last executing test programs:

12m8.087829522s ago: executing program 1 (id=248):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100d}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0xc0000)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

12m7.80903239s ago: executing program 1 (id=252):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r2 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0)

12m7.474920907s ago: executing program 1 (id=256):
setreuid(0xffffffffffffffff, 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8000000001cb, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x2, 0x0, 0x0, @sint={0x7, 0x1ff}}]})
r5 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r5, 0x4})

12m3.936662363s ago: executing program 1 (id=274):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x51, 0x0, &(0x7f0000000200)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904fcee14db4241544716b9ea42231e63373a3e299531fd05dacf5bb18c3e6c807bc4b5d29a0ed834a6bd8c6f412bd3fca85921504f64d", 0x0, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100d}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0xc0000)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

12m3.136148459s ago: executing program 1 (id=279):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40001001, 0x100, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x4}}, 0x50)
chroot(&(0x7f0000000000)='./file0/file0\x00')
syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0x200000, 0xb2af, {0x0, 0x0, 0x0, 0xc, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x1000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

12m2.052729036s ago: executing program 1 (id=282):
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'})
sendmsg$nl_route_sched(r3, 0x0, 0x10)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)

11m44.427731459s ago: executing program 32 (id=282):
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'})
sendmsg$nl_route_sched(r3, 0x0, 0x10)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)

8m23.741085446s ago: executing program 2 (id=1327):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
tgkill(r0, r1, 0xffff)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r9 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\x00', 0xffffffffffffffff)
keyctl$read(0xb, r9, &(0x7f0000000780)=""/4096, 0x1000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd, 0xfa, 0x9, 0x40, 0x4d8, 0xf58b, 0xfaa9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10}}]}}, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xa0000)
poll(&(0x7f00000000c0)=[{r8, 0x3388}], 0x1, 0x800)

8m23.353094217s ago: executing program 2 (id=1328):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4)

8m23.117467559s ago: executing program 2 (id=1331):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
openat$kvm(0xffffffffffffff9c, 0x0, 0x141100, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737905310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, 0x0, 0x4004080)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
creat(&(0x7f00000002c0)='./file0\x00', 0x1)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000040)=0x7, 0x9, 0x0)
get_mempolicy(0x0, 0x0, 0x782, &(0x7f0000fff000/0x1000)=nil, 0x3)
mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0)

8m21.9221911s ago: executing program 2 (id=1332):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setitimer(0x1, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, r4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r5=>r1, 0x80, 0xff, 0x3})
ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000040)={0x1, 0x68c44b42})
keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0xa08}], 0x1)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)

8m20.684942319s ago: executing program 2 (id=1335):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000001100)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e1f}, 0x6e)
socket$xdp(0x2c, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

8m20.49761478s ago: executing program 2 (id=1337):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/13], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000000800000018110000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
syz_open_dev$usbfs(&(0x7f0000000180), 0x6, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x400000000024}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

6m50.017382932s ago: executing program 3 (id=1450):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528"], 0x200)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xd8, 0x29, 0x36, {0x5e, 0x17, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x966, 0x7, 0x1, 0x1]}}, @generic={0x8, 0x64, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff70"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x188}}], 0x1, 0x810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf778776b91c3e1da4690fe0506ba67577475dac7b5a6647454b002cdccb192445a0e2b4f79b91acb8cfb6bbbb83081c02ec544d20af0b521d102bedc65eeda06df41d160c2197a51325f28b8a789a6fa17d6eaa40f1e40dab9f427d85943241e191c78e6f552fcbf0050938e7b2511c3ee70e6749e1fe51991654e6aa47561590e8b7acf4f8b5ce9f0c90feb97c0ed1a5a08fdd", 0xe9}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1758194dc4f9774968f41354ff3b7d7f445a29938c18743b5d93c123c4a67c469d256d9f076c29593f9648b5a1bd4195a3d7059007458b7dcc193efed2bfc25fe4cf69d8cc14a45105d48307cb7b27e4938d9d0d3c60b47bf599136cac2f29f890845", 0xc3}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x8, 0x4d9e, 0x8)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6m48.156174988s ago: executing program 3 (id=1456):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000001100)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @flat=@binder={0x73622a85, 0xa}}, 0x0}}], 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e1f}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
close(0x3)
socket$xdp(0x2c, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

6m44.540069298s ago: executing program 3 (id=1460):
mkdir(&(0x7f0000000080)='./bus\x00', 0x51)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200), 0x8)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11})
write$binfmt_aout(r4, &(0x7f00000041c0)=ANY=[@ANYBLOB="3a6efef0317d6c847fd85586abeb5819f62844dd160ba40eea03dfc90a8c3184344e326aa17878fd107b6072bc9774ec1d74c5eb856ac55b4ba5cf66007ee19546e360e3268dd26dcf1b28c358c2390a568983d8720e2fb4f7c6dde27ae8840bac6a14348adcf6a62d561c7027d0def2e16add9b81433d682c557441c364804c41696f972d2ffed0f551d5214721740750ef7fb30165a2f0bea4", @ANYRESOCT=r4], 0xff2e)
r5 = syz_open_pts(r4, 0x0)
dup3(r5, r4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, 0x0)

6m41.777094854s ago: executing program 3 (id=1464):
r0 = socket$netlink(0x10, 0x3, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x93ea05013bd5580e)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x4048080)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
socket(0x840000000002, 0x3, 0x100)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000100)={0x0, &(0x7f0000000500)="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", 0x1000})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m39.920211083s ago: executing program 3 (id=1465):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e20000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000fff2000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700000000000fe80000000000000000000800000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e"], 0x104}}, 0x0)

6m37.760300667s ago: executing program 3 (id=1468):
socket$nl_crypto(0x10, 0x3, 0x15)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x40400)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xd4ba2000)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0xf441, 0x400, 0x3, 0x350}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

6m37.720038874s ago: executing program 4 (id=1469):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setitimer(0x1, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3)
add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, r4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r5=>r1, 0x80, 0xff, 0x3})
ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000040)={0x1, 0x68c44b42})
keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0xa08}], 0x1)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
ptrace(0x10, 0x1)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x0, "83e624170a2005004d5e9ac5be09e4bae4ffffffe900000000000000001300", <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)

6m35.84959176s ago: executing program 4 (id=1470):
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)

6m34.39922392s ago: executing program 4 (id=1474):
openat$dsp(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r0 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94)

6m33.524932897s ago: executing program 4 (id=1476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
syz_open_dev$loop(&(0x7f0000000700), 0x10, 0x202a80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$notify(r0, 0x402, 0x2)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
socket(0x200000000000011, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb080001400000000308000540000000001c0008800c00014000000000000001ff0c000240000000000000ae6014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, 'F\b1', 0x20, 0x6, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x1, 0x0, 0x8, 0x3, 0x2, 0x3ff, 0x0, 0x3, 0x2, 0x4, 0x3, 0x100, 0xffff, 0x1, 0x4e23, 0x4e24}}}}}}}}}, 0x0)

6m31.69080959s ago: executing program 4 (id=1479):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0xffffffff, 0xfffff7ff, 0x0, 0x83, 0xffffffff})
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000240)={0x1, 0x1, 0x2003, 0x16, 0x90, 0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r6}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

6m28.907352477s ago: executing program 4 (id=1482):
socket(0x2, 0x80805, 0x0)
socketpair(0x18, 0x5, 0x1, &(0x7f0000000100))
syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100024e9e094099041a102644010203010902"], 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
file_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x80000200, 0x4, 0x0, 0x0, 0x1}, 0x18, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r1 = syz_io_uring_setup(0x498, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, 0x0, &(0x7f0000000400)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
read(r4, 0x0, 0x0)
syz_io_uring_complete(r3)
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c1}, 0x90)
syz_io_uring_submit(0x0, r2, 0x0)
io_uring_enter(r1, 0x4be7, 0x4c3, 0x43, 0x0, 0x0)
r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$proc_mixer(r5, 0x0, 0x33)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$can_j1939(0x1d, 0x2, 0x7)

6m22.408967092s ago: executing program 33 (id=1468):
socket$nl_crypto(0x10, 0x3, 0x15)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x40400)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xd4ba2000)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0xf441, 0x400, 0x3, 0x350}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}})
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)

6m13.154840507s ago: executing program 34 (id=1482):
socket(0x2, 0x80805, 0x0)
socketpair(0x18, 0x5, 0x1, &(0x7f0000000100))
syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100024e9e094099041a102644010203010902"], 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
file_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x80000200, 0x4, 0x0, 0x0, 0x1}, 0x18, 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdf}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0)
r1 = syz_io_uring_setup(0x498, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, 0x0, &(0x7f0000000400)=<r2=>0x0)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
read(r4, 0x0, 0x0)
syz_io_uring_complete(r3)
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c1}, 0x90)
syz_io_uring_submit(0x0, r2, 0x0)
io_uring_enter(r1, 0x4be7, 0x4c3, 0x43, 0x0, 0x0)
r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$proc_mixer(r5, 0x0, 0x33)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$can_j1939(0x1d, 0x2, 0x7)

11.364104381s ago: executing program 5 (id=1880):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x8, 0x8180)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001140)={0x0, <r2=>0x0})
prlimit64(r2, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
fcntl$setlease(r1, 0x400, 0x1)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="dc010000160001002abd7000fcdbdf25000000000000000000000000000000007f0000010000000000000000000000004e2000024e2200000a00800032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d56c000000fc010000000000000000000000000000002000000000000081000000000000000000000000000080fdffffffffffffff010400000000000000080000000000004b0400000000000018120003000000000200000000000000690000000000000099b000000000000000000000000000800900000000040000030000002bbd7000023500000a00010702000000000000000000000005000000e40006007f000001050000000000000000000000ac1414aa0000000000000000000000004e2400024e2301000a0080c001000000", @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d53c00000020010000000000000000000000000001040000000000000016740000000000000900000000000000f7ffffffffffffffffffffff000000000200000000000000ff000000000000000900000000000000010000000000000004000000000000000700000000000000000000000000000087cb00000100"], 0x1dc}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0)
mprotect(&(0x7f000009a000/0x1000)=nil, 0x1000, 0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000018c0)={&(0x7f0000e86000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000a5a000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000c73000/0x3000)=nil, &(0x7f0000f8f000/0x1000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000cc1000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000a52000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000001"], 0x48)
socket$inet6_mptcp(0xa, 0x1, 0x106)

9.220562165s ago: executing program 5 (id=1882):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000104000000080000000c000000a4000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x7, 0x33)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000007c0)="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", 0xc00)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bff000/0x400000)=nil)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@private2, 0x0, 0x2, 0x0, 0x2, 0x4101}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004800010928bd700018dcdf250a000100", @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))

5.040108585s ago: executing program 5 (id=1885):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
socket$packet(0x11, 0x3, 0x300)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
fcntl$lock(r0, 0x5, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_procfs(0xffffffffffffffff, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)

4.123599107s ago: executing program 0 (id=1886):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94)

4.033958816s ago: executing program 5 (id=1887):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
rseq(0x0, 0x0, 0x20000000000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102)
socket$inet_sctp(0x2, 0x3, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
r2 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be})
socket(0x848000000015, 0x805, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="00152e0000000208"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0xe, 0x2, {0x2, 0x21}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}}, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000200)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000280)={0x20, 0x81, 0x1, '\x00'}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "a8"}, &(0x7f0000000300)={0x20, 0x83, 0x1, ';'}, &(0x7f0000000340)={0x20, 0x84, 0x3, "c89c44"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "b8bb58"}})

3.966518329s ago: executing program 0 (id=1888):
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})

2.264788374s ago: executing program 0 (id=1889):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x54)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3ff, 0x1f480, 0x1, 0x399, 0x0, r1})
io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r5 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r7 = dup(r0)
write$P9_RREAD(r5, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xb)
write$tcp_mem(r7, &(0x7f00000004c0)={0x7, 0x20, 0xffffffffffff, 0x20, 0x9}, 0x59)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xc, 0xe652, 0x2, 0xcc, 0x4a, 0xff}, 0x9c)

1.410343621s ago: executing program 0 (id=1890):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x7, 0x0})

1.256073771s ago: executing program 0 (id=1891):
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000400)={0x4, 0x4, 0x1, 'queue0\x00', 0x2})

1.125891143s ago: executing program 0 (id=1892):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0x5, "89440fa65d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

804.362016ms ago: executing program 5 (id=1893):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x54)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x3ff, 0x1f480, 0x1, 0x399, 0x0, r1})
io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
r5 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
sigaltstack(0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
r7 = dup(r0)
write$P9_RREAD(r5, &(0x7f0000000600)=ANY=[@ANYBLOB], 0xb)
write$tcp_mem(r7, &(0x7f00000004c0)={0x7, 0x20, 0xffffffffffff, 0x20, 0x9}, 0x59)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xc, 0xe652, 0x2, 0xcc, 0x4a, 0xff}, 0x9c)

0s ago: executing program 5 (id=1894):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xad, &(0x7f0000000140)=""/173, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="010000000000"], 0xc4}, 0x1, 0x300}, 0x4008800)
ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0xf5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs$namespace(r0, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, r7, 0x533, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc081}, 0x4000)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r8, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f0000000200), 0x4)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0xff, 0x6, 0xfe, 0xfd, 0xfe, 0x9, 0x5, 0x1, 0x3, 0x8, 0x20, 0xff, 0x0, 0x2}, 0xe)
shutdown(r8, 0x1)

kernel console output (not intermixed with test programs):

 binder_alloc: 10603: binder_alloc_buf, no vma
[  580.759475][T10081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  580.832001][T10081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  580.901391][T10081] bond0 (unregistering): Released all slaves
[  581.391682][T10081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  581.523079][T10081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  581.635585][T10081] bond0 (unregistering): Released all slaves
[  582.438108][T10331] 8021q: adding VLAN 0 to HW filter on device bond0
[  582.794676][T10331] 8021q: adding VLAN 0 to HW filter on device team0
[  582.830353][T10081] tipc: Left network mode
[  583.267730][T10073] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.267891][T10073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  583.314888][T10073] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.317334][T10073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  584.615669][T10352] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.807481][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  584.820532][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  584.821733][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  584.822983][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  584.823651][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  586.980602][   T60] Bluetooth: hci2: command tx timeout
[  588.160266][T10672] tc_dump_action: action bad kind
[  589.052273][   T60] Bluetooth: hci2: command tx timeout
[  589.165862][T10352] 8021q: adding VLAN 0 to HW filter on device team0
[  589.574885][T10081] hsr_slave_0: left promiscuous mode
[  589.650209][T10081] hsr_slave_1: left promiscuous mode
[  589.651438][T10081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  589.651532][T10081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  589.714489][T10081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  589.714518][T10081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  589.880864][T10081] hsr_slave_0: left promiscuous mode
[  589.920141][T10081] hsr_slave_1: left promiscuous mode
[  589.921189][T10081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  589.975398][T10081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.069093][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  590.092024][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  590.093483][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  590.094941][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  590.096924][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  590.260412][T10081] veth1_macvtap: left promiscuous mode
[  590.260533][T10081] veth0_macvtap: left promiscuous mode
[  590.260783][T10081] veth1_vlan: left promiscuous mode
[  590.260955][T10081] veth0_vlan: left promiscuous mode
[  591.303799][ T5112] Bluetooth: hci2: command tx timeout
[  591.557797][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'.
[  591.557875][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1560'.
[  592.173264][ T5112] Bluetooth: hci0: command tx timeout
[  592.640919][T10081] team0 (unregistering): Port device team_slave_1 removed
[  592.646616][T10081] veth1_to_team (unregistering): left allmulticast mode
[  592.687348][T10081] team0 (unregistering): Port device team_slave_0 removed
[  593.157762][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  593.188752][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  593.200122][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  593.217842][T10081] team0 (unregistering): Port device team_slave_1 removed
[  593.247197][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  593.252709][T10081] team0 (unregistering): Port device team_slave_0 removed
[  593.371374][T10314] Bluetooth: hci2: command tx timeout
[  593.539356][T10047] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.550369][T10047] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.573160][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  594.264972][ T5112] Bluetooth: hci0: command tx timeout
[  595.696179][ T5112] Bluetooth: hci4: command tx timeout
[  596.330070][ T5112] Bluetooth: hci0: command tx timeout
[  598.010038][ T5112] Bluetooth: hci4: command tx timeout
[  598.410091][ T5112] Bluetooth: hci0: command tx timeout
[  598.931242][T10650] chnl_net:caif_netlink_parms(): no params data found
[  600.385097][ T5112] Bluetooth: hci4: command tx timeout
[  601.787057][ T7685] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1
[  601.820359][   T43] Bluetooth: hci1: Frame reassembly failed (-84)
[  602.139884][T10650] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.151159][T10650] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.151408][T10650] bridge_slave_0: entered allmulticast mode
[  602.190263][T10650] bridge_slave_0: entered promiscuous mode
[  602.193061][T10695] chnl_net:caif_netlink_parms(): no params data found
[  602.229421][T10650] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.229559][T10650] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.229777][T10650] bridge_slave_1: entered allmulticast mode
[  602.256057][T10650] bridge_slave_1: entered promiscuous mode
[  602.337773][T10707] chnl_net:caif_netlink_parms(): no params data found
[  602.410113][   T60] Bluetooth: hci4: command tx timeout
[  602.509255][T10650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.636924][T10650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.903640][T10650] team0: Port device team_slave_0 added
[  603.351220][T10650] team0: Port device team_slave_1 added
[  603.434560][T10695] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.434707][T10695] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.435127][T10695] bridge_slave_0: entered allmulticast mode
[  603.437066][T10695] bridge_slave_0: entered promiscuous mode
[  603.500059][T10695] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.500246][T10695] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.500465][T10695] bridge_slave_1: entered allmulticast mode
[  603.502701][T10695] bridge_slave_1: entered promiscuous mode
[  603.504879][T10707] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.504966][T10707] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.505105][T10707] bridge_slave_0: entered allmulticast mode
[  603.507310][T10707] bridge_slave_0: entered promiscuous mode
[  603.510647][T10650] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.510660][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.510683][T10650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.530299][ T5112] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  603.662432][T10707] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.662569][T10707] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.662821][T10707] bridge_slave_1: entered allmulticast mode
[  603.665756][T10707] bridge_slave_1: entered promiscuous mode
[  603.672247][T10650] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.672299][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.672373][T10650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.883142][T10695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  604.195462][T10695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  606.122402][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  606.396989][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  607.040556][T10695] team0: Port device team_slave_0 added
[  607.134565][T10650] hsr_slave_0: entered promiscuous mode
[  607.138541][T10650] hsr_slave_1: entered promiscuous mode
[  607.161160][T10650] debugfs: 'hsr0' already exists in 'hsr'
[  607.161190][T10650] Cannot create hsr debugfs directory
[  607.164389][T10695] team0: Port device team_slave_1 added
[  607.197360][T10707] team0: Port device team_slave_0 added
[  607.542942][T10707] team0: Port device team_slave_1 added
[  607.620295][ T5781] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  607.620490][ T6074] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  607.776787][T10695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  607.776805][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  607.776833][T10695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  607.832272][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.832329][ T5781] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  607.832586][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.890457][ T5781] usb 1-1: config 0 descriptor??
[  608.263367][T10695] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.263387][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.263418][T10695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  608.313368][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  608.313426][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.313471][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  608.420680][ T5781] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  608.430441][ T6074] usb 6-1: unable to read config index 0 descriptor/start: -71
[  608.430488][ T6074] usb 6-1: can't read configurations, error -71
[  608.479449][ T5781] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input17
[  608.584729][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.584748][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  608.584777][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  608.836610][ T5781] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  608.870370][ T5781] usb 1-1: USB disconnect, device number 27
[  608.994272][T10817] fido_id[10817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  609.335523][T10695] hsr_slave_0: entered promiscuous mode
[  609.337003][T10695] hsr_slave_1: entered promiscuous mode
[  609.338079][T10695] debugfs: 'hsr0' already exists in 'hsr'
[  609.338105][T10695] Cannot create hsr debugfs directory
[  609.418506][T10707] hsr_slave_0: entered promiscuous mode
[  609.427159][T10707] hsr_slave_1: entered promiscuous mode
[  609.428235][T10707] debugfs: 'hsr0' already exists in 'hsr'
[  609.428270][T10707] Cannot create hsr debugfs directory
[  616.891256][ T5112] Bluetooth: hci3: unknown advertising packet type: 0x75
[  616.891290][ T5112] Bluetooth: hci3: unknown advertising packet type: 0x6c
[  616.891322][ T5112] Bluetooth: hci3: Malformed LE Event: 0x02
[  619.498468][   T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  619.498515][   T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  619.498538][   T60] Tainted: [L]=SOFTLOCKUP
[  619.498544][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  619.498555][   T60] Workqueue: hci3 hci_rx_work
[  619.498588][   T60] Call Trace:
[  619.498596][   T60]  <TASK>
[  619.498604][   T60]  dump_stack_lvl+0xe8/0x150
[  619.498632][   T60]  sysfs_create_dir_ns+0x271/0x2a0
[  619.498651][   T60]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  619.498671][   T60]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  619.498691][   T60]  ? rt_spin_unlock+0x160/0x200
[  619.498712][   T60]  kobject_add_internal+0x631/0xd10
[  619.498734][   T60]  kobject_add+0x163/0x240
[  619.498764][   T60]  ? __pfx_kobject_add+0x10/0x10
[  619.498795][   T60]  ? get_device_parent+0x370/0x3a0
[  619.498862][   T60]  device_add+0x408/0xb80
[  619.498901][   T60]  hci_conn_add_sysfs+0xd5/0x210
[  619.498934][   T60]  le_conn_complete_evt+0xf1d/0x1430
[  619.498984][   T60]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  619.499012][   T60]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  619.499036][   T60]  ? lockdep_hardirqs_on+0x7a/0x110
[  619.499061][   T60]  ? skb_pull_data+0xfb/0x200
[  619.499091][   T60]  hci_le_conn_complete_evt+0x187/0x470
[  619.499122][   T60]  hci_event_packet+0x7af/0x12c0
[  619.499148][   T60]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  619.499173][   T60]  ? __pfx_hci_event_packet+0x10/0x10
[  619.499209][   T60]  ? rt_spin_unlock+0x14f/0x200
[  619.499239][   T60]  ? hci_send_to_monitor+0xe2/0x590
[  619.499258][   T60]  hci_rx_work+0x3ee/0x1030
[  619.499285][   T60]  ? process_scheduled_works+0xa25/0x1830
[  619.499310][   T60]  process_scheduled_works+0xb02/0x1830
[  619.499355][   T60]  ? __pfx_process_scheduled_works+0x10/0x10
[  619.499383][   T60]  ? assign_work+0x3d5/0x5e0
[  619.499409][   T60]  worker_thread+0xa50/0xfc0
[  619.499453][   T60]  kthread+0x388/0x470
[  619.499470][   T60]  ? __pfx_worker_thread+0x10/0x10
[  619.499493][   T60]  ? __pfx_kthread+0x10/0x10
[  619.499511][   T60]  ret_from_fork+0x51e/0xb90
[  619.499537][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  619.499559][   T60]  ? __switch_to+0xc7d/0x1450
[  619.499582][   T60]  ? __pfx_kthread+0x10/0x10
[  619.499599][   T60]  ret_from_fork_asm+0x1a/0x30
[  619.499627][   T60]  </TASK>
[  619.499660][   T60] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  619.499688][   T60] Bluetooth: hci3: failed to register connection device
[  621.671647][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  623.692405][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  624.577154][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  624.577206][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  625.740118][ T7614] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  626.420318][ T7614] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.420372][ T7614] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  626.420396][ T7614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.466013][ T7614] usb 1-1: config 0 descriptor??
[  626.912197][ T7614] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor
[  626.916236][ T7614] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input18
[  627.236468][T10081] bridge_slave_1: left allmulticast mode
[  627.236502][T10081] bridge_slave_1: left promiscuous mode
[  627.236784][T10081] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.343914][T10081] bridge_slave_0: left allmulticast mode
[  627.343951][T10081] bridge_slave_0: left promiscuous mode
[  627.346262][T10081] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.408741][ T7614] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  627.499681][T10081] bridge_slave_1: left allmulticast mode
[  627.499714][T10081] bridge_slave_1: left promiscuous mode
[  627.577372][ T6074] usb 1-1: USB disconnect, device number 28
[  627.587442][T10081] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.664596][T10081] bridge_slave_0: left allmulticast mode
[  627.664619][T10081] bridge_slave_0: left promiscuous mode
[  627.664808][T10081] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.842927][T10081] bridge_slave_1: left allmulticast mode
[  627.842958][T10081] bridge_slave_1: left promiscuous mode
[  627.843208][T10081] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.850672][T10931] fido_id[10931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  628.051482][T10081] bridge_slave_0: left allmulticast mode
[  628.051505][T10081] bridge_slave_0: left promiscuous mode
[  628.051687][T10081] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.971435][T10945] binder: 10944:10945 ioctl c018620c 0 returned -14
[  632.831001][T10081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  632.924638][ T5112] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  632.924671][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  632.924702][ T5112] Tainted: [L]=SOFTLOCKUP
[  632.924710][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  632.924725][ T5112] Workqueue: hci5 hci_rx_work
[  632.924760][ T5112] Call Trace:
[  632.924769][ T5112]  <TASK>
[  632.924779][ T5112]  dump_stack_lvl+0xe8/0x150
[  632.924817][ T5112]  sysfs_create_dir_ns+0x271/0x2a0
[  632.924845][ T5112]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  632.924873][ T5112]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  632.924903][ T5112]  ? rt_spin_unlock+0x160/0x200
[  632.924931][ T5112]  kobject_add_internal+0x631/0xd10
[  632.924964][ T5112]  kobject_add+0x163/0x240
[  632.925007][ T5112]  ? __pfx_kobject_add+0x10/0x10
[  632.925051][ T5112]  ? get_device_parent+0x370/0x3a0
[  632.925090][ T5112]  device_add+0x408/0xb80
[  632.925128][ T5112]  hci_conn_add_sysfs+0xd5/0x210
[  632.925159][ T5112]  le_conn_complete_evt+0xf1d/0x1430
[  632.925209][ T5112]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  632.925246][ T5112]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  632.925277][ T5112]  ? lockdep_hardirqs_on+0x7a/0x110
[  632.925312][ T5112]  ? skb_pull_data+0xfb/0x200
[  632.925352][ T5112]  hci_le_conn_complete_evt+0x187/0x470
[  632.925395][ T5112]  hci_event_packet+0x7af/0x12c0
[  632.925431][ T5112]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  632.925474][ T5112]  ? __pfx_hci_event_packet+0x10/0x10
[  632.925502][ T5112]  ? rt_spin_unlock+0x14f/0x200
[  632.925547][ T5112]  ? hci_send_to_monitor+0xe2/0x590
[  632.925574][ T5112]  hci_rx_work+0x3ee/0x1030
[  632.925612][ T5112]  ? process_scheduled_works+0xa25/0x1830
[  632.925647][ T5112]  process_scheduled_works+0xb02/0x1830
[  632.925711][ T5112]  ? __pfx_process_scheduled_works+0x10/0x10
[  632.925751][ T5112]  ? assign_work+0x3d5/0x5e0
[  632.925789][ T5112]  worker_thread+0xa50/0xfc0
[  632.925853][ T5112]  kthread+0x388/0x470
[  632.925877][ T5112]  ? __pfx_worker_thread+0x10/0x10
[  632.925908][ T5112]  ? __pfx_kthread+0x10/0x10
[  632.925932][ T5112]  ret_from_fork+0x51e/0xb90
[  632.925969][ T5112]  ? __pfx_ret_from_fork+0x10/0x10
[  632.925998][ T5112]  ? __switch_to+0xc7d/0x1450
[  632.926030][ T5112]  ? __pfx_kthread+0x10/0x10
[  632.926056][ T5112]  ret_from_fork_asm+0x1a/0x30
[  632.926097][ T5112]  </TASK>
[  632.926127][ T5112] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  632.926166][ T5112] Bluetooth: hci5: failed to register connection device
[  632.993164][T10081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.203348][T10081] bond0 (unregistering): Released all slaves
[  634.451026][T10959] overlayfs: failed to resolve './file1': -2
[  634.880826][T10081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  635.325387][ T5112] Bluetooth: hci5: command 0x0406 tx timeout
[  635.727750][T10081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  635.782623][T10081] bond0 (unregistering): Released all slaves
[  637.149960][T10966] EXT4-fs (nbd0): unable to read superblock
[  637.370807][ T5112] Bluetooth: hci5: command 0x0406 tx timeout
[  639.053624][T10081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  639.577592][   T60] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  639.680759][T10081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  639.728935][T10981] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  639.728958][T10981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  639.730965][T10981] vhci_hcd vhci_hcd.0: Device attached
[  639.746158][T10990] vhci_hcd: connection closed
[  639.764944][   T69] vhci_hcd vhci_hcd.0: stop threads
[  639.765791][   T69] vhci_hcd vhci_hcd.0: release socket
[  639.765868][   T69] vhci_hcd vhci_hcd.0: disconnect device
[  639.820910][T10081] bond0 (unregistering): Released all slaves
[  639.908371][T10987] tipc: Started in network mode
[  639.908395][T10987] tipc: Node identity 26e5ea8e2b06, cluster identity 4711
[  639.908520][T10987] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  640.222497][T10979] tipc: Disabling bearer <eth:syzkaller0>
[  641.265682][T10081] hsr_slave_0: left promiscuous mode
[  642.170193][T10081] hsr_slave_1: left promiscuous mode
[  642.170963][T10081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  642.220977][T10081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  644.960126][ T5886] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  644.990565][T10081] hsr_slave_0: left promiscuous mode
[  645.044823][T10081] hsr_slave_1: left promiscuous mode
[  645.045612][T10081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  645.100961][T10081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  645.128263][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  645.128301][ T5886] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  645.128326][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.164852][ T5886] usb 1-1: config 0 descriptor??
[  645.400126][T10081] hsr_slave_0: left promiscuous mode
[  645.440368][ T7614] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  645.474663][T10081] hsr_slave_1: left promiscuous mode
[  645.476968][T10081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  645.501740][T10081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  645.594909][ T5886] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor
[  645.632748][ T5886] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input19
[  646.154891][ T5886] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  646.243456][ T5886] usb 1-1: USB disconnect, device number 29
[  647.078076][T10709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  647.099185][T10709] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  647.115916][T10709] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  647.145180][T10709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  647.153639][T10709] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  647.340201][T11030] fido_id[11030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  649.300421][   T60] Bluetooth: hci1: command tx timeout
[  649.661285][T10081] team0 (unregistering): Port device team_slave_1 removed
[  649.720805][T10081] team0 (unregistering): Port device team_slave_0 removed
[  651.630808][   T60] Bluetooth: hci1: command tx timeout
[  652.083921][T10709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  652.089385][T10709] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  652.120445][T10709] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  652.125989][T10709] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  652.126801][T10709] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  652.430884][T10081] team0 (unregistering): Port device team_slave_1 removed
[  652.490917][T10081] team0 (unregistering): Port device team_slave_0 removed
[  653.690325][   T60] Bluetooth: hci1: command tx timeout
[  653.872741][T10709] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  653.881236][T10709] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  653.885546][T10709] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  653.886930][T10709] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  653.888006][T10709] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  654.444372][   T60] Bluetooth: hci6: command tx timeout
[  654.757320][   T60] Bluetooth: hci5: unknown advertising packet type: 0x75
[  654.757461][   T60] Bluetooth: hci5: unknown advertising packet type: 0x6c
[  654.757736][   T60] Bluetooth: hci5: Malformed LE Event: 0x02
[  655.282079][T10081] team0 (unregistering): Port device team_slave_1 removed
[  655.330829][T10081] team0 (unregistering): Port device team_slave_0 removed
[  655.668418][T11049] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  655.681381][T11043] syzkaller0: entered promiscuous mode
[  655.681456][T11043] syzkaller0: entered allmulticast mode
[  655.935315][   T60] Bluetooth: hci1: command tx timeout
[  655.935386][   T60] Bluetooth: hci7: command tx timeout
[  655.990409][T11041] tipc: Resetting bearer <eth:syzkaller0>
[  656.495728][T10709] Bluetooth: hci6: command tx timeout
[  656.561615][T11041] tipc: Disabling bearer <eth:syzkaller0>
[  656.608069][T10709] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  656.621191][T11071] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  656.621213][T11071] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  656.621280][T11071] vhci_hcd vhci_hcd.0: Device attached
[  656.625243][T11074] vhci_hcd: connection closed
[  656.625889][  T984] vhci_hcd vhci_hcd.5: stop threads
[  656.625914][  T984] vhci_hcd vhci_hcd.5: release socket
[  656.626689][  T984] vhci_hcd vhci_hcd.5: disconnect device
[  656.715854][ T5886] tipc: Node number set to 227121367
[  656.850196][T10709] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  658.059258][T10709] Bluetooth: hci7: command tx timeout
[  659.312486][   T60] Bluetooth: hci6: command tx timeout
[  660.090054][   T60] Bluetooth: hci7: command tx timeout
[  661.370179][   T60] Bluetooth: hci6: command tx timeout
[  662.170128][   T60] Bluetooth: hci7: command tx timeout
[  663.748168][T11031] chnl_net:caif_netlink_parms(): no params data found
[  664.337993][T11064] chnl_net:caif_netlink_parms(): no params data found
[  664.618969][T11056] chnl_net:caif_netlink_parms(): no params data found
[  665.076182][ T5971] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  665.160998][T11134] syzkaller0: entered promiscuous mode
[  665.161024][T11134] syzkaller0: entered allmulticast mode
[  665.197542][T11136] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  665.248333][ T5971] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  665.248383][ T5971] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  665.248409][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.293083][ T5971] usb 6-1: config 0 descriptor??
[  665.410503][T11131] tipc: Resetting bearer <eth:syzkaller0>
[  665.667947][T11131] tipc: Disabling bearer <eth:syzkaller0>
[  665.782493][ T5971] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  665.797360][ T5971] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0008/input/input20
[  665.860985][T11031] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.861088][T11031] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.861309][T11031] bridge_slave_0: entered allmulticast mode
[  665.863578][T11031] bridge_slave_0: entered promiscuous mode
[  666.136677][ T5971] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  666.267878][   T60] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  666.378848][ T5886] usb 6-1: USB disconnect, device number 16
[  666.453403][T11031] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.453526][T11031] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.453723][T11031] bridge_slave_1: entered allmulticast mode
[  666.455613][T11031] bridge_slave_1: entered promiscuous mode
[  666.919290][T11031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.000273][T11064] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.000401][T11064] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.000670][T11064] bridge_slave_0: entered allmulticast mode
[  667.006503][T11064] bridge_slave_0: entered promiscuous mode
[  667.040471][T11031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.198336][T11064] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.198560][T11064] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.198789][T11064] bridge_slave_1: entered allmulticast mode
[  667.227687][T11064] bridge_slave_1: entered promiscuous mode
[  667.457266][T11056] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.457473][T11056] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.457691][T11056] bridge_slave_0: entered allmulticast mode
[  667.488965][T11056] bridge_slave_0: entered promiscuous mode
[  667.561992][T11031] team0: Port device team_slave_0 added
[  667.562881][T11056] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.563007][T11056] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.563213][T11056] bridge_slave_1: entered allmulticast mode
[  667.565923][T11056] bridge_slave_1: entered promiscuous mode
[  667.883433][T11031] team0: Port device team_slave_1 added
[  667.887508][T11064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.017453][T11064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.213171][T11056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  668.229803][T11031] batman_adv: batadv0: Adding interface: batadv_slave_0
[  668.229823][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.229843][T11031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.383807][T11056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  668.403547][T11031] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.403575][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  668.403604][T11031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  668.409420][T11064] team0: Port device team_slave_0 added
[  668.552578][T11064] team0: Port device team_slave_1 added
[  669.931031][T11056] team0: Port device team_slave_0 added
[  671.265952][T11056] team0: Port device team_slave_1 added
[  673.098073][T11064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  673.098088][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  673.098109][T11064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  674.010898][T11064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  674.010917][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.010948][T11064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  674.648445][   T60] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  674.836862][T11031] hsr_slave_0: entered promiscuous mode
[  674.848357][T11031] hsr_slave_1: entered promiscuous mode
[  674.862971][T11056] batman_adv: batadv0: Adding interface: batadv_slave_0
[  674.862990][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.863015][T11056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  674.865961][T11196] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  674.974602][T11056] batman_adv: batadv0: Adding interface: batadv_slave_1
[  674.974617][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  674.974639][T11056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  675.129127][   T60] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[  675.148756][T11199] syzkaller0: entered promiscuous mode
[  675.148787][T11199] syzkaller0: entered allmulticast mode
[  675.210304][T11192] tipc: Resetting bearer <eth:syzkaller0>
[  675.342228][T11192] tipc: Disabling bearer <eth:syzkaller0>
[  675.505702][T11064] hsr_slave_0: entered promiscuous mode
[  675.506744][T11064] hsr_slave_1: entered promiscuous mode
[  675.507436][T11064] debugfs: 'hsr0' already exists in 'hsr'
[  675.507455][T11064] Cannot create hsr debugfs directory
[  675.809621][T11056] hsr_slave_0: entered promiscuous mode
[  675.814727][T11056] hsr_slave_1: entered promiscuous mode
[  675.817044][T11056] debugfs: 'hsr0' already exists in 'hsr'
[  675.817102][T11056] Cannot create hsr debugfs directory
[  679.857222][T10081] bridge_slave_1: left allmulticast mode
[  679.857256][T10081] bridge_slave_1: left promiscuous mode
[  679.857520][T10081] bridge0: port 2(bridge_slave_1) entered disabled state
[  679.952142][T10081] bridge_slave_0: left allmulticast mode
[  679.952175][T10081] bridge_slave_0: left promiscuous mode
[  679.956515][T10081] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.144819][T10081] bridge_slave_1: left allmulticast mode
[  680.144842][T10081] bridge_slave_1: left promiscuous mode
[  680.145011][T10081] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.301959][T10081] bridge_slave_0: left allmulticast mode
[  681.301992][T10081] bridge_slave_0: left promiscuous mode
[  681.302249][T10081] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.414361][T10081] bridge_slave_1: left allmulticast mode
[  681.414383][T10081] bridge_slave_1: left promiscuous mode
[  681.414574][T10081] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.505907][T10081] bridge_slave_0: left allmulticast mode
[  681.505929][T10081] bridge_slave_0: left promiscuous mode
[  681.506104][T10081] bridge0: port 1(bridge_slave_0) entered disabled state
[  682.086633][T11251] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1640'.
[  682.370812][T10081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  682.481784][T10081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  682.551782][T10081] bond0 (unregistering): Released all slaves
[  683.578611][T10081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  684.140938][T10081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  684.201942][T10081] bond0 (unregistering): Released all slaves
[  684.680728][T10081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  685.860756][T10081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  686.083746][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  686.083817][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  686.434657][T10081] bond0 (unregistering): Released all slaves
[  687.270937][   T36] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  687.483593][   T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.483646][   T36] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  687.483674][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.489143][   T36] usb 1-1: config 0 descriptor??
[  687.700105][T10081] hsr_slave_0: left promiscuous mode
[  687.740076][T10081] hsr_slave_1: left promiscuous mode
[  687.741148][T10081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  687.790987][T10081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  687.943456][   T36] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  687.963406][   T36] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input21
[  688.021060][T10081] hsr_slave_0: left promiscuous mode
[  688.062718][T10081] hsr_slave_1: left promiscuous mode
[  688.065985][T10081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.104275][T10081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  688.275521][   T36] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  688.300287][T10081] hsr_slave_0: left promiscuous mode
[  688.340679][T10081] hsr_slave_1: left promiscuous mode
[  688.344247][T10081] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.393542][T10081] batman_adv: batadv0: Removing interface: batadv_slave_1
[  688.487509][ T6074] usb 1-1: USB disconnect, device number 30
[  688.529443][T11287] fido_id[11287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  689.074153][T10081] team0 (unregistering): Port device team_slave_1 removed
[  689.157394][T10081] team0 (unregistering): Port device team_slave_0 removed
[  690.650244][   T36] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  690.912004][T10081] team0 (unregistering): Port device team_slave_1 removed
[  690.962333][   T36] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  690.962367][   T36] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  690.962399][   T36] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  690.962416][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.814227][T10081] team0 (unregistering): Port device team_slave_0 removed
[  692.023915][   T36] usb 1-1: usb_control_msg returned -32
[  692.023966][   T36] usbtmc 1-1:16.0: can't read capabilities
[  692.396197][T11308] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32
[  692.398258][   T36] usb 1-1: USB disconnect, device number 31
[  692.653870][T10081] team0 (unregistering): Port device team_slave_1 removed
[  692.710963][T10081] team0 (unregistering): Port device team_slave_0 removed
[  694.507948][T11312] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  694.507982][T11312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  694.508045][T11312] vhci_hcd vhci_hcd.0: Device attached
[  694.509269][T11322] vhci_hcd: connection closed
[  694.539316][ T7685] vhci_hcd vhci_hcd.0: stop threads
[  694.539343][ T7685] vhci_hcd vhci_hcd.0: release socket
[  694.539385][ T7685] vhci_hcd vhci_hcd.0: disconnect device
[  695.052083][T11328] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1658'.
[  695.327278][   T60] Bluetooth: hci5: unexpected event for opcode 0x0c20
[  696.257217][T11031] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  696.402444][T11031] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  696.496024][T11031] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  696.692516][T11031] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  697.045991][T11064] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  697.213220][T11064] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  697.287284][T11064] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  697.470128][T11064] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  699.545762][T11056] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  699.764083][T11056] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  699.926466][T11056] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  700.080647][T11056] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  700.404505][   T60] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  701.065700][   T60] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  701.349873][T11031] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.533125][T11064] 8021q: adding VLAN 0 to HW filter on device bond0
[  701.536095][T11031] 8021q: adding VLAN 0 to HW filter on device team0
[  701.585639][T10081] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.585966][T10081] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.638256][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.638365][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[  701.683494][T11064] 8021q: adding VLAN 0 to HW filter on device team0
[  701.742854][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[  701.743059][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.798773][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.798916][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.056586][T11056] 8021q: adding VLAN 0 to HW filter on device bond0
[  703.037527][T11393] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1667'.
[  703.048061][T11056] 8021q: adding VLAN 0 to HW filter on device team0
[  703.162018][  T984] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.168309][  T984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  703.273971][  T984] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.274118][  T984] bridge0: port 2(bridge_slave_1) entered forwarding state
[  704.440898][T11031] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.675750][T11064] 8021q: adding VLAN 0 to HW filter on device batadv0
[  705.456265][T11056] 8021q: adding VLAN 0 to HW filter on device batadv0
[  705.806542][T11056] veth0_vlan: entered promiscuous mode
[  705.951438][T11056] veth1_vlan: entered promiscuous mode
[  706.039652][T10709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  706.061902][T10709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  706.087564][T10709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  706.100781][T10709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  706.104341][T10709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  706.454550][T11064] veth0_vlan: entered promiscuous mode
[  707.598518][T11064] veth1_vlan: entered promiscuous mode
[  708.176543][T10709] Bluetooth: hci0: command tx timeout
[  708.301331][T10709] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260
[  708.502618][T11471] random: crng reseeded on system resumption
[  708.558870][T11056] veth0_macvtap: entered promiscuous mode
[  708.758261][T11056] veth1_macvtap: entered promiscuous mode
[  708.800781][T11471] syz.0.1677 (11471) used greatest stack depth: 15752 bytes left
[  709.258891][T11477] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1678'.
[  709.428911][T11056] batman_adv: batadv0: Interface activated: batadv_slave_0
[  710.250025][T10709] Bluetooth: hci0: command tx timeout
[  710.308752][T11064] veth0_macvtap: entered promiscuous mode
[  710.327913][T11056] batman_adv: batadv0: Interface activated: batadv_slave_1
[  710.387791][T11064] veth1_macvtap: entered promiscuous mode
[  710.444277][   T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  710.823738][   T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  710.860898][   T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  710.901978][   T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  710.923437][T11448] chnl_net:caif_netlink_parms(): no params data found
[  711.655381][T11064] batman_adv: batadv0: Interface activated: batadv_slave_0
[  711.938315][T11499] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  711.938365][T11499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  711.938571][T11499] vhci_hcd vhci_hcd.0: Device attached
[  712.402647][T10709] Bluetooth: hci0: command tx timeout
[  712.511642][T11064] batman_adv: batadv0: Interface activated: batadv_slave_1
[  712.628369][T11503] vhci_hcd: connection closed
[  712.639500][   T69] vhci_hcd vhci_hcd.0: stop threads
[  712.639530][   T69] vhci_hcd vhci_hcd.0: release socket
[  712.639570][   T69] vhci_hcd vhci_hcd.0: disconnect device
[  712.781588][T11448] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.781733][T11448] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.781976][T11448] bridge_slave_0: entered allmulticast mode
[  712.784773][T11448] bridge_slave_0: entered promiscuous mode
[  712.786891][  T984] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  712.911375][  T984] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  712.924238][T11448] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.924586][T11448] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.925238][T11448] bridge_slave_1: entered allmulticast mode
[  712.953044][T11448] bridge_slave_1: entered promiscuous mode
[  712.977905][  T984] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  713.021347][  T984] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  713.474354][T11448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  713.531138][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  713.566147][   T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  713.571940][   T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  713.591583][   T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  713.598325][   T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  713.664253][T11448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  714.423228][T10709] Bluetooth: hci0: command tx timeout
[  714.455475][T10035] bridge_slave_1: left allmulticast mode
[  714.455505][T10035] bridge_slave_1: left promiscuous mode
[  714.455874][T10035] bridge0: port 2(bridge_slave_1) entered disabled state
[  714.887939][T10035] bridge_slave_0: left allmulticast mode
[  714.887963][T10035] bridge_slave_0: left promiscuous mode
[  714.888156][T10035] bridge0: port 1(bridge_slave_0) entered disabled state
[  714.962620][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  714.967350][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  714.969554][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  715.010049][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  715.045805][T11527] kvm: kvm [11526]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000
[  715.054370][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  716.664527][T10709] Bluetooth: hci1: command tx timeout
[  717.143906][T10709] Bluetooth: hci2: command tx timeout
[  718.212397][T10035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  718.301700][T10035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  718.329013][T11548] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  718.329180][T11548] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  718.354856][T10035] bond0 (unregistering): Released all slaves
[  718.415867][T11448] team0: Port device team_slave_0 added
[  718.730744][T10709] Bluetooth: hci1: command tx timeout
[  719.200882][T11556] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1692'.
[  719.216907][T10709] Bluetooth: hci2: command tx timeout
[  719.465499][T11448] team0: Port device team_slave_1 added
[  720.852945][T10709] Bluetooth: hci1: command tx timeout
[  721.413312][T10709] Bluetooth: hci2: command tx timeout
[  721.526422][T10035] hsr_slave_0: left promiscuous mode
[  721.550191][T10035] hsr_slave_1: left promiscuous mode
[  721.551078][T10035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  721.587501][T10035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  721.770108][   T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  721.945252][   T10] usb 6-1: Using ep0 maxpacket: 8
[  721.965097][   T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  721.965158][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  721.965182][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  721.965208][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  721.965232][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  721.965277][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  721.965301][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.181493][   T10] usb 6-1: GET_CAPABILITIES returned 0
[  722.181529][   T10] usbtmc 6-1:16.0: can't read capabilities
[  722.539132][T11563] usbtmc 6-1:16.0: usb_control_msg returned -71
[  722.554853][   T10] usb 6-1: USB disconnect, device number 17
[  722.611356][T10035] team0 (unregistering): Port device team_slave_1 removed
[  722.664796][T10035] team0 (unregistering): Port device team_slave_0 removed
[  722.901240][T10709] Bluetooth: hci1: command tx timeout
[  722.909576][T11562] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.923004][T11562] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.943716][T11563] tipc: Cannot configure node identity twice
[  722.967934][T11448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  722.967949][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.967969][T11448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  722.992621][T11448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  722.992676][T11448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  722.992770][T11448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  723.274300][T11448] hsr_slave_0: entered promiscuous mode
[  723.275630][T11448] hsr_slave_1: entered promiscuous mode
[  723.366306][T11569] loop2: detected capacity change from 0 to 7
[  723.420382][T11569] Dev loop2: unable to read RDB block 7
[  723.420428][T11569]  loop2: AHDI p1 p2 p3
[  723.420460][T11569] loop2: partition table partially beyond EOD, truncated
[  723.422033][T11569] loop2: p1 start 1601398130 is beyond EOD, truncated
[  723.422060][T11569] loop2: p2 start 1702059890 is beyond EOD, truncated
[  723.460025][T10709] Bluetooth: hci2: command tx timeout
[  723.617084][T11575] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  723.617145][T11575] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  729.113290][T11514] chnl_net:caif_netlink_parms(): no params data found
[  729.386208][T10035] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.581151][T11616] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.581397][T11616] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.651282][T11529] chnl_net:caif_netlink_parms(): no params data found
[  731.810180][   T36] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  731.883567][T10035] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  731.960579][   T36] usb 1-1: Using ep0 maxpacket: 8
[  731.962968][   T36] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  731.963038][   T36] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  731.963062][   T36] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  731.963089][   T36] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  731.963114][   T36] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  731.963157][   T36] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  731.963181][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.216338][   T36] usb 1-1: GET_CAPABILITIES returned 0
[  732.216399][   T36] usbtmc 1-1:16.0: can't read capabilities
[  732.587840][ T5971] usb 1-1: USB disconnect, device number 32
[  732.596211][T11616] usbtmc 1-1:16.0: usb_control_msg returned -71
[  732.647920][T10035] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.327822][T10035] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.372388][T11629] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  733.372448][T11629] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  733.413906][T11514] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.414061][T11514] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.414254][T11514] bridge_slave_0: entered allmulticast mode
[  733.417392][T11514] bridge_slave_0: entered promiscuous mode
[  733.467779][T11514] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.467919][T11514] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.468141][T11514] bridge_slave_1: entered allmulticast mode
[  733.471128][T11514] bridge_slave_1: entered promiscuous mode
[  733.692141][T11514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.893956][T11529] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.894090][T11529] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.894351][T11529] bridge_slave_0: entered allmulticast mode
[  733.909421][T11529] bridge_slave_0: entered promiscuous mode
[  733.935906][T11514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  734.926371][T11529] bridge0: port 2(bridge_slave_1) entered blocking state
[  734.926515][T11529] bridge0: port 2(bridge_slave_1) entered disabled state
[  734.926763][T11529] bridge_slave_1: entered allmulticast mode
[  734.946498][T11529] bridge_slave_1: entered promiscuous mode
[  736.311880][T11514] team0: Port device team_slave_0 added
[  736.424240][T11529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.438516][T11514] team0: Port device team_slave_1 added
[  736.467594][T11529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  737.182234][T11514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  737.182253][T11514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  737.182282][T11514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  737.187397][T11529] team0: Port device team_slave_0 added
[  737.295124][T11514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  737.295144][T11514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  737.295175][T11514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  737.316246][T11529] team0: Port device team_slave_1 added
[  737.830820][T11448] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  738.117792][T11529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.117812][T11529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  738.117842][T11529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  738.148605][T11448] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  739.204780][T11529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  739.204800][T11529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  739.204829][T11529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  739.482440][T10035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.544837][T11448] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  739.651868][T11448] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  739.713124][T11514] hsr_slave_0: entered promiscuous mode
[  739.714661][T11514] hsr_slave_1: entered promiscuous mode
[  739.715679][T11514] debugfs: 'hsr0' already exists in 'hsr'
[  739.715705][T11514] Cannot create hsr debugfs directory
[  739.980925][T10035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.393374][T10035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.455385][T11529] hsr_slave_0: entered promiscuous mode
[  740.456928][T11529] hsr_slave_1: entered promiscuous mode
[  740.458083][T11529] debugfs: 'hsr0' already exists in 'hsr'
[  740.458109][T11529] Cannot create hsr debugfs directory
[  740.757031][T10035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.841362][T11668] overlayfs: missing 'lowerdir'
[  743.466402][T11681] cgroup: fork rejected by pids controller in /syz0
[  745.969836][T10035] bridge_slave_1: left allmulticast mode
[  745.969957][T10035] bridge_slave_1: left promiscuous mode
[  745.986282][T10035] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.189330][T10035] bridge_slave_0: left allmulticast mode
[  746.189361][T10035] bridge_slave_0: left promiscuous mode
[  746.189637][T10035] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.313246][T10035] bridge_slave_1: left allmulticast mode
[  746.313283][T10035] bridge_slave_1: left promiscuous mode
[  746.313538][T10035] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.519030][T10709] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  746.775549][T12257] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1721'.
[  746.815878][T10035] bridge_slave_0: left allmulticast mode
[  746.815910][T10035] bridge_slave_0: left promiscuous mode
[  746.816165][T10035] bridge0: port 1(bridge_slave_0) entered disabled state
[  747.456143][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  747.456215][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  747.984194][T12264] overlayfs: missing 'lowerdir'
[  748.114275][T10035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  748.190887][T10035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  748.212645][T10035] bond0 (unregistering): Released all slaves
[  748.390139][ T5781] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  748.550263][ T5781] usb 6-1: Using ep0 maxpacket: 8
[  748.552966][ T5781] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  748.553014][ T5781] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  748.553031][ T5781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.557348][ T5781] usb 6-1: config 0 descriptor??
[  748.670940][T10035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  748.731240][T10035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  748.767951][ T5781] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  748.786261][T10035] bond0 (unregistering): Released all slaves
[  749.115431][T11448] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.167956][T11448] 8021q: adding VLAN 0 to HW filter on device team0
[  749.188149][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[  749.188369][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[  750.266372][T10030] bridge0: port 2(bridge_slave_1) entered blocking state
[  750.291297][T10030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  750.364400][T12271] usb 6-1: USB disconnect, device number 18
[  753.000208][T10035] hsr_slave_0: left promiscuous mode
[  753.044580][T10035] hsr_slave_1: left promiscuous mode
[  753.045685][T10035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  753.045713][T10035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  753.102230][T10035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  753.102269][T10035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  753.320061][T10035] hsr_slave_0: left promiscuous mode
[  753.360246][T10035] hsr_slave_1: left promiscuous mode
[  753.361333][T10035] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  753.361359][T10035] batman_adv: batadv0: Removing interface: batadv_slave_0
[  753.421177][T10035] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  753.421209][T10035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  753.520730][T10035] veth1_macvtap: left promiscuous mode
[  753.520825][T10035] veth0_macvtap: left promiscuous mode
[  753.521219][T10035] veth1_vlan: left promiscuous mode
[  753.521343][T10035] veth0_vlan: left promiscuous mode
[  753.610574][T10035] veth1_macvtap: left promiscuous mode
[  753.613264][T10035] veth0_macvtap: left promiscuous mode
[  753.613542][T10035] veth1_vlan: left promiscuous mode
[  753.613725][T10035] veth0_vlan: left promiscuous mode
[  754.310242][T10803] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  754.470205][T10803] usb 6-1: Using ep0 maxpacket: 32
[  754.475246][T10803] usb 6-1: config 0 has an invalid interface number: 111 but max is 1
[  754.475276][T10803] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  754.475301][T10803] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  754.475319][T10803] usb 6-1: config 0 has no interface number 0
[  754.477834][T10803] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  754.477865][T10803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.477880][T10803] usb 6-1: Product: syz
[  754.477890][T10803] usb 6-1: Manufacturer: syz
[  754.477901][T10803] usb 6-1: SerialNumber: syz
[  754.520572][T10803] usb 6-1: config 0 descriptor??
[  754.768072][T10803] snd-usb-6fire 6-1:0.111: unknown device firmware state received from device:
[  754.768095][T10803] 31 db 99 aa dd 09 f1 37 
[  754.768176][T10803] snd-usb-6fire 6-1:0.111: probe with driver snd-usb-6fire failed with error -5
[  754.851896][T10035] team0 (unregistering): Port device team_slave_1 removed
[  754.910902][T10035] team0 (unregistering): Port device team_slave_0 removed
[  754.976177][T10803] usb 6-1: USB disconnect, device number 19
[  755.570865][T10035] team0 (unregistering): Port device team_slave_1 removed
[  755.630777][T10035] team0 (unregistering): Port device team_slave_0 removed
[  756.253688][T12307] netlink: 'syz.5.1731': attribute type 1 has an invalid length.
[  756.253745][T12307] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1731'.
[  762.304620][T11448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  763.746736][T11514] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  764.129540][T11514] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  764.220614][T11514] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  764.424151][T11514] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  765.820123][T11529] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  765.883798][T11529] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  766.008890][T11529] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  766.044391][T11529] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  769.443581][T10709] Bluetooth: hci5: unknown advertising packet type: 0x75
[  769.443674][T10709] Bluetooth: hci5: unknown advertising packet type: 0x6c
[  769.443709][T10709] Bluetooth: hci5: Malformed LE Event: 0x02
[  769.446444][T10709] Bluetooth: hci3: unknown advertising packet type: 0x75
[  769.446504][T10709] Bluetooth: hci3: unknown advertising packet type: 0x6c
[  769.446608][T10709] Bluetooth: hci3: Malformed LE Event: 0x02
[  772.792498][T11514] 8021q: adding VLAN 0 to HW filter on device bond0
[  772.965695][T10709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  772.997424][T11514] 8021q: adding VLAN 0 to HW filter on device team0
[  772.998608][T10709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  773.180406][T10709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  773.181850][T10709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  773.182806][T10709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  773.266474][T11529] 8021q: adding VLAN 0 to HW filter on device bond0
[  774.510237][T12432] tc_dump_action: action bad kind
[  774.537032][T10069] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.537173][T10069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.612035][T11529] 8021q: adding VLAN 0 to HW filter on device team0
[  774.664782][T10036] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.695350][T10036] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.983235][T10069] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.983470][T10069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  775.302977][T10709] Bluetooth: hci4: command tx timeout
[  775.303613][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  775.307763][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  775.339341][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  775.358679][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  775.359451][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  775.721902][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  775.732888][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  775.747149][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  775.765360][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  775.766126][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  775.921299][   T36] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  776.080166][   T36] usb 6-1: Using ep0 maxpacket: 8
[  776.098025][   T36] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  776.098087][   T36] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  776.098111][   T36] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  776.098138][   T36] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  776.098163][   T36] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  776.098208][   T36] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  776.098232][   T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.471189][   T36] usb 6-1: GET_CAPABILITIES returned 0
[  776.471242][   T36] usbtmc 6-1:16.0: can't read capabilities
[  777.135274][   T10] usb 6-1: USB disconnect, device number 20
[  777.374777][   T60] Bluetooth: hci4: command tx timeout
[  777.450329][   T60] Bluetooth: hci0: command tx timeout
[  777.500046][T12455] tipc: Cannot configure node identity twice
[  777.850105][   T60] Bluetooth: hci1: command tx timeout
[  778.400059][   T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  778.443028][T12419] chnl_net:caif_netlink_parms(): no params data found
[  778.629975][   T10] usb 6-1: Using ep0 maxpacket: 8
[  779.452495][   T60] Bluetooth: hci4: command tx timeout
[  779.471799][   T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  779.471862][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  779.471887][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  779.471914][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  779.471939][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  779.471982][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  779.472006][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.530023][   T60] Bluetooth: hci0: command tx timeout
[  779.803911][   T10] usb 6-1: GET_CAPABILITIES returned 0
[  779.803964][   T10] usbtmc 6-1:16.0: can't read capabilities
[  779.872560][T10033] bridge_slave_1: left allmulticast mode
[  779.872592][T10033] bridge_slave_1: left promiscuous mode
[  779.872855][T10033] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.930068][   T60] Bluetooth: hci1: command tx timeout
[  780.051766][T10033] bridge_slave_0: left allmulticast mode
[  780.051791][T10033] bridge_slave_0: left promiscuous mode
[  780.052075][T10033] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.240350][   T60] Bluetooth: hci4: command tx timeout
[  782.240388][   T60] Bluetooth: hci0: command tx timeout
[  782.240412][   T60] Bluetooth: hci1: command tx timeout
[  782.670855][T10033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  782.730972][T10033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  782.752455][T10033] bond0 (unregistering): Released all slaves
[  782.793338][T12509] lo speed is unknown, defaulting to 1000
[  782.793548][T12419] bridge0: port 1(bridge_slave_0) entered blocking state
[  782.793649][T12419] bridge0: port 1(bridge_slave_0) entered disabled state
[  782.793877][T12419] bridge_slave_0: entered allmulticast mode
[  782.796013][T12419] bridge_slave_0: entered promiscuous mode
[  782.797517][T12509] lo speed is unknown, defaulting to 1000
[  782.804000][T12509] lo speed is unknown, defaulting to 1000
[  782.834054][T12509] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  782.860211][T12509] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  782.912081][T12509] lo speed is unknown, defaulting to 1000
[  782.915370][T12509] lo speed is unknown, defaulting to 1000
[  782.919823][T12509] lo speed is unknown, defaulting to 1000
[  782.954046][T12509] lo speed is unknown, defaulting to 1000
[  782.957980][T12509] lo speed is unknown, defaulting to 1000
[  782.960845][T12509] lo speed is unknown, defaulting to 1000
[  782.969907][T12509] lo speed is unknown, defaulting to 1000
[  782.974835][T12509] lo speed is unknown, defaulting to 1000
[  783.098639][T12419] bridge0: port 2(bridge_slave_1) entered blocking state
[  783.098776][T12419] bridge0: port 2(bridge_slave_1) entered disabled state
[  783.099038][T12419] bridge_slave_1: entered allmulticast mode
[  783.133184][T12419] bridge_slave_1: entered promiscuous mode
[  783.603423][T12419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  783.646955][T12448] chnl_net:caif_netlink_parms(): no params data found
[  783.852207][T10033] hsr_slave_0: left promiscuous mode
[  783.872497][T10033] hsr_slave_1: left promiscuous mode
[  783.877462][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  783.914600][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  784.250050][   T60] Bluetooth: hci0: command tx timeout
[  784.250107][ T5112] Bluetooth: hci1: command tx timeout
[  784.681718][T10033] team0 (unregistering): Port device team_slave_1 removed
[  784.752403][T10033] team0 (unregistering): Port device team_slave_0 removed
[  785.057516][T12419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  785.058677][T12458] chnl_net:caif_netlink_parms(): no params data found
[  785.083095][T12485] usbtmc 6-1:16.0: usb_control_msg returned -110
[  785.137376][T12525] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  785.150895][T10803] usb 6-1: USB disconnect, device number 21
[  785.214399][T12520] syzkaller0: entered promiscuous mode
[  785.214428][T12520] syzkaller0: entered allmulticast mode
[  785.851447][T12529] kAFS: unable to lookup cell '('
[  785.910420][T12518] tipc: Resetting bearer <eth:syzkaller0>
[  786.044996][T12518] tipc: Disabling bearer <eth:syzkaller0>
[  786.227597][T12419] team0: Port device team_slave_0 added
[  786.283615][T12419] team0: Port device team_slave_1 added
[  786.452221][T12419] batman_adv: batadv0: Adding interface: batadv_slave_0
[  786.452236][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.452257][T12419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  786.520041][T10803] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  786.539047][T12419] batman_adv: batadv0: Adding interface: batadv_slave_1
[  786.539060][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.539080][T12419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  786.603721][T12448] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.604005][T12448] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.604166][T12448] bridge_slave_0: entered allmulticast mode
[  786.606235][T12448] bridge_slave_0: entered promiscuous mode
[  786.641307][T12458] bridge0: port 1(bridge_slave_0) entered blocking state
[  786.641440][T12458] bridge0: port 1(bridge_slave_0) entered disabled state
[  786.641660][T12458] bridge_slave_0: entered allmulticast mode
[  786.643832][T12458] bridge_slave_0: entered promiscuous mode
[  786.646814][T12448] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.646945][T12448] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.647127][T12448] bridge_slave_1: entered allmulticast mode
[  786.649331][T12448] bridge_slave_1: entered promiscuous mode
[  786.670005][T10803] usb 1-1: Using ep0 maxpacket: 32
[  786.716104][T10803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  786.716142][T10803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  786.716183][T10803] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  786.716205][T10803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.757806][T12458] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.757936][T12458] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.758192][T12458] bridge_slave_1: entered allmulticast mode
[  786.787071][T12458] bridge_slave_1: entered promiscuous mode
[  786.790163][T10803] usb 1-1: config 0 descriptor??
[  787.058529][T12448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  787.269094][T12458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  787.372566][T12448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  787.419672][T12419] hsr_slave_0: entered promiscuous mode
[  788.338155][T12419] hsr_slave_1: entered promiscuous mode
[  788.500213][T12458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  788.508789][T10803] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  788.573571][T10803] usb 1-1: USB disconnect, device number 33
[  789.917040][T12448] team0: Port device team_slave_0 added
[  789.968685][T12458] team0: Port device team_slave_0 added
[  789.979719][T12448] team0: Port device team_slave_1 added
[  790.031288][T12458] team0: Port device team_slave_1 added
[  790.384448][T12448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  790.384466][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  790.384493][T12448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  790.440869][T12458] batman_adv: batadv0: Adding interface: batadv_slave_0
[  790.440888][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  790.440915][T12458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  790.444711][T12448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  790.444910][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  790.444941][T12448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  790.511042][ T5966] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  790.552436][T12458] batman_adv: batadv0: Adding interface: batadv_slave_1
[  790.552456][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  790.552486][T12458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  790.710047][ T5966] usb 1-1: Using ep0 maxpacket: 8
[  790.718089][ T5966] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  790.718152][ T5966] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  790.718169][ T5966] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  790.718187][ T5966] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  790.718205][ T5966] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  790.718236][ T5966] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  790.718252][ T5966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.988071][ T5966] usb 1-1: GET_CAPABILITIES returned 0
[  790.988122][ T5966] usbtmc 1-1:16.0: can't read capabilities
[  791.341059][T12560] usbtmc 1-1:16.0: usb_control_msg returned -71
[  791.341472][T10803] usb 1-1: USB disconnect, device number 34
[  791.858931][T12448] hsr_slave_0: entered promiscuous mode
[  791.867261][T12448] hsr_slave_1: entered promiscuous mode
[  791.868395][T12448] debugfs: 'hsr0' already exists in 'hsr'
[  791.868421][T12448] Cannot create hsr debugfs directory
[  792.222220][T12458] hsr_slave_0: entered promiscuous mode
[  792.236891][T12458] hsr_slave_1: entered promiscuous mode
[  792.237933][T12458] debugfs: 'hsr0' already exists in 'hsr'
[  792.237958][T12458] Cannot create hsr debugfs directory
[  792.741813][T12583] syzkaller0: entered promiscuous mode
[  792.741835][T12583] syzkaller0: entered allmulticast mode
[  792.942003][T12583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  793.200739][T12582] tipc: Resetting bearer <eth:syzkaller0>
[  793.302981][T12582] tipc: Disabling bearer <eth:syzkaller0>
[  793.760024][T10803] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  794.810114][T10803] usb 1-1: Using ep0 maxpacket: 32
[  794.815235][T10803] usb 1-1: config 0 has an invalid interface number: 111 but max is 1
[  794.815266][T10803] usb 1-1: config 0 has no interface number 1
[  794.818856][T10803] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  794.818888][T10803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.818909][T10803] usb 1-1: Product: syz
[  794.818924][T10803] usb 1-1: Manufacturer: syz
[  794.818938][T10803] usb 1-1: SerialNumber: syz
[  794.958591][T10803] usb 1-1: config 0 descriptor??
[  795.219807][T10803] snd-usb-6fire 1-1:0.111: unable to receive device firmware state.
[  795.228076][T10803] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -32
[  795.270677][T10803] usb 1-1: USB disconnect, device number 35
[  795.280261][ T5966] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  795.458485][ T5966] usb 6-1: Using ep0 maxpacket: 32
[  795.468264][ T5966] usb 6-1: config 0 has an invalid interface number: 111 but max is 1
[  795.468292][ T5966] usb 6-1: config 0 has no interface number 1
[  795.493970][ T5966] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  795.494004][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  795.494026][ T5966] usb 6-1: Product: syz
[  795.494040][ T5966] usb 6-1: Manufacturer: syz
[  795.494055][ T5966] usb 6-1: SerialNumber: syz
[  795.521696][ T5966] usb 6-1: config 0 descriptor??
[  795.744874][ T5966] snd-usb-6fire 6-1:0.111: unable to receive device firmware state.
[  795.744907][ T5966] snd-usb-6fire 6-1:0.111: probe with driver snd-usb-6fire failed with error -121
[  795.962710][ T7614] usb 6-1: USB disconnect, device number 22
[  799.837927][T12622] syzkaller0: entered promiscuous mode
[  799.837955][T12622] syzkaller0: entered allmulticast mode
[  799.856158][T12622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  800.023309][T12620] tipc: Resetting bearer <eth:syzkaller0>
[  801.215291][T12620] tipc: Disabling bearer <eth:syzkaller0>
[  801.569230][T12644] siw: device registration error -23
[  805.690650][T12271] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  805.785721][T10033] bridge_slave_1: left allmulticast mode
[  805.785754][T10033] bridge_slave_1: left promiscuous mode
[  805.786022][T10033] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.842441][T12271] usb 1-1: Using ep0 maxpacket: 32
[  805.845215][T12271] usb 1-1: config 0 has an invalid interface number: 111 but max is 1
[  805.845245][T12271] usb 1-1: config 0 has no interface number 1
[  805.848396][T12271] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  805.848425][T12271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.848446][T12271] usb 1-1: Product: syz
[  805.848462][T12271] usb 1-1: Manufacturer: syz
[  805.848476][T12271] usb 1-1: SerialNumber: syz
[  805.929800][T12271] usb 1-1: config 0 descriptor??
[  805.947280][T10033] bridge_slave_0: left allmulticast mode
[  805.947310][T10033] bridge_slave_0: left promiscuous mode
[  805.947597][T10033] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.048179][T10033] bridge_slave_1: left allmulticast mode
[  806.048212][T10033] bridge_slave_1: left promiscuous mode
[  806.048471][T10033] bridge0: port 2(bridge_slave_1) entered disabled state
[  806.134595][T10033] bridge_slave_0: left allmulticast mode
[  806.134626][T10033] bridge_slave_0: left promiscuous mode
[  806.134875][T10033] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.154636][T12271] snd-usb-6fire 1-1:0.111: unable to receive device firmware state.
[  806.154682][T12271] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -121
[  806.371352][ T7614] usb 1-1: USB disconnect, device number 36
[  808.963033][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  808.963647][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  809.263752][T10033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  809.390849][T10033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  809.463904][T10033] bond0 (unregistering): Released all slaves
[  810.273773][T12743] kAFS: unable to lookup cell '('
[  810.981811][T10033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  812.041657][T10033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  812.101906][T10033] bond0 (unregistering): Released all slaves
[  812.130603][T12732] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  812.169052][T12729] syzkaller0: entered promiscuous mode
[  812.169095][T12729] syzkaller0: entered allmulticast mode
[  813.273043][T10033] hsr_slave_0: left promiscuous mode
[  813.290891][T10033] hsr_slave_1: left promiscuous mode
[  813.291882][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  813.331106][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  813.908201][T12758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1791'.
[  813.908279][T12758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1791'.
[  814.670012][T10033] hsr_slave_0: left promiscuous mode
[  814.790065][T10033] hsr_slave_1: left promiscuous mode
[  814.791061][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0
[  814.810835][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1
[  815.241424][T10033] team0 (unregistering): Port device team_slave_1 removed
[  815.280697][T10033] team0 (unregistering): Port device team_slave_0 removed
[  815.700691][T10033] team0 (unregistering): Port device team_slave_1 removed
[  815.730657][T10033] team0 (unregistering): Port device team_slave_0 removed
[  817.326502][T12419] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  817.579405][T12419] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  818.127805][T12419] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  818.176378][T12419] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  819.220433][T12800] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  819.462943][T12799] tipc: Disabling bearer <eth:syzkaller0>
[  819.657496][T12419] 8021q: adding VLAN 0 to HW filter on device bond0
[  819.757893][T12419] 8021q: adding VLAN 0 to HW filter on device team0
[  819.900914][  T984] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.901008][  T984] bridge0: port 1(bridge_slave_0) entered forwarding state
[  820.243892][T10022] bridge0: port 2(bridge_slave_1) entered blocking state
[  820.244019][T10022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  821.705679][T12448] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  821.804932][T12448] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  821.914811][T12448] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  822.016548][T12448] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  822.787793][T12458] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  822.849206][T12458] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  823.918893][T12458] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  824.464836][T12458] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  826.664209][T12419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  827.164870][T12448] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.262364][T12448] 8021q: adding VLAN 0 to HW filter on device team0
[  827.329441][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.329551][ T7685] bridge0: port 1(bridge_slave_0) entered forwarding state
[  827.365546][ T7685] bridge0: port 2(bridge_slave_1) entered blocking state
[  827.365758][ T7685] bridge0: port 2(bridge_slave_1) entered forwarding state
[  827.425672][T12458] 8021q: adding VLAN 0 to HW filter on device bond0
[  827.574038][T12458] 8021q: adding VLAN 0 to HW filter on device team0
[  827.622112][   T88] bridge0: port 1(bridge_slave_0) entered blocking state
[  827.622254][   T88] bridge0: port 1(bridge_slave_0) entered forwarding state
[  828.681412][T10030] bridge0: port 2(bridge_slave_1) entered blocking state
[  828.681518][T10030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  828.696714][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  828.705545][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  828.723268][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  828.755829][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  828.767496][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  830.910307][ T5112] Bluetooth: hci2: command tx timeout
[  831.419117][T12893] lo speed is unknown, defaulting to 1000
[  832.478371][T12448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  832.938092][T12458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  832.969990][ T5112] Bluetooth: hci2: command tx timeout
[  833.743440][T10022] bridge_slave_1: left allmulticast mode
[  833.743472][T10022] bridge_slave_1: left promiscuous mode
[  833.743702][T10022] bridge0: port 2(bridge_slave_1) entered disabled state
[  833.832367][T10022] bridge_slave_0: left allmulticast mode
[  833.832399][T10022] bridge_slave_0: left promiscuous mode
[  833.832668][T10022] bridge0: port 1(bridge_slave_0) entered disabled state
[  833.852063][T12271] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  834.000122][T12271] usb 1-1: Using ep0 maxpacket: 8
[  834.002702][T12271] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  834.002768][T12271] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  834.002793][T12271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  834.002821][T12271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  834.002844][T12271] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  834.002890][T12271] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  834.002914][T12271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.213303][T12271] usb 1-1: GET_CAPABILITIES returned 0
[  834.213338][T12271] usbtmc 1-1:16.0: can't read capabilities
[  834.552021][T12925] usbtmc 1-1:16.0: usb_control_msg returned -71
[  834.556884][T12271] usb 1-1: USB disconnect, device number 37
[  834.761801][T10022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  834.853818][T10022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  834.892905][T10022] bond0 (unregistering): Released all slaves
[  834.936293][T12893] chnl_net:caif_netlink_parms(): no params data found
[  835.051445][ T5112] Bluetooth: hci2: command tx timeout
[  835.485927][T12940] netlink: 'syz.5.1814': attribute type 1 has an invalid length.
[  835.485964][T12940] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1814'.
[  835.881543][T10022] hsr_slave_0: left promiscuous mode
[  835.906762][T10022] hsr_slave_1: left promiscuous mode
[  835.907605][T10022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  835.960677][T10022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  836.991503][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  836.994848][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  837.002796][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  837.031175][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  837.041955][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  837.136336][ T5112] Bluetooth: hci2: command tx timeout
[  837.400782][T10022] team0 (unregistering): Port device team_slave_1 removed
[  837.441330][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  837.445419][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  837.449162][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  837.471743][T10022] team0 (unregistering): Port device team_slave_0 removed
[  837.550283][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  837.654179][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  839.132780][ T5112] Bluetooth: hci4: command tx timeout
[  839.339164][T12893] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.339347][T12893] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.339518][T12893] bridge_slave_0: entered allmulticast mode
[  839.406847][T12893] bridge_slave_0: entered promiscuous mode
[  839.418622][T12951] lo speed is unknown, defaulting to 1000
[  839.710598][T12893] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.710709][T12893] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.710901][T12893] bridge_slave_1: entered allmulticast mode
[  839.715797][T12893] bridge_slave_1: entered promiscuous mode
[  839.717705][T12953] lo speed is unknown, defaulting to 1000
[  839.769990][ T5112] Bluetooth: hci6: command tx timeout
[  840.107818][T12893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  840.265965][T12893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.606648][T12893] team0: Port device team_slave_0 added
[  840.675514][T12893] team0: Port device team_slave_1 added
[  840.928756][T12893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  840.928775][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  840.928803][T12893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  841.210228][ T5112] Bluetooth: hci4: command tx timeout
[  841.700918][T12893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  841.700937][T12893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  841.700966][T12893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  841.850773][ T5112] Bluetooth: hci6: command tx timeout
[  842.150504][ T5966] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  842.310008][ T5966] usb 6-1: Using ep0 maxpacket: 8
[  842.478178][ T5966] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  842.478241][ T5966] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  842.478266][ T5966] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  842.478293][ T5966] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  842.478318][ T5966] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  842.478361][ T5966] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  842.478386][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.663404][ T5112] Bluetooth: hci4: command tx timeout
[  843.691354][ T5966] usb 6-1: GET_CAPABILITIES returned 0
[  843.691416][ T5966] usbtmc 6-1:16.0: can't read capabilities
[  843.981609][ T5112] Bluetooth: hci6: command tx timeout
[  844.071546][T12893] hsr_slave_0: entered promiscuous mode
[  844.075653][T12893] hsr_slave_1: entered promiscuous mode
[  844.219120][ T5112] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  844.219155][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  844.219193][ T5112] Tainted: [L]=SOFTLOCKUP
[  844.219202][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  844.219217][ T5112] Workqueue: hci3 hci_rx_work
[  844.219254][ T5112] Call Trace:
[  844.219264][ T5112]  <TASK>
[  844.219274][ T5112]  dump_stack_lvl+0xe8/0x150
[  844.219314][ T5112]  sysfs_create_dir_ns+0x271/0x2a0
[  844.219340][ T5112]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  844.219369][ T5112]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  844.219399][ T5112]  ? rt_spin_unlock+0x160/0x200
[  844.219436][ T5112]  kobject_add_internal+0x631/0xd10
[  844.219469][ T5112]  kobject_add+0x163/0x240
[  844.219519][ T5112]  ? __pfx_kobject_add+0x10/0x10
[  844.219561][ T5112]  ? get_device_parent+0x370/0x3a0
[  844.219602][ T5112]  device_add+0x408/0xb80
[  844.219641][ T5112]  hci_conn_add_sysfs+0xd5/0x210
[  844.219674][ T5112]  le_conn_complete_evt+0xf1d/0x1430
[  844.219722][ T5112]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  844.219758][ T5112]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  844.219790][ T5112]  ? lockdep_hardirqs_on+0x7a/0x110
[  844.219823][ T5112]  ? skb_pull_data+0xfb/0x200
[  844.219862][ T5112]  hci_le_conn_complete_evt+0x187/0x470
[  844.219905][ T5112]  hci_event_packet+0x7af/0x12c0
[  844.219939][ T5112]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  844.219977][ T5112]  ? __pfx_hci_event_packet+0x10/0x10
[  844.219998][ T5112]  ? rt_spin_unlock+0x14f/0x200
[  844.220023][ T5112]  ? hci_send_to_monitor+0xe2/0x590
[  844.220042][ T5112]  hci_rx_work+0x3ee/0x1030
[  844.220070][ T5112]  ? process_scheduled_works+0xa25/0x1830
[  844.220095][ T5112]  process_scheduled_works+0xb02/0x1830
[  844.220140][ T5112]  ? __pfx_process_scheduled_works+0x10/0x10
[  844.220167][ T5112]  ? assign_work+0x3d5/0x5e0
[  844.220194][ T5112]  worker_thread+0xa50/0xfc0
[  844.220239][ T5112]  kthread+0x388/0x470
[  844.220256][ T5112]  ? __pfx_worker_thread+0x10/0x10
[  844.220278][ T5112]  ? __pfx_kthread+0x10/0x10
[  844.220296][ T5112]  ret_from_fork+0x51e/0xb90
[  844.220322][ T5112]  ? __pfx_ret_from_fork+0x10/0x10
[  844.220344][ T5112]  ? __switch_to+0xc7d/0x1450
[  844.220366][ T5112]  ? __pfx_kthread+0x10/0x10
[  844.220384][ T5112]  ret_from_fork_asm+0x1a/0x30
[  844.220417][ T5112]  </TASK>
[  844.228942][ T5112] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  844.228982][ T5112] Bluetooth: hci3: failed to register connection device
[  845.360918][T12953] chnl_net:caif_netlink_parms(): no params data found
[  845.697612][ T5112] Bluetooth: hci4: command tx timeout
[  846.021383][ T5112] Bluetooth: hci6: command tx timeout
[  846.250515][ T5112] Bluetooth: hci3: command 0x0406 tx timeout
[  847.671563][T12951] chnl_net:caif_netlink_parms(): no params data found
[  848.340926][ T5112] Bluetooth: hci3: command 0x0406 tx timeout
[  849.050338][T12989] usbtmc 6-1:16.0: usb_control_msg returned -110
[  849.119257][ T5971] usb 6-1: USB disconnect, device number 23
[  849.360243][T12953] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.360369][T12953] bridge0: port 1(bridge_slave_0) entered disabled state
[  849.360612][T12953] bridge_slave_0: entered allmulticast mode
[  849.366666][T12953] bridge_slave_0: entered promiscuous mode
[  849.439444][T12953] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.439597][T12953] bridge0: port 2(bridge_slave_1) entered disabled state
[  849.439774][T12953] bridge_slave_1: entered allmulticast mode
[  849.471590][T12953] bridge_slave_1: entered promiscuous mode
[  849.747209][T12951] bridge0: port 1(bridge_slave_0) entered blocking state
[  849.747358][T12951] bridge0: port 1(bridge_slave_0) entered disabled state
[  849.747517][T12951] bridge_slave_0: entered allmulticast mode
[  849.749601][T12951] bridge_slave_0: entered promiscuous mode
[  849.813101][T12953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  849.817221][T12951] bridge0: port 2(bridge_slave_1) entered blocking state
[  849.836448][T12951] bridge0: port 2(bridge_slave_1) entered disabled state
[  849.836725][T12951] bridge_slave_1: entered allmulticast mode
[  849.839573][T12951] bridge_slave_1: entered promiscuous mode
[  850.368121][T12953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  850.509801][T13049] kAFS: unable to lookup cell '('
[  851.981851][   T60] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201'
[  851.981884][   T60] CPU: 0 UID: 0 PID: 60 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  851.981915][   T60] Tainted: [L]=SOFTLOCKUP
[  851.981923][   T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  851.981937][   T60] Workqueue: hci5 hci_rx_work
[  851.981973][   T60] Call Trace:
[  851.981981][   T60]  <TASK>
[  851.981991][   T60]  dump_stack_lvl+0xe8/0x150
[  851.982028][   T60]  sysfs_create_dir_ns+0x271/0x2a0
[  851.982054][   T60]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  851.982082][   T60]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  851.982110][   T60]  ? rt_spin_unlock+0x160/0x200
[  851.982139][   T60]  kobject_add_internal+0x631/0xd10
[  851.982172][   T60]  kobject_add+0x163/0x240
[  851.982213][   T60]  ? __pfx_kobject_add+0x10/0x10
[  851.982257][   T60]  ? get_device_parent+0x370/0x3a0
[  851.982296][   T60]  device_add+0x408/0xb80
[  851.982334][   T60]  hci_conn_add_sysfs+0xd5/0x210
[  851.982364][   T60]  le_conn_complete_evt+0xf1d/0x1430
[  851.982410][   T60]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  851.982446][   T60]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  851.982478][   T60]  ? lockdep_hardirqs_on+0x7a/0x110
[  851.982512][   T60]  ? skb_pull_data+0xfb/0x200
[  851.982551][   T60]  hci_le_conn_complete_evt+0x187/0x470
[  851.982593][   T60]  hci_event_packet+0x7af/0x12c0
[  851.982629][   T60]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  851.982662][   T60]  ? __pfx_hci_event_packet+0x10/0x10
[  851.982690][   T60]  ? rt_spin_unlock+0x14f/0x200
[  851.982724][   T60]  ? hci_send_to_monitor+0xe2/0x590
[  851.982761][   T60]  hci_rx_work+0x3ee/0x1030
[  851.982804][   T60]  ? process_scheduled_works+0xa25/0x1830
[  851.982840][   T60]  process_scheduled_works+0xb02/0x1830
[  851.982904][   T60]  ? __pfx_process_scheduled_works+0x10/0x10
[  851.982944][   T60]  ? assign_work+0x3d5/0x5e0
[  851.982982][   T60]  worker_thread+0xa50/0xfc0
[  851.983046][   T60]  kthread+0x388/0x470
[  851.983070][   T60]  ? __pfx_worker_thread+0x10/0x10
[  851.983098][   T60]  ? __pfx_kthread+0x10/0x10
[  851.983124][   T60]  ret_from_fork+0x51e/0xb90
[  851.983160][   T60]  ? __pfx_ret_from_fork+0x10/0x10
[  851.983191][   T60]  ? __switch_to+0xc7d/0x1450
[  851.983223][   T60]  ? __pfx_kthread+0x10/0x10
[  851.983248][   T60]  ret_from_fork_asm+0x1a/0x30
[  851.983290][   T60]  </TASK>
[  851.983451][   T60] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  851.983492][   T60] Bluetooth: hci5: failed to register connection device
[  852.625133][T12951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  852.749531][T12953] team0: Port device team_slave_0 added
[  852.773162][T12951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  852.912948][T12953] team0: Port device team_slave_1 added
[  854.355633][ T5112] Bluetooth: hci5: command 0x0406 tx timeout
[  855.159990][ T5885] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  855.245116][T12951] team0: Port device team_slave_0 added
[  855.248032][T12953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  855.248044][T12953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  855.248065][T12953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  855.290972][ T5885] usb 6-1: device descriptor read/64, error -71
[  855.320088][T12953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  855.320103][T12953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  855.320125][T12953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  855.323550][T12951] team0: Port device team_slave_1 added
[  855.530124][ T5885] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  855.680077][ T5885] usb 6-1: device descriptor read/64, error -71
[  856.125217][ T5885] usb usb6-port1: attempt power cycle
[  856.298754][T12951] batman_adv: batadv0: Adding interface: batadv_slave_0
[  856.298768][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.298789][T12951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  856.372955][T12951] batman_adv: batadv0: Adding interface: batadv_slave_1
[  856.372969][T12951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  856.372990][T12951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  856.410030][ T5112] Bluetooth: hci5: command 0x0406 tx timeout
[  856.505717][ T5885] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  856.520956][ T5885] usb 6-1: device descriptor read/8, error -71
[  856.549036][T12953] hsr_slave_0: entered promiscuous mode
[  856.557417][T12953] hsr_slave_1: entered promiscuous mode
[  856.558284][T12953] debugfs: 'hsr0' already exists in 'hsr'
[  856.558307][T12953] Cannot create hsr debugfs directory
[  856.764048][ T5885] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  856.781020][ T5885] usb 6-1: device descriptor read/8, error -71
[  856.891256][ T5885] usb usb6-port1: unable to enumerate USB device
[  857.074876][ T5112] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  857.495300][T13080] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  857.495332][T13080] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  857.495446][T13080] vhci_hcd vhci_hcd.0: Device attached
[  857.498053][T13082] vhci_hcd: connection closed
[  857.500206][   T69] vhci_hcd vhci_hcd.0: stop threads
[  857.500233][   T69] vhci_hcd vhci_hcd.0: release socket
[  857.500273][   T69] vhci_hcd vhci_hcd.0: disconnect device
[  857.791281][T12951] hsr_slave_0: entered promiscuous mode
[  857.792308][T12951] hsr_slave_1: entered promiscuous mode
[  857.793003][T12951] debugfs: 'hsr0' already exists in 'hsr'
[  857.793021][T12951] Cannot create hsr debugfs directory
[  858.124858][T12893] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  858.311376][T12893] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  858.421039][T12893] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  858.568087][T12893] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  858.650877][ T5885] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  858.799963][ T5885] usb 1-1: Using ep0 maxpacket: 32
[  858.803000][ T5885] usb 1-1: config 0 has an invalid interface number: 111 but max is 1
[  858.803029][ T5885] usb 1-1: config 0 has no interface number 1
[  858.806326][ T5885] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  858.806356][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.806376][ T5885] usb 1-1: Product: syz
[  858.806392][ T5885] usb 1-1: Manufacturer: syz
[  858.806407][ T5885] usb 1-1: SerialNumber: syz
[  858.863812][ T5885] usb 1-1: config 0 descriptor??
[  859.091334][ T5885] snd-usb-6fire 1-1:0.111: unable to receive device firmware state.
[  859.091383][ T5885] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -121
[  859.301034][T12271] usb 1-1: USB disconnect, device number 38
[  859.442288][T10022] bridge_slave_1: left allmulticast mode
[  859.442319][T10022] bridge_slave_1: left promiscuous mode
[  859.442566][T10022] bridge0: port 2(bridge_slave_1) entered disabled state
[  859.603952][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1840'.
[  859.604031][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1840'.
[  860.581756][T10022] bridge_slave_0: left allmulticast mode
[  860.581788][T10022] bridge_slave_0: left promiscuous mode
[  860.582042][T10022] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.654438][T10022] bridge_slave_1: left allmulticast mode
[  860.654465][T10022] bridge_slave_1: left promiscuous mode
[  860.654642][T10022] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.746152][T10022] bridge_slave_0: left allmulticast mode
[  860.746187][T10022] bridge_slave_0: left promiscuous mode
[  860.746436][T10022] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.973020][T10803] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  861.147425][T10803] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  861.147459][T10803] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.147481][T10803] usb 6-1: Product: syz
[  861.147497][T10803] usb 6-1: Manufacturer: syz
[  861.147512][T10803] usb 6-1: SerialNumber: syz
[  861.170332][T10803] usb 6-1: config 0 descriptor??
[  862.670033][T12271] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  862.803074][T12271] usb 1-1: device descriptor read/64, error -71
[  862.804045][T10022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  862.864965][T10022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  862.884080][T10022] bond0 (unregistering): Released all slaves
[  863.070250][T12271] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  863.222139][T12271] usb 1-1: device descriptor read/64, error -71
[  863.342202][T12271] usb usb1-port1: attempt power cycle
[  863.493796][T10022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  863.571938][T10022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  863.625126][T10022] bond0 (unregistering): Released all slaves
[  863.691881][T12271] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  863.717324][T12271] usb 1-1: device descriptor read/8, error -71
[  863.765023][T10803] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  863.765055][T10803] peak_usb 6-1:0.0: unable to read PCAN-USB FD firmware info (err -71)
[  863.960191][T12271] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  863.981159][T12271] usb 1-1: device descriptor read/8, error -71
[  864.145541][T12271] usb usb1-port1: unable to enumerate USB device
[  865.437177][T10803] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71
[  865.529184][T10803] usb 6-1: USB disconnect, device number 28
[  865.988357][T13125] cgroup: fork rejected by pids controller in /syz5
[  866.789956][T10022] hsr_slave_0: left promiscuous mode
[  866.833558][T10022] hsr_slave_1: left promiscuous mode
[  866.835591][T10022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  866.917042][T10022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  867.121722][T10022] hsr_slave_0: left promiscuous mode
[  867.162889][T10022] hsr_slave_1: left promiscuous mode
[  867.164062][T10022] batman_adv: batadv0: Removing interface: batadv_slave_0
[  867.191519][T10022] batman_adv: batadv0: Removing interface: batadv_slave_1
[  869.181288][T10803] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  869.732336][T10803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  869.732373][T10803] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  869.732414][T10803] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  869.732439][T10803] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.738008][T10803] usb 6-1: config 0 descriptor??
[  870.144935][T10022] team0 (unregistering): Port device team_slave_1 removed
[  870.231688][T10803] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  870.231729][T10803] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  870.231758][T10803] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  870.231785][T10803] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  870.231812][T10803] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  870.231840][T10803] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  870.231867][T10803] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0
[  870.300742][T10022] team0 (unregistering): Port device team_slave_0 removed
[  870.336954][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  870.337029][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  870.365890][T10803] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  870.502489][T10803] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE
[  871.184658][T10803] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71
[  871.219106][T10803] usb 6-1: USB disconnect, device number 29
[  873.560278][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'.
[  873.560357][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1859'.
[  874.489576][ T5112] Bluetooth: hci5: ACL packet for unknown connection handle 200
[  874.596513][T13293] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[  874.596548][T13293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  874.596653][T13293] vhci_hcd vhci_hcd.0: Device attached
[  874.631195][T10022] team0 (unregistering): Port device team_slave_1 removed
[  874.651809][T13302] vhci_hcd: connection closed
[  874.656798][ T7685] vhci_hcd vhci_hcd.5: stop threads
[  874.656824][ T7685] vhci_hcd vhci_hcd.5: release socket
[  874.656864][ T7685] vhci_hcd vhci_hcd.5: disconnect device
[  874.729427][T10022] team0 (unregistering): Port device team_slave_0 removed
[  875.355223][T12893] 8021q: adding VLAN 0 to HW filter on device bond0
[  875.396428][T12893] 8021q: adding VLAN 0 to HW filter on device team0
[  875.414370][T10069] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.415276][T10069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  875.487096][T10069] bridge0: port 2(bridge_slave_1) entered blocking state
[  875.487240][T10069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  877.163532][T13328] kAFS: unable to lookup cell '('
[  877.506872][T12893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  880.027281][T12893] veth0_vlan: entered promiscuous mode
[  880.185721][T12953] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  880.268425][T12953] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  880.312598][T12893] veth1_vlan: entered promiscuous mode
[  880.398889][T12953] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  880.493061][T12953] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  882.575862][T12893] veth0_macvtap: entered promiscuous mode
[  882.595949][T12951] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  884.543369][T12951] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  884.805181][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'.
[  884.805259][T13371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1870'.
[  885.795181][T12951] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  886.000489][T12893] veth1_macvtap: entered promiscuous mode
[  886.021342][T12951] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  886.378896][T12893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  886.476705][T12893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  886.538640][ T7685] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  887.462223][ T7685] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  887.580836][ T7685] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  887.608927][ T7685] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  887.793798][T12953] 8021q: adding VLAN 0 to HW filter on device bond0
[  887.865556][T12953] 8021q: adding VLAN 0 to HW filter on device team0
[  887.915464][T10069] bridge0: port 1(bridge_slave_0) entered blocking state
[  887.916488][T10069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  887.951880][T10019] bridge0: port 2(bridge_slave_1) entered blocking state
[  887.952379][T10019] bridge0: port 2(bridge_slave_1) entered forwarding state
[  887.955665][T12951] 8021q: adding VLAN 0 to HW filter on device bond0
[  888.024935][T12951] 8021q: adding VLAN 0 to HW filter on device team0
[  888.052874][T10019] bridge0: port 1(bridge_slave_0) entered blocking state
[  888.053590][T10019] bridge0: port 1(bridge_slave_0) entered forwarding state
[  888.087781][   T88] bridge0: port 2(bridge_slave_1) entered blocking state
[  888.088501][   T88] bridge0: port 2(bridge_slave_1) entered forwarding state
[  888.711500][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  888.730627][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  888.732141][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  888.733423][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  888.738260][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  888.749193][T10709] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  888.773289][T13393] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11)
[  888.773333][T13393] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  888.773407][T13393] vhci_hcd vhci_hcd.0: Device attached
[  888.786588][T13398] vhci_hcd: connection closed
[  888.821845][   T88] vhci_hcd vhci_hcd.0: stop threads
[  888.821874][   T88] vhci_hcd vhci_hcd.0: release socket
[  888.821914][   T88] vhci_hcd vhci_hcd.0: disconnect device
[  889.295773][ T7685] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.530204][T13396] lo speed is unknown, defaulting to 1000
[  889.752192][ T7685] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.114052][T12953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  891.503809][   T60] Bluetooth: hci0: command tx timeout
[  892.425713][ T7685] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  893.560244][   T60] Bluetooth: hci0: command tx timeout
[  894.436774][ T7685] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.629629][   T60] Bluetooth: hci0: command tx timeout
[  898.135442][T10019] ODEBUG: Out of memory. ODEBUG disabled
[  899.691032][   T60] Bluetooth: hci0: command tx timeout
[  899.873831][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  899.899489][ T5112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  899.907453][ T5112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  899.918638][ T5112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  899.931855][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  900.117476][T13396] chnl_net:caif_netlink_parms(): no params data found
[  900.147384][ T7685] bridge_slave_1: left allmulticast mode
[  900.147414][ T7685] bridge_slave_1: left promiscuous mode
[  900.147670][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state
[  900.738039][ T7685] bridge_slave_0: left allmulticast mode
[  900.738095][ T7685] bridge_slave_0: left promiscuous mode
[  900.738337][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.832039][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  900.835348][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  900.838108][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  900.901219][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  900.902030][ T5112] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  901.380300][ T5885] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  901.397749][   T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  901.569955][   T10] usb 1-1: Using ep0 maxpacket: 8
[  901.574785][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  901.574816][ T5885] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  901.574843][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  901.574867][ T5885] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  901.574909][ T5885] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  901.574933][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.578709][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  901.620993][   T10] usb 1-1: config 4 interface 0 has no altsetting 0
[  901.664582][   T10] usb 1-1: string descriptor 0 read error: -22
[  901.664694][   T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  901.664718][   T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  901.699858][ T5885] usb 6-1: config 0 descriptor??
[  901.750372][   T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  901.795210][   T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  901.795917][   T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  901.796031][   T10] usb 1-1: media controller created
[  901.849565][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  901.884463][ T7685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  901.924267][ T7685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  902.020557][   T60] Bluetooth: hci1: command tx timeout
[  902.430963][ T7685] bond0 (unregistering): Released all slaves
[  902.472448][   T10] zl10353_read_register: readreg error (reg=127, ret==0)
[  902.695651][   T10] usb 1-1: USB disconnect, device number 43
[  902.770747][ T5885] hdpvr 6-1:0.0: firmware version 0x8 dated 
[  903.023439][   T60] Bluetooth: hci2: command tx timeout
[  903.803647][ T5885] hdpvr 6-1:0.0: Could not setup controls
[  903.804346][ T5885] hdpvr 6-1:0.0: registering videodev failed
[  903.872485][ T5885] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71
[  903.900411][ T5885] usb 6-1: USB disconnect, device number 30
[  904.030185][ T7685] hsr_slave_0: left promiscuous mode
[  904.050306][ T7685] hsr_slave_1: left promiscuous mode
[  904.051119][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  904.051139][ T7685] batman_adv: batadv0: Removing interface: batadv_slave_0
[  904.090414][   T60] Bluetooth: hci1: command tx timeout
[  904.107966][ T7685] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  904.107994][ T7685] batman_adv: batadv0: Removing interface: batadv_slave_1
[  904.214359][ T7685] veth1_macvtap: left promiscuous mode
[  904.214430][ T7685] veth0_macvtap: left promiscuous mode
[  904.214588][ T7685] veth1_vlan: left promiscuous mode
[  904.214719][ T7685] veth0_vlan: left promiscuous mode
[  904.229934][ T5885] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  904.927394][ T5885] usb 1-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  904.927428][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.927450][ T5885] usb 1-1: Product: syz
[  904.927466][ T5885] usb 1-1: Manufacturer: syz
[  904.927481][ T5885] usb 1-1: SerialNumber: syz
[  904.977888][ T5885] usb 1-1: config 0 descriptor??
[  905.052948][   T60] Bluetooth: hci2: command tx timeout
[  906.399095][   T60] Bluetooth: hci1: command tx timeout
[  906.810385][    C0] ------------[ cut here ]------------
[  906.810402][    C0] 1
[  906.810418][    C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16
[  906.810465][    C0] Modules linked in:
[  906.810490][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  906.810522][    C0] Tainted: [L]=SOFTLOCKUP
[  906.810531][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  906.810546][    C0] RIP: 0010:stub_timer+0xa/0x20
[  906.810585][    C0] Code: 0f 94 c0 5b 41 5e e9 05 2d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00
[  906.810611][    C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246
[  906.810631][    C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000
[  906.810650][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[  906.810665][    C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100
[  906.810681][    C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000
[  906.810697][    C0] R13: 000000010000ec40 R14: 1ffff9200002af4c R15: ffff8880610c11f0
[  906.810714][    C0] FS:  0000000000000000(0000) GS:ffff888126340000(0000) knlGS:0000000000000000
[  906.810733][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  906.810749][    C0] CR2: 0000001b2f41bff8 CR3: 000000005a53c000 CR4: 00000000003526f0
[  906.810768][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  906.810782][    C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  906.810796][    C0] Call Trace:
[  906.810805][    C0]  <TASK>
[  906.810814][    C0]  call_timer_fn+0x192/0x640
[  906.810841][    C0]  ? __pfx_stub_timer+0x10/0x10
[  906.810861][    C0]  ? call_timer_fn+0xd4/0x640
[  906.810884][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  906.810904][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  906.810957][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  906.810990][    C0]  ? __pfx_stub_timer+0x10/0x10
[  906.811014][    C0]  __run_timer_base+0x6a3/0x9f0
[  906.811069][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  906.811101][    C0]  ? rt_spin_lock+0x1e0/0x400
[  906.811147][    C0]  run_timer_softirq+0xb7/0x170
[  906.811184][    C0]  handle_softirqs+0x1de/0x6f0
[  906.811229][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  906.811266][    C0]  run_ktimerd+0x69/0x100
[  906.811303][    C0]  smpboot_thread_fn+0x541/0xa50
[  906.811341][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  906.811388][    C0]  kthread+0x388/0x470
[  906.811413][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  906.811448][    C0]  ? __pfx_kthread+0x10/0x10
[  906.811475][    C0]  ret_from_fork+0x51e/0xb90
[  906.811513][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  906.811545][    C0]  ? __switch_to+0xc7d/0x1450
[  906.811580][    C0]  ? __pfx_kthread+0x10/0x10
[  906.811606][    C0]  ret_from_fork_asm+0x1a/0x30
[  906.811650][    C0]  </TASK>
[  906.811671][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  906.811691][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  906.811722][    C0] Tainted: [L]=SOFTLOCKUP
[  906.811730][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  906.811744][    C0] Call Trace:
[  906.811752][    C0]  <TASK>
[  906.811762][    C0]  vpanic+0x56c/0xa60
[  906.811799][    C0]  ? __pfx__printk+0x10/0x10
[  906.811825][    C0]  ? __pfx_vpanic+0x10/0x10
[  906.811858][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  906.811891][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  906.811934][    C0]  panic+0xc5/0xd0
[  906.811974][    C0]  ? __pfx_panic+0x10/0x10
[  906.812021][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  906.812050][    C0]  __warn+0x315/0x4f0
[  906.812084][    C0]  ? stub_timer+0xa/0x20
[  906.812107][    C0]  ? stub_timer+0xa/0x20
[  906.812129][    C0]  __report_bug+0x29a/0x540
[  906.812169][    C0]  ? stub_timer+0xa/0x20
[  906.812190][    C0]  ? __pfx___report_bug+0x10/0x10
[  906.812221][    C0]  ? add_lock_to_list+0xc7/0x100
[  906.812250][    C0]  ? lockdep_unlock+0x5d/0xd0
[  906.812283][    C0]  ? __lock_acquire+0x146e/0x2cf0
[  906.812309][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  906.812336][    C0]  ? stub_timer+0xa/0x20
[  906.812356][    C0]  report_bug+0x16a/0x220
[  906.812388][    C0]  ? stub_timer+0xa/0x20
[  906.812406][    C0]  ? stub_timer+0xc/0x20
[  906.812426][    C0]  handle_bug+0x98/0x200
[  906.812464][    C0]  exc_invalid_op+0x1a/0x50
[  906.812501][    C0]  asm_exc_invalid_op+0x1a/0x20
[  906.812524][    C0] RIP: 0010:stub_timer+0xa/0x20
[  906.812545][    C0] Code: 0f 94 c0 5b 41 5e e9 05 2d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00
[  906.812565][    C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246
[  906.812585][    C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000
[  906.812602][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[  906.812617][    C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100
[  906.812632][    C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000
[  906.812649][    C0] R13: 000000010000ec40 R14: 1ffff9200002af4c R15: ffff8880610c11f0
[  906.812673][    C0]  ? __pfx_stub_timer+0x10/0x10
[  906.812696][    C0]  ? stub_timer+0x9/0x20
[  906.812725][    C0]  ? stub_timer+0x9/0x20
[  906.812743][    C0]  call_timer_fn+0x192/0x640
[  906.812766][    C0]  ? __pfx_stub_timer+0x10/0x10
[  906.812786][    C0]  ? call_timer_fn+0xd4/0x640
[  906.812808][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  906.812829][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  906.812875][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  906.812907][    C0]  ? __pfx_stub_timer+0x10/0x10
[  906.812932][    C0]  __run_timer_base+0x6a3/0x9f0
[  906.812991][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  906.813024][    C0]  ? rt_spin_lock+0x1e0/0x400
[  906.813070][    C0]  run_timer_softirq+0xb7/0x170
[  906.813107][    C0]  handle_softirqs+0x1de/0x6f0
[  906.813153][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  906.813188][    C0]  run_ktimerd+0x69/0x100
[  906.813225][    C0]  smpboot_thread_fn+0x541/0xa50
[  906.813264][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  906.813312][    C0]  kthread+0x388/0x470
[  906.813337][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  906.813373][    C0]  ? __pfx_kthread+0x10/0x10
[  906.813400][    C0]  ret_from_fork+0x51e/0xb90
[  906.813437][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  906.813469][    C0]  ? __switch_to+0xc7d/0x1450
[  906.813504][    C0]  ? __pfx_kthread+0x10/0x10
[  906.813531][    C0]  ret_from_fork_asm+0x1a/0x30
[  906.813573][    C0]  </TASK>
[  906.814180][    C0] Kernel Offset: disabled