Bluetooth: hci3: command tx timeout
[  547.588548][ T7705] Bluetooth: hci3: command tx timeout
[  549.668661][ T7705] Bluetooth: hci3: command tx timeout
[  553.758207][ T7613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  558.084602][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  558.127823][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  558.141150][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  558.144805][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  558.147579][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  560.228539][ T7705] Bluetooth: hci2: command tx timeout
[  562.310299][ T7705] Bluetooth: hci2: command tx timeout
[  562.710837][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  562.710902][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  564.594754][ T7705] Bluetooth: hci2: command tx timeout
[  566.628658][ T7705] Bluetooth: hci2: command tx timeout
[  568.328585][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.328697][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.328913][ T7648] bridge_slave_0: entered allmulticast mode
[  568.334571][ T7648] bridge_slave_0: entered promiscuous mode
[  569.120673][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.120793][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.121372][ T7648] bridge_slave_1: entered allmulticast mode
[  569.151366][ T7648] bridge_slave_1: entered promiscuous mode
[  572.337841][ T7648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  572.884206][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state
[  572.884335][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.884552][ T7651] bridge_slave_0: entered allmulticast mode
[  572.887160][ T7651] bridge_slave_0: entered promiscuous mode
[  572.944865][ T7648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.856812][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state
[  573.857002][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.857481][ T7651] bridge_slave_1: entered allmulticast mode
[  573.895472][ T7651] bridge_slave_1: entered promiscuous mode
[  574.350472][ T5606] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  574.441111][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  574.447314][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  574.451013][ T5606] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  574.454090][ T5606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  576.558643][ T5606] Bluetooth: hci1: command tx timeout
[  576.637414][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.637593][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.637806][ T7672] bridge_slave_0: entered allmulticast mode
[  576.658893][ T7672] bridge_slave_0: entered promiscuous mode
[  576.764391][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.764500][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.764722][ T7672] bridge_slave_1: entered allmulticast mode
[  576.802859][ T7672] bridge_slave_1: entered promiscuous mode
[  576.942566][ T7705] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  576.965974][ T7705] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  577.008048][ T7705] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  577.011655][ T7705] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  577.015481][ T7705] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  578.649106][ T5606] Bluetooth: hci1: command tx timeout
[  579.747765][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  579.988950][ T5606] Bluetooth: hci8: command tx timeout
[  580.148494][ T5606] Bluetooth: hci7: command 0x0406 tx timeout
[  580.708712][ T5606] Bluetooth: hci1: command tx timeout
[  582.069045][ T7705] Bluetooth: hci8: command tx timeout
[  582.788592][ T7705] Bluetooth: hci1: command tx timeout
[  583.326560][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  583.555448][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  583.576058][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  583.602386][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  583.658777][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  583.698359][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  584.188521][ T7705] Bluetooth: hci8: command tx timeout
[  585.748633][ T7705] Bluetooth: hci4: command tx timeout
[  586.228951][ T7705] Bluetooth: hci8: command tx timeout
[  587.828765][ T7705] Bluetooth: hci4: command tx timeout
[  590.011799][ T7705] Bluetooth: hci4: command tx timeout
[  592.068581][ T7705] Bluetooth: hci4: command tx timeout
[  599.538664][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.538789][ T7702] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.539010][ T7702] bridge_slave_0: entered allmulticast mode
[  599.546327][ T7702] bridge_slave_0: entered promiscuous mode
[  599.927077][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.927258][ T7702] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.927510][ T7702] bridge_slave_1: entered allmulticast mode
[  599.964837][ T7702] bridge_slave_1: entered promiscuous mode
[  602.499480][ T7718] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.499594][ T7718] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.499831][ T7718] bridge_slave_0: entered allmulticast mode
[  602.539347][ T7718] bridge_slave_0: entered promiscuous mode
[  603.228576][ T7718] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.228696][ T7718] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.229049][ T7718] bridge_slave_1: entered allmulticast mode
[  603.232429][ T7718] bridge_slave_1: entered promiscuous mode
[  603.992209][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  604.071355][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  604.268973][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  604.494408][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  604.495210][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  606.788556][ T5606] Bluetooth: hci3: command tx timeout
[  608.868640][ T5606] Bluetooth: hci3: command tx timeout
[  610.125058][ T7718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  610.530547][ T7718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  610.948465][ T5606] Bluetooth: hci3: command tx timeout
[  611.944427][ T7718] team0: Port device team_slave_0 added
[  612.081492][ T7718] team0: Port device team_slave_1 added
[  613.028477][ T5606] Bluetooth: hci3: command tx timeout
[  617.711886][ T7705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  617.740337][ T7705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  617.743515][ T7705] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  617.895605][ T7675] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  618.801690][ T7675] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  620.868887][ T5606] Bluetooth: hci5: command tx timeout
[  622.948739][ T5606] Bluetooth: hci5: command tx timeout
[  624.151559][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  624.151636][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  625.028746][ T5606] Bluetooth: hci5: command tx timeout
[  627.108541][ T5606] Bluetooth: hci5: command tx timeout
[  629.100449][ T7755] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.100561][ T7755] bridge0: port 1(bridge_slave_0) entered disabled state
[  629.100807][ T7755] bridge_slave_0: entered allmulticast mode
[  629.169031][ T7755] bridge_slave_0: entered promiscuous mode
[  629.416147][ T7755] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.416254][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state
[  629.416474][ T7755] bridge_slave_1: entered allmulticast mode
[  629.445560][ T7755] bridge_slave_1: entered promiscuous mode
[  631.857141][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state
[  631.885501][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.904077][ T7764] bridge_slave_0: entered allmulticast mode
[  631.958153][ T7764] bridge_slave_0: entered promiscuous mode
[  632.942642][ T7755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  633.014227][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state
[  633.015985][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.016209][ T7764] bridge_slave_1: entered allmulticast mode
[  633.041157][ T7764] bridge_slave_1: entered promiscuous mode
[  633.098912][ T7755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.390922][   T38] INFO: task syz.4.484:7396 blocked for more than 143 seconds.
[  634.390946][   T38]       Not tainted syzkaller #0
[  634.390956][   T38]       Blocked by coredump.
[  634.390962][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  634.390984][   T38] task:syz.4.484       state:D stack:23432 pid:7396  tgid:7396  ppid:5601   task_flags:0x40044c flags:0x00080003
[  634.391044][   T38] Call Trace:
[  634.391051][   T38]  <TASK>
[  634.391062][   T38]  __schedule+0x16ec/0x5620
[  634.391091][   T38]  ? __lock_acquire+0x6b5/0x2cf0
[  634.391144][   T38]  ? __pfx___schedule+0x10/0x10
[  634.391182][   T38]  rt_mutex_schedule+0x76/0xf0
[  634.391203][   T38]  rt_mutex_slowlock_block+0x508/0x680
[  634.391239][   T38]  rt_mutex_slowlock+0x2dc/0x780
[  634.391262][   T38]  ? rt_mutex_slowlock+0x1fd/0x780
[  634.391283][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  634.391314][   T38]  ? rcu_barrier+0x4c/0x580
[  634.391337][   T38]  ? rcu_barrier+0x4c/0x580[  634.391337][   T38]  ? rcu_barrier+0x4c/0x580
[  634.391368][   T38]  ? rcu_barrier+0x4c/0x580
[  634.391384][   T38]  mutex_lock_nested+0x168/0x1d0
[  634.391404][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  634.391429][   T38]  rcu_barrier+0x4c/0x580
[  634.391457][   T38]  netdev_run_todo+0x2e0/0xde0
[  634.391492][   T38]  ? __pfx_netdev_run_todo+0x10/0x10
[  634.391520][   T38]  ? kasan_quarantine_put+0xbb/0x1f0
[  634.391539][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  634.391572][   T38]  ? netdev_state_change+0x1ca/0x220
[  634.391597][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  634.391621][   T38]  tun_chr_close+0x13f/0x1c0
[  634.391646][   T38]  __fput+0x461/0xa70
[  634.391684][   T38]  task_work_run+0x1d9/0x270
[  634.391713][   T38]  ? __pfx_task_work_run+0x10/0x10
[  634.391740][   T38]  ? do_exit+0x70a/0x22c0
[  634.391763][   T38]  ? kmem_cache_free+0x187/0x6c0
[  634.391785][   T38]  ? put_net+0x191/0x260
[  634.391804][   T38]  ? do_exit+0x70a/0x22c0
[  634.391833][   T38]  do_exit+0x70f/0x22c0
[  634.391861][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  634.391889][   T38]  ? __pfx_do_exit+0x10/0x10
[  634.391911][   T38]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  634.391931][   T38]  ? reacquire_held_locks+0x104/0x190
[  634.391960][   T38]  ? rt_spin_lock+0x1e0/0x400
[  634.391991][   T38]  do_group_exit+0x21b/0x2d0
[  634.392017][   T38]  ? rt_spin_unlock+0x160/0x200
[  634.392040][   T38]  get_signal+0x1284/0x1330
[  634.392078][   T38]  arch_do_signal_or_restart+0xbc/0x840
[  634.392113][   T38]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  634.392162][   T38]  exit_to_user_mode_loop+0x8c/0x4d0
[  634.392186][   T38]  ? rcu_is_watching+0x15/0xb0
[  634.392215][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.392236][   T38]  do_syscall_64+0x33e/0xf80
[  634.392261][   T38]  ? trace_irq_disable+0x3b/0x140
[  634.392284][   T38]  ? clear_bhb_loop+0x40/0x90
[  634.392308][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.392334][   T38] RIP: 0033:0x7f1d54ebce59
[  634.392362][   T38] RSP: 002b:00007ffef4c85da8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  634.392382][   T38] RAX: 0000000000000000 RBX: 00007f1d55137da0 RCX: 00007f1d54ebce59
[  634.392395][   T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  634.392407][   T38] RBP: 00007f1d55137da0 R08: 0000000000000006 R09: 0000000000000000
[  634.392419][   T38] R10: 00007f1d55137cb0 R11: 0000000000000246 R12: 000000000005dbf3
[  634.392432][   T38] R13: 00007f1d5513618c R14: 000000000005daba R15: 00007f1d55136180
[  634.392461][   T38]  </TASK>
[  634.392476][   T38] INFO: task syz-executor:7474 blocked for more than 143 seconds.
[  634.392490][   T38]       Not tainted syzkaller #0
[  634.392499][   T38]       Blocked by coredump.
[  634.392505][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  634.392514][   T38] task:syz-executor    state:D stack:18136 pid:7474  tgid:7474  ppid:1      task_flags:0x40054c flags:0x00080003
[  634.392561][   T38] Call Trace:
[  634.392567][   T38]  <TASK>
[  634.392577][   T38]  __schedule+0x16ec/0x5620
[  634.392627][   T38]  ? __pfx___schedule+0x10/0x10
[  634.392664][   T38]  rt_mutex_schedule+0x76/0xf0
[  634.392683][   T38]  rt_mutex_slowlock_block+0x508/0x680
[  634.392718][   T38]  rt_mutex_slowlock+0x2dc/0x780
[  634.392741][   T38]  ? rt_mutex_slowlock+0x1fd/0x780
[  634.392762][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  634.392793][   T38]  ? rcu_barrier+0x4c/0x580
[  634.392815][   T38]  ? rcu_barrier+0x4c/0x580
[  634.392838][   T38]  ? rcu_barrier+0x4c/0x580
[  634.392855][   T38]  mutex_lock_nested+0x168/0x1d0
[  634.392874][   T38]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  634.392898][   T38]  rcu_barrier+0x4c/0x580
[  634.392927][   T38]  netdev_run_todo+0x2e0/0xde0
[  634.392962][   T38]  ? __pfx_netdev_run_todo+0x10/0x10
[  634.392989][   T38]  ? kasan_quarantine_put+0xbb/0x1f0
[  634.393008][   T38]  ? lockdep_hardirqs_on+0x7a/0x110
[  634.393040][   T38]  ? netdev_state_change+0x1ca/0x220
[  634.393066][   T38]  ? __pfx_tun_chr_close+0x10/0x10
[  634.393089][   T38]  tun_chr_close+0x13f/0x1c0
[  634.393114][   T38]  __fput+0x461/0xa70
[  634.393152][   T38]  task_work_run+0x1d9/0x270
[  634.393184][   T38]  ? __pfx_task_work_run+0x10/0x10
[  634.393213][   T38]  ? do_exit+0x70a/0x22c0
[  634.393237][   T38]  ? kmem_cache_free+0x187/0x6c0
[  634.393260][   T38]  ? put_net+0x191/0x260
[  634.393279][   T38]  ? do_exit+0x70a/0x22c0
[  634.393308][   T38]  do_exit+0x70f/0x22c0
[  634.393332][   T38]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  634.393364][   T38]  ? __pfx_do_exit+0x10/0x10
[  634.393383][   T38]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  634.393399][   T38]  ? reacquire_held_locks+0x104/0x190
[  634.393427][   T38]  ? rt_spin_lock+0x1e0/0x400
[  634.393459][   T38]  do_group_exit+0x21b/0x2d0
[  634.393485][   T38]  ? rt_spin_unlock+0x160/0x200
[  634.393505][   T38]  get_signal+0x1284/0x1330
[  634.393538][   T38]  arch_do_signal_or_restart+0xbc/0x840
[  634.393569][   T38]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  634.393607][   T38]  ? fput_close_sync+0x11f/0x240
[  634.393645][   T38]  exit_to_user_mode_loop+0x8c/0x4d0
[  634.393670][   T38]  ? rcu_is_watching+0x15/0xb0
[  634.393700][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.393722][   T38]  do_syscall_64+0x33e/0xf80
[  634.393745][   T38]  ? trace_irq_disable+0x3b/0x140
[  634.393767][   T38]  ? clear_bhb_loop+0x40/0x90
[  634.393791][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.393810][   T38] RIP: 0033:0x7f0f9855d68e
[  634.393825][   T38] RSP: 002b:00007ffc6b9b5118 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  634.393846][   T38] RAX: 0000000000000020 RBX: 000055556a12b500 RCX: 00007f0f9855d68e
[  634.393859][   T38] RDX: 0000000000000020 RSI: 00007f0f99344670 RDI: 0000000000000003
[  634.393871][   T38] RBP: 0000000000000001 R08: 00007ffc6b9b5194 R09: 000000000000000c
[  634.393883][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  634.393894][   T38] R13: 0000000000000000 R14: 00007f0f99344670 R15: 0000000000000000
[  634.393920][   T38]  </TASK>
[  634.393984][   T38] 
[  634.393984][   T38] Showing all locks held in the system:
[  634.393994][   T38] 6 locks held by kworker/u8:0/12:
[  634.394005][   T38]  #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  634.394058][   T38]  #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  634.394104][   T38]  #2: ffffffff8f3497a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  634.394150][   T38]  #3: ffff88803c079160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  634.394194][   T38]  #4: ffff888021a86310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  634.394243][   T38]  #5: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.394289][   T38] 4 locks held by rcuc/0/20:
[  634.394299][   T38]  #0: ffffffff8de5f240 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  634.394344][   T38]  #1: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  634.394398][   T38]  #2: ffffffff8dfc81a0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x205/0x1470
[  634.394452][   T38]  #3: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250
[  634.394503][   T38] 1 lock held by khungtaskd/38:
[  634.394513][   T38]  #0: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  634.394568][   T38] 7 locks held by kworker/u8:3/55:
[  634.394579][   T38]  #0: ffff888032ff8138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  634.394627][   T38]  #1: ffffc9000121fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  634.394677][   T38]  #2: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  634.394725][   T38]  #3: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  634.394772][   T38]  #4: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  634.394818][   T38]  #5: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0
[  634.394871][   T38]  #6: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcab/0x2840
[  634.394925][   T38] 6 locks held by kworker/u8:4/67:
[  634.394936][   T38]  #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  634.394985][   T38]  #1: ffffc9000152fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  634.395036][   T38]  #2: ffff88806165c310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  634.395123][   T38]  #3: ffff88802a4f6d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  634.395181][   T38]  #4: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  634.395229][   T38]  #5: ffff8880b8836e10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0
[  634.395277][   T38] 4 locks held by kworker/u8:5/149:
[  634.395289][   T38] 7 locks held by kworker/u8:6/209:
[  634.395306][   T38] 6 locks held by kworker/u8:11/1513:
[  634.395317][   T38]  #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  634.395371][   T38]  #1: ffffc90006c67c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  634.395422][   T38]  #2: ffff88803bfca310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  634.395476][   T38]  #3: ffff88803fada920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  634.395533][   T38]  #4: ffffffff8dfc8080 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  634.395579][   T38]  #5: ffff8880b8836e10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0
[  634.395625][   T38] 3 locks held by kworker/u8:13/2250:
[  634.395636][   T38]  #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  634.395685][   T38]  #1: ffffc9000834fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  634.395733][   T38]  #2: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  634.395799][   T38] 3 locks held by kworker/u8:14/3376:
[  634.395810][   T38]  #0: ffff88803284f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  634.395857][   T38]  #1: ffffc9000f617c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  634.395906][   T38]  #2: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  634.395960][   T38] 4 locks held by udevd/4966:
[  634.395970][   T38]  #0: ffffffff8e0990b0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x130/0x4a0
[  634.396015][   T38]  #1: ffff888039615eb0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x181/0x1d50
[  634.396062][   T38]  #2: ffff88802a916bb0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x26f/0x1d50
[  634.396114][   T38]  #3: ffff88813fffc358 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcab/0x2840
[  634.396165][   T38] 2 locks held by getty/5354:
[  634.396175][   T38]  #0: ffff8880377b30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  634.396223][   T38]  #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[  634.396282][   T38] 2 locks held by kworker/1:3/5710:
[  634.396293][   T38]  #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  634.396340][   T38]  #1: ffffc90004f0fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  634.396398][   T38] 1 lock held by syz.4.484/7396:
[  634.396409][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.396455][   T38] 1 lock held by syz-executor/7448:
[  634.396466][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.396510][   T38] 1 lock held by syz-executor/7474:
[  634.396521][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.396568][   T38] 1 lock held by syz-executor/7508:
[  634.396579][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.396625][   T38] 2 locks held by syz.0.500/7518:
[  634.396636][   T38]  #0: ffff88803abbd878 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310
[  634.396686][   T38]  #1: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.396731][   T38] 1 lock held by syz-executor/7543:
[  634.396742][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.396787][   T38] 2 locks held by syz-executor/7548:
[  634.396797][   T38]  #0: ffffffff8eac0908 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  634.396852][   T38]  #1: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.396896][   T38] 1 lock held by syz-executor/7569:
[  634.396907][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.396952][   T38] 1 lock held by syz-executor/7594:
[  634.396962][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.397008][   T38] 1 lock held by syz-executor/7613:
[  634.397019][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.397065][   T38] 1 lock held by syz-executor/7648:
[  634.397076][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.397122][   T38] 1 lock held by syz-executor/7651:
[  634.397132][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.397178][   T38] 1 lock held by syz-executor/7672:
[  634.397188][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.397234][   T38] 1 lock held by syz-executor/7702:
[  634.397245][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.397290][   T38] 1 lock held by syz-executor/7718:
[  634.397301][   T38]  #0: ffffffff8dfce230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  634.397347][   T38] 1 lock held by syz-executor/7764:
[  634.397364][   T38] 2 locks held by syz-executor/7780:
[  634.397375][   T38]  #0: ffffffff8f892238 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  634.397429][   T38]  #1: ffffffff8f3584f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  634.397475][   T38] 1 lock held by syz-executor/7810:
[  634.397485][   T38] 7 locks held by syz-executor/7831:
[  634.397497][   T38] 2 locks held by syz-executor/7854:
[  634.397508][   T38] 1 lock held by dhcpcd/7858:
[  634.397519][   T38] 
[  634.397524][   T38] =============================================
[  634.397524][   T38] 
[  634.397544][   T38] NMI backtrace for cpu 1
[  634.397562][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  634.397581][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  634.397591][   T38] Call Trace:
[  634.397597][   T38]  <TASK>
[  634.397604][   T38]  dump_stack_lvl+0xe8/0x150
[  634.397625][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[  634.397644][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  634.397668][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  634.397690][   T38]  sys_info+0x135/0x170
[  634.397719][   T38]  watchdog+0xfd3/0x1030
[  634.397747][   T38]  ? watchdog+0x1c9/0x1030
[  634.397772][   T38]  kthread+0x388/0x470
[  634.397798][   T38]  ? __pfx_watchdog+0x10/0x10
[  634.397817][   T38]  ? __pfx_kthread+0x10/0x10
[  634.397844][   T38]  ret_from_fork+0x514/0xb70
[  634.397867][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  634.397888][   T38]  ? __switch_to+0xc79/0x1410
[  634.397920][   T38]  ? __pfx_kthread+0x10/0x10
[  634.397946][   T38]  ret_from_fork_asm+0x1a/0x30
[  634.397984][   T38]  </TASK>
[  634.397991][   T38] Sending NMI from CPU 1 to CPUs 0:
[  634.398017][    C0] NMI backtrace for cpu 0
[  634.398030][    C0] CPU: 0 UID: 0 PID: 7764 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  634.398048][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  634.398058][    C0] RIP: 0010:lock_release+0x266/0x3c0
[  634.398081][    C0] Code: 89 f6 48 8b 54 24 18 e8 28 2f 00 00 48 8b 5c 24 08 48 c7 c7 d1 5a 86 8d e8 97 e9 7c 09 b8 ff ff ff ff 65 0f c1 05 da be ca 10 <83> f8 01 75 2e 9c 58 a9 00 02 00 00 75 42 f7 c3 00 02 00 00 75 47
[  634.398095][    C0] RSP: 0000:ffffc90003e6e370 EFLAGS: 00000057
[  634.398109][    C0] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 0000000080000001
[  634.398119][    C0] RDX: 0000000000000003 RSI: ffffffff8d865ad1 RDI: ffffffff8ba75860
[  634.398130][    C0] RBP: ffff888038c4c9f0 R08: ffffc90003e6e5e0 R09: 0000000000000000
[  634.398141][    C0] R10: ffffc90003e6e4f8 R11: fffff520007cdca1 R12: 0000000000000003
[  634.398152][    C0] R13: 0000000000000003 R14: ffffffff8dfc8080 R15: ffff888038c4bd80
[  634.398163][    C0] FS:  000055558fa73500(0000) GS:ffff888126171000(0000) knlGS:0000000000000000
[  634.398177][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  634.398188][    C0] CR2: 0000556e4873d168 CR3: 000000007d512000 CR4: 00000000003526f0
[  634.398202][    C0] Call Trace:
[  634.398207][    C0]  <TASK>
[  634.398214][    C0]  ? unwind_next_frame+0xa6/0x2550
[  634.398236][    C0]  ? unwind_next_frame+0xa6/0x2550
[  634.398256][    C0]  unwind_next_frame+0x1bba/0x2550
[  634.398278][    C0]  ? unwind_next_frame+0xa6/0x2550
[  634.398298][    C0]  ? stack_trace_save+0xa9/0x100
[  634.398317][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  634.398336][    C0]  arch_stack_walk+0x11b/0x150
[  634.398367][    C0]  ? kasan_save_stack+0x3e/0x60
[  634.398387][    C0]  stack_trace_save+0xa9/0x100
[  634.398407][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  634.398426][    C0]  ? arch_stack_walk+0xfb/0x150
[  634.398449][    C0]  kasan_save_stack+0x3e/0x60
[  634.398487][    C0]  kasan_record_aux_stack+0xbd/0xd0
[  634.398509][    C0]  insert_work+0x3d/0x330
[  634.398526][    C0]  __queue_work+0xd1d/0x1090
[  634.398546][    C0]  ? __queue_work+0x1dc/0x1090
[  634.398562][    C0]  ? rcu_is_watching+0x15/0xb0
[  634.398587][    C0]  queue_work_on+0x106/0x1d0
[  634.398610][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  634.398633][    C0]  netdevice_event+0x79a/0x8f0
[  634.398655][    C0]  ? __pfx_netdevice_event+0x10/0x10
[  634.398673][    C0]  ? __pfx_del_netdev_ips+0x10/0x10
[  634.398690][    C0]  ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10
[  634.398709][    C0]  ? __pfx_add_default_gids+0x10/0x10
[  634.398726][    C0]  ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10
[  634.398746][    C0]  ? __pfx_add_netdev_ips+0x10/0x10
[  634.398763][    C0]  ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10
[  634.398782][    C0]  ? wext_netdev_notifier_call+0xfa/0x110
[  634.398802][    C0]  ? cfg802154_netdev_notifier_call+0x139/0x8f0
[  634.398822][    C0]  notifier_call_chain+0x1ad/0x3d0
[  634.398846][    C0]  call_netdevice_notifiers+0x90/0xd0
[  634.398862][    C0]  ? __pfx_call_netdevice_notifiers+0x10/0x10
[  634.398880][    C0]  ? dev_addr_mod+0x1ba/0x350
[  634.398902][    C0]  bond_set_dev_addr+0xd6/0x1b0
[  634.398923][    C0]  bond_enslave+0x9d3/0x3c70
[  634.398950][    C0]  ? timerqueue_linked_add+0x287/0x2e0
[  634.398976][    C0]  ? __pfx_bond_enslave+0x10/0x10
[  634.399002][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  634.399025][    C0]  do_set_master+0x533/0x6d0
[  634.399048][    C0]  do_setlink+0x103d/0x45a0
[  634.399074][    C0]  ? __pfx_do_setlink+0x10/0x10
[  634.399094][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  634.399114][    C0]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  634.399132][    C0]  ? rt_mutex_slowlock_block+0x521/0x680
[  634.399148][    C0]  ? rt_mutex_slowlock_block+0x56c/0x680
[  634.399168][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  634.399189][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  634.399210][    C0]  ? rt_mutex_slowlock+0x420/0x780
[  634.399227][    C0]  ? rt_mutex_slowlock+0x1fd/0x780
[  634.399243][    C0]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  634.399264][    C0]  ? rtnl_newlink+0x883/0x1bb0
[  634.399283][    C0]  ? rtnl_newlink+0x883/0x1bb0
[  634.399304][    C0]  ? mutex_lock_nested+0x168/0x1d0
[  634.399321][    C0]  rtnl_newlink+0x15ad/0x1bb0
[  634.399356][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  634.399373][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  634.399397][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  634.399418][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  634.399440][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  634.399461][    C0]  ? unwind_next_frame+0xa6/0x2550
[  634.399484][    C0]  ? unwind_next_frame+0xa6/0x2550
[  634.399505][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  634.399533][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  634.399556][    C0]  ? kernel_text_address+0xa5/0xe0
[  634.399580][    C0]  ? __kernel_text_address+0xd/0x30
[  634.399609][    C0]  ? unwind_get_return_address+0x4d/0x90
[  634.399629][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  634.399647][    C0]  ? arch_stack_walk+0xfb/0x150
[  634.399670][    C0]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  634.399694][    C0]  ? __pfx_rtnl_newlink+0x10/0x10
[  634.399711][    C0]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  634.399727][    C0]  ? kasan_save_track+0x3e/0x80
[  634.399741][    C0]  ? kmem_cache_alloc_node_noprof+0x22a/0x6e0
[  634.399759][    C0]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  634.399776][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  634.399794][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  634.399820][    C0]  netlink_rcv_skb+0x232/0x4b0
[  634.399839][    C0]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  634.399858][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  634.399882][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  634.399902][    C0]  ? netlink_deliver_tap+0x2e/0x1b0
[  634.399922][    C0]  netlink_unicast+0x780/0x920
[  634.399944][    C0]  netlink_sendmsg+0x813/0xb40
[  634.399968][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  634.399991][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  634.400007][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  634.400028][    C0]  __sys_sendto+0x67f/0x710
[  634.400049][    C0]  ? __pfx___sys_sendto+0x10/0x10
[  634.400079][    C0]  ? fput_close_sync+0x11f/0x240
[  634.400103][    C0]  ? __pfx_fput_close_sync+0x10/0x10
[  634.400131][    C0]  __x64_sys_sendto+0xde/0x100
[  634.400150][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.400166][    C0]  do_syscall_64+0x15f/0xf80
[  634.400187][    C0]  ? clear_bhb_loop+0x40/0x90
[  634.400205][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.400220][    C0] RIP: 0033:0x7f132ac8d68e
[  634.400233][    C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  634.400246][    C0] RSP: 002b:00007fff7f3b16c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  634.400262][    C0] RAX: ffffffffffffffda RBX: 000055558fa73500 RCX: 00007f132ac8d68e
[  634.400273][    C0] RDX: 0000000000000028 RSI: 00007f132ba74670 RDI: 0000000000000003
[  634.400283][    C0] RBP: 0000000000000001 R08: 00007fff7f3b1744 R09: 000000000000000c
[  634.400293][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  634.400302][    C0] R13: 0000000000000000 R14: 00007f132ba74670 R15: 0000000000000000
[  634.400320][    C0]  </TASK>
[  634.495709][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  634.495764][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  634.495819][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  634.495853][   T38] Call Trace:
[  634.495872][   T38]  <TASK>
[  634.495891][   T38]  vpanic+0x56c/0xa60
[  634.495965][   T38]  ? __pfx___schedule+0x10/0x10
[  634.496030][   T38]  ? __pfx_vpanic+0x10/0x10
[  634.496117][   T38]  panic+0xc5/0xd0
[  634.496174][   T38]  ? __pfx_panic+0x10/0x10
[  634.496233][   T38]  ? preempt_schedule_thunk+0x16/0x30
[  634.496315][   T38]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  634.496374][   T38]  watchdog+0x102c/0x1030
[  634.496441][   T38]  ? watchdog+0x1c9/0x1030
[  634.496525][   T38]  kthread+0x388/0x470
[  634.496598][   T38]  ? __pfx_watchdog+0x10/0x10
[  634.496646][   T38]  ? __pfx_kthread+0x10/0x10
[  634.496716][   T38]  ret_from_fork+0x514/0xb70
[  634.496796][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  634.496869][   T38]  ? __switch_to+0xc79/0x1410
[  634.496944][   T38]  ? __pfx_kthread+0x10/0x10
[  634.497015][   T38]  ret_from_fork_asm+0x1a/0x30
[  634.497108][   T38]  </TASK>
[  634.497719][   T38] Kernel Offset: disabled