last executing test programs:

16m25.929099447s ago: executing program 0 (id=1):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000400))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12)
readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES8=r3, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="0000000000000000000000000000001000"/28], 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/functions/ncm.usb0/max_segment_size\x00', 0x40001, 0x0)
write(r4, &(0x7f0000000600)='1(', 0x2)

16m24.574099645s ago: executing program 0 (id=11):
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000400), 0x4)
timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x6, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x0, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0x7, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x220100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10004, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x71, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(r4, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14)

16m11.954979959s ago: executing program 1 (id=24):
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01)
write$sndseq(r2, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800)

16m10.276568393s ago: executing program 1 (id=28):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x47d}], 0x1}, 0x84)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

16m9.894892042s ago: executing program 1 (id=30):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x2000, 0x0)

16m8.588010532s ago: executing program 32 (id=11):
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000400), 0x4)
timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x6, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x0, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0x7, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x220100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10004, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x71, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(r4, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14)

16m7.9533595s ago: executing program 1 (id=34):
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01)
write$sndseq(r2, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r3, &(0x7f0000019c40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="db020691a63e29a45af43ae865ec479dd7aa10b1f4a8f7f5ec57a863efae79604aab2c55b130fbe371260c57fbd10e88290e16d39522e5cfd386a67aa9106a94b065e7f71a16b846a8cb441ab209b178912e531d524eeccabd4472189ad03a66537900793342442f95f3b0f5c32572c537db348c4700ad6f4b07fac8b4392a28eed48f4fbfc9d6b9", 0x88}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20004000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800)

15m55.046653739s ago: executing program 1 (id=48):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mknod$loop(0x0, 0x6000, 0x0)
r4 = creat(0x0, 0x0)
r5 = dup2(r4, r4)
ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000004c0)={'\x00', 0x40, 0x8000, 0x3, 0x1, 0x10})
r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2800)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x0, 0x4})
read$msr(r6, 0x0, 0x0)
r7 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x295})
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, 0x0)
ioctl$UFFDIO_COPY(r8, 0xc028aa05, 0x0)

15m52.306253529s ago: executing program 1 (id=49):
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x2, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100000000000007010000f80008000000b70300000000000085000000990000009500"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x5e9602, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r9 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8001, 0x2e}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x4020, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0xffffffffffffff85, {0x40, 0xd, 0x18, 0x4}}}, 0x3e)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))

15m36.538177835s ago: executing program 33 (id=49):
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x2, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100000000000007010000f80008000000b70300000000000085000000990000009500"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x5e9602, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r9 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8001, 0x2e}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x4020, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0xffffffffffffff85, {0x40, 0xd, 0x18, 0x4}}}, 0x3e)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))

12m29.110922766s ago: executing program 5 (id=312):
syz_open_dev$usbfs(0x0, 0x76, 0x4040)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/180, 0xb4}], 0x1)

12m26.324219989s ago: executing program 5 (id=313):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xfffffffffffffffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

12m25.90402129s ago: executing program 5 (id=315):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

12m20.859943076s ago: executing program 5 (id=323):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='2', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='2', 0x1)
write(0xffffffffffffffff, &(0x7f0000000600), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0)
write(r2, &(0x7f00000006c0)='6', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0)
write(r3, &(0x7f0000000780)='2', 0x1)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
write(0xffffffffffffffff, &(0x7f0000000940)='dummy_udc.0', 0xb)

12m20.637166297s ago: executing program 5 (id=324):
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000400), 0x4)
timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x6, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x0, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0x7, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x220100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10004, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x71, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r6, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvfrom(r4, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002200)={0x14}, 0x14)

12m19.986095597s ago: executing program 5 (id=325):
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x2, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100000000000007010000f80008000000b70300000000000085000000990000009500"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x5e9602, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2)

12m4.6239637s ago: executing program 34 (id=325):
syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x2, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff000000004fa100000000000007010000f80008000000b70300000000000085000000990000009500"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x5e9602, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x2)

8m37.543991226s ago: executing program 4 (id=567):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_procfs(0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, 0x0)

8m36.164457746s ago: executing program 4 (id=569):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)

8m35.772192878s ago: executing program 4 (id=570):
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000019c40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="db020691a63e29a45af43ae865ec479dd7aa10b1f4a8f7f5ec57a863efae79604aab2c55b130fbe371260c57fbd10e88290e16d39522e5cfd386a67aa9106a94b065e7f71a16b846a8cb441ab209b178912e531d524eeccabd4472189ad03a66537900793342442f95f3b0f5c32572c537db348c4700ad6f4b07fac8b4392a28eed48f4fbfc9d6b9", 0x88}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20004000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800)

8m34.937437625s ago: executing program 4 (id=571):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x2f2}], 0x1}, 0x84)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

8m33.433070028s ago: executing program 4 (id=574):
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r2, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r2, &(0x7f0000019c40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="db020691a63e29a45af43ae865ec479dd7aa10b1f4a8f7f5ec57a863efae79604aab2c55b130fbe371260c57fbd10e88290e16d39522e5cfd386a67aa9106a94b065e7f71a16b846a8cb441ab209b178912e531d524eeccabd4472189ad03a66537900793342442f95f3b0f5c32572c537db348c4700ad6f4b07fac8b4392a28eed48f4fbfc9d6b9", 0x88}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20004000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800)

8m31.882143432s ago: executing program 4 (id=577):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x223})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8m15.305233068s ago: executing program 35 (id=577):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x223})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.196168775s ago: executing program 2 (id=1032):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776", 0x80, 0x840, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaac7533137cd4e1eaaaaaaaaaaaa"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000400c)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)

15.453836419s ago: executing program 8 (id=1038):
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
lstat(&(0x7f00000006c0)='./file0\x00', 0x0)
stat(&(0x7f0000000780)='./file0\x00', 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [{0x2, 0x7}, {}], {0x4, 0x2}, [{0x8, 0x1}], {0x10, 0x5}, {0x20, 0x3}}, 0x3c, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0xc8)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)

14.504421912s ago: executing program 3 (id=1040):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x1, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

12.097662413s ago: executing program 8 (id=1041):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

11.945898767s ago: executing program 2 (id=1042):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x2080)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, r5, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0)

11.808842739s ago: executing program 3 (id=1043):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
fsopen(&(0x7f0000000240)='ramfs\x00', 0x0)
r0 = socket(0x2c, 0x80000, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
io_uring_register$IORING_UNREGISTER_RING_FDS(0xffffffffffffffff, 0x15, &(0x7f0000000e00)=[{0xdab4, 0x0, 0x0}], 0x1)
unshare(0x24020400)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="44000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1863010000000000140003007866726d300000000000000000000000100000000000000000002900020000006fd7ef9f27beaae0a02d0703e611091ac3aca768a9d9470810e136b3009775b1f28672a39f4b"], 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x20000, &(0x7f00000007c0)=ANY=[@ANYBLOB='dyn'])
getdents(0xffffffffffffffff, 0x0, 0x58)
r2 = add_key$keyring(&(0x7f0000000880), 0x0, 0x0, 0x0, 0xfffffffffffffffc)
add_key$user(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="34000000130a01070000000000000000050000010c000640000000000000000108000340060000040900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc800)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)

11.315161621s ago: executing program 2 (id=1044):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x8, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4000002, @local, 0x2}, 0x1c)
write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18a6e3cdb8049d6d6f6d6bd5703a6b9027389878bc35558e24327ddff789162ead569e86246e6701d4251b8106e6ef6f52f2a2265382e5d8e02ed655e4a203362da68db5b0e884220ded5b2319fbd52ccc905fd9a6f60ac4268a1aac02d80104ba6b72b925cc1c1deaa8db25763ed5e6a80d26d124f1ea56136d9bed1ebf52a7ae435c75c4739afa46fcc6a41648be0a4c6efcf42e59b029be3777777b123c493f14b955acbaf6", 0x126)

11.117027284s ago: executing program 2 (id=1045):
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x2e}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xe5a7}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000006c0)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x4020, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0xffffffffffffff85, {0x40, 0xd, 0x18, 0x4}}}, 0x3e)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))

6.756855919s ago: executing program 2 (id=1046):
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket(0x400000000010, 0x3, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
lstat(&(0x7f00000006c0)='./file0\x00', 0x0)
stat(&(0x7f0000000780)='./file0\x00', 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f00000005c0)='system.posix_acl_access\x00', &(0x7f0000000840)={{}, {}, [{0x2, 0x7}, {}], {0x4, 0x2}, [{0x8, 0x1}], {0x10, 0x5}, {0x20, 0x3}}, 0x3c, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0xc8)
write$sndseq(0xffffffffffffffff, 0x0, 0x0)

6.200266908s ago: executing program 3 (id=1047):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r5], 0x1c}}, 0x4008054)
write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)

5.288616358s ago: executing program 8 (id=1048):
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)

5.279367119s ago: executing program 3 (id=1049):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000)

2.790536552s ago: executing program 2 (id=1050):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
preadv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/120, 0x78}], 0x1, 0x54c5, 0x80000001)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0)
r5 = socket(0x28, 0x5, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
timer_create(0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
recvfrom$inet_nvme(r5, 0x0, 0xfffffffffffffea6, 0x40000002, 0x0, 0x0)

2.688384831s ago: executing program 3 (id=1051):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054)
write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xc)
write$nci(r2, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)

2.03829414s ago: executing program 3 (id=1052):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
inotify_init()
close(0x3)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x3, &(0x7f0000000b00))
sync()
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
listen(r2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf25010000000000000009410000004c0018000001ff7564700000000000000000000000000000000000000000000000000000000000000000000000000000180000af36776cb6e00000000040b9aabe00"/104], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x14)

2.037504923s ago: executing program 8 (id=1053):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

630.015664ms ago: executing program 8 (id=1054):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)

0s ago: executing program 8 (id=1055):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0)

kernel console output (not intermixed with test programs):

9.894916][T10406] hsr_slave_1: entered promiscuous mode
[  749.924131][T10406] debugfs: 'hsr0' already exists in 'hsr'
[  749.930089][T10406] Cannot create hsr debugfs directory
[  750.191544][T10258] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  750.215535][T10258] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  750.234484][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.241665][ T3292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  751.152346][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.159581][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  753.958643][T10488] Bluetooth: hci0: command 0x0405 tx timeout
[  754.946087][T10536] netlink: 72 bytes leftover after parsing attributes in process `syz.3.744'.
[  754.969791][T10258] 8021q: adding VLAN 0 to HW filter on device bond0
[  755.162698][T10258] 8021q: adding VLAN 0 to HW filter on device team0
[  755.305616][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  755.312827][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  755.376588][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  755.383798][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  755.443797][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13
[  755.470647][T10399] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  755.517970][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  755.542689][T10399] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  755.574077][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  755.606409][T10399] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  756.267769][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  756.299589][T10399] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  756.336152][T10399] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  757.264658][T10399] 8021q: adding VLAN 0 to HW filter on device bond0
[  757.490468][T10399] 8021q: adding VLAN 0 to HW filter on device team0
[  757.553137][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  757.560380][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  757.697750][T10571] netlink: 200 bytes leftover after parsing attributes in process `syz.2.746'.
[  757.699448][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[  757.714144][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[  757.733808][T10406] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  757.748238][T10406] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  757.798995][T10406] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  757.839030][T10406] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  757.932627][ T8799] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  757.948054][T10488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  757.960522][T10488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  757.969197][T10488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  757.980419][T10488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  757.990139][T10488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  758.083908][T10406] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  758.116255][T10406] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  758.123521][ T8799] usb 4-1: Using ep0 maxpacket: 16
[  758.140275][ T8799] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  758.154152][T10406] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  758.171736][ T8799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.189553][T10406] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  758.207753][ T8799] usb 4-1: Product: syz
[  758.222195][ T8799] usb 4-1: Manufacturer: syz
[  758.263990][ T8799] usb 4-1: SerialNumber: syz
[  758.310438][ T8799] usb 4-1: config 0 descriptor??
[  758.343782][ T8799] gspca_main: spca508-2.14.0 probing 041e:4018
[  758.549133][ T8799] gspca_spca508: reg_read err -32
[  758.582916][ T8799] gspca_spca508: reg_read err -32
[  758.604234][ T8799] gspca_spca508: reg_read err -32
[  758.638812][ T8799] gspca_spca508: reg_read err -32
[  758.645905][ T8799] gspca_spca508: reg_read err -32
[  758.652019][ T5625] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  758.842291][ T5625] usb 3-1: Using ep0 maxpacket: 16
[  759.118492][ T5625] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  759.170636][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.181364][ T8799] gspca_spca508: reg write: error -110
[  759.190662][ T8799] spca508 4-1:0.0: probe with driver spca508 failed with error -110
[  759.199708][ T5625] usb 3-1: Product: syz
[  759.210957][ T5625] usb 3-1: Manufacturer: syz
[  759.254393][ T5625] usb 3-1: SerialNumber: syz
[  759.322779][ T5625] usb 3-1: config 0 descriptor??
[  759.359393][ T5625] gspca_main: spca508-2.14.0 probing 041e:4018
[  760.505346][T10488] Bluetooth: hci1: command tx timeout
[  760.669592][ T5625] gspca_spca508: reg_read err -32
[  760.692195][ T5625] gspca_spca508: reg_read err -32
[  760.700339][ T5625] gspca_spca508: reg_read err -32
[  760.799774][T10258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  760.821432][ T5625] gspca_spca508: reg_read err -32
[  760.846923][ T5625] gspca_spca508: reg_read err -32
[  760.881120][ T5759] usb 4-1: USB disconnect, device number 21
[  761.370736][T10406] 8021q: adding VLAN 0 to HW filter on device bond0
[  761.401610][ T5625] gspca_spca508: reg write: error -110
[  761.419392][ T5625] spca508 3-1:0.0: probe with driver spca508 failed with error -110
[  761.872840][T10406] 8021q: adding VLAN 0 to HW filter on device team0
[  761.980951][   T57] bridge_slave_1: left allmulticast mode
[  762.011665][   T57] bridge_slave_1: left promiscuous mode
[  762.055389][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.765429][T10488] Bluetooth: hci1: command tx timeout
[  762.799481][   T57] bridge_slave_0: left allmulticast mode
[  762.855974][   T57] bridge_slave_0: left promiscuous mode
[  762.894188][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.678418][ T5634] usb 3-1: USB disconnect, device number 21
[  763.794631][ T9011] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  763.804327][ T9011] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  763.817479][ T9011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  763.847790][ T9011] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  763.858524][ T9011] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  764.072271][ T5634] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  764.110198][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  764.195977][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  764.253952][   T57] bond0 (unregistering): Released all slaves
[  764.292121][ T5634] usb 3-1: Using ep0 maxpacket: 8
[  764.317775][ T5634] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  764.347019][ T5634] usb 3-1: config 0 has no interface number 0
[  764.368056][T10489] bridge0: port 1(bridge_slave_0) entered blocking state
[  764.375301][T10489] bridge0: port 1(bridge_slave_0) entered forwarding state
[  764.402880][ T5634] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  764.465557][ T5634] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  764.509882][ T5634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.586613][ T5634] usb 3-1: config 0 descriptor??
[  764.634909][  T867] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.642113][  T867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.686740][ T5634] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  764.793453][ T9011] Bluetooth: hci1: command tx timeout
[  764.894662][   T57] hsr_slave_0: left promiscuous mode
[  764.933011][   T57] hsr_slave_1: left promiscuous mode
[  764.963408][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  765.057473][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  765.120167][T10654] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  765.156682][T10654] xt_CT: You must specify a L4 protocol and not use inversions on it
[  765.911508][ T9011] Bluetooth: hci5: command tx timeout
[  766.315980][   T57] team0 (unregistering): Port device team_slave_1 removed
[  766.356823][   T57] team0 (unregistering): Port device team_slave_0 removed
[  766.877138][ T9011] Bluetooth: hci1: command tx timeout
[  767.519704][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13
[  767.684094][ T9575] usb 3-1: USB disconnect, device number 22
[  767.851598][ T5352] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  767.991707][ T9011] Bluetooth: hci5: command tx timeout
[  768.124820][ T5352] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  768.264191][ T5352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.356705][ T5352] usb 4-1: Product: syz
[  768.399676][ T5352] usb 4-1: Manufacturer: syz
[  768.448905][ T5352] usb 4-1: SerialNumber: syz
[  768.678875][ T5352] usb 4-1: config 0 descriptor??
[  769.117100][ T5352] usb 4-1: USB disconnect, device number 22
[  769.178016][T10669] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  769.197495][T10669] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  769.255709][T10669] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  769.310497][T10669] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  769.374548][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0
[  769.407997][T10669] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  769.426970][T10669] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  769.503574][T10669] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  769.560431][T10669] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  769.616564][T10669] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  769.672899][T10669] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  770.463340][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14
[  770.962110][ T9575] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  771.217298][T10488] Bluetooth: hci4: command 0x0c1a tx timeout
[  771.273746][T10488] Bluetooth: hci6: command 0x0c1a tx timeout
[  771.279833][ T9011] Bluetooth: hci2: command 0x0c1a tx timeout
[  771.351315][ T9011] Bluetooth: hci0: command 0x0405 tx timeout
[  771.413286][ T9575] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  771.433294][ T9011] Bluetooth: hci1: command 0x0c1a tx timeout
[  771.448359][ T9575] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  771.484471][ T9575] usb 3-1: config 220 has no interface number 2
[  771.511938][ T9575] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  771.553897][ T9575] usb 3-1: config 220 interface 0 has no altsetting 0
[  771.571001][ T9575] usb 3-1: config 220 interface 76 has no altsetting 0
[  771.592546][ T9011] Bluetooth: hci5: command 0x0419 tx timeout
[  771.606371][ T9575] usb 3-1: config 220 interface 1 has no altsetting 0
[  771.627627][ T9575] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  771.712759][ T9575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.761178][ T9575] usb 3-1: Product: syz
[  771.770616][ T9575] usb 3-1: Manufacturer: syz
[  771.797339][ T9575] usb 3-1: SerialNumber: syz
[  772.114538][ T9575] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  772.136202][ T9575] uvcvideo 3-1:220.0: No valid video chain found.
[  772.154608][ T9575] usb 3-1: selecting invalid altsetting 0
[  772.198050][ T9575] usb 3-1: selecting invalid altsetting 0
[  772.212754][ T9575] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  772.245265][ T9575] usb 3-1: USB disconnect, device number 23
[  774.673367][ T9011] Bluetooth: hci1: command 0x0c1a tx timeout
[  774.679956][T10488] Bluetooth: hci5: command 0x0419 tx timeout
[  776.255971][T10575] bridge0: port 1(bridge_slave_0) entered blocking state
[  776.322226][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'.
[  776.721552][ T9011] Bluetooth: hci1: command 0x0c1a tx timeout
[  776.728493][T10488] Bluetooth: hci5: command 0x0419 tx timeout
[  777.086088][T10575] bridge0: port 1(bridge_slave_0) entered disabled state
[  777.093981][T10575] bridge_slave_0: entered allmulticast mode
[  777.125124][T10575] bridge_slave_0: entered promiscuous mode
[  777.472061][T10575] bridge0: port 2(bridge_slave_1) entered blocking state
[  777.524893][T10575] bridge0: port 2(bridge_slave_1) entered disabled state
[  777.642770][T10575] bridge_slave_1: entered allmulticast mode
[  777.684881][T10575] bridge_slave_1: entered promiscuous mode
[  777.702191][T10399] veth0_vlan: entered promiscuous mode
[  777.847476][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15
[  778.881176][ T9011] Bluetooth: hci5: command 0x0419 tx timeout
[  778.929394][T10406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  778.949754][T10399] veth1_vlan: entered promiscuous mode
[  779.093036][T10636] bridge0: port 1(bridge_slave_0) entered blocking state
[  779.100302][T10636] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.120912][T10636] bridge_slave_0: entered allmulticast mode
[  779.158727][T10636] bridge_slave_0: entered promiscuous mode
[  779.167053][T10762] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  779.182379][T10575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  779.220736][T10762] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  779.252630][T10575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  779.284543][T10762] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  779.319298][T10762] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  779.358774][T10762] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  779.370753][T10636] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.397274][T10762] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  779.407805][T10636] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.429285][T10771] netlink: 'syz.3.761': attribute type 2 has an invalid length.
[  779.443993][T10636] bridge_slave_1: entered allmulticast mode
[  779.469971][T10636] bridge_slave_1: entered promiscuous mode
[  779.635293][T10399] veth0_macvtap: entered promiscuous mode
[  779.753044][T10575] team0: Port device team_slave_0 added
[  781.191178][ T9011] Bluetooth: hci4: command 0x0c1a tx timeout
[  781.225364][T10575] team0: Port device team_slave_1 added
[  781.262485][T10636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  781.271923][ T9011] Bluetooth: hci2: command 0x0c1a tx timeout
[  781.290393][T10636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  781.345381][T10399] veth1_macvtap: entered promiscuous mode
[  781.351902][ T9011] Bluetooth: hci0: command 0x0405 tx timeout
[  781.353536][T10488] Bluetooth: hci6: command 0x0c1a tx timeout
[  781.432547][T10488] Bluetooth: hci5: command 0x0419 tx timeout
[  781.432566][ T9011] Bluetooth: hci1: command 0x0c1a tx timeout
[  781.568879][ T6324] bridge_slave_1: left allmulticast mode
[  781.590212][ T6324] bridge_slave_1: left promiscuous mode
[  781.623036][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  781.688329][ T6324] bridge_slave_0: left allmulticast mode
[  781.695177][ T6324] bridge_slave_0: left promiscuous mode
[  781.706398][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.167017][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  782.195758][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  782.226048][ T6324] bond0 (unregistering): Released all slaves
[  782.317159][T10575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  782.348600][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.433306][T10575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  782.450268][T10575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  782.458041][T10575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  782.489130][T10575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  782.561646][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16
[  782.675144][T10636] team0: Port device team_slave_0 added
[  782.745349][ T6324] hsr_slave_0: left promiscuous mode
[  782.810970][ T6324] hsr_slave_1: left promiscuous mode
[  782.828328][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  782.865312][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  784.209776][ T5759] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  785.042755][ T5759] usb 3-1: Using ep0 maxpacket: 8
[  785.065273][T10488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  785.097479][T10488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  785.097510][ T5759] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  785.124132][T10488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  785.132357][ T5759] usb 3-1: config 0 has no interface number 0
[  785.141941][T10488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  785.154241][T10488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  785.193127][ T5759] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  785.270973][ T5759] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  785.316369][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.389295][ T5759] usb 3-1: config 0 descriptor??
[  785.473760][ T5759] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  785.578434][T10488] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  785.590244][T10488] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  785.599607][T10488] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  785.610123][T10488] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  785.618793][T10488] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  785.840542][T10812] xt_CT: You must specify a L4 protocol and not use inversions on it
[  786.722070][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  786.790162][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  787.191589][ T9011] Bluetooth: hci3: command tx timeout
[  787.390467][T10636] team0: Port device team_slave_1 added
[  787.671386][ T9011] Bluetooth: hci6: command tx timeout
[  787.748215][T10575] hsr_slave_0: entered promiscuous mode
[  787.776133][T10575] hsr_slave_1: entered promiscuous mode
[  787.797375][T10575] debugfs: 'hsr0' already exists in 'hsr'
[  787.855793][ T5625] usb 3-1: USB disconnect, device number 24
[  787.879857][T10575] Cannot create hsr debugfs directory
[  788.047756][T10636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  788.109869][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  788.222641][T10636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  788.530756][T10636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  788.558629][T10636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  788.660497][T10636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  788.854980][ T5625] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  789.102007][ T5625] usb 3-1: Using ep0 maxpacket: 8
[  789.128869][ T5625] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  789.139684][ T5625] usb 3-1: config 0 has no interface number 0
[  789.148276][ T5625] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  789.188356][ T5625] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  789.271212][ T9011] Bluetooth: hci3: command tx timeout
[  789.285548][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.761781][ T9011] Bluetooth: hci6: command tx timeout
[  789.889895][ T5625] usb 3-1: config 0 descriptor??
[  789.945793][ T5625] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  791.122045][T10837] xt_CT: You must specify a L4 protocol and not use inversions on it
[  791.366084][ T9011] Bluetooth: hci3: command tx timeout
[  791.856212][ T9011] Bluetooth: hci6: command tx timeout
[  792.340495][T10835] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  792.386935][   T24] usb 3-1: USB disconnect, device number 25
[  792.413786][T10636] hsr_slave_0: entered promiscuous mode
[  792.467801][T10636] hsr_slave_1: entered promiscuous mode
[  792.492634][T10835] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  792.507837][T10636] debugfs: 'hsr0' already exists in 'hsr'
[  792.529812][T10636] Cannot create hsr debugfs directory
[  792.531984][T10835] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  792.604720][T10835] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  792.681844][T10835] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  792.746543][T10835] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  792.860768][T10835] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  792.956755][T10835] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  793.125389][T10835] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  793.248747][T10835] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  793.271914][ T9011] Bluetooth: hci4: command 0x0c1a tx timeout
[  794.594595][T10488] Bluetooth: hci1: command 0x0c1a tx timeout
[  794.609283][T10488] Bluetooth: hci2: command 0x0c1a tx timeout
[  794.747260][ T5626] Bluetooth: hci5: command 0x0419 tx timeout
[  794.757038][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  795.002994][T10796] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  795.032108][T10488] Bluetooth: hci6: command 0x0c1a tx timeout
[  795.221640][T10796] usb 4-1: Using ep0 maxpacket: 8
[  795.348174][T10796] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  795.389573][T10796] usb 4-1: config 0 has no interface number 0
[  795.408927][T10796] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  795.462743][T10796] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  795.498406][T10796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.858277][T10796] usb 4-1: config 0 descriptor??
[  796.220797][T10796] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  796.660322][T10866] xt_CT: You must specify a L4 protocol and not use inversions on it
[  796.791920][T10488] Bluetooth: hci3: command 0x0c1a tx timeout
[  797.111398][T10488] Bluetooth: hci6: command 0x0c1a tx timeout
[  797.522743][T10855] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  797.530563][T10855] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  797.550984][T10855] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  797.588029][T10855] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  797.601607][T10855] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  797.623530][T10855] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  797.938424][ T5352] usb 4-1: USB disconnect, device number 23
[  798.444997][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'.
[  799.591405][ T9011] Bluetooth: hci1: command 0x0c1a tx timeout
[  799.597665][T10488] Bluetooth: hci2: command 0x0c1a tx timeout
[  799.603811][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout
[  799.671324][ T9011] Bluetooth: hci6: command 0x0c1a tx timeout
[  799.678591][T10488] Bluetooth: hci3: command 0x0c1a tx timeout
[  799.684960][ T5626] Bluetooth: hci5: command 0x0419 tx timeout
[  801.523168][T10914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  801.751327][ T9011] Bluetooth: hci6: command 0x0c1a tx timeout
[  804.541440][T10809] bridge0: port 1(bridge_slave_0) entered blocking state
[  804.588643][T10809] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.641473][T10809] bridge_slave_0: entered allmulticast mode
[  804.690408][T10809] bridge_slave_0: entered promiscuous mode
[  804.907472][T10575] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  804.962268][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  804.993323][T10575] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  805.029378][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  805.055000][T10809] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.775873][T10809] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.798064][T10809] bridge_slave_1: entered allmulticast mode
[  805.827490][T10809] bridge_slave_1: entered promiscuous mode
[  805.989329][T10575] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  806.050830][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  806.410951][T10805] bridge0: port 1(bridge_slave_0) entered blocking state
[  806.450279][T10805] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.489055][T10805] bridge_slave_0: entered allmulticast mode
[  806.526259][T10805] bridge_slave_0: entered promiscuous mode
[  806.590111][T10805] bridge0: port 2(bridge_slave_1) entered blocking state
[  806.611887][T10805] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.625082][T10805] bridge_slave_1: entered allmulticast mode
[  806.652202][T10805] bridge_slave_1: entered promiscuous mode
[  806.677223][T10575] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  808.743804][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  808.763599][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  809.107756][T10575] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  809.178138][T10809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  809.317889][T10809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  809.741951][T10805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  809.951953][T10805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  810.081432][T10809] team0: Port device team_slave_0 added
[  810.254028][T10809] team0: Port device team_slave_1 added
[  810.678796][T10805] team0: Port device team_slave_0 added
[  810.735467][T10809] batman_adv: batadv0: Adding interface: batadv_slave_0
[  810.765410][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  810.796769][T10809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  810.837851][T10805] team0: Port device team_slave_1 added
[  810.981275][ T6324] bridge_slave_1: left allmulticast mode
[  810.993118][ T6324] bridge_slave_1: left promiscuous mode
[  811.012961][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  811.048034][ T6324] bridge_slave_0: left allmulticast mode
[  811.062804][ T6324] bridge_slave_0: left promiscuous mode
[  811.367101][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.486044][ T6324] bridge_slave_1: left allmulticast mode
[  812.776095][ T6324] bridge_slave_1: left promiscuous mode
[  812.825681][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  813.819843][ T6324] bridge_slave_0: left allmulticast mode
[  813.964616][ T6324] bridge_slave_0: left promiscuous mode
[  814.017346][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  815.328382][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  815.499117][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  815.728136][ T6324] bond0 (unregistering): Released all slaves
[  817.893287][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  817.967505][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  818.017710][ T6324] bond0 (unregistering): Released all slaves
[  818.073936][T10809] batman_adv: batadv0: Adding interface: batadv_slave_1
[  818.082223][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  818.139120][T10809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  818.291009][T10805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  818.333257][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  818.371316][T10805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  818.472229][T10805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  818.491495][T10805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  818.591791][T10805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  818.860087][ T6324] hsr_slave_0: left promiscuous mode
[  818.877370][ T6324] hsr_slave_1: left promiscuous mode
[  818.905361][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  818.943191][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  819.022008][ T6324] hsr_slave_0: left promiscuous mode
[  819.044692][ T6324] hsr_slave_1: left promiscuous mode
[  819.063825][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  819.082112][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  819.122801][ T6324] veth1_macvtap: left promiscuous mode
[  819.135770][ T6324] veth0_macvtap: left promiscuous mode
[  819.151404][ T6324] veth1_vlan: left promiscuous mode
[  819.158255][ T6324] veth0_vlan: left promiscuous mode
[  819.495167][T10488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  819.506903][T10488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  819.515585][T10488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  819.524961][T10488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  819.534882][T10488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  819.851572][ T5634] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  820.021782][ T5634] usb 4-1: Using ep0 maxpacket: 8
[  820.035956][ T5634] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  820.052928][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  820.061785][ T5634] usb 4-1: config 0 has no interface number 0
[  820.082775][ T5634] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  820.110841][ T5634] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  820.124529][ T5634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.133379][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  820.157913][ T5634] usb 4-1: config 0 descriptor??
[  820.200277][ T5634] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  820.571214][T11002] xt_CT: You must specify a L4 protocol and not use inversions on it
[  821.701458][T10488] Bluetooth: hci0: command tx timeout
[  822.683542][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  822.732246][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  823.095254][T10809] hsr_slave_0: entered promiscuous mode
[  823.107724][T10809] hsr_slave_1: entered promiscuous mode
[  823.126632][T10809] debugfs: 'hsr0' already exists in 'hsr'
[  823.136823][T10809] Cannot create hsr debugfs directory
[  823.402691][ T5352] usb 4-1: USB disconnect, device number 24
[  823.504716][T10805] hsr_slave_0: entered promiscuous mode
[  823.550075][T10805] hsr_slave_1: entered promiscuous mode
[  823.586673][T10805] debugfs: 'hsr0' already exists in 'hsr'
[  823.605136][T10805] Cannot create hsr debugfs directory
[  825.267378][T10488] Bluetooth: hci0: command tx timeout
[  825.980961][ T9011] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  826.009295][ T9011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  826.020485][ T9011] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  826.033047][ T9011] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  826.043316][ T9011] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  826.092078][T11034] netlink: 'syz.2.795': attribute type 2 has an invalid length.
[  827.351454][ T9011] Bluetooth: hci0: command tx timeout
[  828.071889][ T9011] Bluetooth: hci1: command tx timeout
[  828.298260][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13
[  829.459685][ T9011] Bluetooth: hci0: command tx timeout
[  830.177519][ T9011] Bluetooth: hci1: command tx timeout
[  831.511441][ T5352] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  831.741450][ T5352] usb 3-1: Using ep0 maxpacket: 32
[  831.800093][ T5352] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  831.942662][ T5352] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  831.974188][ T5352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.013954][ T5352] usb 3-1: config 0 descriptor??
[  832.042533][ T5352] hub 3-1:0.0: bad descriptor, ignoring hub
[  832.069465][ T5352] hub 3-1:0.0: probe with driver hub failed with error -5
[  832.106592][ T5352] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  832.188243][T10809] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  832.205949][T10809] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  832.224025][T10809] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  832.232739][ T9011] Bluetooth: hci1: command tx timeout
[  832.248555][T10809] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  832.269784][T10992] bridge0: port 1(bridge_slave_0) entered blocking state
[  832.283927][T10992] bridge0: port 1(bridge_slave_0) entered disabled state
[  832.291484][T10992] bridge_slave_0: entered allmulticast mode
[  832.299756][T10992] bridge_slave_0: entered promiscuous mode
[  832.330002][T10809] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  832.347465][T10809] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  832.375873][T10809] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  832.407757][T10809] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  832.489312][T10992] bridge0: port 2(bridge_slave_1) entered blocking state
[  832.507930][T10992] bridge0: port 2(bridge_slave_1) entered disabled state
[  832.539795][T10992] bridge_slave_1: entered allmulticast mode
[  832.611645][T10992] bridge_slave_1: entered promiscuous mode
[  833.620550][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  833.654983][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  836.084896][ T9011] Bluetooth: hci1: command tx timeout
[  836.692170][T10992] team0: Port device team_slave_0 added
[  836.881817][T10796] usb 3-1: USB disconnect, device number 26
[  836.964801][T10992] team0: Port device team_slave_1 added
[  839.413414][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  839.435348][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  839.512528][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  839.565941][T11031] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.599990][T11031] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.622340][T11031] bridge_slave_0: entered allmulticast mode
[  839.651818][T11031] bridge_slave_0: entered promiscuous mode
[  839.672512][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  839.693404][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  839.745164][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  839.886952][T11031] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.895260][T11031] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.904633][T11031] bridge_slave_1: entered allmulticast mode
[  839.930124][T11031] bridge_slave_1: entered promiscuous mode
[  839.981177][ T9575] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  840.144241][ T9575] usb 3-1: Using ep0 maxpacket: 32
[  840.152514][ T9575] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  840.165572][T10992] hsr_slave_0: entered promiscuous mode
[  840.173221][T10992] hsr_slave_1: entered promiscuous mode
[  840.185983][ T9575] usb 3-1: config 0 interface 0 has no altsetting 0
[  840.188808][T10992] debugfs: 'hsr0' already exists in 'hsr'
[  840.193203][ T9575] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  840.206476][T10992] Cannot create hsr debugfs directory
[  840.208495][ T9575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.233055][ T9575] usb 3-1: config 0 descriptor??
[  840.266870][T11031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  840.282537][T11031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.338297][T11031] team0: Port device team_slave_0 added
[  840.349895][T11031] team0: Port device team_slave_1 added
[  840.555379][T11031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  840.562912][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  840.590745][T11031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  840.603007][T10805] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  840.614623][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  840.625286][T10805] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  840.644429][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  840.684177][T11031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  840.692614][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  840.719294][T11031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  840.751436][ T5634] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  840.774758][T10805] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  840.786438][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  840.856658][ T9575] usbhid 3-1:0.0: can't add hid device: -71
[  840.868176][ T9575] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  840.883789][ T9575] usb 3-1: USB disconnect, device number 27
[  840.898593][T11031] hsr_slave_0: entered promiscuous mode
[  840.908180][T11031] hsr_slave_1: entered promiscuous mode
[  840.915546][T11031] debugfs: 'hsr0' already exists in 'hsr'
[  840.922019][T11031] Cannot create hsr debugfs directory
[  840.927896][T10805] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  840.931222][ T5634] usb 4-1: Using ep0 maxpacket: 8
[  840.945043][ T5634] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  840.947186][T10805] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  840.954656][ T5634] usb 4-1: config 0 has no interface number 0
[  840.987418][ T5634] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  841.009023][ T5634] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  841.018726][ T5634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.036048][ T5634] usb 4-1: config 0 descriptor??
[  841.063264][ T5634] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  841.232206][ T6324] bridge_slave_1: left allmulticast mode
[  841.239464][ T6324] bridge_slave_1: left promiscuous mode
[  841.246465][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.256691][ T6324] bridge_slave_0: left allmulticast mode
[  841.264173][ T6324] bridge_slave_0: left promiscuous mode
[  841.272934][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.296554][ T6324] bridge_slave_1: left allmulticast mode
[  841.302681][ T6324] bridge_slave_1: left promiscuous mode
[  841.309229][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  841.328117][ T6324] bridge_slave_0: left allmulticast mode
[  841.334001][ T6324] bridge_slave_0: left promiscuous mode
[  841.341768][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  841.500198][T11159] xt_CT: You must specify a L4 protocol and not use inversions on it
[  842.434199][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  842.877003][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  842.903014][ T6324] bond0 (unregistering): Released all slaves
[  843.058379][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  843.070060][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  843.082282][ T6324] bond0 (unregistering): Released all slaves
[  843.292278][T10809] 8021q: adding VLAN 0 to HW filter on device bond0
[  843.603947][ T6324] hsr_slave_0: left promiscuous mode
[  843.610784][ T6324] hsr_slave_1: left promiscuous mode
[  843.618051][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  843.626194][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  843.639984][ T6324] hsr_slave_0: left promiscuous mode
[  843.647781][ T6324] hsr_slave_1: left promiscuous mode
[  843.654902][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  843.666355][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  843.828426][  T801] usb 4-1: USB disconnect, device number 25
[  843.950283][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  843.969038][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  844.959284][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  845.223566][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  845.329063][T10488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  845.344010][T10488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  845.357904][T10488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  845.367709][T10488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  845.377997][T10488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  845.610134][T10809] 8021q: adding VLAN 0 to HW filter on device team0
[  846.663675][T10488] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  846.687954][T10488] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  846.711869][T10488] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  847.291675][T10488] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  847.300026][T10488] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  847.443077][ T9011] Bluetooth: hci3: command tx timeout
[  849.353184][ T9011] Bluetooth: hci5: command tx timeout
[  849.512299][ T9011] Bluetooth: hci3: command tx timeout
[  851.431345][ T9011] Bluetooth: hci5: command tx timeout
[  851.591213][ T9011] Bluetooth: hci3: command tx timeout
[  852.056222][T10992] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  852.080605][T11245] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.828'.
[  852.097011][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  852.373441][T10992] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  853.448599][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  853.458501][T10992] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  853.476729][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  853.485013][T10992] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  853.500886][T10992] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  853.521265][ T9011] Bluetooth: hci5: command tx timeout
[  853.672779][ T9011] Bluetooth: hci3: command tx timeout
[  855.605990][ T9011] Bluetooth: hci5: command tx timeout
[  856.596530][T11173] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.610555][T11173] bridge0: port 1(bridge_slave_0) entered disabled state
[  856.622121][T11173] bridge_slave_0: entered allmulticast mode
[  856.639630][T11173] bridge_slave_0: entered promiscuous mode
[  856.664665][T11173] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.676767][T11173] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.691910][T11173] bridge_slave_1: entered allmulticast mode
[  856.715346][T11173] bridge_slave_1: entered promiscuous mode
[  857.024784][T11173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  857.179070][T11173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  857.360219][T11031] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  857.389477][T11031] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  857.420695][T11173] team0: Port device team_slave_0 added
[  857.432669][T11031] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  857.450419][T11031] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  857.461417][ T5352] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  857.465390][T11031] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  857.483507][T11031] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  857.521018][T11173] team0: Port device team_slave_1 added
[  857.614675][ T5352] usb 3-1: config 1 interface 0 has no altsetting 0
[  857.627042][T11031] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  857.639174][ T5352] usb 3-1: string descriptor 0 read error: -22
[  857.650156][T11031] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  857.658240][ T5352] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40
[  857.677516][ T5352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.836742][T11173] batman_adv: batadv0: Adding interface: batadv_slave_0
[  857.851515][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  857.878588][T11173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  857.949305][T11173] batman_adv: batadv0: Adding interface: batadv_slave_1
[  857.958889][T11173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  857.989555][T11173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  858.542159][ T5352] topre 0003:0853:0148.0001: unexpected long global item
[  858.615384][ T5352] topre 0003:0853:0148.0001: probe with driver topre failed with error -22
[  858.958688][ T5352] usb 3-1: USB disconnect, device number 28
[  859.289460][T11196] bridge0: port 1(bridge_slave_0) entered blocking state
[  859.526358][T11196] bridge0: port 1(bridge_slave_0) entered disabled state
[  859.534527][T11196] bridge_slave_0: entered allmulticast mode
[  859.543929][T11196] bridge_slave_0: entered promiscuous mode
[  859.628070][T11173] hsr_slave_0: entered promiscuous mode
[  859.639323][T11173] hsr_slave_1: entered promiscuous mode
[  859.656706][T11173] debugfs: 'hsr0' already exists in 'hsr'
[  859.662945][T11173] Cannot create hsr debugfs directory
[  859.755217][T11196] bridge0: port 2(bridge_slave_1) entered blocking state
[  859.776368][T11196] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.798441][T11196] bridge_slave_1: entered allmulticast mode
[  859.894127][T11196] bridge_slave_1: entered promiscuous mode
[  859.945326][T11297] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.838'.
[  860.668449][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  861.145573][T11196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  861.331379][T11196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  861.459125][ T6324] bridge_slave_1: left allmulticast mode
[  861.474831][ T6324] bridge_slave_1: left promiscuous mode
[  861.484492][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.605513][ T6324] bridge_slave_0: left allmulticast mode
[  861.612361][ T6324] bridge_slave_0: left promiscuous mode
[  861.639457][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.279978][ T6324] bridge_slave_1: left allmulticast mode
[  862.289892][ T6324] bridge_slave_1: left promiscuous mode
[  862.304718][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  862.319406][ T6324] bridge_slave_0: left allmulticast mode
[  862.330349][ T6324] bridge_slave_0: left promiscuous mode
[  862.371481][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.679012][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  866.734272][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  866.768658][ T6324] bond0 (unregistering): Released all slaves
[  867.135221][ T6324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  867.178692][ T6324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  867.209383][ T6324] bond0 (unregistering): Released all slaves
[  867.577301][T11196] team0: Port device team_slave_0 added
[  867.789839][T11196] team0: Port device team_slave_1 added
[  867.990484][ T6324] hsr_slave_0: left promiscuous mode
[  868.031999][ T6324] hsr_slave_1: left promiscuous mode
[  868.042351][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  868.062129][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  868.107347][ T6324] hsr_slave_0: left promiscuous mode
[  868.115556][T11319] x_tables: duplicate underflow at hook 2
[  868.123796][ T6324] hsr_slave_1: left promiscuous mode
[  868.136731][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_0
[  868.148202][ T6324] batman_adv: batadv0: Removing interface: batadv_slave_1
[  868.614323][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  868.684283][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  869.357151][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  869.363605][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  869.483486][ T6324] team0 (unregistering): Port device team_slave_1 removed
[  869.516825][ T6324] team0 (unregistering): Port device team_slave_0 removed
[  869.927243][T11196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  869.935741][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  869.976799][T11196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  870.009292][T11318] sit0: entered promiscuous mode
[  870.032250][T11318] netlink: 'syz.2.843': attribute type 1 has an invalid length.
[  870.052435][T11318] netlink: 1 bytes leftover after parsing attributes in process `syz.2.843'.
[  870.123782][T10992] 8021q: adding VLAN 0 to HW filter on device bond0
[  870.167719][T11196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  870.208753][T11196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.316704][T11196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  870.621299][T11031] 8021q: adding VLAN 0 to HW filter on device bond0
[  871.372775][T11331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  871.464950][T11031] 8021q: adding VLAN 0 to HW filter on device team0
[  871.527153][T11196] hsr_slave_0: entered promiscuous mode
[  871.545645][T11196] hsr_slave_1: entered promiscuous mode
[  871.562317][T11196] debugfs: 'hsr0' already exists in 'hsr'
[  871.583108][T11196] Cannot create hsr debugfs directory
[  871.764188][T10992] 8021q: adding VLAN 0 to HW filter on device team0
[  871.813884][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state
[  871.821180][ T5970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  871.873367][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state
[  871.880618][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  872.063410][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.070569][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  872.330261][T11334] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.847'.
[  872.362979][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.370269][ T5970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  873.837799][T11173] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  873.904442][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  873.942378][T11173] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  873.986330][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  874.066604][T11173] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  874.099430][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  874.119640][T11173] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  874.160769][T11173] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  877.349390][T11370] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  877.433253][T11370] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  877.478066][T11173] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.554255][T11370] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  877.620006][T11370] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  877.708199][T11370] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  877.754733][T10488] Bluetooth: hci5: command 0x0405 tx timeout
[  877.829953][T11370] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  877.858297][T11370] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  877.873276][T11173] 8021q: adding VLAN 0 to HW filter on device team0
[  877.898256][T11370] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  877.956747][T11370] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  878.040044][T11370] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  878.123772][T11370] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  878.184388][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.191708][ T6125] bridge0: port 1(bridge_slave_0) entered forwarding state
[  878.284564][T11370] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  878.316369][T11370] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  878.339994][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.347269][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state
[  878.418920][T11370] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  878.637907][T11196] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  878.707848][T11196] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  878.810809][T11196] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  878.960448][T11196] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  879.454954][T10488] Bluetooth: hci2: command 0x0c1a tx timeout
[  879.461249][ T9011] Bluetooth: hci4: command 0x0c1a tx timeout
[  879.611127][ T9011] Bluetooth: hci0: command 0x0c1a tx timeout
[  879.650246][T11173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  879.688580][T11196] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  879.738893][T11196] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  879.809447][T11196] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  879.913592][ T9011] Bluetooth: hci1: command 0x0c1a tx timeout
[  879.939116][T11196] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  879.993059][ T9011] Bluetooth: hci3: command 0x0c1a tx timeout
[  880.321628][ T9011] Bluetooth: hci5: command 0x0405 tx timeout
[  880.378397][T11196] 8021q: adding VLAN 0 to HW filter on device bond0
[  880.463934][T11031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  880.513583][T11196] 8021q: adding VLAN 0 to HW filter on device team0
[  880.597391][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  880.604638][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  880.706139][   T47] bridge0: port 2(bridge_slave_1) entered blocking state
[  880.713347][   T47] bridge0: port 2(bridge_slave_1) entered forwarding state
[  881.081175][T11196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  881.562301][ T5625] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  881.681662][ T9011] Bluetooth: hci0: command 0x0c1a tx timeout
[  881.786930][ T5625] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  881.863768][ T5625] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  881.917227][ T5625] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  881.940317][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.966502][ T5625] usb 3-1: Product: syz
[  881.991745][ T9011] Bluetooth: hci1: command 0x0c1a tx timeout
[  882.005670][ T5625] usb 3-1: Manufacturer: syz
[  882.078881][T10488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  882.088078][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  882.110103][T10488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  882.133483][T10488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  882.144677][T10488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  882.159397][T10488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  882.168258][ T5625] usb 3-1: SerialNumber: syz
[  882.392767][T10488] Bluetooth: hci5: command 0x0405 tx timeout
[  882.887635][T11173] 8021q: adding VLAN 0 to HW filter on device batadv0
[  882.954194][T11031] veth0_vlan: entered promiscuous mode
[  882.977969][ T5625] usb 3-1: USB disconnect, device number 29
[  883.452111][T11031] veth1_vlan: entered promiscuous mode
[  884.035141][T11031] veth0_macvtap: entered promiscuous mode
[  884.071866][T10488] Bluetooth: hci1: command 0x0c1a tx timeout
[  884.105770][T11031] veth1_macvtap: entered promiscuous mode
[  884.151812][T10488] Bluetooth: hci3: command 0x0c1a tx timeout
[  884.207744][T11031] batman_adv: batadv0: Interface activated: batadv_slave_0
[  884.242877][T10488] Bluetooth: hci0: command tx timeout
[  884.473305][T10488] Bluetooth: hci5: command 0x0405 tx timeout
[  884.594312][T11031] batman_adv: batadv0: Interface activated: batadv_slave_1
[  884.870111][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  884.925034][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  885.045409][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  885.094153][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  885.502498][ T6125] bridge_slave_1: left allmulticast mode
[  885.535876][ T6125] bridge_slave_1: left promiscuous mode
[  885.568141][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state
[  885.642168][ T6125] bridge_slave_0: left allmulticast mode
[  885.667782][ T6125] bridge_slave_0: left promiscuous mode
[  885.700205][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[  886.311841][T10488] Bluetooth: hci0: command tx timeout
[  886.632457][ T9011] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  886.647227][ T9011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  886.657368][ T9011] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  886.670488][ T9011] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  886.688199][ T9011] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  886.880188][ T6125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  886.910389][ T6125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  886.923853][ T6125] bond0 (unregistering): Released all slaves
[  887.283563][T11196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  887.381033][ T6125] hsr_slave_0: left promiscuous mode
[  887.412407][ T6125] hsr_slave_1: left promiscuous mode
[  887.430919][T11502] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.860'.
[  887.445430][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0
[  887.474410][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1
[  888.392391][ T9011] Bluetooth: hci0: command tx timeout
[  888.414947][ T6125] team0 (unregistering): Port device team_slave_1 removed
[  888.469961][ T6125] team0 (unregistering): Port device team_slave_0 removed
[  888.791790][ T9011] Bluetooth: hci6: command tx timeout
[  889.040417][T11173] veth0_vlan: entered promiscuous mode
[  889.158010][T11173] veth1_vlan: entered promiscuous mode
[  890.041115][T11173] veth0_macvtap: entered promiscuous mode
[  890.482195][ T9011] Bluetooth: hci0: command tx timeout
[  890.543558][ T6125] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.634856][T11173] veth1_macvtap: entered promiscuous mode
[  890.872936][ T9011] Bluetooth: hci6: command tx timeout
[  893.168871][ T9011] Bluetooth: hci6: command tx timeout
[  893.182287][ T6125] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.874724][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13
[  894.267763][T11173] batman_adv: batadv0: Interface activated: batadv_slave_0
[  894.604580][ T6125] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.914546][T11442] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.933567][T11442] bridge0: port 1(bridge_slave_0) entered disabled state
[  894.963060][T11442] bridge_slave_0: entered allmulticast mode
[  894.998889][T11442] bridge_slave_0: entered promiscuous mode
[  895.048577][T11442] bridge0: port 2(bridge_slave_1) entered blocking state
[  895.062370][T11442] bridge0: port 2(bridge_slave_1) entered disabled state
[  895.080221][T11442] bridge_slave_1: entered allmulticast mode
[  895.089808][T11442] bridge_slave_1: entered promiscuous mode
[  895.152147][T11173] batman_adv: batadv0: Interface activated: batadv_slave_1
[  895.195211][ T9011] Bluetooth: hci6: command tx timeout
[  895.646919][ T6125] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.217198][T11442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.228656][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  896.238271][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  896.275499][T11442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.352562][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  896.364885][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  896.428591][T10796] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  896.458998][T11442] team0: Port device team_slave_0 added
[  896.487475][T11442] team0: Port device team_slave_1 added
[  896.648902][T10796] usb 4-1: config 1 interface 0 has no altsetting 0
[  896.702812][T10796] usb 4-1: string descriptor 0 read error: -22
[  896.713024][T10796] usb 4-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40
[  896.722361][T10796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.672933][T10796] topre 0003:0853:0148.0002: unexpected long global item
[  897.687465][T10796] topre 0003:0853:0148.0002: probe with driver topre failed with error -22
[  897.719158][T11442] batman_adv: batadv0: Adding interface: batadv_slave_0
[  897.729017][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  897.761216][T11442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  897.869087][T11442] batman_adv: batadv0: Adding interface: batadv_slave_1
[  897.879360][T11442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  897.918481][T11442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  897.945278][T11196] veth0_vlan: entered promiscuous mode
[  897.952085][ T9575] usb 4-1: USB disconnect, device number 26
[  898.455682][ T6125] bridge_slave_1: left allmulticast mode
[  898.469716][ T6125] bridge_slave_1: left promiscuous mode
[  898.526052][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.629432][ T6125] bridge_slave_0: left allmulticast mode
[  898.651966][ T6125] bridge_slave_0: left promiscuous mode
[  898.669602][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.924432][ T6125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  899.968850][ T6125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  900.006071][ T6125] bond0 (unregistering): Released all slaves
[  901.800977][T11196] veth1_vlan: entered promiscuous mode
[  901.834511][T11196] veth0_macvtap: entered promiscuous mode
[  901.845866][T11196] veth1_macvtap: entered promiscuous mode
[  901.868624][T11196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  901.880831][T11196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  901.928941][ T5970] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  902.053862][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14
[  902.083768][T11442] hsr_slave_0: entered promiscuous mode
[  902.094591][T11442] hsr_slave_1: entered promiscuous mode
[  902.111312][T11442] debugfs: 'hsr0' already exists in 'hsr'
[  902.143034][T11442] Cannot create hsr debugfs directory
[  902.196952][ T5970] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  902.209689][ T5970] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  902.225887][T11603] x_tables: duplicate underflow at hook 2
[  902.326585][T11601] netlink: 'syz.3.875': attribute type 1 has an invalid length.
[  902.337027][T11601] netlink: 1 bytes leftover after parsing attributes in process `syz.3.875'.
[  902.425093][ T5970] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  902.621947][ T3360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  902.633402][ T3360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  902.777773][   T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  902.802549][   T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  902.853218][ T6125] hsr_slave_0: left promiscuous mode
[  902.867737][ T6125] hsr_slave_1: left promiscuous mode
[  902.877259][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  902.897856][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0
[  902.913576][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  902.925622][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1
[  902.948237][ T6125] veth1_macvtap: left promiscuous mode
[  902.954184][ T6125] veth0_macvtap: left promiscuous mode
[  902.959928][ T6125] veth1_vlan: left promiscuous mode
[  902.966055][ T6125] veth0_vlan: left promiscuous mode
[  903.117968][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'.
[  903.673949][ T6125] team0 (unregistering): Port device team_slave_1 removed
[  904.006353][ T6125] team0 (unregistering): Port device team_slave_0 removed
[  904.884289][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15
[  905.154888][T11497] bridge0: port 1(bridge_slave_0) entered blocking state
[  905.170195][T11497] bridge0: port 1(bridge_slave_0) entered disabled state
[  905.178136][T11497] bridge_slave_0: entered allmulticast mode
[  905.199356][T11497] bridge_slave_0: entered promiscuous mode
[  905.212039][T11497] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.219196][T11497] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.227639][T11497] bridge_slave_1: entered allmulticast mode
[  905.254722][T11497] bridge_slave_1: entered promiscuous mode
[  905.482799][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.492091][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.558804][T11497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  905.575379][T11497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  905.714387][T11497] team0: Port device team_slave_0 added
[  905.725551][T11497] team0: Port device team_slave_1 added
[  905.885922][ T6125] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.910454][T11497] batman_adv: batadv0: Adding interface: batadv_slave_0
[  905.918432][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  905.945194][T11497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  905.959721][T11497] batman_adv: batadv0: Adding interface: batadv_slave_1
[  905.970371][T11497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  906.057297][T11497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  908.828218][ T6125] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.960631][T10488] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  912.972771][T10488] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  912.984564][T10488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  913.001293][T10488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  913.012941][T10488] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  914.157214][ T6125] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.655437][T11497] hsr_slave_0: entered promiscuous mode
[  914.663177][T11497] hsr_slave_1: entered promiscuous mode
[  914.671729][T11497] debugfs: 'hsr0' already exists in 'hsr'
[  914.677942][T11497] Cannot create hsr debugfs directory
[  915.132837][T10488] Bluetooth: hci1: command tx timeout
[  916.642924][T11674] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  916.733174][T11697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.887'.
[  917.229983][T11674] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  917.239479][T10488] Bluetooth: hci1: command 0x041b tx timeout
[  917.499154][T11674] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  917.528958][T11681] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  917.546064][T11681] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  917.565541][T11681] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  917.573515][T11674] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  917.772772][T11681] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  917.850826][ T6125] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.489160][T11681] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  918.522883][T11681] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  918.617617][T11681] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  918.735828][T11681] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  918.811929][T11681] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  918.867835][T11681] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  919.600209][T10488] Bluetooth: hci0: command 0x0c1a tx timeout
[  919.606483][ T9011] Bluetooth: hci5: command 0x0405 tx timeout
[  919.918599][T11442] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  919.965749][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  920.553096][T10488] Bluetooth: hci6: command 0x0c1a tx timeout
[  920.870596][T10488] Bluetooth: hci1: command 0x041b tx timeout
[  921.327784][T11442] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  921.817884][T10488] Bluetooth: hci0: command 0x0c1a tx timeout
[  921.920765][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  921.978512][T11674] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  921.980710][T11442] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  922.004146][T11674] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  922.057341][T11674] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  922.113368][T11674] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  922.122036][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  922.206310][T11674] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  922.259234][T11674] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  922.362261][T11442] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  922.953070][T10488] Bluetooth: hci1: command 0x041b tx timeout
[  923.103101][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  923.808424][T11674] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  923.829886][T11674] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  923.905405][ T6125] bridge_slave_1: left allmulticast mode
[  923.947957][ T6125] bridge_slave_1: left promiscuous mode
[  923.974844][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state
[  924.099226][ T6125] bridge_slave_0: left allmulticast mode
[  924.126548][ T6125] bridge_slave_0: left promiscuous mode
[  924.158430][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[  925.393685][ T6125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  925.491363][ T6125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  925.540491][ T6125] bond0 (unregistering): Released all slaves
[  931.049657][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  931.116271][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  931.282719][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'.
[  931.362712][ T6125] hsr_slave_0: left promiscuous mode
[  931.413016][ T6125] hsr_slave_1: left promiscuous mode
[  931.442091][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  931.479302][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_0
[  932.184667][ T6125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  932.215676][ T6125] batman_adv: batadv0: Removing interface: batadv_slave_1
[  932.266993][ T6125] veth1_macvtap: left promiscuous mode
[  932.289644][ T6125] veth0_macvtap: left promiscuous mode
[  932.306889][ T6125] veth1_vlan: left promiscuous mode
[  932.330911][ T6125] veth0_vlan: left promiscuous mode
[  933.195016][T11818] tmpfs: Unknown parameter 'grpquo'
[  934.107475][ T6125] team0 (unregistering): Port device team_slave_1 removed
[  936.272766][ T6125] team0 (unregistering): Port device team_slave_0 removed
[  937.505100][T11832] blktrace: Concurrent blktraces are not allowed on loop6
[  939.455815][T11442] 8021q: adding VLAN 0 to HW filter on device bond0
[  939.736865][T11497] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  939.910630][T11497] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  940.022516][T11442] 8021q: adding VLAN 0 to HW filter on device team0
[  940.058020][T11497] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  940.111139][T11497] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  940.143946][T11497] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  940.208897][T11497] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  940.328294][T11497] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  940.379328][T11497] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  940.395374][T10489] bridge0: port 1(bridge_slave_0) entered blocking state
[  940.402517][T10489] bridge0: port 1(bridge_slave_0) entered forwarding state
[  940.513912][T10489] bridge0: port 2(bridge_slave_1) entered blocking state
[  940.521112][T10489] bridge0: port 2(bridge_slave_1) entered forwarding state
[  941.897619][ T5281] 8021q: adding VLAN 0 to HW filter on device eth14
[  942.021243][T11667] bridge0: port 1(bridge_slave_0) entered blocking state
[  942.056577][T11667] bridge0: port 1(bridge_slave_0) entered disabled state
[  942.079452][T11667] bridge_slave_0: entered allmulticast mode
[  942.093144][T11667] bridge_slave_0: entered promiscuous mode
[  942.148455][T11667] bridge0: port 2(bridge_slave_1) entered blocking state
[  943.056142][T11667] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.066131][T11667] bridge_slave_1: entered allmulticast mode
[  943.077748][T11667] bridge_slave_1: entered promiscuous mode
[  943.338829][T11667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  943.420015][T11667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  943.679799][T11667] team0: Port device team_slave_0 added
[  943.734398][T11667] team0: Port device team_slave_1 added
[  945.803240][ T9011] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  945.814945][ T9011] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  945.823395][ T9011] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  945.841775][ T9011] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  945.850102][ T9011] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  945.931346][T11667] batman_adv: batadv0: Adding interface: batadv_slave_0
[  945.958215][T10488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  945.975110][T10488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  945.986640][T10488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  945.997967][T10488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  946.005055][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  946.005090][T11667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  946.017028][T11667] batman_adv: batadv0: Adding interface: batadv_slave_1
[  946.057328][T10488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  946.379051][T11667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  946.910894][T11667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  947.496023][T11667] hsr_slave_0: entered promiscuous mode
[  947.532702][T11667] hsr_slave_1: entered promiscuous mode
[  947.574837][T11667] debugfs: 'hsr0' already exists in 'hsr'
[  947.615450][T11667] Cannot create hsr debugfs directory
[  948.151281][T10488] Bluetooth: hci3: command tx timeout
[  949.145906][ T9011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  949.160529][ T9011] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  949.172665][ T9011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  949.190506][ T9011] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  949.202521][ T9011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  950.321220][T10488] Bluetooth: hci3: command tx timeout
[  951.411201][T10488] Bluetooth: hci0: command tx timeout
[  952.391436][T10488] Bluetooth: hci3: command tx timeout
[  955.044991][T10488] Bluetooth: hci0: command tx timeout
[  955.050722][T10488] Bluetooth: hci3: command tx timeout
[  957.292800][ T9011] Bluetooth: hci0: command tx timeout
[  958.928656][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13
[  959.398942][ T9011] Bluetooth: hci0: command tx timeout
[  961.613904][ T3292] bridge_slave_1: left allmulticast mode
[  961.633496][ T3292] bridge_slave_1: left promiscuous mode
[  961.672565][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state
[  961.702023][ T3292] bridge_slave_0: left allmulticast mode
[  961.725805][ T3292] bridge_slave_0: left promiscuous mode
[  961.750068][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state
[  962.241920][ T3292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  962.285097][ T3292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  962.574550][ T3292] bond0 (unregistering): Released all slaves
[  964.284448][ T3292] hsr_slave_0: left promiscuous mode
[  964.298368][ T3292] hsr_slave_1: left promiscuous mode
[  964.348914][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  964.437581][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  967.914030][ T5626] Bluetooth: hci0: command 0x0405 tx timeout
[  968.560522][ T3292] team0 (unregistering): Port device team_slave_1 removed
[  968.625457][ T3292] team0 (unregistering): Port device team_slave_0 removed
[  969.291839][T12005] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  969.298196][T12005] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  969.540990][T12005] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  969.709914][T12005] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  969.769327][T12005] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  972.051233][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  972.057334][ T5626] Bluetooth: hci0: command 0x0405 tx timeout
[  972.109559][T12005] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  972.451653][T11890] bridge0: port 1(bridge_slave_0) entered blocking state
[  972.497956][T11890] bridge0: port 1(bridge_slave_0) entered disabled state
[  972.515170][T11890] bridge_slave_0: entered allmulticast mode
[  972.552475][T11890] bridge_slave_0: entered promiscuous mode
[  972.883460][ T9011] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  972.897093][ T9011] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  972.917291][ T9011] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  972.932493][T11890] bridge0: port 2(bridge_slave_1) entered blocking state
[  972.947038][ T9011] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  972.956581][ T9011] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  972.975592][T11890] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.072508][ T9011] Bluetooth: hci0: command 0x0405 tx timeout
[  974.074271][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  974.185300][T11890] bridge_slave_1: entered allmulticast mode
[  974.576034][T11890] bridge_slave_1: entered promiscuous mode
[  975.010140][T11890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  975.033721][ T5626] Bluetooth: hci6: command tx timeout
[  975.076529][T11890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  975.553596][T11890] team0: Port device team_slave_0 added
[  976.045186][T11890] team0: Port device team_slave_1 added
[  976.153105][ T5626] Bluetooth: hci0: command 0x0405 tx timeout
[  976.231707][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  976.624556][ T5281] 8021q: adding VLAN 0 to HW filter on device eth15
[  976.648173][T11890] batman_adv: batadv0: Adding interface: batadv_slave_0
[  976.675173][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  976.782784][T11890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  976.837117][T11890] batman_adv: batadv0: Adding interface: batadv_slave_1
[  976.861243][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  976.913462][T11890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  977.105681][ T5781] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  977.121716][ T5626] Bluetooth: hci6: command tx timeout
[  977.711697][ T5781] usb 3-1: Using ep0 maxpacket: 32
[  977.727348][ T5781] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  977.771639][ T5781] usb 3-1: config 0 interface 0 has no altsetting 0
[  977.779751][ T5781] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  977.791396][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.815964][ T5781] usb 3-1: config 0 descriptor??
[  978.070834][T11890] hsr_slave_0: entered promiscuous mode
[  978.116347][T11890] hsr_slave_1: entered promiscuous mode
[  978.130053][T11890] debugfs: 'hsr0' already exists in 'hsr'
[  978.144758][T11890] Cannot create hsr debugfs directory
[  978.451440][T12070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  978.456451][ T5781] usbhid 3-1:0.0: can't add hid device: -71
[  978.595989][ T5781] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  978.945163][ T5781] usb 3-1: USB disconnect, device number 30
[  979.219542][ T5626] Bluetooth: hci6: command tx timeout
[  981.346196][ T9011] Bluetooth: hci6: command tx timeout
[  983.076800][T11919] bridge0: port 1(bridge_slave_0) entered blocking state
[  983.117541][T11919] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.146996][T11919] bridge_slave_0: entered allmulticast mode
[  983.166347][T11919] bridge_slave_0: entered promiscuous mode
[  983.214766][T11919] bridge0: port 2(bridge_slave_1) entered blocking state
[  983.222310][T11919] bridge0: port 2(bridge_slave_1) entered disabled state
[  983.233121][T11919] bridge_slave_1: entered allmulticast mode
[  983.262295][T12086] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  983.268421][T12086] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  983.276231][T11919] bridge_slave_1: entered promiscuous mode
[  983.294845][T12086] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  983.604301][T12086] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  983.638229][T12086] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  984.719118][T11919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  984.766879][T11919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  984.829599][ T3292] bridge_slave_1: left allmulticast mode
[  984.841289][ T3292] bridge_slave_1: left promiscuous mode
[  984.869303][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state
[  984.904118][ T3292] bridge_slave_0: left allmulticast mode
[  984.930067][ T3292] bridge_slave_0: left promiscuous mode
[  984.948764][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state
[  985.351359][T10488] Bluetooth: hci0: command 0x0405 tx timeout
[  985.357621][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  985.363792][ T9011] Bluetooth: hci6: command 0x0405 tx timeout
[  985.418162][ T3292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  985.546676][ T3292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  985.845258][ T3292] bond0 (unregistering): Released all slaves
[  986.227292][ T5281] 8021q: adding VLAN 0 to HW filter on device eth16
[  987.380343][T11919] team0: Port device team_slave_0 added
[  987.426810][ T3292] hsr_slave_0: left promiscuous mode
[  987.434896][ T9011] Bluetooth: hci6: command 0x0405 tx timeout
[  987.571357][ T3292] hsr_slave_1: left promiscuous mode
[  988.145964][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_0
[  988.174399][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_1
[  989.559463][ T5626] Bluetooth: hci6: command 0x0405 tx timeout
[  991.111004][ T3292] team0 (unregistering): Port device team_slave_1 removed
[  991.189340][ T3292] team0 (unregistering): Port device team_slave_0 removed
[  991.594521][ T9011] Bluetooth: hci6: command 0x0405 tx timeout
[  991.746562][T11919] team0: Port device team_slave_1 added
[  992.073317][T12150] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  992.117613][T12150] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  992.147156][T12150] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  992.233621][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  992.240901][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  992.279613][T11919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  992.342653][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  992.406466][T11919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  992.462042][ T5634] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  992.641150][ T5634] usb 4-1: Using ep0 maxpacket: 16
[  992.675449][T11919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  992.677250][ T5634] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  992.698163][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  992.737667][ T5634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  992.765159][ T5634] usb 4-1: Product: syz
[  992.799854][ T5634] usb 4-1: Manufacturer: syz
[  992.836796][T11919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  992.848332][ T5634] usb 4-1: SerialNumber: syz
[  993.141652][ T5634] usb 4-1: config 0 descriptor??
[  993.181815][ T9575] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  993.375456][ T5634] gspca_main: spca508-2.14.0 probing 041e:4018
[  993.454574][ T9575] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  993.542908][ T5634] gspca_spca508: reg_read err -32
[  993.559970][ T5634] gspca_spca508: reg_read err -32
[  993.566609][ T9575] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  993.591760][ T5634] gspca_spca508: reg_read err -32
[  993.605765][ T9575] usb 3-1: config 220 has no interface number 2
[  993.612856][ T5634] gspca_spca508: reg_read err -32
[  995.710390][ T5626] Bluetooth: hci6: command 0x0405 tx timeout
[  995.716676][ T5626] Bluetooth: hci0: command 0x0405 tx timeout
[  995.718550][ T5634] gspca_spca508: reg_read err -32
[  995.722798][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout
[  995.760121][ T9575] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  995.949484][ T5634] gspca_spca508: reg write: error -71
[  995.958266][ T9575] usb 3-1: config 220 interface 0 has no altsetting 0
[  995.975955][ T5634] spca508 4-1:0.0: probe with driver spca508 failed with error -71
[  995.984207][ T9575] usb 3-1: config 220 interface 76 has no altsetting 0
[  996.020157][ T9575] usb 3-1: config 220 interface 1 has no altsetting 0
[  996.036007][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[  996.057781][ T5634] usb 4-1: USB disconnect, device number 27
[  996.083269][ T9575] usb 3-1: string descriptor 0 read error: -71
[  996.122884][ T9575] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  996.172245][T12174] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  996.183572][ T9575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.213998][T12174] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  996.276834][ T9575] usb 3-1: can't set config #220, error -71
[  996.316795][T12174] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  996.331975][ T9575] usb 3-1: USB disconnect, device number 31
[  996.368586][T12174] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  996.418706][T12174] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  996.446754][T12174] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  996.686260][T11919] hsr_slave_0: entered promiscuous mode
[  996.722084][T11919] hsr_slave_1: entered promiscuous mode
[  996.750482][T11919] debugfs: 'hsr0' already exists in 'hsr'
[  996.766031][T11919] Cannot create hsr debugfs directory
[  999.532664][T12036] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.581943][T12036] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.593085][T12036] bridge_slave_0: entered allmulticast mode
[  999.637123][T12036] bridge_slave_0: entered promiscuous mode
[  999.833334][T12036] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.919216][T12036] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.985273][T12036] bridge_slave_1: entered allmulticast mode
[ 1000.090658][T12036] bridge_slave_1: entered promiscuous mode
[ 1000.936860][T12036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1000.997647][T12036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1001.101216][ T5781] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1001.281249][ T5781] usb 3-1: Using ep0 maxpacket: 16
[ 1001.307534][ T5781] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1001.333975][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.361162][ T5781] usb 3-1: Product: syz
[ 1001.381181][ T5781] usb 3-1: Manufacturer: syz
[ 1001.395781][ T5781] usb 3-1: SerialNumber: syz
[ 1001.420298][ T5781] usb 3-1: config 0 descriptor??
[ 1001.461599][ T5781] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1001.499013][T12036] team0: Port device team_slave_0 added
[ 1001.819605][T12036] team0: Port device team_slave_1 added
[ 1001.842913][ T5781] gspca_spca508: reg_read err -32
[ 1001.856099][ T5781] gspca_spca508: reg_read err -32
[ 1001.877924][ T5781] gspca_spca508: reg_read err -32
[ 1001.897856][ T5781] gspca_spca508: reg_read err -32
[ 1004.556221][ T5781] gspca_spca508: reg_read err -32
[ 1004.572631][ T5781] gspca_spca508: reg write: error -71
[ 1004.578429][ T5781] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[ 1004.593333][ T5781] usb 3-1: USB disconnect, device number 32
[ 1005.618865][T12036] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1005.679675][T12036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1005.796335][T12036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1005.965167][T12036] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1006.011127][T12036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1006.106855][T12036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1006.234947][T12277] netlink: 'syz.8.982': attribute type 23 has an invalid length.
[ 1009.019666][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1009.030326][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1009.041930][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1009.056295][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1009.065722][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1009.539186][T12036] hsr_slave_0: entered promiscuous mode
[ 1009.615262][T12036] hsr_slave_1: entered promiscuous mode
[ 1009.623912][T12036] debugfs: 'hsr0' already exists in 'hsr'
[ 1009.629717][T12036] Cannot create hsr debugfs directory
[ 1009.643523][ T9011] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1009.655681][ T9011] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1009.666713][ T9011] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1009.684645][ T9011] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1009.694397][ T9011] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1009.869552][ T3292] bridge_slave_1: left allmulticast mode
[ 1009.875315][ T3292] bridge_slave_1: left promiscuous mode
[ 1009.881114][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1009.980185][ T3292] bridge_slave_0: left allmulticast mode
[ 1010.015539][ T3292] bridge_slave_0: left promiscuous mode
[ 1010.046133][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.230594][T12294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1010.634513][T12297] netlink: 'syz.3.984': attribute type 2 has an invalid length.
[ 1011.135432][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1011.147713][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1011.156751][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1011.167235][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1011.176575][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1011.266922][ T3292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1011.284907][ T3292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1011.316197][ T3292] bond0 (unregistering): Released all slaves
[ 1011.861224][ T9011] Bluetooth: hci1: command tx timeout
[ 1013.304977][ T9011] Bluetooth: hci3: command tx timeout
[ 1013.584454][ T3292] hsr_slave_0: left promiscuous mode
[ 1013.639526][ T3292] hsr_slave_1: left promiscuous mode
[ 1013.677953][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1013.727402][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1013.991381][ T9011] Bluetooth: hci1: command tx timeout
[ 1013.991905][ T8799] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[ 1014.011399][ T9669] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1014.120707][ T3292] team0 (unregistering): Port device team_slave_1 removed
[ 1014.158369][ T3292] team0 (unregistering): Port device team_slave_0 removed
[ 1014.181575][ T9669] usb 3-1: Using ep0 maxpacket: 16
[ 1014.204448][ T9669] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1014.209750][ T8799] usb 4-1: not running at top speed; connect to a high speed hub
[ 1014.230841][ T8799] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1014.231290][ T9669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1014.255995][ T8799] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1014.283812][ T8799] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[ 1014.286144][ T9669] usb 3-1: Product: syz
[ 1014.303350][ T8799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1014.313542][ T9669] usb 3-1: Manufacturer: syz
[ 1014.321575][ T8799] usb 4-1: Product: syz
[ 1014.331425][ T9669] usb 3-1: SerialNumber: syz
[ 1014.332742][ T8799] usb 4-1: Manufacturer: syz
[ 1014.357695][ T8799] usb 4-1: SerialNumber: syz
[ 1014.360238][ T9669] usb 3-1: config 0 descriptor??
[ 1014.397252][ T8799] oti6858 4-1:1.0: oti6858 converter detected
[ 1014.398148][ T9669] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1014.435374][ T8799] usb 4-1: oti6858 converter now attached to ttyUSB0
[ 1014.589099][ T9669] gspca_spca508: reg_read err -32
[ 1014.614681][ T9669] gspca_spca508: reg_read err -32
[ 1014.623382][ T9669] gspca_spca508: reg_read err -32
[ 1014.653802][ T9669] gspca_spca508: reg_read err -32
[ 1014.663032][ T9669] gspca_spca508: reg_read err -32
[ 1016.850584][ T9011] Bluetooth: hci3: command tx timeout
[ 1016.851036][ T5626] Bluetooth: hci1: command tx timeout
[ 1016.863703][T12320] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90
[ 1017.735780][ T9669] gspca_spca508: reg write: error -71
[ 1017.781624][ T9669] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[ 1017.838965][ T5634] usb 4-1: USB disconnect, device number 28
[ 1017.839041][ T9669] usb 3-1: USB disconnect, device number 33
[ 1017.940722][ T5634] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[ 1017.996122][ T5634] oti6858 4-1:1.0: device disconnected
[ 1018.854538][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'.
[ 1018.918254][ T9011] Bluetooth: hci1: command tx timeout
[ 1018.924469][ T5626] Bluetooth: hci3: command tx timeout
[ 1019.527853][T12347] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1019.598919][T12347] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1019.952483][T12347] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1019.989305][T12347] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1024.543611][T12395] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.998'.
[ 1026.901517][ T8799] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1027.102960][ T8799] usb 4-1: Using ep0 maxpacket: 16
[ 1027.123975][ T8799] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1027.178466][ T8799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.215995][ T8799] usb 4-1: Product: syz
[ 1027.243287][ T8799] usb 4-1: Manufacturer: syz
[ 1027.277436][ T8799] usb 4-1: SerialNumber: syz
[ 1027.381997][ T8799] usb 4-1: config 0 descriptor??
[ 1027.444001][ T8799] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1027.625424][ T8799] gspca_spca508: reg_read err -32
[ 1027.655697][ T8799] gspca_spca508: reg_read err -32
[ 1027.691422][ T8799] gspca_spca508: reg_read err -32
[ 1027.728779][ T8799] gspca_spca508: reg_read err -32
[ 1029.846464][ T8799] gspca_spca508: reg_read err -32
[ 1029.902549][ T8799] gspca_spca508: reg write: error -71
[ 1030.059142][ T8799] spca508 4-1:0.0: probe with driver spca508 failed with error -71
[ 1030.120915][ T8799] usb 4-1: USB disconnect, device number 29
[ 1030.288526][ T3292] bridge_slave_1: left allmulticast mode
[ 1030.296982][ T3292] bridge_slave_1: left promiscuous mode
[ 1030.320700][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1030.360009][ T3292] bridge_slave_0: left allmulticast mode
[ 1030.388592][ T3292] bridge_slave_0: left promiscuous mode
[ 1030.398947][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1031.164853][ T3292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1031.212268][ T3292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1031.234523][ T3292] bond0 (unregistering): Released all slaves
[ 1031.546944][ T3292] hsr_slave_0: left promiscuous mode
[ 1031.564836][ T3292] hsr_slave_1: left promiscuous mode
[ 1031.586169][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1031.607760][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1032.303690][ T3292] team0 (unregistering): Port device team_slave_1 removed
[ 1032.328387][ T9011] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1032.341273][ T9011] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1032.349654][ T9011] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1032.364310][ T3292] team0 (unregistering): Port device team_slave_0 removed
[ 1032.365278][ T9011] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1032.384299][ T9011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1033.635657][T12282] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1033.669203][T12282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.686894][T12282] bridge_slave_0: entered allmulticast mode
[ 1033.710283][T12282] bridge_slave_0: entered promiscuous mode
[ 1033.809311][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1033.820554][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1033.835850][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1033.853645][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1033.867141][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1033.936590][T12282] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1033.955899][T12282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1033.987261][T12282] bridge_slave_1: entered allmulticast mode
[ 1034.032985][T12282] bridge_slave_1: entered promiscuous mode
[ 1034.379732][T12487] netlink: 'syz.3.1008': attribute type 23 has an invalid length.
[ 1034.420384][T12482] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1009'.
[ 1035.922113][ T9011] Bluetooth: hci0: command tx timeout
[ 1035.974234][T12282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1036.120838][T12298] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1036.144074][T12298] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1036.167313][T12298] bridge_slave_0: entered allmulticast mode
[ 1036.185578][T12298] bridge_slave_0: entered promiscuous mode
[ 1036.206578][T12282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1036.441972][T12298] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1036.470360][T12298] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1036.510634][T12298] bridge_slave_1: entered allmulticast mode
[ 1036.624113][T12505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1037.165323][T12298] bridge_slave_1: entered promiscuous mode
[ 1037.468990][T12282] team0: Port device team_slave_0 added
[ 1037.495955][T12509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1037.991426][ T9011] Bluetooth: hci0: command tx timeout
[ 1038.022985][T12298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1038.070840][T12282] team0: Port device team_slave_1 added
[ 1038.125162][T12298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1039.812226][T12282] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1039.830194][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1041.993868][ T9011] Bluetooth: hci0: command tx timeout
[ 1042.138223][T12282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1042.229693][T12282] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1042.259611][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1042.372696][T12282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1042.433967][T12298] team0: Port device team_slave_0 added
[ 1042.594424][T12298] team0: Port device team_slave_1 added
[ 1043.490614][T12298] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1043.541160][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1043.622575][T12298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1043.746739][T12282] hsr_slave_0: entered promiscuous mode
[ 1043.766299][T12282] hsr_slave_1: entered promiscuous mode
[ 1043.787240][T12282] debugfs: 'hsr0' already exists in 'hsr'
[ 1043.810561][T12282] Cannot create hsr debugfs directory
[ 1043.886800][T12298] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1043.912783][T12298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1044.013988][T12298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1044.073069][ T9011] Bluetooth: hci0: command tx timeout
[ 1045.331377][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'.
[ 1045.690309][ T5281] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1045.884342][T12298] hsr_slave_0: entered promiscuous mode
[ 1045.913730][T12298] hsr_slave_1: entered promiscuous mode
[ 1045.935902][T12298] debugfs: 'hsr0' already exists in 'hsr'
[ 1045.958149][T12298] Cannot create hsr debugfs directory
[ 1049.560575][ T3292] bridge_slave_1: left allmulticast mode
[ 1049.566788][ T3292] bridge_slave_1: left promiscuous mode
[ 1049.601233][ T5352] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1049.625991][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.673372][ T3292] bridge_slave_0: left allmulticast mode
[ 1049.687994][ T3292] bridge_slave_0: left promiscuous mode
[ 1049.706996][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.773833][ T3292] bridge_slave_1: left allmulticast mode
[ 1049.786202][ T3292] bridge_slave_1: left promiscuous mode
[ 1049.802287][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1049.814977][ T5352] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[ 1049.827800][ T5352] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1049.839689][ T5352] usb 9-1: config 220 has no interface number 2
[ 1049.848391][ T3292] bridge_slave_0: left allmulticast mode
[ 1049.854767][ T3292] bridge_slave_0: left promiscuous mode
[ 1049.860406][ T5352] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1049.881259][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1049.898026][ T5352] usb 9-1: config 220 interface 0 has no altsetting 0
[ 1049.912800][ T5352] usb 9-1: config 220 interface 76 has no altsetting 0
[ 1051.123625][ T5352] usb 9-1: config 220 interface 1 has no altsetting 0
[ 1051.135125][ T5352] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1051.144990][ T5352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.153761][ T5352] usb 9-1: Product: syz
[ 1051.166975][ T5352] usb 9-1: Manufacturer: syz
[ 1051.171967][ T5352] usb 9-1: SerialNumber: syz
[ 1052.226010][ T5352] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1052.244489][ T5352] uvcvideo 9-1:220.0: No valid video chain found.
[ 1052.286622][ T5352] usb 9-1: selecting invalid altsetting 0
[ 1052.465689][ T3292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1052.517062][ T5352] usb 9-1: selecting invalid altsetting 0
[ 1052.568453][ T5352] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[ 1052.754488][ T5352] usb 9-1: USB disconnect, device number 2
[ 1052.798557][ T3292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1052.978432][ T3292] bond0 (unregistering): Released all slaves
[ 1053.288220][ T3292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1053.309480][ T3292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1053.349077][ T3292] bond0 (unregistering): Released all slaves
[ 1053.391253][ T5352] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1053.553087][ T5352] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1053.568295][ T5352] usb 9-1: string descriptor 0 read error: -22
[ 1053.576656][ T5352] usb 9-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40
[ 1053.597359][ T5352] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.673729][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.682392][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 1053.760361][ T3292] hsr_slave_0: left promiscuous mode
[ 1053.769407][ T3292] hsr_slave_1: left promiscuous mode
[ 1053.776588][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1053.786908][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1053.816695][ T3292] hsr_slave_0: left promiscuous mode
[ 1053.830958][ T3292] hsr_slave_1: left promiscuous mode
[ 1053.850009][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1053.872774][ T3292] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1054.138207][ T5352] topre 0003:0853:0148.0003: unexpected long global item
[ 1056.678152][ T5352] topre 0003:0853:0148.0003: probe with driver topre failed with error -22
[ 1056.754659][ T5352] usb 9-1: USB disconnect, device number 3
[ 1057.740531][ T3292] team0 (unregistering): Port device team_slave_1 removed
[ 1057.955846][ T3292] team0 (unregistering): Port device team_slave_0 removed
[ 1058.990267][ T3292] team0 (unregistering): Port device team_slave_1 removed
[ 1059.024114][ T3292] team0 (unregistering): Port device team_slave_0 removed
[ 1059.700116][T12616] netlink: 'syz.8.1036': attribute type 2 has an invalid length.
[ 1059.901390][ T8799] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1060.050224][T12460] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.059796][T12460] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1060.072153][T12460] bridge_slave_0: entered allmulticast mode
[ 1060.074047][ T8799] usb 4-1: Using ep0 maxpacket: 8
[ 1060.093136][ T8799] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1060.107623][T12460] bridge_slave_0: entered promiscuous mode
[ 1060.120498][ T8799] usb 4-1: config 0 has no interface number 0
[ 1060.135801][ T8799] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1060.137575][T12460] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.175269][ T8799] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1060.184947][ T8799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.205220][T12460] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1060.217055][T12460] bridge_slave_1: entered allmulticast mode
[ 1060.226031][ T8799] usb 4-1: config 0 descriptor??
[ 1060.251516][ T8799] iowarrior 4-1:0.1: no interrupt-in endpoint found
[ 1060.251664][T12460] bridge_slave_1: entered promiscuous mode
[ 1060.415676][T12460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1060.451472][T12460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1060.620242][T12635] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1061.474487][T12460] team0: Port device team_slave_0 added
[ 1061.556959][T12460] team0: Port device team_slave_1 added
[ 1061.667136][T12460] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1061.674161][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1061.707090][T12460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1061.720050][T12460] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1061.727327][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1061.756252][T12460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1061.841467][ T8799] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1061.877833][T12460] hsr_slave_0: entered promiscuous mode
[ 1061.885139][T12460] hsr_slave_1: entered promiscuous mode
[ 1061.891784][T12460] debugfs: 'hsr0' already exists in 'hsr'
[ 1061.897544][T12460] Cannot create hsr debugfs directory
[ 1062.011552][ T8799] usb 9-1: Using ep0 maxpacket: 16
[ 1062.028427][ T8799] usb 9-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1062.051328][ T8799] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.072166][ T8799] usb 9-1: Product: syz
[ 1062.096793][T10796] usb 4-1: USB disconnect, device number 30
[ 1062.096862][ T8799] usb 9-1: Manufacturer: syz
[ 1062.126223][ T8799] usb 9-1: SerialNumber: syz
[ 1062.171598][ T8799] usb 9-1: config 0 descriptor??
[ 1062.223366][ T8799] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1062.408173][ T8799] gspca_spca508: reg_read err -32
[ 1062.419065][ T8799] gspca_spca508: reg_read err -32
[ 1062.425520][ T8799] gspca_spca508: reg_read err -32
[ 1062.431619][ T8799] gspca_spca508: reg_read err -32
[ 1064.588672][ T8799] gspca_spca508: reg_read err -32
[ 1064.595355][ T8799] gspca_spca508: reg write: error -71
[ 1064.600809][ T8799] spca508 9-1:0.0: probe with driver spca508 failed with error -71
[ 1064.609307][T12605] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1064.629098][ T8799] usb 9-1: USB disconnect, device number 4
[ 1064.888704][T12282] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1064.932643][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1064.955938][T12282] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1065.007914][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1065.029593][T12298] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1065.068422][T12298] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1065.523532][T12298] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1065.579390][T12298] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1065.601314][ T5625] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1065.698863][T12282] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1065.744139][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1065.767593][T12282] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1065.791259][ T5625] usb 4-1: Using ep0 maxpacket: 8
[ 1065.804306][ T5625] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1065.821270][ T5625] usb 4-1: config 0 has no interface number 0
[ 1065.824028][T12282] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1065.837643][ T5625] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1065.870162][T12298] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1065.884930][ T5625] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1065.903617][T12298] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1065.911789][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.986722][T12298] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1066.012000][T12298] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1066.038154][ T5625] usb 4-1: config 0 descriptor??
[ 1066.068541][ T5625] iowarrior 4-1:0.1: no interrupt-in endpoint found
[ 1066.163494][T12669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1066.386869][T12687] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1067.464492][T12460] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1067.514509][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1067.543554][T12460] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1067.576396][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1067.598628][T12460] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1067.621707][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1067.639918][T12460] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1067.670432][T10796] usb 4-1: USB disconnect, device number 31
[ 1067.706303][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1067.845543][T12298] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1070.886971][T12298] 8021q: adding VLAN 0 to HW filter on device team0
[ 1071.091764][ T8799] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1071.269532][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1071.277697][ T8799] usb 3-1: Using ep0 maxpacket: 16
[ 1071.288200][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1071.297695][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1071.310794][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1071.324481][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1071.351485][ T8799] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[ 1071.371503][ T8799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.391824][ T8799] usb 3-1: Product: syz
[ 1071.399171][ T8799] usb 3-1: Manufacturer: syz
[ 1071.438582][ T8799] usb 3-1: SerialNumber: syz
[ 1071.460908][ T8799] usb 3-1: config 0 descriptor??
[ 1071.500255][ T8799] gspca_main: spca508-2.14.0 probing 041e:4018
[ 1071.577723][T12460] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1071.695088][ T8799] gspca_spca508: reg_read err -32
[ 1071.712720][ T8799] gspca_spca508: reg_read err -32
[ 1071.738319][ T8799] gspca_spca508: reg_read err -32
[ 1071.758752][ T8799] gspca_spca508: reg_read err -32
[ 1073.892963][ T9011] Bluetooth: hci1: command tx timeout
[ 1073.897329][ T8799] gspca_spca508: reg_read err -32
[ 1073.917885][ T8799] gspca_spca508: reg write: error -71
[ 1073.941890][ T8799] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[ 1074.098814][ T8799] usb 3-1: USB disconnect, device number 34
[ 1074.139958][T12460] 8021q: adding VLAN 0 to HW filter on device team0
[ 1074.252137][ T5625] usb 9-1: new full-speed USB device number 5 using dummy_hcd
[ 1074.433086][ T5625] usb 9-1: not running at top speed; connect to a high speed hub
[ 1074.477289][ T5625] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1074.549048][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1074.549441][ T5625] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1074.572972][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1074.592257][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1074.601002][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1074.608877][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1074.640924][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1074.648122][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1074.674877][ T5625] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[ 1074.696635][ T5625] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.740556][ T5625] usb 9-1: Product: syz
[ 1074.771613][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1074.778781][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1074.798320][ T5625] usb 9-1: Manufacturer: syz
[ 1074.813857][ T5625] usb 9-1: SerialNumber: syz
[ 1074.865782][ T5625] usb 9-1: can't set config #1, error -71
[ 1074.923866][ T5625] usb 9-1: USB disconnect, device number 5
[ 1075.913153][ T5626] Bluetooth: hci1: command tx timeout
[ 1076.277313][T12749] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1076.310915][T12749] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1076.479536][ T3360] bridge_slave_1: left allmulticast mode
[ 1076.514139][ T3360] bridge_slave_1: left promiscuous mode
[ 1076.532494][ T3360] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.559173][ T3360] bridge_slave_0: left allmulticast mode
[ 1076.574782][ T3360] bridge_slave_0: left promiscuous mode
[ 1076.588308][ T3360] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.631478][ T5626] Bluetooth: hci3: command tx timeout
[ 1076.870690][ T3360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1076.889258][ T3360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1076.927736][ T3360] bond0 (unregistering): Released all slaves
[ 1076.987528][T12749] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1077.048281][T12749] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1077.991330][    C1] ------------[ cut here ]------------
[ 1077.997079][    C1] workqueue: cannot queue hci_cmd_timeout on wq hci1
[ 1078.003769][    C1] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd4a/0x10a0, CPU#1: swapper/1/0
[ 1078.013182][    C1] Modules linked in:
[ 1078.017250][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1078.026184][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1078.036324][    C1] RIP: 0010:__queue_work+0xd66/0x10a0
[ 1078.041713][    C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 d6 de cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 64 b9 a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8
[ 1078.061322][    C1] RSP: 0018:ffffc90000a08bc8 EFLAGS: 00010046
[ 1078.067394][    C1] RAX: 1ffff1100b2ef94e RBX: dffffc0000000000 RCX: ffff88801dee8000
[ 1078.075364][    C1] RDX: ffff8880516e4170 RSI: ffffffff8ac27e80 RDI: ffffffff905ab930
[ 1078.083332][    C1] RBP: 0000000000000100 R08: ffffffff90578d37 R09: 1ffffffff20af1a6
[ 1078.091309][    C1] R10: dffffc0000000000 R11: ffffffff818de180 R12: 0000000000000008
[ 1078.099277][    C1] R13: ffff88805977ca58 R14: ffffffff905ab930 R15: ffff8880516e4170
[ 1078.107248][    C1] FS:  0000000000000000(0000) GS:ffff888125050000(0000) knlGS:0000000000000000
[ 1078.116178][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1078.122763][    C1] CR2: 00007fb7d4c17e9c CR3: 0000000077f74000 CR4: 0000000000350ef0
[ 1078.130746][    C1] Call Trace:
[ 1078.134024][    C1]  <IRQ>
[ 1078.136877][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1078.142271][    C1]  call_timer_fn+0x192/0x5e0
[ 1078.146866][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1078.152684][    C1]  ? call_timer_fn+0xd4/0x5e0
[ 1078.157370][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1078.162491][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.168136][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.173776][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[ 1078.178901][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1078.184723][    C1]  __run_timer_base+0x67e/0x8b0
[ 1078.189589][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.195248][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1078.200646][    C1]  ? ktime_get+0x1f5/0x220
[ 1078.205074][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.210713][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.216353][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.221997][    C1]  run_timer_softirq+0xb7/0x170
[ 1078.226863][    C1]  handle_softirqs+0x225/0x840
[ 1078.231639][    C1]  ? __irq_exit_rcu+0xca/0x220
[ 1078.236418][    C1]  __irq_exit_rcu+0xca/0x220
[ 1078.241012][    C1]  irq_exit_rcu+0x9/0x30
[ 1078.245260][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1078.250900][    C1]  </IRQ>
[ 1078.253827][    C1]  <TASK>
[ 1078.256752][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1078.262740][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1078.268380][    C1] Code: fc 7e 02 e9 fe 7f 3f f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 ae 18 00 fb f4 <e9> d7 7f 3f f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1078.287990][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242
[ 1078.294072][    C1] RAX: 00000000039b6f91 RBX: ffffffff819b4450 RCX: 0000000080000001
[ 1078.302048][    C1] RDX: 0000000000000001 RSI: ffffffff8e22c5c1 RDI: ffffffff8c4bdc80
[ 1078.310023][    C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
[ 1078.317998][    C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
[ 1078.325973][    C1] R13: 1ffff11003bdd000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[ 1078.333950][    C1]  ? do_idle+0x2e0/0x540
[ 1078.338222][    C1]  default_idle+0x9/0x20
[ 1078.342473][    C1]  default_idle_call+0x72/0xb0
[ 1078.347250][    C1]  do_idle+0x2e0/0x540
[ 1078.351338][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1078.355951][    C1]  cpu_startup_entry+0x43/0x60
[ 1078.360728][    C1]  start_secondary+0x101/0x110
[ 1078.365505][    C1]  common_startup_64+0x13e/0x157
[ 1078.370474][    C1]  </TASK>
[ 1078.373490][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1078.380765][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 1078.389706][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1078.399762][    C1] Call Trace:
[ 1078.403040][    C1]  <IRQ>
[ 1078.405877][    C1]  vpanic+0x56c/0xa60
[ 1078.409890][    C1]  ? __pfx__printk+0x10/0x10
[ 1078.414502][    C1]  ? __pfx_vpanic+0x10/0x10
[ 1078.419019][    C1]  ? is_bpf_text_address+0x292/0x2b0
[ 1078.424316][    C1]  ? is_bpf_text_address+0x26/0x2b0
[ 1078.429536][    C1]  panic+0xc5/0xd0
[ 1078.433302][    C1]  ? __pfx_panic+0x10/0x10
[ 1078.437740][    C1]  ? common_startup_64+0x13e/0x157
[ 1078.442862][    C1]  __warn+0x315/0x4c0
[ 1078.446843][    C1]  ? __queue_work+0xd4a/0x10a0
[ 1078.451620][    C1]  ? __queue_work+0xd4a/0x10a0
[ 1078.456391][    C1]  __report_bug+0x276/0x570
[ 1078.460903][    C1]  ? __queue_work+0xd4a/0x10a0
[ 1078.465706][    C1]  ? __pfx___report_bug+0x10/0x10
[ 1078.470739][    C1]  ? __pfx_hci_cmd_timeout+0x10/0x10
[ 1078.476037][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.481673][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1078.486701][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.492337][    C1]  ? look_up_lock_class+0x57/0x110
[ 1078.497453][    C1]  ? register_lock_class+0x31/0x2e0
[ 1078.502660][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.508418][    C1]  report_bug_entry+0x19a/0x290
[ 1078.513275][    C1]  ? __queue_work+0xd66/0x10a0
[ 1078.518046][    C1]  ? __queue_work+0xd6b/0x10a0
[ 1078.522813][    C1]  handle_bug+0xce/0x200
[ 1078.527075][    C1]  exc_invalid_op+0x1a/0x50
[ 1078.531584][    C1]  asm_exc_invalid_op+0x1a/0x20
[ 1078.536465][    C1] RIP: 0010:__queue_work+0xd66/0x10a0
[ 1078.541848][    C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 d6 de cc 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 64 b9 a6 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8
[ 1078.561451][    C1] RSP: 0018:ffffc90000a08bc8 EFLAGS: 00010046
[ 1078.567520][    C1] RAX: 1ffff1100b2ef94e RBX: dffffc0000000000 RCX: ffff88801dee8000
[ 1078.575488][    C1] RDX: ffff8880516e4170 RSI: ffffffff8ac27e80 RDI: ffffffff905ab930
[ 1078.583456][    C1] RBP: 0000000000000100 R08: ffffffff90578d37 R09: 1ffffffff20af1a6
[ 1078.591424][    C1] R10: dffffc0000000000 R11: ffffffff818de180 R12: 0000000000000008
[ 1078.599391][    C1] R13: ffff88805977ca58 R14: ffffffff905ab930 R15: ffff8880516e4170
[ 1078.607365][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1078.613185][    C1]  ? __pfx_hci_cmd_timeout+0x10/0x10
[ 1078.618482][    C1]  ? __queue_work+0xd25/0x10a0
[ 1078.623265][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1078.628652][    C1]  call_timer_fn+0x192/0x5e0
[ 1078.633252][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1078.639064][    C1]  ? call_timer_fn+0xd4/0x5e0
[ 1078.643739][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1078.648853][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.654495][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.660130][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[ 1078.665247][    C1]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[ 1078.671063][    C1]  __run_timer_base+0x67e/0x8b0
[ 1078.675927][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.681579][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1078.686968][    C1]  ? ktime_get+0x1f5/0x220
[ 1078.691394][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.697028][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.702665][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1078.708308][    C1]  run_timer_softirq+0xb7/0x170
[ 1078.713170][    C1]  handle_softirqs+0x225/0x840
[ 1078.717943][    C1]  ? __irq_exit_rcu+0xca/0x220
[ 1078.722720][    C1]  __irq_exit_rcu+0xca/0x220
[ 1078.727317][    C1]  irq_exit_rcu+0x9/0x30
[ 1078.731561][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1078.737197][    C1]  </IRQ>
[ 1078.740118][    C1]  <TASK>
[ 1078.743041][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1078.749023][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1078.754655][    C1] Code: fc 7e 02 e9 fe 7f 3f f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 ae 18 00 fb f4 <e9> d7 7f 3f f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1078.774256][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242
[ 1078.780344][    C1] RAX: 00000000039b6f91 RBX: ffffffff819b4450 RCX: 0000000080000001
[ 1078.788331][    C1] RDX: 0000000000000001 RSI: ffffffff8e22c5c1 RDI: ffffffff8c4bdc80
[ 1078.796305][    C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b
[ 1078.804268][    C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000
[ 1078.812229][    C1] R13: 1ffff11003bdd000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[ 1078.820190][    C1]  ? do_idle+0x2e0/0x540
[ 1078.824440][    C1]  default_idle+0x9/0x20
[ 1078.828675][    C1]  default_idle_call+0x72/0xb0
[ 1078.833428][    C1]  do_idle+0x2e0/0x540
[ 1078.837494][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1078.842085][    C1]  cpu_startup_entry+0x43/0x60
[ 1078.846866][    C1]  start_secondary+0x101/0x110
[ 1078.851717][    C1]  common_startup_64+0x13e/0x157
[ 1078.856685][    C1]  </TASK>
[ 1078.859928][    C1] Kernel Offset: disabled
[ 1078.864239][    C1] Rebooting in 86400 seconds..