last executing test programs:

19m41.494858066s ago: executing program 2 (id=7):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x221040, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0)

19m39.745245884s ago: executing program 2 (id=9):
r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x20000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x400100000000c595, 0x0, 0x1, 0x5, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19m33.371539446s ago: executing program 2 (id=20):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c", 0x4d}], 0x1)

19m32.800424654s ago: executing program 32 (id=20):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c", 0x4d}], 0x1)

16m54.751071611s ago: executing program 1 (id=455):
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x10, 0x40, 0x10000, 0x10000, {{0x6, 0x4, 0x3, 0x21, 0x18, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@ra={0x94, 0x4}]}}}}})

16m53.891475636s ago: executing program 1 (id=459):
r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0xfffffffd, 0x0, 0x0, 0x2ab})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

16m52.493974573s ago: executing program 1 (id=463):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

16m52.184587941s ago: executing program 1 (id=465):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))

16m35.866288116s ago: executing program 33 (id=465):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))

16m30.989130265s ago: executing program 4 (id=520):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x10000000}, 0x1c)
sendto$packet(0xffffffffffffffff, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x10000007, 0x4)
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
unshare(0x22020400)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x7, 0x500000000000, 0x8004000, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffffffff801, 0xfffffffffffffffe, 0x2, 0x6, 0x200001, 0x9, 0xec], 0x10000, 0x40400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
clock_adjtime(0x7, &(0x7f0000000340)={0xffff, 0x0, 0x20000, 0x8, 0x6733, 0xa, 0x1, 0x0, 0x7, 0x28, 0x7f, 0x4000000000, 0x0, 0xfffffffffffffffc, 0x7a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec, 0x0, 0x1, 0x1, 0xe52, 0x5})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0)
connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)

16m30.546355913s ago: executing program 34 (id=520):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x10000000}, 0x1c)
sendto$packet(0xffffffffffffffff, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x10000007, 0x4)
gettid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
unshare(0x22020400)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x4000000)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x7, 0x500000000000, 0x8004000, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffffffff801, 0xfffffffffffffffe, 0x2, 0x6, 0x200001, 0x9, 0xec], 0x10000, 0x40400})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
clock_adjtime(0x7, &(0x7f0000000340)={0xffff, 0x0, 0x20000, 0x8, 0x6733, 0xa, 0x1, 0x0, 0x7, 0x28, 0x7f, 0x4000000000, 0x0, 0xfffffffffffffffc, 0x7a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec, 0x0, 0x1, 0x1, 0xe52, 0x5})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0)
connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)

14m53.166127958s ago: executing program 7 (id=767):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48)
close(0x3)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)="83b401", &(0x7f0000000180), 0xd, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

14m51.836050327s ago: executing program 7 (id=771):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
socket(0x400000000010, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4, 0x4}, [@ldst={0x3, 0x0, 0x1, 0x1c10a1}]}, &(0x7f0000000ac0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x36}, 0x94)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x1c8, 0x0, 0x0, 0x130, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@loopback, @remote, 0xffffff00, 0x0, 'pim6reg0\x00', 'geneve1\x00', {}, {0xff}, 0x1, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x33}, @empty, 0xffffffff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x6c, 0x2, 0x52}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfc}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00', {}, {}, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x4]}, {0x0, [], 0x0, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffde8, 0x2, {{0x1, 0x9, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0xe, 0x3, 0x9, {0xa2d9, 0x204, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xd008}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xf0, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_PAYLOAD={0x90, 0xa, "fc15e65044b0caa7d5bbe6222b7acb32e5af0262c92e71a00cef5c0d34f0dced67dd85589565ab8f236c05d93ba2b3f9eabfc5b71f96ae8f1e20377c6203466e911c94d6039cecc107e274953cad0f7bb25581f616fd82fafa0dd768c44e714cfd05ab3fa25a992721de04e1b72796cc78751b88b1c257a95d917097d753188b1bb9af2ef33291a2b846192b"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xabe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8000000}, @NFQA_PAYLOAD={0x3b, 0xa, "dd9ef7698d451803867c67a3add2e94fb4ce53003f7679680e825461aededb05c290a496b1575e693c31ba5a84d3914c80ea90f941407e"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000)
timer_create(0x0, 0x0, &(0x7f0000000300))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pS    \x00'}, 0x20)
r11 = syz_open_dev$vcsu(&(0x7f0000000640), 0x3, 0x20200)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x4c7, <r12=>0x0}, 0x8)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0xffffffffffffffff, 0xffff, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x29, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa6c8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0xc0}, @map_fd={0x18, 0x9, 0x1, 0x0, r10}, @ldst={0x3, 0x2, 0x4, 0x8, 0x7, 0x18}]}, &(0x7f0000000580)='syzkaller\x00', 0xfffffff7, 0x60, &(0x7f00000005c0)=""/96, 0x41000, 0x4a, '\x00', r3, @lsm=0x1b, r11, 0x8, &(0x7f0000000680)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x5, 0xfffffffe, 0x3}, 0x10, r12, r1, 0x6, &(0x7f0000000780)=[r13], &(0x7f00000007c0)=[{0x2, 0x3, 0x2, 0x8}, {0x2, 0x4, 0x10, 0xc}, {0x5, 0x4, 0xf, 0xa}, {0x0, 0x1, 0x0, 0x4}, {0x0, 0x1, 0x1, 0x8}, {0x0, 0x3, 0xa, 0x8}], 0x10, 0x7fd2}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb)
r14 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'})

14m46.246847588s ago: executing program 7 (id=777):
memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000140))

14m45.977471303s ago: executing program 7 (id=779):
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @empty}, {0x306, @remote}, 0x18, {0x2, 0x200, @local}})
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000040)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1)
socket$netlink(0x10, 0x3, 0x0)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000100)=0x1)
preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1, 0x7fffffffffffffff, 0x0)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x82, @mcast1, @empty, 0x0, 0x0, 0x16, 0x9}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r6, 0x29, 0x2, 0x81, 0xcf57, 0xff42, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0x300}, 0x8000, 0x8000, 0x8, 0x1}})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000003c0)=0xe0ab0f7ca50003b0)

14m44.373351774s ago: executing program 7 (id=783):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlockall(0x4)
r3 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0)

14m39.715626803s ago: executing program 7 (id=787):
socket$nl_generic(0x11, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000015)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/183)

14m29.671259294s ago: executing program 5 (id=809):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={0x0, r0}, 0x18)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xe6, &(0x7f0000000280)=""/230, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xfffffffe, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0x800, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0xb}, {0x3, 0x1, 0xe, 0x5}, {0x5, 0x2, 0xb, 0xc}, {0x1, 0x3, 0x9, 0xe17a104a9b0760f1}], 0x10, 0xfffffffd}, 0x94)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200068a0}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x10, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, 0x7, 0x80}, {0x0, @remote, 0xd, 0x4, [0x7, 0x8]}, @ah_ip4_spec={@multicast1, @private=0xa010100, 0x0, 0x5}, {0x0, @local, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000005c0)='veth0_vlan\x00')
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r11, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4089}, 0xc0000)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r10)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0)

14m27.24050041s ago: executing program 3 (id=813):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40))

14m26.533342814s ago: executing program 3 (id=815):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x20000800)
read$FUSE(0xffffffffffffffff, &(0x7f0000004440)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_OPEN(r0, &(0x7f0000004400)={0x20, 0x0, r2, {0x0, 0x4}}, 0x20)
mount$cgroup2(0x0, 0x0, &(0x7f00000002c0), 0x2000000, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
epoll_create1(0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x20, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xffffffff}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

14m25.534382273s ago: executing program 6 (id=817):
socket$nl_sock_diag(0x10, 0x3, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil)
stat(0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="be38e63a56fce8c5"], 0x24}, 0x1, 0x0, 0x0, 0x22008090}, 0x0)

14m25.224126307s ago: executing program 0 (id=818):
timer_create(0xfffffffffffffff4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0)
r0 = open$dir(0x0, 0x20, 0x80)
preadv2(r0, 0x0, 0x0, 0x2, 0x7, 0x1f)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(r1)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00')

14m24.257384345s ago: executing program 35 (id=787):
socket$nl_generic(0x11, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000015)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/183)

14m22.790631659s ago: executing program 5 (id=820):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44, &(0x7f0000000280)={0x11, 0x8100, 0x0, 0x1, 0x7, 0x6, @remote}, 0x14)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1301"], 0x16)

14m22.737622785s ago: executing program 3 (id=821):
openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080))

14m22.039819591s ago: executing program 5 (id=822):
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)

14m22.039219558s ago: executing program 3 (id=823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}}], {0x14, 0x10}}, 0x50}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x48000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x3c}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90)

14m21.919352731s ago: executing program 6 (id=824):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

14m21.561025387s ago: executing program 6 (id=825):
r0 = socket$tipc(0x1e, 0x5, 0x0)
connect$tipc(r0, 0x0, 0x0)
sendmsg$tipc(r0, 0x0, 0x20028805)
close(r0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r1, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f00000005c0)=[{0x17, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x2, @svalue=0x7}, {0x1, @svalue=0x3}, {0x1, @svalue=0xfffffffffffffffe}]}, 0x4}, {0x2, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x2b, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {0x0, @svalue=0x939}, {0x3, @svalue=0x5}, {0x0, @svalue=0x50}]}, 0xe6}]})

14m18.726451998s ago: executing program 5 (id=826):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2200, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='\x00']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

14m18.724242868s ago: executing program 6 (id=827):
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0)

14m18.722950496s ago: executing program 3 (id=828):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))

14m15.594180222s ago: executing program 0 (id=829):
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "6136bc40", {0x3, 0x107, 0x0, 0x6, 0x1, 0x5, 0x8}})
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040)
io_setup(0x2, &(0x7f00000002c0))
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000010c0), 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x1, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0)

14m15.58503616s ago: executing program 5 (id=830):
timer_create(0xfffffffffffffff4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0)
r0 = open$dir(0x0, 0x20, 0x80)
preadv2(r0, 0x0, 0x0, 0x2, 0x7, 0x1f)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(r1)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)}}], 0x1, 0x84)
syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00')

14m15.583414697s ago: executing program 3 (id=831):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={0x0, r0}, 0x18)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xe6, &(0x7f0000000280)=""/230, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xfffffffe, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0x800, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0xb}, {0x3, 0x1, 0xe, 0x5}, {0x5, 0x2, 0xb, 0xc}, {0x1, 0x3, 0x9, 0xe17a104a9b0760f1}], 0x10, 0xfffffffd}, 0x94)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200068a0}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x10, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, 0x7, 0x80}, {0x0, @remote, 0xd, 0x4, [0x7, 0x8]}, @ah_ip4_spec={@multicast1, @private=0xa010100, 0x0, 0x5}, {0x0, @local, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)

14m15.580767588s ago: executing program 6 (id=832):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
pipe(0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x1, 0x4)

14m13.009073216s ago: executing program 6 (id=833):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96", 0x43}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d058050639", 0x99}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78b", 0x3f}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a", 0x1d}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

14m13.008280333s ago: executing program 5 (id=834):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

14m0.760936308s ago: executing program 0 (id=835):
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)

13m57.337538792s ago: executing program 36 (id=831):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={0x0, r0}, 0x18)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f0000000100)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xe6, &(0x7f0000000280)=""/230, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xfffffffe, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0x800, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0xb}, {0x3, 0x1, 0xe, 0x5}, {0x5, 0x2, 0xb, 0xc}, {0x1, 0x3, 0x9, 0xe17a104a9b0760f1}], 0x10, 0xfffffffd}, 0x94)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200068a0}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x10, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, 0x7, 0x80}, {0x0, @remote, 0xd, 0x4, [0x7, 0x8]}, @ah_ip4_spec={@multicast1, @private=0xa010100, 0x0, 0x5}, {0x0, @local, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x81}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)

13m56.286200629s ago: executing program 0 (id=837):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000111401002dbd7000ffdbdf2608004a000000000008004b002800"], 0x30}, 0x1, 0x0, 0x0, 0x24040041}, 0x48884)

13m55.229972707s ago: executing program 37 (id=833):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x5}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96", 0x43}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d058050639", 0x99}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78b", 0x3f}, {&(0x7f0000000800)}], 0x4}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a", 0x1d}, {&(0x7f0000000580)}], 0x3}}], 0x2, 0x20000044)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

13m46.069814338s ago: executing program 38 (id=834):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

13m46.054159172s ago: executing program 0 (id=840):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))

13m42.147331417s ago: executing program 0 (id=841):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x3, 0x0, 0x0)

13m12.822790777s ago: executing program 39 (id=841):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_set$uid(0x3, 0x0, 0x0)

12m58.242367279s ago: executing program 2 (id=838):
timer_create(0xfffffffffffffff4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0)
r0 = open$dir(0x0, 0x20, 0x80)
preadv2(r0, 0x0, 0x0, 0x2, 0x7, 0x1f)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(r1)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00')

12m20.271239342s ago: executing program 8 (id=819):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r5}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x10)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060709050ae5"], 0x0)

10m32.819911089s ago: executing program 1 (id=839):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x80c0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x22, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = syz_open_dev$evdev(0x0, 0x2, 0x2002)
readv(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)

10m1.040839295s ago: executing program 4 (id=842):
listen(0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1203, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u16=&(0x7f0000000080)=0xa65}})

8m59.782999466s ago: executing program 4 (id=842):
listen(0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1203, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u16=&(0x7f0000000080)=0xa65}})

6m56.401614447s ago: executing program 8 (id=819):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r5}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r5}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r4, 0x0, 0x0}, 0x10)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060709050ae5"], 0x0)

6m17.685644169s ago: executing program 9 (id=836):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@setlink={0x58, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x12}]}]}]}, 0x58}}, 0x0)

5m42.240130956s ago: executing program 4 (id=842):
listen(0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1203, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u16=&(0x7f0000000080)=0xa65}})

5m35.463399002s ago: executing program 1 (id=839):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x80c0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x22, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = syz_open_dev$evdev(0x0, 0x2, 0x2002)
readv(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)

2m47.090332173s ago: executing program 2 (id=838):
timer_create(0xfffffffffffffff4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0)
r0 = open$dir(0x0, 0x20, 0x80)
preadv2(r0, 0x0, 0x0, 0x2, 0x7, 0x1f)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(r1)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00')

2m46.105221968s ago: executing program 9 (id=836):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@setlink={0x58, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x12}]}]}]}, 0x58}}, 0x0)

1m10.909793658s ago: executing program 4 (id=842):
listen(0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1203, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u16=&(0x7f0000000080)=0xa65}})

22.018314559s ago: executing program 9 (id=836):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@setlink={0x58, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x12}]}]}]}, 0x58}}, 0x0)

2.077471438s ago: executing program 4 (id=842):
listen(0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1203, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u16=&(0x7f0000000080)=0xa65}})

0s ago: executing program 2 (id=838):
timer_create(0xfffffffffffffff4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0)
r0 = open$dir(0x0, 0x20, 0x80)
preadv2(r0, 0x0, 0x0, 0x2, 0x7, 0x1f)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
getpgrp(r1)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid_for_children\x00')

kernel console output (not intermixed with test programs):

 from the interface descriptor's value: 21
[  157.560780][  T197] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  157.560803][  T197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.748929][  T197] usb 4-1: config 0 descriptor??
[  158.514010][  T197] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  158.796084][  T197] usb 4-1: USB disconnect, device number 4
[  158.992331][ T6340] fido_id[6340]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  164.315611][ T6383] tipc: Started in network mode
[  164.315649][ T6383] tipc: Node identity 72d72994e389, cluster identity 4711
[  164.350854][ T6383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.364278][ T6383] syzkaller0: entered promiscuous mode
[  164.364304][ T6383] syzkaller0: entered allmulticast mode
[  164.446687][ T6383] tipc: Resetting bearer <eth:syzkaller0>
[  165.541850][ T6383] tipc: Disabling bearer <eth:syzkaller0>
[  168.640691][  T197] tipc: Node number set to 2438867348
[  168.857702][ T6408] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  172.934526][ T5849] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  173.084034][ T6480] syzkaller0: entered promiscuous mode
[  173.084055][ T6480] syzkaller0: entered allmulticast mode
[  173.111494][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.111545][ T5849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.111568][ T5849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  173.111642][ T5849] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  173.111666][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.209663][ T5849] usb 6-1: config 0 descriptor??
[  173.465745][ T6484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.176'.
[  173.841505][ T5849] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  174.240847][   T11] usb 6-1: USB disconnect, device number 2
[  175.756920][ T5616] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  175.907683][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  175.907714][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  175.913832][ T5616] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  175.913863][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.913883][ T5616] usb 4-1: Product: syz
[  175.913899][ T5616] usb 4-1: Manufacturer: syz
[  175.913913][ T5616] usb 4-1: SerialNumber: syz
[  175.990139][ T5616] usb 4-1: config 0 descriptor??
[  176.032348][ T5616] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  179.355126][   T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  179.484618][   T31] usb 2-1: device descriptor read/64, error -71
[  179.498318][ T6562] netlink: 'syz.4.192': attribute type 4 has an invalid length.
[  179.553264][ T6564] netlink: 'syz.4.192': attribute type 4 has an invalid length.
[  179.864918][   T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  180.006513][   T31] usb 2-1: device descriptor read/64, error -71
[  180.115069][   T31] usb usb2-port1: attempt power cycle
[  180.287032][ T5616] usb 4-1: USB disconnect, device number 5
[  180.585283][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  180.586025][   T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  180.616275][   T31] usb 2-1: device descriptor read/8, error -71
[  180.874634][   T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  180.902186][   T31] usb 2-1: device descriptor read/8, error -71
[  181.049699][   T31] usb usb2-port1: unable to enumerate USB device
[  181.206875][ T5616] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  181.636439][ T5616] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  181.636468][ T5616] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  181.640064][ T5616] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  181.640091][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.640110][ T5616] usb 6-1: Product: syz
[  181.640124][ T5616] usb 6-1: Manufacturer: syz
[  181.640146][ T5616] usb 6-1: SerialNumber: syz
[  181.722493][ T5616] usb 6-1: config 0 descriptor??
[  181.762780][ T5616] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  182.225392][ T5849] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  182.394533][ T5849] usb 5-1: Using ep0 maxpacket: 8
[  182.401484][ T5849] usb 5-1: unable to get BOS descriptor or descriptor too short
[  182.487255][ T5849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  182.487282][ T5849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  182.493284][ T5849] usb 5-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  182.493312][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.493332][ T5849] usb 5-1: Product: syz
[  182.493346][ T5849] usb 5-1: Manufacturer: syz
[  182.493360][ T5849] usb 5-1: SerialNumber: syz
[  186.108002][ T5849] usb 5-1: 0:1 : does not exist
[  186.108110][ T5849] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  186.108165][ T5849] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  186.161815][ T5616] usb 6-1: USB disconnect, device number 3
[  186.414802][ T6621] netlink: 68 bytes leftover after parsing attributes in process `syz.5.210'.
[  186.435778][   T44] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  186.498343][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.210'.
[  186.608032][   T44] usb 2-1: too many endpoints for config 0 interface 0 altsetting 251: 225, using maximum allowed: 30
[  186.608080][   T44] usb 2-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 225
[  186.608107][   T44] usb 2-1: config 0 interface 0 has no altsetting 0
[  186.608139][   T44] usb 2-1: New USB device found, idVendor=056a, idProduct=00ce, bcdDevice= 0.00
[  186.608170][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.695756][   T44] usb 2-1: config 0 descriptor??
[  186.875583][  T197] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  187.004615][  T197] usb 4-1: device descriptor read/64, error -71
[  187.032475][ T5849] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  187.210562][ T5849] usb 5-1: USB disconnect, device number 4
[  187.254575][  T197] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  187.714589][   T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  187.907762][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  187.907794][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  187.910798][   T31] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  187.910825][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.910845][   T31] usb 1-1: Product: syz
[  187.910860][   T31] usb 1-1: Manufacturer: syz
[  187.910875][   T31] usb 1-1: SerialNumber: syz
[  188.079193][  T197] usb 4-1: device descriptor read/64, error -71
[  188.131472][   T44] wacom 0003:056A:00CE.0004: unknown main item tag 0x2
[  188.131499][   T44] wacom 0003:056A:00CE.0004: unknown main item tag 0x6
[  188.131550][   T44] wacom 0003:056A:00CE.0004: ignoring exceeding usage max
[  188.185071][  T197] usb usb4-port1: attempt power cycle
[  188.208143][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  188.275813][   T31] usb 1-1: config 0 descriptor??
[  188.298397][   T44] usb 2-1: USB disconnect, device number 9
[  188.318197][   T31] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  188.419199][ T6631] syzkaller0: entered promiscuous mode
[  188.419362][ T6631] syzkaller0: entered allmulticast mode
[  188.524595][  T197] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  188.545318][  T197] usb 4-1: device descriptor read/8, error -71
[  188.794944][  T197] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  188.824793][  T197] usb 4-1: device descriptor read/8, error -71
[  188.981134][  T197] usb usb4-port1: unable to enumerate USB device
[  190.055162][ T6648] netlink: 72 bytes leftover after parsing attributes in process `syz.5.215'.
[  191.959820][   T31] usb 1-1: USB disconnect, device number 2
[  192.489194][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  192.886426][   T31] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  193.059748][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  193.059778][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  193.086403][   T31] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  193.086433][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.086453][   T31] usb 1-1: Product: syz
[  193.086466][   T31] usb 1-1: Manufacturer: syz
[  193.086480][   T31] usb 1-1: SerialNumber: syz
[  193.184740][   T31] usb 1-1: config 0 descriptor??
[  193.232641][   T31] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  194.175091][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  194.175166][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  196.184536][ T5616] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  196.204577][   T11] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  196.344627][ T5616] usb 5-1: Using ep0 maxpacket: 32
[  196.346976][ T5616] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  196.347000][ T5616] usb 5-1: config 0 has no interface number 0
[  196.347045][ T5616] usb 5-1: config 0 interface 184 has no altsetting 0
[  196.386014][   T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  196.386044][   T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  196.422389][   T11] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  196.422420][   T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.422440][   T11] usb 4-1: Product: syz
[  196.422455][   T11] usb 4-1: Manufacturer: syz
[  196.422470][   T11] usb 4-1: SerialNumber: syz
[  196.454706][ T5616] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  196.454802][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.454837][ T5616] usb 5-1: Product: syz
[  196.454853][ T5616] usb 5-1: Manufacturer: syz
[  196.454867][ T5616] usb 5-1: SerialNumber: syz
[  196.562479][   T11] usb 4-1: config 0 descriptor??
[  196.660739][ T5616] usb 5-1: config 0 descriptor??
[  197.380868][   T11] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  197.412925][   T31] usb 1-1: USB disconnect, device number 3
[  197.670953][ T5616] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61
[  197.670981][ T5616] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  197.673219][ T6711] capability: warning: `syz.5.236' uses 32-bit capabilities (legacy support in use)
[  197.708681][ T6711] random: crng reseeded on system resumption
[  198.019625][ T5616] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  198.019656][ T5616] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  198.019675][ T5616] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  198.019692][ T5616] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  198.020375][ T5616] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  198.172395][ T6720] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[  198.381986][ T5616] usb 5-1: USB disconnect, device number 5
[  198.664958][   T11] usb 4-1: USB disconnect, device number 10
[  205.134615][ T1255] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  205.344508][ T1255] usb 2-1: Using ep0 maxpacket: 32
[  205.412914][ T1255] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.412945][ T1255] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.412965][ T1255] usb 2-1: config 0 interface 0 has no altsetting 0
[  205.446774][ T1255] usb 2-1: New USB device found, idVendor=558f, idProduct=00df, bcdDevice= 0.00
[  205.446803][ T1255] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0
[  205.446823][ T1255] usb 2-1: Manufacturer: syz
[  205.452888][ T1255] usb 2-1: config 0 descriptor??
[  205.638238][ T1255] usbhid 2-1:0.0: can't add hid device: -71
[  205.638353][ T1255] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  205.695061][ T1255] usb 2-1: USB disconnect, device number 10
[  206.184542][ T1255] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  206.334846][ T1255] usb 2-1: Using ep0 maxpacket: 32
[  206.337222][ T1255] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  206.337254][ T1255] usb 2-1: config 0 has no interface number 0
[  206.337297][ T1255] usb 2-1: config 0 interface 184 has no altsetting 0
[  206.377124][ T1255] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  206.377155][ T1255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.377175][ T1255] usb 2-1: Product: syz
[  206.377190][ T1255] usb 2-1: Manufacturer: syz
[  206.377204][ T1255] usb 2-1: SerialNumber: syz
[  206.432765][ T1255] usb 2-1: config 0 descriptor??
[  206.574655][ T5714] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  206.757572][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  206.757661][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  206.760831][ T5714] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  206.760856][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.760874][ T5714] usb 4-1: Product: syz
[  206.760936][ T5714] usb 4-1: Manufacturer: syz
[  206.760950][ T5714] usb 4-1: SerialNumber: syz
[  206.945311][ T5714] usb 4-1: config 0 descriptor??
[  207.002727][ T5714] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  207.715567][ T1255] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  207.715599][ T1255] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  207.733790][ T1255] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  207.733818][ T1255] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  207.733836][ T1255] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  207.755225][ T1255] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  207.771526][ T1255] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  207.857574][ T1255] usb 2-1: USB disconnect, device number 11
[  210.779074][ T5714] usb 4-1: USB disconnect, device number 11
[  211.105204][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.024528][   T11] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  212.178448][   T11] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  212.178482][   T11] usb 2-1: config 0 interface 0 has no altsetting 0
[  212.178515][   T11] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  212.178538][   T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.409442][   T11] usb 2-1: config 0 descriptor??
[  212.829058][ T6831] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  212.830105][ T6831] syzkaller0: entered promiscuous mode
[  212.830127][ T6831] syzkaller0: entered allmulticast mode
[  213.104143][   T11] koneplus 0003:1E7D:2E22.0005: unknown main item tag 0x0
[  213.104174][   T11] koneplus 0003:1E7D:2E22.0005: unexpected long global item
[  213.104953][   T11] koneplus 0003:1E7D:2E22.0005: parse failed
[  213.105038][   T11] koneplus 0003:1E7D:2E22.0005: probe with driver koneplus failed with error -22
[  213.358226][ T6834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.274'.
[  213.388450][   T11] usb 2-1: USB disconnect, device number 12
[  214.020646][   T36] audit: type=1107 audit(1783227315.950:2): pid=6848 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  214.050759][ T6849] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  215.527449][ T6890] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  215.528496][ T6890] syzkaller0: entered promiscuous mode
[  215.528512][ T6890] syzkaller0: entered allmulticast mode
[  215.656317][ T6892] netlink: 44 bytes leftover after parsing attributes in process `syz.4.294'.
[  216.916124][ T5714] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  216.952562][ T5714] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  217.139582][ T6915] gretap0: entered promiscuous mode
[  217.489870][ T6918] fido_id[6918]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  222.084709][   T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  222.249029][   T44] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.333169][ T5614] Bluetooth: hci2: command 0x0406 tx timeout
[  222.346759][   T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  222.346788][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.346809][   T44] usb 1-1: Product: syz
[  222.346823][   T44] usb 1-1: Manufacturer: syz
[  222.346838][   T44] usb 1-1: SerialNumber: syz
[  224.314240][   T44] cdc_ncm 1-1:1.0: bind() failure
[  224.366310][   T44] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  224.366354][   T44] cdc_ncm 1-1:1.1: bind() failure
[  224.437052][   T44] usb 1-1: USB disconnect, device number 4
[  225.191924][ T5608] Bluetooth: hci1: command 0x0406 tx timeout
[  225.197503][ T4912] Bluetooth: hci3: command 0x0406 tx timeout
[  231.527237][   T36] audit: type=1326 audit(1783227333.420:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6998 comm="syz.0.330" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2bbdde59 code=0x7fc00000
[  233.314525][   T44] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  233.728355][   T44] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.728397][   T44] usb 1-1: config 0 interface 0 has no altsetting 0
[  233.728429][   T44] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  233.728450][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.779394][   T44] usb 1-1: config 0 descriptor??
[  237.230283][   T44] usbhid 1-1:0.0: can't add hid device: -71
[  237.230408][   T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  237.273974][   T44] usb 1-1: USB disconnect, device number 5
[  237.490131][ T5721] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  239.942628][   T31] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  241.727486][   T31] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  241.727516][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[  241.727546][   T31] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  241.727566][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.740316][   T31] usb 2-1: config 0 descriptor??
[  241.994221][ T7120] binder: 7119:7120 ioctl c0306201 200000000080 returned -14
[  242.017288][ T7120] binder: 7119:7120 ioctl c0306201 2000000003c0 returned -14
[  242.273921][   T31] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0
[  242.273957][   T31] koneplus 0003:1E7D:2E22.0007: unexpected long global item
[  242.275997][   T31] koneplus 0003:1E7D:2E22.0007: parse failed
[  242.276222][   T31] koneplus 0003:1E7D:2E22.0007: probe with driver koneplus failed with error -22
[  245.570164][ T7138] netlink: 'syz.3.374': attribute type 12 has an invalid length.
[  245.570186][ T7138] netlink: 'syz.3.374': attribute type 29 has an invalid length.
[  245.570200][ T7138] netlink: 148 bytes leftover after parsing attributes in process `syz.3.374'.
[  245.570228][ T7138] netlink: 'syz.3.374': attribute type 3 has an invalid length.
[  245.570240][ T7138] netlink: 'syz.3.374': attribute type 2 has an invalid length.
[  245.570251][ T7138] netlink: 35 bytes leftover after parsing attributes in process `syz.3.374'.
[  245.807148][  T197] usb 2-1: USB disconnect, device number 13
[  247.374234][ T7161] binder: 7160:7161 ioctl c0306201 200000000680 returned -14
[  247.755616][ T7172] syzkaller0: entered promiscuous mode
[  247.755646][ T7172] syzkaller0: entered allmulticast mode
[  248.884639][ T7177] netlink: 44 bytes leftover after parsing attributes in process `syz.3.385'.
[  249.134604][ T1255] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  249.325394][ T1255] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.325430][ T1255] usb 2-1: config 0 interface 0 has no altsetting 0
[  249.325465][ T1255] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  249.325489][ T1255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.380128][ T1255] usb 2-1: config 0 descriptor??
[  249.424551][  T197] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  249.574496][  T197] usb 1-1: Using ep0 maxpacket: 32
[  249.576994][  T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.577026][  T197] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.577065][  T197] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  249.577089][  T197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.631327][  T197] usb 1-1: config 0 descriptor??
[  249.674219][  T197] hub 1-1:0.0: USB hub found
[  250.002188][  T197] hub 1-1:0.0: 1 port detected
[  250.033122][ T1255] koneplus 0003:1E7D:2E22.0008: unknown main item tag 0x0
[  250.033153][ T1255] koneplus 0003:1E7D:2E22.0008: unexpected long global item
[  250.033694][ T1255] koneplus 0003:1E7D:2E22.0008: parse failed
[  250.033756][ T1255] koneplus 0003:1E7D:2E22.0008: probe with driver koneplus failed with error -22
[  250.210606][ T5616] usb 2-1: USB disconnect, device number 14
[  250.722030][  T197] hub 1-1:0.0: activate --> -90
[  251.087792][ T5616] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  251.801518][  T197] usb 1-1-port1: cannot disable (err = -71)
[  251.825660][  T197] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  251.825688][  T197] usb 1-1-port1: connect-debounce failed
[  251.828004][   T11] usb 1-1: USB disconnect, device number 6
[  252.146279][ T5616] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.146305][ T5616] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  252.146362][ T5616] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  252.153231][ T5616] usb 5-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40
[  252.153261][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.153282][ T5616] usb 5-1: Product: syz
[  252.153296][ T5616] usb 5-1: Manufacturer: syz
[  252.153310][ T5616] usb 5-1: SerialNumber: syz
[  253.483041][ T5616] usb 5-1: 0:2 : does not exist
[  253.538347][ T5616] usb 5-1: cannot find UAC_HEADER
[  253.664822][ T1255] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  253.673877][ T7227] syzkaller0: entered promiscuous mode
[  253.673903][ T7227] syzkaller0: entered allmulticast mode
[  253.836908][ T1255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  253.836936][ T1255] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  253.841531][ T1255] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  253.841558][ T1255] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.841578][ T1255] usb 6-1: Product: syz
[  253.841591][ T1255] usb 6-1: Manufacturer: syz
[  253.841605][ T1255] usb 6-1: SerialNumber: syz
[  253.905810][ T7231] netlink: 44 bytes leftover after parsing attributes in process `syz.0.402'.
[  253.930438][ T1255] usb 6-1: config 0 descriptor??
[  253.980828][ T5616] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  253.982874][ T1255] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  254.084836][ T5616] usb 5-1: USB disconnect, device number 7
[  254.505294][   T11] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  254.661445][   T11] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  254.661499][   T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.661525][   T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.661546][   T11] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  254.661584][   T11] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  254.661605][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.725472][   T11] usb 4-1: config 0 descriptor??
[  255.192222][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.192255][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.192279][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.192302][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.192325][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.192367][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.192391][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.192416][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.192441][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.192464][   T11] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  255.296027][   T11] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  255.419560][   T11] usb 4-1: USB disconnect, device number 13
[  255.619481][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  255.619547][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  256.586151][ T7259] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.413'.
[  257.070215][ T1255] usb 6-1: USB disconnect, device number 4
[  258.464505][ T5616] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  258.689227][ T5721] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  258.811661][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  258.860200][ T5721] usb 2-1: unable to get BOS descriptor or descriptor too short
[  258.860949][ T5721] usb 2-1: not running at top speed; connect to a high speed hub
[  258.862414][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  258.862464][ T5721] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  258.862490][ T5721] usb 2-1: config 1 interface 0 has no altsetting 0
[  258.912631][ T5721] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.912661][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.912681][ T5721] usb 2-1: Product: syz
[  258.912695][ T5721] usb 2-1: Manufacturer: syz
[  258.912709][ T5721] usb 2-1: SerialNumber: syz
[  259.112638][ T7288] netlink: 36 bytes leftover after parsing attributes in process `syz.5.423'.
[  259.112660][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.5.423'.
[  259.112678][ T7288] netlink: 36 bytes leftover after parsing attributes in process `syz.5.423'.
[  259.207136][ T5721] cdc_ether 2-1:1.0: skipping garbage
[  259.207162][ T5721] usb 2-1: No union descriptors
[  259.231949][ T5721] usb 2-1: USB disconnect, device number 15
[  259.338078][ T5616] usb 5-1: device descriptor read/64, error -71
[  259.524512][ T1255] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  259.570285][ T7288] syz.5.423 (7288) used greatest stack depth: 18152 bytes left
[  259.614508][ T5616] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  259.679010][ T1255] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  259.679042][ T1255] usb 1-1: config 0 interface 0 has no altsetting 0
[  259.679073][ T1255] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  259.679094][ T1255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.727268][ T1255] usb 1-1: config 0 descriptor??
[  259.813443][ T7296] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.426'.
[  259.824516][ T5616] usb 5-1: Using ep0 maxpacket: 32
[  259.841964][ T5616] usb 5-1: unable to get BOS descriptor or descriptor too short
[  259.843602][ T5616] usb 5-1: config 1 interface 0 altsetting 82 endpoint 0x82 has invalid maxpacket 1656, setting to 1024
[  259.843634][ T5616] usb 5-1: config 1 interface 0 altsetting 82 bulk endpoint 0x82 has invalid maxpacket 1024
[  259.843659][ T5616] usb 5-1: config 1 interface 0 altsetting 82 bulk endpoint 0x3 has invalid maxpacket 1024
[  259.843684][ T5616] usb 5-1: config 1 interface 0 has no altsetting 0
[  259.911053][ T5616] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  259.911084][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.911105][ T5616] usb 5-1: Product: syz
[  259.911119][ T5616] usb 5-1: Manufacturer: syz
[  259.911134][ T5616] usb 5-1: SerialNumber: syz
[  259.962507][ T7283] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  259.962694][ T7283] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  260.183310][ T5616] usb 5-1: No union descriptors
[  260.200737][ T1255] hid_parser_main: 5 callbacks suppressed
[  260.200767][ T1255] koneplus 0003:1E7D:2E22.000A: unknown main item tag 0x0
[  260.200796][ T1255] koneplus 0003:1E7D:2E22.000A: unexpected long global item
[  260.201496][ T1255] koneplus 0003:1E7D:2E22.000A: parse failed
[  260.201571][ T1255] koneplus 0003:1E7D:2E22.000A: probe with driver koneplus failed with error -22
[  260.298063][ T5616] usb 5-1: USB disconnect, device number 9
[  260.644730][ T5721] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  260.819681][ T5721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  260.819711][ T5721] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  260.824356][ T5721] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  260.836413][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.836448][ T5721] usb 6-1: Product: syz
[  260.836461][ T5721] usb 6-1: Manufacturer: syz
[  260.836492][ T5721] usb 6-1: SerialNumber: syz
[  260.927460][ T5721] usb 6-1: config 0 descriptor??
[  261.015555][  T197] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  261.034258][ T5721] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  261.068938][   T44] usb 1-1: USB disconnect, device number 7
[  261.184478][  T197] usb 2-1: Using ep0 maxpacket: 32
[  261.203339][  T197] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.203369][  T197] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  261.203393][  T197] usb 2-1: config 0 interface 0 has no altsetting 0
[  261.203422][  T197] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  261.203443][  T197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.340600][  T197] usb 2-1: config 0 descriptor??
[  261.851507][  T197] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[  261.851542][  T197] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[  261.851565][  T197] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x1
[  261.851589][  T197] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[  261.851613][  T197] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[  261.851637][  T197] kovaplus 0003:1E7D:2D50.000B: unknown main item tag 0x0
[  261.852796][  T197] kovaplus 0003:1E7D:2D50.000B: item fetching failed at offset 36/39
[  261.858280][  T197] kovaplus 0003:1E7D:2D50.000B: parse failed
[  261.858403][  T197] kovaplus 0003:1E7D:2D50.000B: probe with driver kovaplus failed with error -22
[  262.076447][   T44] usb 2-1: USB disconnect, device number 16
[  262.196210][   T11] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  262.346607][   T11] usb 1-1: Using ep0 maxpacket: 32
[  262.349212][   T11] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.349240][   T11] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  262.349265][   T11] usb 1-1: config 0 interface 0 has no altsetting 0
[  262.349295][   T11] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  262.349316][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.396802][   T11] usb 1-1: config 0 descriptor??
[  262.898998][   T11] samsung 0003:0419:0600.000C: unknown main item tag 0x0
[  262.899035][   T11] samsung 0003:0419:0600.000C: item fetching failed at offset 36/39
[  262.901895][   T11] samsung 0003:0419:0600.000C: parse failed
[  262.901966][   T11] samsung 0003:0419:0600.000C: probe with driver samsung failed with error -22
[  263.101200][ T1255] usb 1-1: USB disconnect, device number 8
[  263.322676][ T5721] usb 6-1: USB disconnect, device number 5
[  263.577355][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  263.867839][ T7348] kvm: requested 2514 ns i8254 timer period limited to 200000 ns
[  264.006625][ T7345] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  264.007980][ T7345] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  264.008097][ T7345] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  264.008206][ T7345] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  264.008249][ T7345] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  264.008289][ T7345] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  264.008896][ T7345] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  264.012651][ T7345] kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  264.012695][ T7345] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  278.612834][ T7391] syz.1.455 uses obsolete (PF_INET,SOCK_PACKET)
[  279.430007][   T36] audit: type=1107 audit(1783227381.380:4): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=_ msg=''
[  280.817389][ T7425] netlink: 44 bytes leftover after parsing attributes in process `syz.5.466'.
[  280.817415][ T7425] netlink: 43 bytes leftover after parsing attributes in process `syz.5.466'.
[  280.817430][ T7425] netlink: 'syz.5.466': attribute type 6 has an invalid length.
[  280.817443][ T7425] netlink: 'syz.5.466': attribute type 5 has an invalid length.
[  280.817455][ T7425] netlink: 43 bytes leftover after parsing attributes in process `syz.5.466'.
[  286.499552][ T7452] netlink: 220 bytes leftover after parsing attributes in process `syz.5.473'.
[  290.297236][ T5714] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  290.458391][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  290.458421][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  290.464319][ T5714] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  290.488493][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.488519][ T5714] usb 1-1: Product: syz
[  290.488534][ T5714] usb 1-1: Manufacturer: syz
[  290.488548][ T5714] usb 1-1: SerialNumber: syz
[  290.529864][ T5714] usb 1-1: config 0 descriptor??
[  290.543283][ T5714] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  290.645080][   T11] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  291.663107][   T11] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  291.663144][   T11] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[  291.663206][   T11] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  291.663233][   T11] usb 6-1: config 220 interface 0 has no altsetting 0
[  291.663252][   T11] usb 6-1: config 220 interface 1 has no altsetting 0
[  291.722329][   T11] usb 6-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9
[  291.722360][   T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.722383][   T11] usb 6-1: Product: syz
[  291.722397][   T11] usb 6-1: Manufacturer: syz
[  291.722412][   T11] usb 6-1: SerialNumber: syz
[  292.155683][   T11] usb 6-1: selecting invalid altsetting 0
[  292.161064][   T11] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22
[  292.238623][   T11] usb 6-1: selecting invalid altsetting 0
[  292.238658][   T11] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  292.344308][   T11] usb 6-1: USB disconnect, device number 6
[  292.472627][ T5714] usb 1-1: USB disconnect, device number 9
[  293.132639][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  297.304516][ T5714] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  297.456594][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  297.456625][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  297.458913][ T5714] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  297.458940][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.458958][ T5714] usb 6-1: Product: syz
[  297.458971][ T5714] usb 6-1: Manufacturer: syz
[  297.458984][ T5714] usb 6-1: SerialNumber: syz
[  297.521610][ T5714] usb 6-1: config 0 descriptor??
[  297.536466][ T5714] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  297.820721][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  297.887188][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  297.889650][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  297.912727][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  297.929097][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  300.037287][ T5714] usb 6-1: USB disconnect, device number 7
[  300.084693][   T60] Bluetooth: hci5: command tx timeout
[  300.469854][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  301.428522][ T1033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.522129][ T7575] netlink: 24 bytes leftover after parsing attributes in process `syz.5.513'.
[  302.165635][   T60] Bluetooth: hci5: command tx timeout
[  302.195409][ T1033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.738702][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  303.750955][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  303.783167][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  303.784973][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  303.870135][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  303.876480][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  304.140337][    T9] usb 6-1: Using ep0 maxpacket: 32
[  304.160936][    T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.160979][    T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.167625][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  304.167654][    T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  304.167677][    T9] usb 6-1: Product: syz
[  304.167691][    T9] usb 6-1: Manufacturer: syz
[  304.249935][   T60] Bluetooth: hci5: command tx timeout
[  304.250748][    T9] hub 6-1:4.0: USB hub found
[  304.253483][ T1033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  304.462035][    T9] hub 6-1:4.0: 9 ports detected
[  304.463687][    T9] hub 6-1:4.0: insufficient power available to use all downstream ports
[  304.482372][ T7615] syzkaller0: entered promiscuous mode
[  304.482397][ T7615] syzkaller0: entered allmulticast mode
[  304.742665][ T1033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  305.273148][    T9] usb 6-1: USB disconnect, device number 8
[  305.794651][ T5721] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  306.024036][   T60] Bluetooth: hci2: command tx timeout
[  306.044588][ T5721] usb 1-1: Using ep0 maxpacket: 32
[  306.046839][ T5721] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  306.046862][ T5721] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  306.046880][ T5721] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  306.046936][ T5721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  306.046957][ T5721] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  306.046979][ T5721] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  306.047017][ T5721] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  306.047038][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.071845][ T5721] usb 1-1: config 0 descriptor??
[  306.296006][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  306.297116][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  306.324567][   T60] Bluetooth: hci5: command tx timeout
[  306.379008][ T5721] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  306.402186][ T5721] usb 1-1: USB disconnect, device number 10
[  306.470609][ T5721] usblp0: removed
[  306.968002][ T1033] bridge_slave_1: left allmulticast mode
[  306.968034][ T1033] bridge_slave_1: left promiscuous mode
[  306.968292][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.150933][ T1033] bridge_slave_0: left allmulticast mode
[  307.150964][ T1033] bridge_slave_0: left promiscuous mode
[  307.151186][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.199352][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'.
[  308.085303][   T60] Bluetooth: hci2: command tx timeout
[  308.815327][ T1033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.896719][ T1033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  308.938288][ T1033] bond0 (unregistering): Released all slaves
[  308.998134][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.998211][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.998376][ T7535] bridge_slave_0: entered allmulticast mode
[  309.003152][ T7535] bridge_slave_0: entered promiscuous mode
[  309.792077][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.792213][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.792400][ T7535] bridge_slave_1: entered allmulticast mode
[  309.827505][ T7535] bridge_slave_1: entered promiscuous mode
[  310.169318][   T60] Bluetooth: hci2: command tx timeout
[  310.181861][ T1033] tipc: Left network mode
[  310.417772][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.429245][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.562477][ T7535] team0: Port device team_slave_0 added
[  311.574033][ T5258] 8021q: adding VLAN 0 to HW filter on device eth5
[  311.593301][ T7535] team0: Port device team_slave_1 added
[  312.054642][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.054659][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.054685][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.154678][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.154696][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  312.154722][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.274508][   T60] Bluetooth: hci2: command tx timeout
[  312.462667][ T7535] hsr_slave_0: entered promiscuous mode
[  312.475019][ T7535] hsr_slave_1: entered promiscuous mode
[  312.476079][ T7535] debugfs: 'hsr0' already exists in 'hsr'
[  312.476103][ T7535] Cannot create hsr debugfs directory
[  313.897747][ T5721] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  313.960128][ T5258] 8021q: adding VLAN 0 to HW filter on device eth6
[  314.050245][ T5721] usb 6-1: Using ep0 maxpacket: 8
[  314.053149][ T5721] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.053182][ T5721] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  314.053209][ T5721] usb 6-1: config 0 interface 0 has no altsetting 0
[  314.053255][ T5721] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  314.053279][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.128132][ T5721] usb 6-1: config 0 descriptor??
[  314.491085][ T1033] hsr_slave_0: left promiscuous mode
[  314.542408][ T1033] hsr_slave_1: left promiscuous mode
[  314.543924][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.543951][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.568898][ T5721] usbhid 6-1:0.0: can't add hid device: -71
[  314.569016][ T5721] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  314.592832][ T5721] usb 6-1: USB disconnect, device number 9
[  314.617671][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.617699][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.776330][ T1033] veth1_macvtap: left promiscuous mode
[  314.776437][ T1033] veth0_macvtap: left promiscuous mode
[  314.776674][ T1033] veth1_vlan: left promiscuous mode
[  314.776844][ T1033] veth0_vlan: left promiscuous mode
[  316.902208][ T7774] binder: 7773:7774 ioctl c00c620f 0 returned -14
[  317.096880][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  317.096951][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  318.025425][ T1033] team0 (unregistering): Port device team_slave_1 removed
[  318.047131][ T5728] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  318.105400][ T1033] team0 (unregistering): Port device team_slave_0 removed
[  318.194453][ T5728] usb 6-1: Using ep0 maxpacket: 8
[  318.196480][ T5728] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.196511][ T5728] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  318.196543][ T5728] usb 6-1: config 0 interface 0 has no altsetting 0
[  318.196595][ T5728] usb 6-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  318.196618][ T5728] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.264077][ T5728] usb 6-1: config 0 descriptor??
[  318.644686][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  318.700499][ T5728] usbhid 6-1:0.0: can't add hid device: -71
[  318.700618][ T5728] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  318.743534][ T5728] usb 6-1: USB disconnect, device number 10
[  318.854531][    T9] usb 4-1: Using ep0 maxpacket: 8
[  318.856969][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  318.858655][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.858676][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  318.861864][    T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  318.861890][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.861908][    T9] usb 4-1: Product: syz
[  318.861930][    T9] usb 4-1: Manufacturer: syz
[  318.861943][    T9] usb 4-1: SerialNumber: syz
[  319.152428][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.152653][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.152834][ T7608] bridge_slave_0: entered allmulticast mode
[  319.178766][ T7608] bridge_slave_0: entered promiscuous mode
[  319.206393][ T7608] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.206527][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.206692][ T7608] bridge_slave_1: entered allmulticast mode
[  319.247117][ T7608] bridge_slave_1: entered promiscuous mode
[  319.367963][    T9] usb 4-1: 0:1 : does not exist
[  319.368064][    T9] usb 4-1: unit 0 not found!
[  319.368081][    T9] usb 4-1: unit 5 not found!
[  319.401236][    T9] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  319.401303][    T9] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[  319.721181][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  319.745247][    T9] usb 4-1: USB disconnect, device number 14
[  319.933612][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  320.780191][ T7608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.506391][ T7608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.999246][ T5728] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  322.087234][ T5728] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  322.443344][ T7832] bridge_slave_0: left allmulticast mode
[  322.443379][ T7832] bridge_slave_0: left promiscuous mode
[  322.503209][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.822814][ T7608] team0: Port device team_slave_0 added
[  322.866306][ T7608] team0: Port device team_slave_1 added
[  323.047790][ T5258] 8021q: adding VLAN 0 to HW filter on device eth7
[  323.123484][ T7608] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.123502][ T7608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.123527][ T7608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.288878][ T7608] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.288895][ T7608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  323.288921][ T7608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.406726][ T7535] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  323.468370][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  323.520575][ T7535] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  323.534041][ T5616] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  323.599994][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  323.643466][ T7535] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  323.687723][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  323.705242][ T5616] usb 1-1: Using ep0 maxpacket: 8
[  323.708872][ T5616] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.708904][ T5616] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  323.708930][ T5616] usb 1-1: config 0 interface 0 has no altsetting 0
[  323.708963][ T5616] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  323.708985][ T5616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.733550][ T5616] usb 1-1: config 0 descriptor??
[  324.227452][ T5616] usbhid 1-1:0.0: can't add hid device: -71
[  324.257221][ T5616] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  324.269441][ T5616] usb 1-1: USB disconnect, device number 11
[  324.306546][ T7866] netlink: 48 bytes leftover after parsing attributes in process `syz.3.589'.
[  324.345743][ T1033] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  324.345770][ T1033] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  324.429490][ T7535] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  324.473575][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  324.542501][ T7608] hsr_slave_0: entered promiscuous mode
[  324.543562][ T7608] hsr_slave_1: entered promiscuous mode
[  324.544306][ T7608] debugfs: 'hsr0' already exists in 'hsr'
[  324.560860][ T7608] Cannot create hsr debugfs directory
[  324.562623][ T7866] netlink: 48 bytes leftover after parsing attributes in process `syz.3.589'.
[  324.907730][ T1033] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  324.907764][ T1033] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.392227][ T1033] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  327.392263][ T1033] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.627471][ T7913] netlink: 20 bytes leftover after parsing attributes in process `syz.5.594'.
[  328.744842][ T7913] veth3: entered allmulticast mode
[  328.922363][ T5258] 8021q: adding VLAN 0 to HW filter on device eth8
[  329.118405][ T7929] netlink: 48 bytes leftover after parsing attributes in process `syz.5.599'.
[  329.362477][ T7928] input: syz1 as /devices/virtual/input/input11
[  329.562394][ T7933] random: crng reseeded on system resumption
[  329.593970][ T1033] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  329.594004][ T1033] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.780181][ T7929] netlink: 48 bytes leftover after parsing attributes in process `syz.5.599'.
[  330.566195][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.695623][ T5616] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  330.724291][ T7535] 8021q: adding VLAN 0 to HW filter on device team0
[  330.866053][ T5616] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  330.866086][ T5616] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  330.868854][ T5616] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  330.868884][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.868905][ T5616] usb 6-1: Product: syz
[  330.868919][ T5616] usb 6-1: Manufacturer: syz
[  330.868934][ T5616] usb 6-1: SerialNumber: syz
[  330.944562][ T5616] usb 6-1: config 0 descriptor??
[  330.969345][ T5616] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  331.481552][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.481710][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.674183][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.683833][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  332.673787][ T7608] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  332.778495][ T7608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  332.793007][ T7608] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  332.916091][ T7608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  333.190427][ T5616] usb 6-1: USB disconnect, device number 11
[  333.415701][ T7608] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  333.500780][ T7608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  333.599665][ T7608] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  333.680764][ T7608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  333.799279][ T1033] bridge_slave_1: left allmulticast mode
[  333.799313][ T1033] bridge_slave_1: left promiscuous mode
[  333.799572][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.936360][ T1033] bridge_slave_0: left allmulticast mode
[  333.936395][ T1033] bridge_slave_0: left promiscuous mode
[  333.936638][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.796177][ T7988] netlink: 48 bytes leftover after parsing attributes in process `syz.3.611'.
[  334.995365][ T1033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.065792][ T1033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.108905][ T1033] bond0 (unregistering): Released all slaves
[  335.214185][ T7988] netlink: 48 bytes leftover after parsing attributes in process `syz.3.611'.
[  336.624454][  T197] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  336.787281][  T197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  336.787311][  T197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  336.789550][  T197] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  336.789576][  T197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.789594][  T197] usb 6-1: Product: syz
[  336.789608][  T197] usb 6-1: Manufacturer: syz
[  336.789622][  T197] usb 6-1: SerialNumber: syz
[  336.861782][  T197] usb 6-1: config 0 descriptor??
[  336.882082][  T197] usb 6-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  337.376955][ T5258] 8021q: adding VLAN 0 to HW filter on device eth9
[  339.684453][ T5614] Bluetooth: hci4: command 0x0406 tx timeout
[  339.864569][ T8046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.620'.
[  340.112870][  T197] usb 6-1: USB disconnect, device number 12
[  340.177601][ T8046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.620'.
[  340.283353][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  340.337663][ T7608] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.380369][ T8049] syzkaller0: entered promiscuous mode
[  340.380392][ T8049] syzkaller0: entered allmulticast mode
[  340.564595][ T1033] hsr_slave_0: left promiscuous mode
[  340.743850][ T1033] hsr_slave_1: left promiscuous mode
[  340.928928][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.929128][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.742568][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.742595][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.922291][ T1033] veth1_macvtap: left promiscuous mode
[  341.922411][ T1033] veth0_macvtap: left promiscuous mode
[  341.935892][ T1033] veth1_vlan: left promiscuous mode
[  341.936131][ T1033] veth0_vlan: left promiscuous mode
[  343.184476][    T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  343.263401][ T8092] netlink: 48 bytes leftover after parsing attributes in process `syz.3.630'.
[  343.386443][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  343.386483][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  343.389385][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  343.389413][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.389433][    T9] usb 1-1: Product: syz
[  343.389447][    T9] usb 1-1: Manufacturer: syz
[  343.389479][    T9] usb 1-1: SerialNumber: syz
[  343.466041][    T9] usb 1-1: config 0 descriptor??
[  343.486643][    T9] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  343.645329][ T1033] team0 (unregistering): Port device team_slave_1 removed
[  343.725322][ T1033] team0 (unregistering): Port device team_slave_0 removed
[  344.369699][ T5258] 8021q: adding VLAN 0 to HW filter on device eth10
[  344.370381][ T8092] netlink: 48 bytes leftover after parsing attributes in process `syz.3.630'.
[  344.402560][ T7535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.485728][ T7608] 8021q: adding VLAN 0 to HW filter on device team0
[  344.683776][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.684104][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.818107][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.818244][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.915178][ T5728] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  345.074606][ T5728] usb 6-1: Using ep0 maxpacket: 32
[  345.077046][ T5728] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  345.077070][ T5728] usb 6-1: config 0 has no interface number 0
[  345.077110][ T5728] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  345.077135][ T5728] usb 6-1: config 0 interface 196 has no altsetting 0
[  345.080038][ T5728] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  345.080076][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.080095][ T5728] usb 6-1: Product: syz
[  345.080107][ T5728] usb 6-1: Manufacturer: syz
[  345.080120][ T5728] usb 6-1: SerialNumber: syz
[  345.248690][ T5728] usb 6-1: config 0 descriptor??
[  345.260983][ T8096] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  345.910631][    T9] usb 1-1: USB disconnect, device number 12
[  346.078391][ T5728] ipheth 6-1:0.196: ipheth_enable_ncm: usb_control_msg: -71
[  346.277714][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  346.544486][ T5728] ipheth 6-1:0.196: Apple iPhone USB Ethernet device attached
[  346.570604][ T5728] usb 6-1: USB disconnect, device number 13
[  346.598980][ T8119] overlayfs: failed to clone upperpath
[  347.138186][ T5728] ipheth 6-1:0.196: Apple iPhone USB Ethernet now disconnected
[  347.219111][ T8140] netlink: 48 bytes leftover after parsing attributes in process `syz.5.639'.
[  347.259472][ T8140] netlink: 48 bytes leftover after parsing attributes in process `syz.5.639'.
[  347.358562][ T5258] 8021q: adding VLAN 0 to HW filter on device eth11
[  347.569992][ T7535] veth0_vlan: entered promiscuous mode
[  347.939069][ T7535] veth1_vlan: entered promiscuous mode
[  348.805109][ T7608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.866675][ T7535] veth0_macvtap: entered promiscuous mode
[  348.874225][ T7535] veth1_macvtap: entered promiscuous mode
[  349.045477][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'.
[  349.074586][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.146052][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.187454][   T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.187795][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'.
[  349.192714][   T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.194210][   T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.233925][   T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.794447][ T8194] overlayfs: failed to clone upperpath
[  351.699898][ T5258] 8021q: adding VLAN 0 to HW filter on device eth12
[  351.768821][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.768840][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.012696][ T7608] veth0_vlan: entered promiscuous mode
[  352.210043][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'.
[  352.383379][ T7608] veth1_vlan: entered promiscuous mode
[  352.428465][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'.
[  352.433999][ T4184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  352.434019][ T4184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  352.721386][ T7608] veth0_macvtap: entered promiscuous mode
[  352.759437][ T7608] veth1_macvtap: entered promiscuous mode
[  352.824164][ T7608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  352.846110][ T7608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  352.863507][ T1431] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.876693][ T1431] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.876899][ T1431] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.877158][ T1431] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.505322][ T8262] overlayfs: failed to resolve './bus': -2
[  354.842899][   T36] audit: type=1326 audit(1783227456.780:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.3.669" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bef0de59 code=0x7ffc0000
[  354.842941][   T36] audit: type=1326 audit(1783227456.800:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.3.669" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bef0de59 code=0x7ffc0000
[  354.902907][   T36] audit: type=1326 audit(1783227456.850:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.3.669" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77bef0de59 code=0x7ffc0000
[  354.902961][   T36] audit: type=1326 audit(1783227456.850:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.3.669" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bef0de59 code=0x7ffc0000
[  354.903579][   T36] audit: type=1326 audit(1783227456.850:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.3.669" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77bef0de59 code=0x7ffc0000
[  354.922846][   T36] audit: type=1326 audit(1783227456.850:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.3.669" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bef0de59 code=0x7ffc0000
[  355.027417][   T36] audit: type=1326 audit(1783227456.880:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.3.669" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f77bef0de59 code=0x7ffc0000
[  355.027459][   T36] audit: type=1326 audit(1783227456.980:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.3.669" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bef0de59 code=0x7ffc0000
[  355.027493][   T36] audit: type=1326 audit(1783227456.980:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8267 comm="syz.3.669" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77bef0de59 code=0x7ffc0000
[  355.506676][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.506695][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  355.580217][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'.
[  355.598603][ T8282] netlink: 144 bytes leftover after parsing attributes in process `syz.3.671'.
[  355.598649][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'.
[  355.678588][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'.
[  355.920146][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  355.920167][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.474254][ T8324] overlayfs: failed to clone upperpath
[  362.900908][ T8339] syzkaller0: entered promiscuous mode
[  362.900932][ T8339] syzkaller0: entered allmulticast mode
[  363.968133][ T1255] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  364.114458][ T1255] usb 7-1: Using ep0 maxpacket: 32
[  364.135421][ T1255] usb 7-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  364.135489][ T1255] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.135518][ T1255] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.135540][ T1255] usb 7-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  364.135566][ T1255] usb 7-1: config 0 interface 0 has no altsetting 0
[  364.138281][ T1255] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  364.138307][ T1255] usb 7-1: New USB device strings: Mfr=0, Product=5, SerialNumber=0
[  364.138327][ T1255] usb 7-1: Product: syz
[  364.231939][ T1255] usb 7-1: config 0 descriptor??
[  364.680670][ T1255] wacom 0003:056A:00C5.000E: ignoring exceeding usage max
[  364.704941][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.704994][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.705022][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.705049][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.705195][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.705224][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.705251][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.705278][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.705305][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.705331][ T1255] wacom 0003:056A:00C5.000E: unknown main item tag 0x0
[  364.864005][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.874650][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.934615][ T1255] wacom 0003:056A:00C5.000E: hidraw0: USB HID v0.81 Device [syz] on usb-dummy_hcd.6-1/input0
[  364.955512][ T1255] usb 7-1: USB disconnect, device number 2
[  366.409087][ T8362] fido_id[8362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  366.812647][ T8368] fuse: Bad value for 'fd'
[  367.404573][ T5792] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  367.575781][ T5792] usb 4-1: Using ep0 maxpacket: 16
[  367.580589][ T5792] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.580614][ T5792] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  367.583258][ T5792] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  367.583283][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.583301][ T5792] usb 4-1: Product: syz
[  367.583314][ T5792] usb 4-1: Manufacturer: syz
[  367.583340][ T5792] usb 4-1: SerialNumber: syz
[  367.675437][ T5792] usb 4-1: 0:2 : does not exist
[  367.898597][ T5792] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  368.058312][ T5792] usb 4-1: USB disconnect, device number 15
[  369.304293][ T5605] udevd[5605]: setting mode of /dev/bus/usb/004/015 to 020664 failed: No such file or directory
[  369.304553][ T5605] udevd[5605]: setting owner of /dev/bus/usb/004/015 to uid=0, gid=0 failed: No such file or directory
[  370.326256][ T8403] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  370.369821][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  372.378909][ T5721] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  372.530580][ T5721] usb 8-1: Using ep0 maxpacket: 8
[  372.543369][ T5721] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.543401][ T5721] usb 8-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.543422][ T5721] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  372.543446][ T5721] usb 8-1: config 0 interface 0 has no altsetting 0
[  372.543478][ T5721] usb 8-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  372.543500][ T5721] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.620121][ T5721] usb 8-1: config 0 descriptor??
[  373.074660][ T5721] kye 0003:0458:5013.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  373.075542][ T5721] hid_parser_main: 1 callbacks suppressed
[  373.075561][ T5721] kye 0003:0458:5013.000F: unknown main item tag 0x3
[  373.075590][ T5721] kye 0003:0458:5013.000F: unknown main item tag 0x7
[  373.075616][ T5721] kye 0003:0458:5013.000F: ignoring exceeding usage max
[  373.132625][ T8462] tipc: Started in network mode
[  373.132666][ T8462] tipc: Node identity 4675b3815fb6, cluster identity 4711
[  373.144823][ T8462] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.151583][ T8462] syzkaller0: entered promiscuous mode
[  373.151607][ T8462] syzkaller0: entered allmulticast mode
[  373.180210][ T5721] kye 0003:0458:5013.000F: hidraw0: USB HID v0.14 Device [HID 0458:5013] on usb-dummy_hcd.7-1/input0
[  373.180242][ T5721] kye 0003:0458:5013.000F: tablet-enabling feature report not found
[  373.180257][ T5721] kye 0003:0458:5013.000F: tablet enabling failed
[  373.217216][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888037ff8000: rx timeout, send abort
[  373.219875][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888037ff8000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  373.220293][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888037ff9000: rx timeout, send abort
[  373.220551][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888037ff9000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  373.313189][ T5721] usb 8-1: USB disconnect, device number 2
[  373.456308][ T8465] fido_id[8465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  373.927429][ T8466] netlink: 44 bytes leftover after parsing attributes in process `syz.6.716'.
[  373.947344][ T8467] tipc: Resetting bearer <eth:syzkaller0>
[  374.058086][ T8461] tipc: Resetting bearer <eth:syzkaller0>
[  375.194161][ T8461] tipc: Disabling bearer <eth:syzkaller0>
[  375.786441][   T11] tipc: Node number set to 432255873
[  377.535687][ T1255] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  377.746002][ T1255] usb 7-1: device descriptor read/64, error -71
[  377.988975][ T1255] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  378.154607][ T1255] usb 7-1: device descriptor read/64, error -71
[  378.278192][ T1255] usb usb7-port1: attempt power cycle
[  378.515037][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  378.515411][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  378.724587][ T1255] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  378.746437][ T1255] usb 7-1: device descriptor read/8, error -71
[  379.081825][ T1255] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  379.115770][ T1255] usb 7-1: device descriptor read/8, error -71
[  379.225760][ T1255] usb usb7-port1: unable to enumerate USB device
[  381.964711][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  382.477756][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888034035c00: rx timeout, send abort
[  382.477917][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888060e5d400: rx timeout, send abort
[  382.478189][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888034035c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  382.478389][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888060e5d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  382.722286][ T8521] tipc: Started in network mode
[  382.722386][ T8521] tipc: Node identity de8484aaedfd, cluster identity 4711
[  382.722591][ T8521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.723535][ T8521] syzkaller0: entered promiscuous mode
[  382.723555][ T8521] syzkaller0: entered allmulticast mode
[  382.874174][ T8521] netlink: 44 bytes leftover after parsing attributes in process `syz.3.733'.
[  383.026288][ T8520] tipc: Resetting bearer <eth:syzkaller0>
[  384.198585][ T8520] tipc: Disabling bearer <eth:syzkaller0>
[  384.381013][ T5811] tipc: Node number set to 863601834
[  390.564923][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880411bc000: rx timeout, send abort
[  390.565106][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8880411bfc00: rx timeout, send abort
[  390.565373][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880411bc000: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  390.565581][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880411bfc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  391.250157][ T8597] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  391.253280][ T8597] syzkaller0: entered promiscuous mode
[  391.253304][ T8597] syzkaller0: entered allmulticast mode
[  391.290687][ T8597] netlink: 44 bytes leftover after parsing attributes in process `syz.3.753'.
[  391.340636][ T8597] tipc: Resetting bearer <eth:syzkaller0>
[  391.452359][ T8596] tipc: Resetting bearer <eth:syzkaller0>
[  391.691227][ T8596] tipc: Disabling bearer <eth:syzkaller0>
[  396.183200][ T8601] warning: `syz.6.752' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  397.623803][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.760'.
[  397.637102][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'.
[  399.541441][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880227cb800: rx timeout, send abort
[  399.541639][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8880227c8400: rx timeout, send abort
[  399.543326][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880227cb800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  399.543565][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880227c8400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  400.930503][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'.
[  403.295804][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.768'.
[  406.642245][ T8703] sch_fq: defrate 4294967295 ignored.
[  408.227063][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88804c976c00: rx timeout, send abort
[  408.227267][    C1] vxcan1: j1939_tp_rxtimer: 0xffff88804c976400: rx timeout, send abort
[  408.228117][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804c976c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  408.228393][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804c976400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  409.186955][ T8743] netlink: 'syz.6.785': attribute type 2 has an invalid length.
[  413.402332][ T8749] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  413.411173][ T8749] syzkaller0: entered promiscuous mode
[  413.411198][ T8749] syzkaller0: entered allmulticast mode
[  413.438341][ T8749] netlink: 44 bytes leftover after parsing attributes in process `syz.6.786'.
[  413.457121][ T8749] tipc: Resetting bearer <eth:syzkaller0>
[  413.584650][ T8746] tipc: Resetting bearer <eth:syzkaller0>
[  415.027021][ T8746] tipc: Disabling bearer <eth:syzkaller0>
[  416.381450][ T8775] fuse: Bad value for 'fd'
[  416.508545][ T8777] veth0_to_bond: Caught tx_queue_len zero misconfig
[  416.901664][ T8791] batman_adv: batadv0: Adding interface: dummy0
[  416.901679][ T8791] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.901708][ T8791] batman_adv: batadv0: Interface activated: dummy0
[  418.273685][ T8795] batadv0: mtu less than device minimum
[  418.283492][ T8795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  418.290944][ T8795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  418.300424][ T8795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  418.307629][ T8795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  418.316245][ T8795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  418.343017][ T8795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  418.349883][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888037296c00: rx timeout, send abort
[  418.350082][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888037296800: rx timeout, send abort
[  418.350828][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888037296c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session.
[  418.351082][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888037296800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  418.764661][ T8802] 9p: Bad value for 'wfdno'
[  419.385820][ T8795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  419.394068][ T8795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  419.401419][ T8795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  422.054833][ T8806] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  422.169897][ T8809] netlink: 44 bytes leftover after parsing attributes in process `syz.5.803'.
[  424.124940][ T5608] Bluetooth: hci5: command 0x0406 tx timeout
[  424.331279][ T8833] net_ratelimit: 10 callbacks suppressed
[  424.331298][ T8833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  424.870751][ T5792] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  425.798768][ T5792] usb 7-1: Using ep0 maxpacket: 8
[  425.805379][ T5792] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.805412][ T5792] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  425.805439][ T5792] usb 7-1: config 0 interface 0 has no altsetting 0
[  425.805473][ T5792] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  425.805497][ T5792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.902738][ T5792] usb 7-1: config 0 descriptor??
[  426.399301][ T5792] elecom 0003:056E:00FE.0010: unexpected long global item
[  426.401828][ T5792] elecom 0003:056E:00FE.0010: probe with driver elecom failed with error -22
[  426.610599][ T5792] usb 7-1: USB disconnect, device number 8
[  426.648102][ T5614] Bluetooth: hci2: command 0x0406 tx timeout
[  432.413375][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  432.448201][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  432.452046][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  432.492999][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  432.494091][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  432.501920][ T5614] Bluetooth: hci4: command 0x0406 tx timeout
[  434.588121][ T4912] Bluetooth: hci3: command tx timeout
[  434.588486][ T4912] Bluetooth: hci4: command 0x0406 tx timeout
[  436.649378][   T60] Bluetooth: hci3: command tx timeout
[  439.883349][ T5614] Bluetooth: hci3: command tx timeout
[  440.271216][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  440.287369][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  446.912810][ T5614] Bluetooth: hci3: command tx timeout
[  459.636721][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'.
[  459.636763][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.837'.
[  469.286790][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  469.338347][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  469.339758][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  469.341476][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  469.342541][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  471.693531][ T5614] Bluetooth: hci2: command tx timeout
[  473.802014][ T5614] Bluetooth: hci2: command tx timeout
[  476.007070][ T5614] Bluetooth: hci2: command tx timeout
[  480.204222][ T5614] Bluetooth: hci2: command tx timeout
[  481.606299][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  483.473805][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  483.489324][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  483.517362][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  483.519521][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  490.671478][ T5614] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  491.700328][ T5614] Bluetooth: hci0: command tx timeout
[  492.810125][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  493.795286][ T8951] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  493.833194][   T60] Bluetooth: hci0: command tx timeout
[  496.085427][   T60] Bluetooth: hci0: command tx timeout
[  498.704393][   T60] Bluetooth: hci0: command tx timeout
[  502.075855][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  502.075931][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  525.277900][ T5614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  527.311985][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  527.320109][ T5614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  527.336436][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  527.343665][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  531.801822][   T60] Bluetooth: hci1: command tx timeout
[  534.808238][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  536.561661][ T4912] Bluetooth: hci1: command tx timeout
[  536.602190][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  536.617337][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  540.214616][ T5608] Bluetooth: hci1: command tx timeout
[  540.329245][ T4912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  541.279030][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  541.636999][ T8986] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  541.666456][ T8986] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  541.667672][ T8986] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  541.669667][ T8986] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  541.670506][ T8986] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  542.348385][ T8986] Bluetooth: hci1: command tx timeout
[  542.716578][   T60] Bluetooth: hci4: Opcode 0x1005 failed: -110
[  543.751255][ T8986] Bluetooth: hci4: command 0x1005 tx timeout
[  543.753590][ T8986] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  544.824784][ T8975] Bluetooth: hci4: Opcode 0x0c03 failed: -4
[  545.885341][ T8986] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  545.886567][ T8986] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  548.002860][ T5614] Bluetooth: hci6: command tx timeout
[  550.034513][ T8986] Bluetooth: hci5: command tx timeout
[  550.058009][   T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  550.454285][ T8986] Bluetooth: hci6: command tx timeout
[  552.144746][   T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  552.534835][ T4912] Bluetooth: hci5: command tx timeout
[  554.185208][ T4912] Bluetooth: hci6: command tx timeout
[  555.216492][   T60] Bluetooth: hci5: command tx timeout
[  555.216822][   T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  555.692523][   T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  555.693564][   T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  557.932979][ T5614] Bluetooth: hci6: command tx timeout
[  557.933016][ T5614] Bluetooth: hci3: command 0x0406 tx timeout
[  557.933129][ T5614] Bluetooth: hci5: command tx timeout
[  563.834512][   T60] Bluetooth: hci7: command tx timeout
[  563.836780][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  563.836851][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  566.079806][   T60] Bluetooth: hci7: command tx timeout
[  568.194012][ T4912] Bluetooth: hci7: command tx timeout
[  570.296597][   T60] Bluetooth: hci7: command tx timeout
[  575.943733][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  578.594389][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  579.621088][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  579.648428][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  579.663809][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  586.922250][ T4912] Bluetooth: hci4: command tx timeout
[  588.992329][   T60] Bluetooth: hci4: command tx timeout
[  591.062827][   T60] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  592.090880][   T60] Bluetooth: hci4: command tx timeout
[  592.091118][ T5614] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  593.157852][ T5614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  593.194320][ T5614] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  593.199583][ T5614] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  594.230204][   T60] Bluetooth: hci4: command tx timeout
[  595.298170][ T5614] Bluetooth: hci8: command tx timeout
[  597.422088][ T5614] Bluetooth: hci8: command tx timeout
[  599.495104][ T5614] Bluetooth: hci8: command tx timeout
[  604.500158][ T5614] Bluetooth: hci8: command tx timeout
[  612.255135][ T5614] Bluetooth: hci0: command 0x0406 tx timeout
[  625.102356][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  626.146488][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  626.146556][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  626.154781][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  626.157833][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  627.237815][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  628.907109][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  630.952654][ T1033] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.231814][ T9037] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  634.262627][ T4912] Bluetooth: hci9: Opcode 0x0c03 failed: -110
[  634.262841][ T8990] Bluetooth: hci2: command 0x0c1a tx timeout
[  635.340163][   T60] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  635.351920][   T60] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  635.357631][   T60] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  635.360522][   T60] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  636.370487][ T5614] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  637.492733][   T60] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  638.294000][ T4912] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  638.340396][ T5614] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  640.358813][ T5614] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  641.554496][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  644.592641][ T5614] Bluetooth: hci9: command tx timeout
[  644.638441][ T4912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  646.963942][ T4912] Bluetooth: hci9: command tx timeout
[  646.965926][ T4912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  649.113266][   T60] Bluetooth: hci9: command tx timeout
[  651.187518][   T60] Bluetooth: hci9: command tx timeout
[  657.703231][   T60] Bluetooth: hci3: command tx timeout
[  659.981008][   T60] Bluetooth: hci3: command tx timeout
[  662.179335][   T60] Bluetooth: hci3: command tx timeout
[  664.330389][ T4912] Bluetooth: hci3: command tx timeout
[  667.529306][ T4912] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  668.327979][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  670.734966][ T8990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  671.752985][ T4912] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  672.784586][ T4912] Bluetooth: hci5: command 0x0406 tx timeout
[  672.840709][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  673.885534][ T9055] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  674.984231][ T9056] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  675.118607][ T4912] Bluetooth: hci6: command 0x0406 tx timeout
[  675.118683][ T4912] Bluetooth: hci1: command 0x1003 tx timeout
[  675.119159][ T4912] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  686.434554][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  686.434626][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  686.469658][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  687.678407][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  689.732672][ T8990] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  689.738993][ T8990] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  691.765652][ T8990] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  693.873069][ T5614] Bluetooth: hci2: Opcode 0x0c39 failed: -110
[  693.892542][ T8990] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  693.893012][ T8990] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  693.893429][ T8990] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  693.918230][ T8990] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  693.920485][ T8990] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  700.018929][ T8990] Bluetooth: hci2: command tx timeout
[  702.123549][ T8990] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  702.217781][   T60] Bluetooth: hci2: command tx timeout
[  702.219002][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  704.257125][ T5614] Bluetooth: hci2: command tx timeout
[  704.282442][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  704.369658][ T8990] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  704.380990][ T8990] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  706.644233][ T5614] Bluetooth: hci2: command tx timeout
[  706.682185][ T8990] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  706.683237][ T8990] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  711.742271][ T1033] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.775402][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  713.784420][   T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  713.792018][   T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  713.794146][   T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  713.812840][   T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  727.656400][ T8990] Bluetooth: hci0: command tx timeout
[  729.686753][ T8990] Bluetooth: hci0: command tx timeout
[  730.740838][ T5614] Bluetooth: hci1: command tx timeout
[  731.770954][ T4912] Bluetooth: hci0: command tx timeout
[  731.803919][ T5614] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  732.818520][ T8990] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  732.819653][ T8990] Bluetooth: hci1: command tx timeout
[  732.831136][ T5614] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  733.883345][ T8990] Bluetooth: hci0: command tx timeout
[  733.885503][ T5614] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  733.888424][ T5614] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  734.912176][ T5614] Bluetooth: hci1: command tx timeout
[  734.915348][ T8990] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  734.919556][ T8990] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  736.953875][ T9088] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  737.555715][ T8990] Bluetooth: hci1: command tx timeout
[  743.253810][ T8990] Bluetooth: hci6: command tx timeout
[  745.294376][ T8990] Bluetooth: hci6: command tx timeout
[  745.340258][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  746.343958][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  746.347790][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  746.362297][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  746.363145][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  747.313750][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  747.313823][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  748.327436][ T8990] Bluetooth: hci6: command tx timeout
[  750.674263][ T8990] Bluetooth: hci6: command tx timeout
[  750.964237][ T5614] Bluetooth: hci3: command tx timeout
[  754.032829][ T5614] Bluetooth: hci3: command tx timeout
[  756.093375][ T5614] Bluetooth: hci3: command tx timeout
[  758.118124][ T1033] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.161155][ T5614] Bluetooth: hci3: command tx timeout
[  771.543182][ T8990] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  771.747246][ T8990] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  771.751696][ T8990] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  771.753698][ T8990] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  771.777502][ T8990] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  779.364969][ T8990] Bluetooth: hci4: command tx timeout
[  781.478189][ T8990] Bluetooth: hci4: command tx timeout
[  783.561059][ T8990] Bluetooth: hci4: command tx timeout
[  785.663393][ T8990] Bluetooth: hci4: command tx timeout
[  790.410076][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  790.414330][ T5614] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  790.433260][ T5614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  790.439851][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  790.444257][ T5614] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  792.489602][ T1033] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  793.524911][ T8990] Bluetooth: hci2: command tx timeout
[  797.012165][ T8990] Bluetooth: hci2: command tx timeout
[  799.063153][ T8990] Bluetooth: hci2: command tx timeout
[  801.130699][ T8990] Bluetooth: hci2: command tx timeout
[  809.412038][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  809.412112][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  815.707241][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  816.686736][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  816.694258][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  816.707024][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  816.719362][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  822.845129][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  825.095417][ T8990] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  825.095907][ T8990] Bluetooth: hci0: command tx timeout
[  825.815379][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  827.963806][ T5614] Bluetooth: hci0: command tx timeout
[  829.932935][ T9155] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  829.985149][ T5614] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  830.115197][ T4912] Bluetooth: hci0: command tx timeout
[  832.229050][ T5614] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  833.207859][ T5614] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  833.227044][ T5614] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  833.227845][ T5614] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  836.262918][ T4912] Bluetooth: hci7: command tx timeout
[  837.306409][ T4912] Bluetooth: hci0: command tx timeout
[  838.332269][ T4912] Bluetooth: hci7: command tx timeout
[  840.404239][ T4912] Bluetooth: hci7: command tx timeout
[  842.505248][ T5614] Bluetooth: hci7: command tx timeout
[  843.574482][ T8990] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  846.557467][ T8990] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  848.586593][ T5614] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  849.637884][ T8990] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  851.711304][ T8990] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  870.194029][ T4912] Bluetooth: hci8: command tx timeout
[  870.875792][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  870.875869][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  873.026389][ T4912] Bluetooth: hci8: command tx timeout
[  874.119727][ T8990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  875.130254][ T5614] Bluetooth: hci8: command tx timeout
[  876.967588][ T5614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  878.035076][   T60] Bluetooth: hci8: command tx timeout
[  879.077477][ T8990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  879.096882][ T8990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  879.100172][ T8990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  882.420925][ T1033] bridge_slave_1: left allmulticast mode
[  882.420967][ T1033] bridge_slave_1: left promiscuous mode
[  882.421230][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state
[  883.450677][ T8990] Bluetooth: hci1: command tx timeout
[  885.900776][ T8990] Bluetooth: hci1: command tx timeout
[  887.952935][ T8990] Bluetooth: hci1: command tx timeout
[  889.039829][ T8990] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  890.039235][ T8990] Bluetooth: hci1: command tx timeout
[  891.081191][ T8990] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  891.082385][ T8990] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  891.083394][ T8990] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  891.084258][ T8990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  894.472509][ T4912] Bluetooth: hci3: command tx timeout
[  896.565697][ T4912] Bluetooth: hci3: command tx timeout
[  898.642736][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  899.652141][ T5614] Bluetooth: hci3: command tx timeout
[  899.653381][ T5614] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  899.663515][ T1033] bridge_slave_0: left allmulticast mode
[  899.663546][ T1033] bridge_slave_0: left promiscuous mode
[  899.663801][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.698655][ T5614] Bluetooth: hci4: command 0x1001 tx timeout
[  901.699074][ T5614] Bluetooth: hci3: command tx timeout
[  901.726691][ T4912] Bluetooth: hci4: Opcode 0x1001 failed: -110
[  901.766442][ T9207] Bluetooth: hci4: Opcode 0x0c03 failed: -4
[  902.761203][ T4912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  904.977082][ T8990] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  904.977607][ T4912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  906.872729][ T4912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  906.873272][ T4912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  906.878588][ T4912] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  906.882316][ T4912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  909.951366][ T8990] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  918.595647][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  921.530104][ T4912] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  921.735660][ T4912] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  923.781923][ T9220] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  929.772898][ T4912] Bluetooth: hci5: command tx timeout
[  931.936458][ T8990] Bluetooth: hci5: command tx timeout
[  931.937257][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  931.937325][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  931.944927][ T8990] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  934.920810][ T4912] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  934.921464][ T4912] Bluetooth: hci5: command tx timeout
[  937.177671][ T8990] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  937.177828][ T8990] Bluetooth: hci5: command tx timeout
[  940.094268][ T9228] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  954.866344][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  955.823077][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  958.360477][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  959.400106][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  959.400927][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  962.509945][ T8990] Bluetooth: hci0: command tx timeout
[  964.584427][ T8990] Bluetooth: hci0: command tx timeout
[  967.658749][ T8990] Bluetooth: hci0: command tx timeout
[  969.008172][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  969.740752][   T60] Bluetooth: hci0: command tx timeout
[  969.770286][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  970.768827][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  970.770212][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  970.771740][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  970.780359][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  972.094404][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  972.096209][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  972.097767][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  972.101113][ T9247] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  980.419900][ T9247] Bluetooth: hci2: command tx timeout
[  981.325800][   T60] Bluetooth: hci8: command 0x0406 tx timeout
[  981.330908][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  982.332488][ T4912] Bluetooth: hci4: command tx timeout
[  982.338273][ T4912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  982.340458][ T4912] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  982.346433][ T4912] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  982.359786][ T4912] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  984.379362][   T60] Bluetooth: hci2: command tx timeout
[  985.427789][   T60] Bluetooth: hci4: command tx timeout
[  986.514481][ T4912] Bluetooth: hci2: command tx timeout
[  987.541827][   T60] Bluetooth: hci4: command tx timeout
[  988.608733][   T60] Bluetooth: hci2: command tx timeout
[  989.610537][   T60] Bluetooth: hci4: command tx timeout
[  992.926607][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  992.926673][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  994.863088][ T4912] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  994.933101][ T4912] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  996.136554][ T4912] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  996.989743][ T8990] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  996.995051][ T8990] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  998.663643][   T60] Bluetooth: hci6: command tx timeout
[ 1001.690081][ T4912] Bluetooth: hci7: command tx timeout
[ 1001.860346][ T8990] Bluetooth: hci6: command tx timeout
[ 1003.811027][ T4912] Bluetooth: hci7: command tx timeout
[ 1004.772558][ T4912] Bluetooth: hci6: command tx timeout
[ 1005.892281][ T8986] Bluetooth: hci1: command 0x0406 tx timeout
[ 1005.894957][   T60] Bluetooth: hci7: command tx timeout
[ 1006.806276][   T60] Bluetooth: hci6: command tx timeout
[ 1007.932130][   T60] Bluetooth: hci7: command tx timeout
[ 1017.314243][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[ 1017.492483][ T1033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1020.585274][ T8990] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1021.638968][ T8990] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1021.656769][   T60] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1021.660444][   T60] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1022.744857][ T1033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1022.875043][ T8990] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1022.878693][ T8990] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1025.009450][ T1033] bond0 (unregistering): Released all slaves
[ 1025.735076][ T8990] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1025.746797][ T8990] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1025.748040][ T8990] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1025.748955][ T8990] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1027.538149][   T60] Bluetooth: hci9: command tx timeout
[ 1028.881110][   T60] Bluetooth: hci10: command tx timeout
[ 1029.915532][   T60] Bluetooth: hci9: command tx timeout
[ 1030.248157][ T5258] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1030.931798][   T60] Bluetooth: hci10: command tx timeout
[ 1031.963836][   T60] Bluetooth: hci9: command tx timeout
[ 1034.310091][ T8990] Bluetooth: hci9: command tx timeout
[ 1034.310522][   T60] Bluetooth: hci10: command tx timeout
[ 1035.855641][ T4912] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1036.386757][ T8990] Bluetooth: hci10: command tx timeout
[ 1036.878245][ T4912] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1037.985620][ T4912] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1038.195172][ T4912] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1038.196030][ T4912] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1042.903000][   T60] Bluetooth: hci11: command tx timeout
[ 1043.930404][ T4912] Bluetooth: hci5: command 0x0406 tx timeout
[ 1044.990238][ T4912] Bluetooth: hci11: command tx timeout
[ 1044.993210][ T4912] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1047.077089][ T4912] Bluetooth: hci11: command tx timeout
[ 1047.117858][ T4912] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1048.143430][ T4912] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1048.188647][ T4912] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1048.190817][ T4912] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1049.196869][ T4912] Bluetooth: hci11: command tx timeout
[ 1054.402873][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.402947][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.917445][ T9247] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[ 1055.943988][ T9247] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[ 1055.953767][ T8990] Bluetooth: hci12: command tx timeout
[ 1055.964410][ T9247] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[ 1055.967964][ T9247] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[ 1055.969135][ T9247] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[ 1058.125753][ T9247] Bluetooth: hci12: command tx timeout
[ 1059.158166][ T9247] Bluetooth: hci13: command tx timeout
[ 1060.226734][ T9247] Bluetooth: hci12: command tx timeout
[ 1061.266577][   T60] Bluetooth: hci13: command tx timeout
[ 1062.320216][   T60] Bluetooth: hci12: command tx timeout
[ 1063.372179][   T60] Bluetooth: hci13: command tx timeout
[ 1065.532692][   T60] Bluetooth: hci13: command tx timeout
[ 1107.345878][   T60] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1108.157142][   T60] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1108.161326][   T60] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1110.285602][ T4912] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1111.326093][   T60] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1112.220471][ T8990] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1113.223176][ T9247] Bluetooth: hci14: Opcode 0x0c14 failed: -110
[ 1113.234910][ T8986] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1113.273317][ T8986] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1113.430919][ T9322] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1114.263799][ T8986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1114.272370][ T8986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1114.273736][ T8986] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1114.280099][ T8986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1115.292011][ T9320] Bluetooth: hci14: Opcode 0x0c03 failed: -110
[ 1115.767954][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.768023][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.435823][ T9247] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1117.452757][ T9247] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1118.474452][ T9247] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1118.500829][ T9247] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1119.502222][ T9247] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1130.796658][ T8990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1133.222080][ T8990] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1136.082396][ T8990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1136.083626][ T8990] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1136.088013][ T8990] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1148.507960][   T60] Bluetooth: hci3: command tx timeout
[ 1149.537889][   T60] Bluetooth: hci15: command tx timeout
[ 1150.583433][   T60] Bluetooth: hci3: command tx timeout
[ 1151.627791][   T60] Bluetooth: hci15: command tx timeout
[ 1151.659668][ T9247] Bluetooth: hci1: command tx timeout
[ 1152.654584][ T9247] Bluetooth: hci3: command tx timeout
[ 1153.694563][ T8990] Bluetooth: hci10: command 0x0406 tx timeout
[ 1153.694602][ T8990] Bluetooth: hci15: command tx timeout
[ 1153.694704][ T9247] Bluetooth: hci1: command tx timeout
[ 1154.729662][ T8986] Bluetooth: hci3: command tx timeout
[ 1155.849281][ T8986] Bluetooth: hci15: command tx timeout
[ 1155.849334][ T9247] Bluetooth: hci1: command tx timeout
[ 1158.818716][ T9247] Bluetooth: hci1: command tx timeout
[ 1176.900787][ T5258] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1177.970719][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.970785][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1187.960783][ T9247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1191.070135][   T60] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1191.072804][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1191.081316][ T8990] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1191.097199][ T8990] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1191.101797][ T8990] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1191.111117][ T8990] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1191.114049][ T8990] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1193.150432][ T9362] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1198.030779][   T60] Bluetooth: hci2: command tx timeout
[ 1199.070425][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1200.106607][   T60] Bluetooth: hci2: command tx timeout
[ 1200.132013][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1200.134448][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1200.144005][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1200.148862][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1202.192528][ T8986] Bluetooth: hci2: command tx timeout
[ 1204.217385][ T8986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1205.223546][ T8990] Bluetooth: hci2: command tx timeout
[ 1205.406795][ T8990] Bluetooth: hci4: command tx timeout
[ 1207.493371][ T8986] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1207.496353][ T8990] Bluetooth: hci4: command tx timeout
[ 1209.421621][ T8986] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1210.478795][ T8986] Bluetooth: hci4: command tx timeout
[ 1210.490365][ T8986] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1210.492152][ T8986] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1212.559506][   T60] Bluetooth: hci4: command tx timeout
[ 1222.803444][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1222.814075][   T60] Bluetooth: hci5: command tx timeout
[ 1222.934198][ T1033] hsr_slave_0: left promiscuous mode
[ 1225.886733][   T60] Bluetooth: hci5: command tx timeout
[ 1225.898661][ T8986] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1225.902538][ T8986] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1226.957805][ T1033] hsr_slave_1: left promiscuous mode
[ 1226.958798][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1226.958823][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1227.958094][ T8986] Bluetooth: hci5: command tx timeout
[ 1227.970286][ T9381] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[ 1231.036551][ T8986] Bluetooth: hci5: command tx timeout
[ 1231.113318][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1231.113347][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1238.311081][ T1033] veth1_macvtap: left promiscuous mode
[ 1238.311233][ T1033] veth0_macvtap: left promiscuous mode
[ 1238.311532][ T1033] veth1_vlan: left promiscuous mode
[ 1238.311748][ T1033] veth0_vlan: left promiscuous mode
[ 1239.520300][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.520376][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1245.561143][ T8986] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1247.697531][ T8986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1247.890338][ T9395] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1270.286078][ T8986] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1272.393155][ T8986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1274.868141][ T9408] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1277.568872][ T8986] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1278.608972][ T8990] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1279.627668][ T9414] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1279.634013][ T8986] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1282.194772][ T9413] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1283.732941][ T8986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1288.625026][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1288.638330][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1288.642771][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1290.724579][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1290.725641][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1294.836407][   T60] Bluetooth: hci6: command tx timeout
[ 1297.910284][   T60] Bluetooth: hci6: command tx timeout
[ 1301.744366][   T60] Bluetooth: hci6: command tx timeout
[ 1301.745094][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1301.745160][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1303.811574][   T60] Bluetooth: hci6: command tx timeout
[ 1310.988809][ T8986] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1312.093692][ T8986] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1312.097035][ T8986] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1312.101130][ T8986] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1312.103075][ T8986] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1316.261937][   T60] Bluetooth: hci0: command tx timeout
[ 1318.344023][   T60] Bluetooth: hci0: command tx timeout
[ 1319.427722][   T60] Bluetooth: hci2: command 0x0406 tx timeout
[ 1320.473966][   T60] Bluetooth: hci0: command tx timeout
[ 1322.571522][ T8990] Bluetooth: hci0: command tx timeout
[ 1328.184480][ T8986] Bluetooth: hci4: command 0x0406 tx timeout
[ 1335.152759][ T1033] team0 (unregistering): Port device team_slave_1 removed
[ 1337.238232][ T8986] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1338.254322][ T1033] team0 (unregistering): Port device team_slave_0 removed
[ 1338.280235][ T8986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1338.281483][ T8986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1338.282704][ T8986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1338.285710][ T8986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1339.309388][ T8986] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1339.316043][ T8986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1339.317321][ T8986] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1339.321162][ T8986] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1339.347920][ T8986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1342.374603][ T8990] Bluetooth: hci3: command tx timeout
[ 1343.437895][ T8990] Bluetooth: hci5: command 0x0406 tx timeout
[ 1344.495957][ T9247] Bluetooth: hci1: command tx timeout
[ 1345.570432][ T8990] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1346.872891][ T4912] Bluetooth: hci1: command tx timeout
[ 1347.138249][   T60] Bluetooth: hci3: command tx timeout
[ 1348.189489][ T8990] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1349.219611][ T8990] Bluetooth: hci1: command tx timeout
[ 1349.219653][ T8990] Bluetooth: hci3: command tx timeout
[ 1351.305844][ T8990] Bluetooth: hci3: command tx timeout
[ 1351.305893][ T8990] Bluetooth: hci1: command tx timeout
[ 1352.069849][ T9451] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1354.225064][ T9451] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1354.228408][ T9451] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1362.754049][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.754117][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1363.522826][ T8986] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1364.568164][ T8986] Bluetooth: hci7: command tx timeout
[ 1364.599319][ T8986] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1365.898377][   T60] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1365.935552][   T60] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1366.632669][ T8990] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1367.746017][ T8990] Bluetooth: hci7: command tx timeout
[ 1368.097367][   T37] INFO: task syz-executor:9363 blocked for more than 146 seconds.
[ 1368.097390][   T37]       Not tainted syzkaller #0
[ 1368.097399][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1368.097408][   T37] task:syz-executor    state:D stack:25800 pid:9363  tgid:9363  ppid:1      task_flags:0x400140 flags:0x00080002
[ 1368.097493][   T37] Call Trace:
[ 1368.097501][   T37]  <TASK>
[ 1368.097514][   T37]  __schedule+0x16dc/0x5500
[ 1368.097727][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1368.097777][   T37]  ? __pfx___schedule+0x10/0x10
[ 1368.097802][   T37]  ? rt_mutex_slowlock_block+0x33a/0x680
[ 1368.097847][   T37]  rt_mutex_schedule+0x76/0xf0
[ 1368.097956][   T37]  rt_mutex_slowlock_block+0x55c/0x680
[ 1368.097989][   T37]  ? rt_mutex_slowlock_block+0x33a/0x680
[ 1368.098016][   T37]  rt_mutex_slowlock+0x2d4/0x780
[ 1368.098050][   T37]  ? rt_mutex_slowlock+0x1f2/0x780
[ 1368.098075][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1368.098110][   T37]  ? inet_rtm_newaddr+0x464/0x19e0
[ 1368.098205][   T37]  ? inet_rtm_newaddr+0x464/0x19e0
[ 1368.098235][   T37]  ? inet_rtm_newaddr+0x464/0x19e0
[ 1368.098257][   T37]  mutex_lock_nested+0x168/0x1d0
[ 1368.098287][   T37]  inet_rtm_newaddr+0x464/0x19e0
[ 1368.098310][   T37]  ? unwind_get_return_address+0x4d/0x90
[ 1368.098423][   T37]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1368.098535][   T37]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1368.098592][   T37]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1368.098617][   T37]  rtnetlink_rcv_msg+0x802/0xc00
[ 1368.098712][   T37]  ? kmem_cache_alloc_node_noprof+0x3eb/0x670
[ 1368.098817][   T37]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1368.098865][   T37]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1368.098896][   T37]  ? __lock_acquire+0x683/0x2ce0
[ 1368.098965][   T37]  netlink_rcv_skb+0x226/0x4a0
[ 1368.099043][   T37]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1368.099077][   T37]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1368.099129][   T37]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1368.099151][   T37]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1368.099180][   T37]  netlink_unicast+0x7f5/0x990
[ 1368.099227][   T37]  netlink_sendmsg+0x813/0xb40
[ 1368.099285][   T37]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1368.099312][   T37]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1368.099435][   T37]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1368.099458][   T37]  sock_sendmsg_nosec+0x13a/0x180
[ 1368.099551][   T37]  __sys_sendto+0x41e/0x5d0
[ 1368.099614][   T37]  ? __pfx___sys_sendto+0x10/0x10
[ 1368.099681][   T37]  ? do_user_addr_fault+0xc4a/0x1340
[ 1368.099744][   T37]  __x64_sys_sendto+0xde/0x100
[ 1368.099780][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1368.099832][   T37]  do_syscall_64+0x174/0x580
[ 1368.099889][   T37]  ? trace_irq_disable+0x3b/0x140
[ 1368.099950][   T37]  ? clear_bhb_loop+0x40/0x90
[ 1368.099990][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1368.100036][   T37] RIP: 0033:0x7ff56ae8e68e
[ 1368.100060][   T37] RSP: 002b:00007ffd52c046f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1368.100080][   T37] RAX: ffffffffffffffda RBX: 000055556099f500 RCX: 00007ff56ae8e68e
[ 1368.100094][   T37] RDX: 0000000000000028 RSI: 00007ff56bc84670 RDI: 0000000000000003
[ 1368.100107][   T37] RBP: 0000000000000001 R08: 00007ffd52c04774 R09: 000000000000000c
[ 1368.100120][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1368.100132][   T37] R13: 0000000000000000 R14: 00007ff56bc84670 R15: 0000000000000000
[ 1368.100161][   T37]  </TASK>
[ 1368.100171][   T37] INFO: task syz-executor:9369 blocked for more than 146 seconds.
[ 1368.100186][   T37]       Not tainted syzkaller #0
[ 1368.100196][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1368.100206][   T37] task:syz-executor    state:D stack:25800 pid:9369  tgid:9369  ppid:1      task_flags:0x400140 flags:0x00080002
[ 1368.100262][   T37] Call Trace:
[ 1368.100269][   T37]  <TASK>
[ 1368.100281][   T37]  __schedule+0x16dc/0x5500
[ 1368.100311][   T37]  ? rt_mutex_adjust_prio_chain+0x347/0x2140
[ 1368.100347][   T37]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1368.100384][   T37]  ? __pfx___schedule+0x10/0x10
[ 1368.100427][   T37]  rt_mutex_schedule+0x76/0xf0
[ 1368.100450][   T37]  rt_mutex_slowlock_block+0x55c/0x680
[ 1368.100488][   T37]  rt_mutex_slowlock+0x2d4/0x780
[ 1368.100514][   T37]  ? rt_mutex_slowlock+0x1f2/0x780
[ 1368.100538][   T37]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 1368.100573][   T37]  ? inet_rtm_newaddr+0x464/0x19e0
[ 1368.100602][   T37]  ? inet_rtm_newaddr+0x464/0x19e0
[ 1368.100631][   T37]  ? inet_rtm_newaddr+0x464/0x19e0
[ 1368.100653][   T37]  mutex_lock_nested+0x168/0x1d0
[ 1368.100682][   T37]  inet_rtm_newaddr+0x464/0x19e0
[ 1368.100704][   T37]  ? unwind_get_return_address+0x4d/0x90
[ 1368.100727][   T37]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1368.100771][   T37]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1368.100812][   T37]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[ 1368.100835][   T37]  rtnetlink_rcv_msg+0x802/0xc00
[ 1368.100864][   T37]  ? kmem_cache_alloc_node_noprof+0x3eb/0x670
[ 1368.100901][   T37]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1368.100931][   T37]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1368.100962][   T37]  ? __lock_acquire+0x683/0x2ce0
[ 1368.100995][   T37]  netlink_rcv_skb+0x226/0x4a0
[ 1368.101038][   T37]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1368.101071][   T37]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1368.101117][   T37]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1368.101138][   T37]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1368.101164][   T37]  netlink_unicast+0x7f5/0x990
[ 1368.101206][   T37]  netlink_sendmsg+0x813/0xb40
[ 1368.101237][   T37]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1368.101261][   T37]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1368.101296][   T37]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1368.101316][   T37]  sock_sendmsg_nosec+0x13a/0x180
[ 1368.101346][   T37]  __sys_sendto+0x41e/0x5d0
[ 1368.101383][   T37]  ? __pfx___sys_sendto+0x10/0x10
[ 1368.101443][   T37]  ? do_user_addr_fault+0xc4a/0x1340
[ 1368.101480][   T37]  __x64_sys_sendto+0xde/0x100
[ 1368.101513][   T37]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1368.101536][   T37]  do_syscall_64+0x174/0x580
[ 1368.101565][   T37]  ? trace_irq_disable+0x3b/0x140
[ 1368.101584][   T37]  ? clear_bhb_loop+0x40/0x90
[ 1368.101610][   T37]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1368.101631][   T37] RIP: 0033:0x7f3fd0e8e68e
[ 1368.101648][   T37] RSP: 002b:00007ffd31ad2db8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1368.101668][   T37] RAX: ffffffffffffffda RBX: 0000555576a61500 RCX: 00007f3fd0e8e68e
[ 1368.101683][   T37] RDX: 0000000000000028 RSI: 00007f3fd1c84670 RDI: 0000000000000003
[ 1368.101696][   T37] RBP: 0000000000000001 R08: 00007ffd31ad2e34 R09: 000000000000000c
[ 1368.101708][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1368.101719][   T37] R13: 0000000000000000 R14: 00007f3fd1c84670 R15: 0000000000000000
[ 1368.101748][   T37]  </TASK>
[ 1368.101772][   T37] 
[ 1368.101772][   T37] Showing all locks held in the system:
[ 1368.101787][   T37] 4 locks held by ktimers/0/16:
[ 1368.101802][   T37] 5 locks held by ktimers/1/29:
[ 1368.101813][   T37] 1 lock held by khungtaskd/37:
[ 1368.101823][   T37]  #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1368.101901][   T37] 3 locks held by kworker/u8:5/68:
[ 1368.101913][   T37]  #0: ffff88803228f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1368.102002][   T37]  #1: ffffc9000153fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1368.102080][   T37]  #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[ 1368.102202][   T37] 7 locks held by kworker/u8:7/1033:
[ 1368.102218][   T37] 5 locks held by kworker/u8:12/1431:
[ 1368.102241][   T37] 1 lock held by dhcpcd/5258:
[ 1368.102251][   T37]  #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50
[ 1368.102297][   T37] 2 locks held by getty/5349:
[ 1368.102308][   T37]  #0: ffff8880328a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1368.102402][   T37]  #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 1368.102483][   T37] 3 locks held by kworker/1:4/5714:
[ 1368.102502][   T37] 4 locks held by kworker/u8:17/8964:
[ 1368.102514][   T37] 4 locks held by kworker/u8:19/8987:
[ 1368.102525][   T37] 3 locks held by kworker/u9:3/9247:
[ 1368.102537][   T37]  #0: ffff888036dc5938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1368.102587][   T37]  #1: ffffc9000483fc40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1368.102639][   T37]  #2: ffff88803db50f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750
[ 1368.102750][   T37] 3 locks held by kworker/u8:14/9298:
[ 1368.102762][   T37]  #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1368.102835][   T37]  #1: ffffc90003b8fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1368.102901][   T37]  #2: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1368.102948][   T37] 1 lock held by syz-executor/9363:
[ 1368.102959][   T37]  #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[ 1368.103008][   T37] 1 lock held by syz-executor/9369:
[ 1368.103020][   T37]  #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[ 1368.103083][   T37] 1 lock held by syz-executor/9373:
[ 1368.103095][   T37]  #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[ 1368.103145][   T37] 2 locks held by kworker/0:2/9406:
[ 1368.103157][   T37] 1 lock held by syz-executor/9420:
[ 1368.103168][   T37]  #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[ 1368.103216][   T37] 1 lock held by syz-executor/9429:
[ 1368.103227][   T37]  #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[ 1368.103285][   T37] 1 lock held by syz-executor/9440:
[ 1368.103296][   T37]  #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[ 1368.103344][   T37] 1 lock held by syz-executor/9442:
[ 1368.103355][   T37]  #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[ 1368.103417][   T37] 1 lock held by syz-executor/9444:
[ 1368.103430][   T37]  #0: ffffffff8f5b0578 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[ 1368.103481][   T37] 3 locks held by kworker/u9:5/9451:
[ 1368.103492][   T37]  #0: ffff88804c0f5138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1368.103559][   T37]  #1: ffffc90003d5fc40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1368.103615][   T37]  #2: ffff888062178f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750
[ 1368.103673][   T37] 
[ 1368.103679][   T37] =============================================
[ 1368.103679][   T37] 
[ 1368.103689][   T37] NMI backtrace for cpu 0
[ 1368.103716][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1368.103740][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1368.103752][   T37] Call Trace:
[ 1368.103761][   T37]  <TASK>
[ 1368.103769][   T37]  dump_stack_lvl+0xe8/0x150
[ 1368.103825][   T37]  nmi_cpu_backtrace+0x274/0x2d0
[ 1368.103915][   T37]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1368.103991][   T37]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 1368.104019][   T37]  sys_info+0x135/0x170
[ 1368.104048][   T37]  watchdog+0xfd7/0x1030
[ 1368.104141][   T37]  ? watchdog+0x1c7/0x1030
[ 1368.104192][   T37]  kthread+0x388/0x470
[ 1368.104244][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1368.104272][   T37]  ? __pfx_kthread+0x10/0x10
[ 1368.104303][   T37]  ret_from_fork+0x514/0xb70
[ 1368.104393][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1368.104424][   T37]  ? __switch_to+0xc89/0x1420
[ 1368.104493][   T37]  ? __pfx_kthread+0x10/0x10
[ 1368.104524][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1368.104560][   T37]  </TASK>
[ 1368.104610][   T37] Sending NMI from CPU 0 to CPUs 1:
[ 1368.104660][    C1] NMI backtrace for cpu 1
[ 1368.104679][    C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1368.104699][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1368.104709][    C1] RIP: 0010:rt_spin_lock+0xa/0x400
[ 1368.104731][    C1] Code: 0b 90 e9 fc fe ff ff cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 <41> 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 00 49 89 fe 65
[ 1368.104747][    C1] RSP: 0018:ffffc90000a3fc88 EFLAGS: 00000246
[ 1368.104762][    C1] RAX: 1ffffffff1b66efb RBX: ffffffff8db377d8 RCX: ffff88801d2ebe00
[ 1368.104776][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff8880b87284a0
[ 1368.104788][    C1] RBP: ffffc90000a3fc90 R08: 0000000000000000 R09: 0000000000000100
[ 1368.104817][    C1] R10: dffffc0000000000 R11: ffffffff81b1fbc0 R12: ffff888125d4c000
[ 1368.104831][    C1] R13: 0000000000000008 R14: ffff8880b8728440 R15: dffffc0000000000
[ 1368.104857][    C1] FS:  0000000000000000(0000) GS:ffff888125d4c000(0000) knlGS:0000000000000000
[ 1368.104871][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1368.104883][    C1] CR2: 000055670cb68568 CR3: 00000000371b0000 CR4: 00000000003526f0
[ 1368.104899][    C1] Call Trace:
[ 1368.104905][    C1]  <TASK>
[ 1368.104913][    C1]  hrtimer_run_softirq+0x7f/0x260
[ 1368.105016][    C1]  handle_softirqs+0x1d9/0x6c0
[ 1368.105085][    C1]  run_ktimerd+0x69/0x100
[ 1368.105110][    C1]  smpboot_thread_fn+0x57c/0xa80
[ 1368.105177][    C1]  ? smpboot_thread_fn+0x4e/0xa80
[ 1368.105206][    C1]  kthread+0x388/0x470
[ 1368.105232][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[ 1368.105255][    C1]  ? __pfx_kthread+0x10/0x10
[ 1368.105281][    C1]  ret_from_fork+0x514/0xb70
[ 1368.105310][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 1368.105338][    C1]  ? __switch_to+0xc89/0x1420
[ 1368.105362][    C1]  ? __pfx_kthread+0x10/0x10
[ 1368.105389][    C1]  ret_from_fork_asm+0x1a/0x30
[ 1368.105416][    C1]  </TASK>
[ 1368.124403][   T37] Kernel panic - not syncing: hung_task: blocked tasks
[ 1368.124424][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[ 1368.124448][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1368.124459][   T37] Call Trace:
[ 1368.124469][   T37]  <TASK>
[ 1368.124478][   T37]  vpanic+0x56c/0xa60
[ 1368.124505][   T37]  ? __pfx___schedule+0x10/0x10
[ 1368.124555][   T37]  ? __pfx_vpanic+0x10/0x10
[ 1368.124587][   T37]  panic+0xc5/0xd0
[ 1368.124608][   T37]  ? __pfx_panic+0x10/0x10
[ 1368.124627][   T37]  ? preempt_schedule_common+0x82/0xd0
[ 1368.124657][   T37]  ? preempt_schedule_thunk+0x16/0x40
[ 1368.124687][   T37]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[ 1368.124718][   T37]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[ 1368.124749][   T37]  watchdog+0x1030/0x1030
[ 1368.124789][   T37]  ? watchdog+0x1c7/0x1030
[ 1368.124830][   T37]  kthread+0x388/0x470
[ 1368.124864][   T37]  ? __pfx_watchdog+0x10/0x10
[ 1368.124905][   T37]  ? __pfx_kthread+0x10/0x10
[ 1368.124937][   T37]  ret_from_fork+0x514/0xb70
[ 1368.124971][   T37]  ? __pfx_ret_from_fork+0x10/0x10
[ 1368.125002][   T37]  ? __switch_to+0xc89/0x1420
[ 1368.125038][   T37]  ? __pfx_kthread+0x10/0x10
[ 1368.125071][   T37]  ret_from_fork_asm+0x1a/0x30
[ 1368.125106][   T37]  </TASK>
[ 1368.125735][   T37] Kernel Offset: disabled