last executing test programs:

2m4.605652135s ago: executing program 4 (id=633):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000040800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000020000000000330000000200000000000000000000000000ffffac1414aa000000000001000000000000000000000000000020010000000000000000000000000000000004d26c00000000000000ac14142400000000000000000000000000000000000000000c0000000000000000000000ac1e0101000000000000000000000000000004d233"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
socket$kcm(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x20040400)
r3 = socket$tipc(0x1e, 0x2, 0x0)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x76c4c6c54d3d69c, {{0x42, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x4004089)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)

2m2.434181829s ago: executing program 4 (id=643):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40))
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000060", @ANYRES64=r0], 0xb2) (fail_nth: 68)

2m1.278994352s ago: executing program 4 (id=644):
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000a00000000000000000018"], 0x0, 0x4}, 0x94)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0xff97, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x40400c4)

2m0.971686607s ago: executing program 4 (id=647):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x41, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x41, '\x00', 0x0, 0xfffffffffffffffe, 0x41}, {0xff000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)

2m0.643528746s ago: executing program 4 (id=649):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00')
umount2(&(0x7f0000000080)='./file0\x00', 0x8)
r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x9, @pix_mp={0x2, 0x80000001, 0x3631564e, 0xb, 0x8, [{0x2, 0x7fc}, {0x20000, 0x3550}, {0x1, 0x81}, {0x3f5, 0xff800}, {0xd, 0x20004}, {0x7df, 0x6312}, {0xffffffe7, 0x3}, {0x3, 0x9}], 0x0, 0x7, 0x4, 0x2, 0x5}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c00030006000000000000b40800010063707500080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)

2m0.114785042s ago: executing program 4 (id=652):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x37)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x8, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000000)=""/179, 0xb3}, {&(0x7f0000000100)=""/93, 0x5d}], 0x3}, 0x700)

1m44.750820993s ago: executing program 32 (id=652):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x37)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x8, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000000)=""/179, 0xb3}, {&(0x7f0000000100)=""/93, 0x5d}], 0x3}, 0x700)

55.946128894s ago: executing program 1 (id=992):
socket$inet(0x2, 0x3, 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="bf16000000000000b707000000fcf0ff5070000000000000480000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff010011d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcebc7586186fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35eff00006b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba17a647a171c2fc73a8c7541c7ffaafba62195fce77382ae962f30d4a377d760040975a44aa73a4e687d06f96f0987b980f6f883534dfc71ace539eeeb08cff54e0e05d5e0563660a3664c67d0eb9cdf4eab93ab4bf1972a2acc5c5d43dc2f2b66d7493c390d042d896a1ad772f6d4c2cf38ba0"], &(0x7f0000000140)='GPL\x00', 0x511, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newtclass={0x34, 0x28, 0x2, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2, 0x2}, {0xffe9, 0x4}, {0xffe0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @tclass_kind_options=@c_red={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff3, 0xb}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0xf2a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0xb32019a74e55d2de)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$inet(r8, 0x0, 0x20000000)
r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$media(&(0x7f0000000000), 0x8, 0x8000)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
pipe2(&(0x7f00000003c0), 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)

55.698631944s ago: executing program 2 (id=994):
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100006a0000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00020005000300010000000800014000000009080002400000001020000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

55.658818492s ago: executing program 2 (id=995):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fsopen(&(0x7f0000000100)='cifs\x00', 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x5f, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000340)={0x0, 0x8036c0, 0x1000, 0x0, 0xb6}, 0x0, 0x4, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0xf9, 0xff, 0xff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xffffc000)
r3 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

54.79590039s ago: executing program 2 (id=997):
unshare(0x64000600)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010528bd70000000000000000000", @ANYBLOB="0808050000000400140012800900010076657468000000000400028008001300", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40048c5}, 0x4000000)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24048801}, 0x20000001)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

52.784107918s ago: executing program 3 (id=1007):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
socket$kcm(0x2, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0, &(0x7f00000004c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, &(0x7f0000000240))
epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = mq_open(&(0x7f0000000000)='\'\x00', 0x800, 0x2, &(0x7f00000002c0)={0x9, 0x5, 0x200, 0x7})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r6, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1b, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790dbdb1a"}})
syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0)
mq_timedreceive(r5, &(0x7f0000000180)=""/238, 0xee, 0x101, &(0x7f0000000280)={0x0, 0x3938700})

51.52238538s ago: executing program 1 (id=1008):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000160000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

51.224012171s ago: executing program 3 (id=1009):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
recvfrom(r1, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1, &(0x7f0000000640)}, 0x3}], 0x1, 0x23, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xffffffffffffff8c, 0x100)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4, @rand_addr=0x64010101}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = dup2(r3, r4)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={<r7=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000180)={r7, 0xfffe}, 0x8)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r5, 0x40044104, &(0x7f0000000000)=0x5)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x8, 0x4)
sendmmsg$inet(r0, &(0x7f0000001700), 0x0, 0x4000004)

49.258326776s ago: executing program 1 (id=1012):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a00000000"], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50f34, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0xfebf, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x10c}}, 0x8000)
r3 = syz_ublk_setup_io_uring(0x3799, &(0x7f0000000040)={0x0, 0x4233, 0x100, 0x2, 0x158, 0x0, r0}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=<r7=>0x0)
syz_ublk_setup_queues(r0, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x2c9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40000, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0)
close(0x3)
r9 = gettid()
ptrace$pokeuser(0x6, r9, 0x6, 0x9)
landlock_restrict_self(r8, 0xe)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)

48.649520722s ago: executing program 1 (id=1013):
r0 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000a00000000000000000018"], 0x0, 0x4}, 0x94)
sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18290000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x40400c4)

48.59227171s ago: executing program 5 (id=1014):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
accept4(r0, 0x0, 0x0, 0x0)

48.471478216s ago: executing program 2 (id=1015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)

48.189288022s ago: executing program 1 (id=1017):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000"], 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x100, 0x0)

48.134415457s ago: executing program 5 (id=1018):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x41, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x41}, {0x0, '\x00', 0x500, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)

47.994397975s ago: executing program 2 (id=1019):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000200000000000070000000000000000"], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50f34, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0xfebf, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x10c}}, 0x8000)
r3 = syz_ublk_setup_io_uring(0x3799, &(0x7f0000000040)={0x0, 0x4233, 0x100, 0x2, 0x158, 0x0, r0}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=<r7=>0x0)
syz_ublk_setup_queues(r0, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x2c9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40000, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0)
close(0x3)
r9 = gettid()
ptrace$pokeuser(0x6, r9, 0x6, 0x9)
landlock_restrict_self(r8, 0xe)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)

47.790832357s ago: executing program 5 (id=1021):
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10)
recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x2d)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x80000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0xfd}, 0x14)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3c01af1d, 0x3, 0x5, 0xc, 0x9, 0x4, 0x860, 0x49, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r8, 0x25, 0x8, @val=@tcx={@void, @value=r3}}, 0x1c)
setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e20, 0x80000000, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
socket$packet(0x11, 0xa, 0x300)
r9 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1)
writev(r9, 0x0, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
keyctl$clear(0x5, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0)

47.579004894s ago: executing program 0 (id=1022):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x60181)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
timerfd_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xe5, 0x0, 'queue1\x00', 0x10000080})
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1)

47.135319248s ago: executing program 0 (id=1023):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000040800000000000000000000000000000002000000000000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000020000000000330000000200000000000000000000000000ffffac1414aa000000000001000000000000000000000000000020010000000000000000000000000000000004d26c00000000000000ac14142400000000000000000000000000000000000000000c0000000000000000000000ac1e0101000000000000000000000000000004d233"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
socket$kcm(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
unshare(0x20040400)
r3 = socket$tipc(0x1e, 0x2, 0x0)
arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x76c4c6c54d3d69c, {{0x42, 0x3}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000880}, 0x4004089)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
ioctl$MON_IOCQ_URB_LEN(r5, 0x9201)

47.069377798s ago: executing program 3 (id=1024):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x43f6, 0x0, 0x2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x5, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3b}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', <r5=>0x0})
r6 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x5}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0xa}, @TCA_RATE={0x6, 0x5, {0x9, 0xf}}]}, 0x48}}, 0x0)
write$tun(r4, 0x0, 0x1c)
fsmount(r2, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200200000000000000000200000000000000000000000ffffac1e010100020000100000000a00200000000000db526f08c67f8e", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0xa2)
ftruncate(r8, 0x2007ffb)
sendfile(r8, r8, 0x0, 0x1000000201005)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r9, 0x107, 0xb, &(0x7f0000000380)=0xffffffff, 0x4)

45.630016703s ago: executing program 2 (id=1025):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x2b80c00, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0])
io_uring_setup(0x6d1a, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="703436c6d0e13a126bba69b0e42b6d6bc4f1e395a594de1c936fad586a9db82ec28916b598a8c7c6a7f23400cd036ffb91acc408e339a7040157b2af1a190c205c203d2f267e95a9273ac096dd3c0aea8a2a5de0087197dd2a8fa3e626efab0a81c007bd9b0c73c3fc6ecedc3ac3bb6b96e750a81951a100a2fa174a30e111b6d2326e16facce4bd580139f1e62c27ed6c3c6aee771943ad83310d6c391f12ea5ef8e1c70ffdbf416fa08b163e91ed06b0817eab6fe47308aa72ccf43ed2a0c3e6856d664d959417f4c50b99e60d80e4dbb933127be3a9", @ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=r2], 0xfffffffffffffe80)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3)
socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ftruncate(0xffffffffffffffff, 0x5)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000003c000000030a01020000000000000000020000000900"], 0x98}}, 0x0)

34.956703013s ago: executing program 0 (id=1026):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf7}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x100000000000000)

34.95629044s ago: executing program 1 (id=1027):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x77c4, 0x2, 0x0, 0x2de})
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000700)='[\v\xdbX\xcb\x02\xaa\xd8\x17\xfb\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xed\x00\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3T\x11\xaf\xfdP\xfd\x96\xf1\x92\xcf\xd3\xae\xd2\a\x11)\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec0_\xd1\xcd\xd8\n\n\xc8L\xda\xc4\x1c_p)\xf6\xdf\xa8\xa7\xb2)\xe9@\x7f\x04\x96\x14LH\xa1\x89X\x17\xbcD\xeb.`\xf1\xad\x97\xca\a\xb37\v\xc0\x8e\xc5\r\x97\xab3\x98lQ~M\r:1Z\xf6K,\xea\x13\x8e\xc1\xca\xcd\x8d\xf8u2\x8c\"\xc1\xb0C\x97\xd1\xe3\xe7L\bh\xde\xfb\x96\xc8:\xc3\x89z\xfc\xdd\xc6w\x8a\xcc<\xb8,\x1d\xf4\xd6\xa4D\f]\xf0\xa9x0\x13yMP<\x8b\x01\xc1\x9f\xcc\xe0\xde\xdc\x17{\\G\xfb\x11(\x8cF\xa3\x87\xe3\xcd]RQ\xb0\x18\x11\xfe$a\x95\x82\xedVT\xfc\x19j\xb1\x85\xc0\xe10\x94\xfb|d', 0x99668d63aac3bda0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b)
read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1)
keyctl$revoke(0x3, r4)
ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[])
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000)
dup2(r6, r6)
write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn', 0x2f)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8c400, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0)

34.305299836s ago: executing program 3 (id=1028):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]})
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
accept4(r0, 0x0, 0x0, 0x0)

34.107608272s ago: executing program 5 (id=1029):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)

33.354691627s ago: executing program 0 (id=1030):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000080)=0x80000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xce21, 0x280000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xfffbffff}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4000010)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4)
connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x1, 0x68, "e3e76b9ca71d7b85729404f679e5361a893481242dadbc492deeb0906984e0a7c3b7a0ddea2eda5073604d6fe6bcf25b14d32515737b55f49f33e85961ddec0e21aecafd073481050666b974c1eb3ee9210f61c571558e4d6d51dedba818bc43a2b4cd428cf43dfb"})
syz_usb_control_io$uac3(r3, 0x0, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001)
close(r6)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f00000009c0)={0x20, 0xf, 0x2, "abf8"}, 0x0, 0x0, 0x0, 0x0})
lseek(r0, 0x86, 0x1)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x701, 0x0, 0x0, {0x26}}, 0x14}, 0x1, 0x0, 0x0, 0x4044014}, 0x0)
r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000400)=""/62)

33.275454895s ago: executing program 3 (id=1031):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]})
mknod(&(0x7f0000000000)='./file0\x00', 0x80, 0xfffbffff)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe75}, [@generic={0x4, 0x6, 0x3, 0x8, 0xfffffffe}, @alu={0x4, 0x0, 0x3, 0x1, 0x2, 0x54, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0xa, 0x9, 0xb, 0xffffffffffffffc0, 0xfffffffffffffff2}]}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x22, &(0x7f0000000240)=""/34, 0x40f00, 0x41, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0xe, 0x10000, 0x14000000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x4, 0x4, 0x10, 0x7}], 0x10, 0x5}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'ip_vti0\x00', <r4=>0x0, 0x8, 0x40, 0x9, 0x9, {{0x13, 0x4, 0x1, 0x3, 0x4c, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, {[@rr={0x7, 0x17, 0x4e, [@loopback, @private=0xa010100, @loopback, @loopback, @rand_addr=0x64010102]}, @rr={0x7, 0xb, 0xf, [@remote, @empty]}, @timestamp={0x44, 0x10, 0x85, 0x0, 0x0, [0x401, 0x9, 0xd]}, @ra={0x94, 0x4}]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r4, 0x25, 0x13, @void}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0xc)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d61746368000000200002800c00030006000000000000b40800010063707500080002"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)

29.906267894s ago: executing program 5 (id=1032):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r0 = socket$inet6(0xa, 0x2, 0x0)
shutdown(r0, 0x0)
ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000bc0)={0xa, 0x4e20, 0x5, @empty, 0x3}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c00)="f02797625729292b6bd0258b0ff3a2220384a21a04cb7b705184056a804c67dc1c85eef8a90df88b77199ee9a090dd0c7805c576f1408a3bb89dd620eaf4b3c58a9dea64c9d01bbecb596aab00168756c62b374ef75c1b2809da13677681f12d24d06dadb576a1ed8b9c53570931281cc093a015612426efd9e4e23bb1e4c5dcf880b9bd56d5cc72b431f008c01affb450236bb1c11bfdf4c8a7b14a3f6fb23bd89365385f8c1f2c64202665b7c4ab50554299c03afe5431dd6758258e46caca3d465c3dd4cf3931bd32a761aa91fdc19d0e191ae71e745116", 0xd9}], 0x1, &(0x7f0000000d40)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x8, 0x4, 0x2, 0x16, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}}}, @dstopts={{0x68, 0x29, 0x37, {0x29, 0x9, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xc8}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xf4, 0x10, "75d5442c5c1f47c8c15e7d1551faa7d0"}, @hao={0xc9, 0x10, @mcast1}, @pad1, @ra={0x5, 0x2, 0xa}, @calipso={0x7, 0x8, {0x1, 0x0, 0xee, 0x7}}]}}}], 0xa0}}], 0x1, 0x800)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x8, 0x80, 0x6, {0x8, 0xb, 0x1, 0x2, 0x1, 0x26, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa, 0xf6d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x7f, 0x5, {0xa, 0x25, 0x25, 0x9, 0x81, 0xfe01}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0xde, 0x0, {0xa, 0x25, 0x25, 0x200, 0xe, 0x8}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
mmap$IORING_OFF_PBUF_RING(0x0, 0x9, 0x8, 0x50, 0xffffffffffffffff, 0x80e5856a)
add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x4ae, 0xffffffffffffffff)

29.077572297s ago: executing program 33 (id=1025):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0x2}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x2b80c00, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0])
io_uring_setup(0x6d1a, 0x0)
r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
write$binfmt_elf64(r3, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="703436c6d0e13a126bba69b0e42b6d6bc4f1e395a594de1c936fad586a9db82ec28916b598a8c7c6a7f23400cd036ffb91acc408e339a7040157b2af1a190c205c203d2f267e95a9273ac096dd3c0aea8a2a5de0087197dd2a8fa3e626efab0a81c007bd9b0c73c3fc6ecedc3ac3bb6b96e750a81951a100a2fa174a30e111b6d2326e16facce4bd580139f1e62c27ed6c3c6aee771943ad83310d6c391f12ea5ef8e1c70ffdbf416fa08b163e91ed06b0817eab6fe47308aa72ccf43ed2a0c3e6856d664d959417f4c50b99e60d80e4dbb933127be3a9", @ANYRESDEC=0x0, @ANYRES64=r2, @ANYRESOCT=r2], 0xfffffffffffffe80)
close(r3)
execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x8)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3)
socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ftruncate(0xffffffffffffffff, 0x5)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000003c000000030a01020000000000000000020000000900"], 0x98}}, 0x0)

28.667553956s ago: executing program 0 (id=1034):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000020000000000ff025958f3317aaa1226536a120000000000000000000000000001e00000020000000000000000000000e84e20000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc001b0000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a00000000"], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x0, 0x10000000, 0x1, 0x10000000000000}, {0x0, 0x200000, 0x3}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50f34, 0x23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0xfebf, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x10c, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x10c}}, 0x8000)
r3 = syz_ublk_setup_io_uring(0x3799, &(0x7f0000000040)={0x0, 0x4233, 0x100, 0x2, 0x158, 0x0, r0}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=<r7=>0x0)
syz_ublk_setup_queues(r0, r7, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3104, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x200, 0x1, 0x2c9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10000, 0x400000, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40000, 0x3, 0x0, 0x0, r0}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbd, 0x0, 0x0}}, 0x0)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0)
close(0x3)
r9 = gettid()
ptrace$pokeuser(0x6, r9, 0x6, 0x9)
landlock_restrict_self(r8, 0xe)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94)

28.297799739s ago: executing program 3 (id=1035):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440))
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0)
ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x9, 0x0, 0x12, 0x8, 0x40, 0x4, 0x6b, 0x1, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x2, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0xe, 0x9, 0xc, 0x6, 0x4}]})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x1, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0xfffffffffffffffe, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x2, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x20000090)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r11, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0)
ioctl$KVM_SMI(r12, 0xaeb7)
ioctl$KVM_SET_GUEST_DEBUG_x86(r12, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})

23.859690074s ago: executing program 5 (id=1036):
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

23.460984763s ago: executing program 0 (id=1037):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000f, 0x204031, 0xffffffffffffffff, 0x50728000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000087c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x40000000000, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f0000000280)=""/235, 0x20000)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27afecaedfebbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}, 0x4000})

2.464005095s ago: executing program 34 (id=1027):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x77c4, 0x2, 0x0, 0x2de})
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
syz_emit_ethernet(0x66, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000700)='[\v\xdbX\xcb\x02\xaa\xd8\x17\xfb\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xed\x00\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3T\x11\xaf\xfdP\xfd\x96\xf1\x92\xcf\xd3\xae\xd2\a\x11)\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec0_\xd1\xcd\xd8\n\n\xc8L\xda\xc4\x1c_p)\xf6\xdf\xa8\xa7\xb2)\xe9@\x7f\x04\x96\x14LH\xa1\x89X\x17\xbcD\xeb.`\xf1\xad\x97\xca\a\xb37\v\xc0\x8e\xc5\r\x97\xab3\x98lQ~M\r:1Z\xf6K,\xea\x13\x8e\xc1\xca\xcd\x8d\xf8u2\x8c\"\xc1\xb0C\x97\xd1\xe3\xe7L\bh\xde\xfb\x96\xc8:\xc3\x89z\xfc\xdd\xc6w\x8a\xcc<\xb8,\x1d\xf4\xd6\xa4D\f]\xf0\xa9x0\x13yMP<\x8b\x01\xc1\x9f\xcc\xe0\xde\xdc\x17{\\G\xfb\x11(\x8cF\xa3\x87\xe3\xcd]RQ\xb0\x18\x11\xfe$a\x95\x82\xedVT\xfc\x19j\xb1\x85\xc0\xe10\x94\xfb|d', 0x99668d63aac3bda0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b)
read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1)
keyctl$revoke(0x3, r4)
ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[])
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000)
dup2(r6, r6)
write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn', 0x2f)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x8c400, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0)

1.639375627s ago: executing program 35 (id=1037):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000f, 0x204031, 0xffffffffffffffff, 0x50728000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x104)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000087c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0xffffffff85010014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x40000000000, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f00000067c0), 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f0000000280)=""/235, 0x20000)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27afecaedfebbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}, 0x4000})

267.87231ms ago: executing program 36 (id=1035):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440))
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x7, 0x1ffffffffffe, 0x7, 0x8, 0x3}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000180)={0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f17, 0x0, 0x0)
ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x9, 0x0, 0x12, 0x8, 0x40, 0x4, 0x6b, 0x1, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x1ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0xbc, 0x4, 0x2, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0xe, 0x9, 0xc, 0x6, 0x4}]})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x1, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0xfffffffffffffffe, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x2, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x20000090)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r11, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0)
ioctl$KVM_SMI(r12, 0xaeb7)
ioctl$KVM_SET_GUEST_DEBUG_x86(r12, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}})

0s ago: executing program 37 (id=1036):
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)

kernel console output (not intermixed with test programs):

ng interface: batadv_slave_0
[  218.674043][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.674069][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.780420][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'.
[  218.821463][   T43] veth1_macvtap: left promiscuous mode
[  218.821535][   T43] veth0_macvtap: left promiscuous mode
[  218.821649][   T43] veth1_vlan: left promiscuous mode
[  218.821742][   T43] veth0_vlan: left promiscuous mode
[  219.288814][ T5678] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  219.365185][ T8109] netlink: zone id is out of range
[  219.365203][ T8109] netlink: zone id is out of range
[  219.365213][ T8109] netlink: zone id is out of range
[  219.365221][ T8109] netlink: zone id is out of range
[  219.365428][ T8109] netlink: zone id is out of range
[  219.370239][ T8109] netlink: zone id is out of range
[  219.478743][ T5678] usb 3-1: device descriptor read/64, error -71
[  219.569030][   T30] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  219.708379][   T43] team0 (unregistering): Port device team_slave_1 removed
[  219.718756][ T5678] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  219.736387][   T30] usb 4-1: Using ep0 maxpacket: 32
[  219.737274][   T30] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  219.738460][   T30] usb 4-1: config index 0 descriptor too short (expected 19, got 18)
[  219.763287][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.763319][   T30] usb 4-1: Product: syz
[  219.763336][   T30] usb 4-1: Manufacturer: syz
[  219.763352][   T30] usb 4-1: SerialNumber: syz
[  219.766522][   T30] usb 4-1: config 0 descriptor??
[  219.803045][   T30] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  219.803099][   T30] dvb-usb: bulk message failed: -22 (2/0)
[  219.806065][   T43] team0 (unregistering): Port device team_slave_0 removed
[  219.806533][   T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  219.808398][   T30] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  219.808453][   T30] usb 4-1: media controller created
[  219.858734][ T5678] usb 3-1: device descriptor read/64, error -71
[  219.894292][   T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.937647][   T30] usb 4-1: selecting invalid altsetting 7
[  219.937673][   T30] cxusb: set interface failed
[  219.937686][   T30] dvb-usb: bulk message failed: -22 (1/0)
[  219.970417][ T5678] usb usb3-port1: attempt power cycle
[  220.027562][   T30] DVB: Unable to find symbol lgdt330x_attach()
[  220.027591][   T30] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  220.109284][   T30] rc_core: IR keymap rc-dvico-portable not found
[  220.109305][   T30] Registered IR keymap rc-empty
[  220.110908][   T30] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  220.142189][   T30] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input28
[  220.148439][   T30] dvb-usb: schedule remote query interval to 100 msecs.
[  220.148464][   T30] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  220.183929][   T30] usb 4-1: USB disconnect, device number 33
[  220.318961][ T5678] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  220.324434][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2
[  220.348989][ T5678] usb 3-1: device descriptor read/8, error -71
[  220.358242][   T30] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  220.602394][ T5678] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  220.620325][ T5678] usb 3-1: device descriptor read/8, error -71
[  220.720000][ T7972] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  220.737204][ T5678] usb usb3-port1: unable to enumerate USB device
[  220.993172][ T7972] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  221.033849][ T7972] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  221.060166][ T7972] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  221.061132][ T7972] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  221.103294][ T7972] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  221.137094][ T7972] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  221.175531][ T7972] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  221.339419][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3
[  221.574542][ T7972] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.645856][ T7972] 8021q: adding VLAN 0 to HW filter on device team0
[  221.682314][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.682445][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.692593][   T31] kauditd_printk_skb: 93 callbacks suppressed
[  221.692647][   T31] audit: type=1400 audit(1790253241.691:3520): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=8154 comm="syz.0.743"
[  221.752317][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.752431][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.087041][ T7972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.281547][  T192] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  222.301310][ T7972] veth0_vlan: entered promiscuous mode
[  222.342014][ T7972] veth1_vlan: entered promiscuous mode
[  222.430830][  T192] usb 1-1: Using ep0 maxpacket: 32
[  222.433443][  T192] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  222.437250][  T192] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  222.437280][  T192] usb 1-1: config 0 has no interface number 0
[  222.476714][  T192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.476744][  T192] usb 1-1: Product: syz
[  222.476760][  T192] usb 1-1: Manufacturer: syz
[  222.476775][  T192] usb 1-1: SerialNumber: syz
[  222.530919][  T192] usb 1-1: config 0 descriptor??
[  222.546943][ T7972] veth0_macvtap: entered promiscuous mode
[  222.600135][  T192] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  222.600166][  T192] usb 1-1: selecting invalid altsetting 1
[  222.600183][  T192] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  222.602595][ T7972] veth1_macvtap: entered promiscuous mode
[  222.637875][  T192] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  222.651398][  T192] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  222.651490][  T192] usb 1-1: media controller created
[  222.786925][  T192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  222.816882][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.857492][ T7972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.921753][  T192] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  222.921822][  T192] zl10353_read_register: readreg error (reg=127, ret==-71)
[  222.923986][  T192] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  223.013557][ T1109] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.013642][ T1109] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.013679][ T1109] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.013714][ T1109] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.287768][  T192] usb 1-1: USB disconnect, device number 21
[  223.475068][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4
[  223.534557][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.534581][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.761146][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.761171][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  224.139092][  T944] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  224.217580][ T8220] netlink: 388 bytes leftover after parsing attributes in process `syz.5.705'.
[  224.268901][  T944] usb 1-1: device descriptor read/64, error -71
[  224.465055][ T8224] loop2: detected capacity change from 0 to 7
[  224.467433][ T8224] Dev loop2: unable to read RDB block 7
[  224.467480][ T8224]  loop2: unable to read partition table
[  224.468059][ T8224] loop2: partition table beyond EOD, truncated
[  224.468097][ T8224] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  224.518774][  T944] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  224.649263][  T944] usb 1-1: device descriptor read/64, error -71
[  224.713358][ T8231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.760'.
[  224.713495][ T8231] netlink: 64 bytes leftover after parsing attributes in process `syz.2.760'.
[  224.759226][  T944] usb usb1-port1: attempt power cycle
[  225.099275][  T944] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  225.119981][  T944] usb 1-1: device descriptor read/8, error -71
[  225.244694][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.765'.
[  225.368730][  T944] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  225.392111][    T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  225.406847][  T944] usb 1-1: device descriptor read/8, error -71
[  225.509009][  T944] usb usb1-port1: unable to enumerate USB device
[  225.540657][    T9] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  225.542041][    T9] usb 6-1: config 0 has an invalid interface number: 205 but max is 0
[  225.542135][    T9] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  225.542157][    T9] usb 6-1: config 0 has no interface number 0
[  225.542249][    T9] usb 6-1: config 0 interface 205 has no altsetting 0
[  225.545471][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.545497][    T9] usb 6-1: Product: syz
[  225.545513][    T9] usb 6-1: Manufacturer: syz
[  225.545529][    T9] usb 6-1: SerialNumber: syz
[  225.600374][    T9] usb 6-1: config 0 descriptor??
[  225.624200][    T9] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  225.624253][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  225.660138][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  225.661301][    T9] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  225.661357][    T9] usb 6-1: media controller created
[  225.664224][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  225.684071][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  225.684321][    T9] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  225.701766][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input29
[  225.714827][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[  225.714981][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  225.733573][    T9] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  225.832308][ T5710] usb 6-1: USB disconnect, device number 2
[  225.945674][ T5710] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  226.075586][ T8259] netlink: 'syz.1.769': attribute type 39 has an invalid length.
[  226.414729][ T8265] team0: Device ipvlan0 failed to register rx_handler
[  226.471607][ T8267] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3905104562 (31240836496 ns) > initial count (25326494960 ns). Using initial count to start timer.
[  226.798754][  T192] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  226.898765][  T944] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  226.949201][  T192] usb 2-1: Using ep0 maxpacket: 32
[  226.950424][  T192] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  226.952924][  T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.001514][  T192] gspca_main: nw80x-2.14.0 probing 055f:d001
[  227.074416][  T944] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  227.077243][  T944] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  227.077270][  T944] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.077291][  T944] usb 6-1: config 0 has no interface number 0
[  227.077323][  T944] usb 6-1: config 0 interface 2 has no altsetting 0
[  227.099182][  T944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.099256][  T944] usb 6-1: Product: syz
[  227.099296][  T944] usb 6-1: Manufacturer: syz
[  227.099335][  T944] usb 6-1: SerialNumber: syz
[  227.143944][  T944] usb 6-1: config 0 descriptor??
[  227.509354][  T192] gspca_nw80x: reg_w err -110
[  227.509463][  T192] nw80x 2-1:3.0: probe with driver nw80x failed with error -110
[  227.613368][  T192] usb 6-1: USB disconnect, device number 3
[  227.632584][  T192] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  227.666358][   T25] usb 2-1: USB disconnect, device number 21
[  228.104117][ T8298] netlink: 'syz.0.780': attribute type 8 has an invalid length.
[  228.562503][ T8308] capability: warning: `syz.1.782' uses 32-bit capabilities (legacy support in use)
[  228.759781][ T8312] team0: Device ipvlan0 failed to register rx_handler
[  228.959153][  T192] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  229.075596][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.791'.
[  229.088748][  T192] usb 6-1: device descriptor read/64, error -71
[  229.133506][   T31] audit: type=1326 audit(1790253249.141:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.135273][   T31] audit: type=1326 audit(1790253249.141:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.135477][   T31] audit: type=1326 audit(1790253249.141:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.136311][   T31] audit: type=1326 audit(1790253249.141:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.137450][   T31] audit: type=1326 audit(1790253249.141:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.137748][   T31] audit: type=1326 audit(1790253249.141:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.265255][ T8326] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  229.279945][   T31] audit: type=1326 audit(1790253249.281:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.332798][   T31] audit: type=1326 audit(1790253249.341:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.334084][ T8326] bond8 (unregistering): Released all slaves
[  229.335159][   T31] audit: type=1326 audit(1790253249.341:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.342040][   T31] audit: type=1326 audit(1790253249.351:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8327 comm="syz.3.792" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  229.401667][  T192] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  229.554032][  T192] usb 6-1: device descriptor read/64, error -71
[  229.660035][  T192] usb usb6-port1: attempt power cycle
[  229.939426][   T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  229.998789][  T192] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  230.019565][  T192] usb 6-1: device descriptor read/8, error -71
[  230.089956][   T25] usb 3-1: Using ep0 maxpacket: 32
[  230.096236][   T25] usb 3-1: unable to get BOS descriptor or descriptor too short
[  230.096289][   T25] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  230.144685][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.144717][   T25] usb 3-1: Product: syz
[  230.144733][   T25] usb 3-1: Manufacturer: syz
[  230.144749][   T25] usb 3-1: SerialNumber: syz
[  230.263775][  T192] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  230.297241][  T192] usb 6-1: device descriptor read/8, error -71
[  230.399857][  T192] usb usb6-port1: unable to enumerate USB device
[  230.767389][   T25] usb 3-1: USB disconnect, device number 34
[  230.847489][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  231.060310][ T8374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'.
[  231.160008][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.805'.
[  231.501695][ T8396] team0: Device ipvlan0 failed to register rx_handler
[  231.620439][  T192] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  231.769504][  T192] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  231.770577][  T192] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  231.770607][  T192] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.770650][  T192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.978127][  T192] usb 1-1: GET_CAPABILITIES returned 0
[  231.978175][  T192] usbtmc 1-1:16.0: can't read capabilities
[  232.043748][ T8412] FAULT_INJECTION: forcing a failure.
[  232.043748][ T8412] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.043786][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.5.817 Not tainted syzkaller #0 PREEMPT(full) 
[  232.043812][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  232.043826][ T8412] Call Trace:
[  232.043836][ T8412]  <TASK>
[  232.043845][ T8412]  dump_stack_lvl+0xe8/0x150
[  232.043884][ T8412]  should_fail_ex+0x410/0x560
[  232.043917][ T8412]  _copy_from_user+0x2d/0xb0
[  232.043948][ T8412]  ___sys_sendmsg+0x1c6/0x360
[  232.043981][ T8412]  ? __lock_acquire+0x747/0x2de0
[  232.044011][ T8412]  ? __pfx____sys_sendmsg+0x10/0x10
[  232.044080][ T8412]  ? __fget_files+0x2a/0x420
[  232.044110][ T8412]  ? __fget_files+0x3a2/0x420
[  232.044152][ T8412]  __x64_sys_sendmsg+0x1b1/0x290
[  232.044187][ T8412]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  232.044240][ T8412]  do_syscall_64+0x166/0x520
[  232.044268][ T8412]  ? trace_irq_disable+0x3b/0x140
[  232.044290][ T8412]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.044314][ T8412]  ? clear_bhb_loop+0x70/0xc0
[  232.044342][ T8412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.044365][ T8412] RIP: 0033:0x7fdd9bf9e159
[  232.044386][ T8412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.044405][ T8412] RSP: 002b:00007fdd9cdb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  232.044430][ T8412] RAX: ffffffffffffffda RBX: 00007fdd9c225fa0 RCX: 00007fdd9bf9e159
[  232.044448][ T8412] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  232.044463][ T8412] RBP: 00007fdd9cdb4090 R08: 0000000000000000 R09: 0000000000000000
[  232.044478][ T8412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  232.044491][ T8412] R13: 00007fdd9c226038 R14: 00007fdd9c225fa0 R15: 00007fdd9c34fa48
[  232.044535][ T8412]  </TASK>
[  232.126096][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'.
[  232.342618][  T944] usb 1-1: USB disconnect, device number 26
[  232.938891][  T944] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  233.004415][ T8435] netlink: 52 bytes leftover after parsing attributes in process `syz.3.825'.
[  233.004440][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'.
[  233.004460][ T8435] netlink: 52 bytes leftover after parsing attributes in process `syz.3.825'.
[  233.004475][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.825'.
[  233.004492][ T8435] netlink: 52 bytes leftover after parsing attributes in process `syz.3.825'.
[  233.050625][   T30] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  233.092369][  T944] usb 3-1: unable to get BOS descriptor or descriptor too short
[  233.094137][  T944] usb 3-1: not running at top speed; connect to a high speed hub
[  233.094170][  T944] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  233.095509][  T944] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.095535][  T944] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  233.109120][  T944] usb 3-1: string descriptor 0 read error: -22
[  233.109503][  T944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.174434][  T944] usb 3-1: 0:2 : does not exist
[  233.187079][ T8437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.826'.
[  233.200742][   T30] usb 2-1: New USB device found, idVendor=0ce3, idProduct=9374, bcdDevice=ac.3b
[  233.202216][   T30] usb 2-1: config 0 has an invalid interface number: 144 but max is 0
[  233.202241][   T30] usb 2-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config
[  233.202261][   T30] usb 2-1: config 0 has no interface number 0
[  233.202311][   T30] usb 2-1: too many endpoints for config 0 interface 144 altsetting 193: 38, using maximum allowed: 30
[  233.202349][   T30] usb 2-1: config 0 interface 144 altsetting 193 has 0 endpoint descriptors, different from the interface descriptor's value: 38
[  233.202376][   T30] usb 2-1: config 0 interface 144 has no altsetting 0
[  233.202408][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.219225][   T30] usb 2-1: config 0 descriptor??
[  233.285526][   T25] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  233.438803][   T25] usb 1-1: device descriptor read/64, error -71
[  233.502947][   T30] usb 2-1: string descriptor 0 read error: -71
[  233.535194][   T30] usb 2-1: USB disconnect, device number 22
[  233.710670][   T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  233.838865][   T25] usb 1-1: device descriptor read/64, error -71
[  233.949533][   T25] usb usb1-port1: attempt power cycle
[  234.051710][ T8427] netlink: 'syz.2.822': attribute type 1 has an invalid length.
[  234.051776][ T8427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.822'.
[  234.119448][  T944] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  234.132466][  T944] usb 3-1: Warning! Unlikely big volume step count (=24679), linear volume or wrong cval->res?
[  234.132542][  T944] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -5387/19292/1
[  234.157173][  T944] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  234.171948][  T944] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  234.294570][  T944] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  234.299255][   T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  234.327666][   T25] usb 1-1: device descriptor read/8, error -71
[  234.463966][  T944] usb 3-1: USB disconnect, device number 35
[  234.578862][   T25] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  234.611836][   T25] usb 1-1: device descriptor read/8, error -71
[  234.721997][   T25] usb usb1-port1: unable to enumerate USB device
[  235.280138][   T31] kauditd_printk_skb: 74 callbacks suppressed
[  235.280158][   T31] audit: type=1326 audit(1790253255.291:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.280772][   T31] audit: type=1326 audit(1790253255.291:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.281706][   T31] audit: type=1326 audit(1790253255.291:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.282784][   T31] audit: type=1326 audit(1790253255.291:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.285305][   T31] audit: type=1326 audit(1790253255.291:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.285463][   T31] audit: type=1326 audit(1790253255.291:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.285701][   T31] audit: type=1326 audit(1790253255.291:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.285850][   T31] audit: type=1326 audit(1790253255.291:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.287211][   T31] audit: type=1326 audit(1790253255.291:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.549514][   T31] audit: type=1326 audit(1790253255.561:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.5.833" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9bf9e159 code=0x7ffc0000
[  235.986670][ T8481] netlink: 'syz.5.835': attribute type 39 has an invalid length.
[  237.143759][ T8516] ip_tables: iptables: counters copy to user failed while replacing table
[  237.191720][   T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  237.350434][   T25] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  237.352595][   T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  237.352621][   T25] usb 2-1: config 0 has no interface number 0
[  237.371199][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.371305][   T25] usb 2-1: Product: syz
[  237.371348][   T25] usb 2-1: Manufacturer: syz
[  237.371382][   T25] usb 2-1: SerialNumber: syz
[  237.403748][   T25] usb 2-1: config 0 descriptor??
[  237.600768][    T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  237.631374][   T25] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  237.638573][   T25] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  237.639175][   T25] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  237.639303][   T25] usb 2-1: media controller created
[  237.748610][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  237.769751][    T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  237.775261][    T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  237.776105][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.813950][    T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  237.813979][    T9] usb 4-1: Manufacturer: syz
[  237.835507][    T9] usb 4-1: config 0 descriptor??
[  237.895461][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.909279][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.940433][    T9] rc_core: IR keymap rc-hauppauge not found
[  237.940451][    T9] Registered IR keymap rc-empty
[  237.951393][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  237.976899][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30
[  238.021886][   T25] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  238.026177][ T8539] __nla_validate_parse: 1 callbacks suppressed
[  238.027449][ T8539] netlink: 112 bytes leftover after parsing attributes in process `syz.5.848'.
[  238.081400][ T5679] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  238.149938][  T944] usb 4-1: USB disconnect, device number 34
[  238.229499][ T5679] usb 1-1: Using ep0 maxpacket: 32
[  238.234248][ T5679] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  238.234288][ T5679] usb 1-1: no configurations
[  238.234303][ T5679] usb 1-1: can't read configurations, error -22
[  238.338266][   T25] usb 2-1: USB disconnect, device number 23
[  238.358994][ T5679] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  238.508828][ T5679] usb 1-1: Using ep0 maxpacket: 32
[  238.510929][ T5679] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  238.510974][ T5679] usb 1-1: no configurations
[  238.510989][ T5679] usb 1-1: can't read configurations, error -22
[  238.513245][ T5679] usb usb1-port1: attempt power cycle
[  238.852185][ T5679] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  238.869943][ T5679] usb 1-1: Using ep0 maxpacket: 32
[  238.872264][ T5679] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  238.872308][ T5679] usb 1-1: no configurations
[  238.872322][ T5679] usb 1-1: can't read configurations, error -22
[  238.998912][ T5679] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  239.023139][ T5679] usb 1-1: Using ep0 maxpacket: 32
[  239.024084][ T5679] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  239.024126][ T5679] usb 1-1: no configurations
[  239.024140][ T5679] usb 1-1: can't read configurations, error -22
[  239.024448][ T5679] usb usb1-port1: unable to enumerate USB device
[  240.212373][ T8608] team0: Device ipvlan0 failed to register rx_handler
[  241.318776][  T192] usb 1-1: new low-speed USB device number 35 using dummy_hcd
[  241.451106][  T192] usb 1-1: device descriptor read/64, error -71
[  241.689456][  T192] usb 1-1: new low-speed USB device number 36 using dummy_hcd
[  241.725369][ T8654] sg_write: data in/out 352220/136 bytes for SCSI command 0x0-- guessing data in;
[  241.725369][ T8654]    program syz.1.877 not setting count and/or reply_len properly
[  241.726354][ T8654] FAULT_INJECTION: forcing a failure.
[  241.726354][ T8654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.726385][ T8654] CPU: 0 UID: 0 PID: 8654 Comm: syz.1.877 Not tainted syzkaller #0 PREEMPT(full) 
[  241.726408][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  241.726428][ T8654] Call Trace:
[  241.726436][ T8654]  <TASK>
[  241.726446][ T8654]  dump_stack_lvl+0xe8/0x150
[  241.726484][ T8654]  should_fail_ex+0x410/0x560
[  241.726514][ T8654]  _copy_from_iter+0x1d3/0x1660
[  241.726542][ T8654]  ? pfn_valid+0x125/0x4c0
[  241.726667][ T8654]  ? pfn_valid+0x446/0x4c0
[  241.726699][ T8654]  ? __pfx__copy_from_iter+0x10/0x10
[  241.726744][ T8654]  ? bvec_try_merge_page+0x1d4/0x280
[  241.726784][ T8654]  ? bio_add_page+0x2f4/0x700
[  241.726820][ T8654]  copy_page_from_iter+0x219/0x2d0
[  241.726851][ T8654]  blk_rq_map_user_iov+0xcb1/0x1840
[  241.726899][ T8654]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  241.726943][ T8654]  ? import_ubuf+0xfb/0x1d0
[  241.726975][ T8654]  blk_rq_map_user_io+0x2ae/0x440
[  241.727009][ T8654]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  241.727050][ T8654]  ? sg_common_write+0xb2c/0x1310
[  241.727087][ T8654]  ? __mutex_unlock_slowpath+0x731/0x900
[  241.727117][ T8654]  ? alloc_pages_noprof+0x140/0x2b0
[  241.727150][ T8654]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  241.727192][ T8654]  sg_common_write+0xc73/0x1310
[  241.727240][ T8654]  ? __pfx_sg_common_write+0x10/0x10
[  241.727276][ T8654]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  241.727300][ T8654]  ? ___ratelimit+0x584/0x8e0
[  241.727331][ T8654]  sg_write+0xaf3/0xf10
[  241.727370][ T8654]  ? __pfx_sg_write+0x10/0x10
[  241.727402][ T8654]  ? __pfx_aa_file_perm+0x10/0x10
[  241.727469][ T8654]  ? bpf_lsm_file_permission+0x9/0x20
[  241.727497][ T8654]  ? security_file_permission+0x75/0x260
[  241.727520][ T8654]  ? rw_verify_area+0x203/0x4c0
[  241.727552][ T8654]  ? __pfx_sg_write+0x10/0x10
[  241.727579][ T8654]  vfs_write+0x296/0xba0
[  241.727618][ T8654]  ? __pfx_vfs_write+0x10/0x10
[  241.727651][ T8654]  ? __fget_files+0x2a/0x420
[  241.727682][ T8654]  ? __fget_files+0x2a/0x420
[  241.727709][ T8654]  ? __fget_files+0x3a2/0x420
[  241.727739][ T8654]  ? __fget_files+0x2a/0x420
[  241.727777][ T8654]  ksys_write+0x150/0x270
[  241.727814][ T8654]  ? __pfx_ksys_write+0x10/0x10
[  241.727873][ T8654]  do_syscall_64+0x166/0x520
[  241.727900][ T8654]  ? trace_irq_disable+0x3b/0x140
[  241.727922][ T8654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.727945][ T8654]  ? clear_bhb_loop+0x70/0xc0
[  241.727972][ T8654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.727994][ T8654] RIP: 0033:0x7f91ee19e159
[  241.728034][ T8654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.728053][ T8654] RSP: 002b:00007f91ef0ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  241.728078][ T8654] RAX: ffffffffffffffda RBX: 00007f91ee425fa0 RCX: 00007f91ee19e159
[  241.728096][ T8654] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000005
[  241.728111][ T8654] RBP: 00007f91ef0ff090 R08: 0000000000000000 R09: 0000000000000000
[  241.728126][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  241.728140][ T8654] R13: 00007f91ee426038 R14: 00007f91ee425fa0 R15: 00007f91ee54fa48
[  241.728175][ T8654]  </TASK>
[  241.823953][  T192] usb 1-1: device descriptor read/64, error -71
[  241.931639][  T192] usb usb1-port1: attempt power cycle
[  242.299040][  T192] usb 1-1: new low-speed USB device number 37 using dummy_hcd
[  242.319497][  T192] usb 1-1: device descriptor read/8, error -71
[  242.359478][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  242.503859][ T5712] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  242.509781][    T9] usb 2-1: Using ep0 maxpacket: 32
[  242.520392][    T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  242.520508][    T9] usb 2-1: no configurations
[  242.520541][    T9] usb 2-1: can't read configurations, error -22
[  242.580048][  T192] usb 1-1: new low-speed USB device number 38 using dummy_hcd
[  242.586826][ T8668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.884'.
[  242.605016][  T192] usb 1-1: device descriptor read/8, error -71
[  242.650906][ T5712] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  242.651933][ T5712] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  242.654180][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.654206][ T5712] usb 3-1: Product: syz
[  242.654222][ T5712] usb 3-1: Manufacturer: syz
[  242.654238][ T5712] usb 3-1: SerialNumber: syz
[  242.657471][ T5712] usb 3-1: config 0 descriptor??
[  242.658874][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  242.678115][ T5712] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  242.691065][ T5710] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  242.713954][  T192] usb usb1-port1: unable to enumerate USB device
[  242.809201][    T9] usb 2-1: Using ep0 maxpacket: 32
[  242.810003][    T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  242.810045][    T9] usb 2-1: no configurations
[  242.810060][    T9] usb 2-1: can't read configurations, error -22
[  242.811371][    T9] usb usb2-port1: attempt power cycle
[  242.849928][ T5710] usb 6-1: Using ep0 maxpacket: 32
[  242.862763][ T5710] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  242.877632][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.877658][ T5710] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.877686][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.915695][ T5710] usb 6-1: config 0 descriptor??
[  242.931808][ T5710] hub 6-1:0.0: USB hub found
[  242.952507][ T8662] C: renamed from veth1_to_team (while UP)
[  242.956308][ T8662] netlink: 164 bytes leftover after parsing attributes in process `syz.2.881'.
[  243.008482][ T5712] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  243.018360][ T5712] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  243.036099][ T5712] usb 3-1: USB disconnect, device number 36
[  243.124112][ T5710] hub 6-1:0.0: 26 ports detected
[  243.124574][ T5710] hub 6-1:0.0: insufficient power available to use all downstream ports
[  243.159299][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  243.179617][    T9] usb 2-1: Using ep0 maxpacket: 32
[  243.180391][    T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  243.180434][    T9] usb 2-1: no configurations
[  243.180475][    T9] usb 2-1: can't read configurations, error -22
[  243.310253][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  243.331992][    T9] usb 2-1: Using ep0 maxpacket: 32
[  243.332833][    T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  243.332894][    T9] usb 2-1: no configurations
[  243.332904][    T9] usb 2-1: can't read configurations, error -22
[  243.333363][    T9] usb usb2-port1: unable to enumerate USB device
[  243.343870][ T5710] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  243.384918][ T5710] usbhid 6-1:0.0: can't add hid device: -71
[  243.384999][ T5710] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  243.400871][ T5710] usb 6-1: USB disconnect, device number 8
[  243.553077][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.3.888'.
[  243.569612][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.888'.
[  243.929043][ T5710] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  244.083641][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short
[  244.084143][ T5710] usb 4-1: not running at top speed; connect to a high speed hub
[  244.084167][ T5710] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40
[  244.125394][ T5710] usb 4-1: unable to read config index 0 descriptor/start: -61
[  244.125435][ T5710] usb 4-1: can't read configurations, error -61
[  244.257828][ T8710] FAULT_INJECTION: forcing a failure.
[  244.257828][ T8710] name failslab, interval 1, probability 0, space 0, times 0
[  244.257863][ T8710] CPU: 0 UID: 0 PID: 8710 Comm: syz.2.897 Not tainted syzkaller #0 PREEMPT(full) 
[  244.257887][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  244.257901][ T8710] Call Trace:
[  244.257911][ T8710]  <TASK>
[  244.257920][ T8710]  dump_stack_lvl+0xe8/0x150
[  244.257957][ T8710]  should_fail_ex+0x410/0x560
[  244.257986][ T8710]  ? __alloc_skb+0x1db/0x7a0
[  244.258014][ T8710]  should_failslab+0xa8/0x100
[  244.258042][ T8710]  ? __alloc_skb+0x1db/0x7a0
[  244.258068][ T8710]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  244.258103][ T8710]  ? __alloc_skb+0x18d/0x7a0
[  244.258131][ T8710]  ? __alloc_skb+0x1db/0x7a0
[  244.258165][ T8710]  __alloc_skb+0x1db/0x7a0
[  244.258197][ T8710]  netlink_sendmsg+0x5d4/0xb40
[  244.258229][ T8710]  ? __pfx_netlink_sendmsg+0x10/0x10
[  244.258269][ T8710]  ? apparmor_socket_sendmsg+0x98/0x360
[  244.258297][ T8710]  ? __pfx_netlink_sendmsg+0x10/0x10
[  244.258318][ T8710]  sock_sendmsg_nosec+0x13a/0x180
[  244.258346][ T8710]  ____sys_sendmsg+0x54e/0x850
[  244.258383][ T8710]  ? __pfx_____sys_sendmsg+0x10/0x10
[  244.258425][ T8710]  ? import_iovec+0x73/0xa0
[  244.258458][ T8710]  ___sys_sendmsg+0x2a5/0x360
[  244.258488][ T8710]  ? __lock_acquire+0x747/0x2de0
[  244.258514][ T8710]  ? __pfx____sys_sendmsg+0x10/0x10
[  244.258577][ T8710]  ? __fget_files+0x2a/0x420
[  244.258610][ T8710]  ? __fget_files+0x3a2/0x420
[  244.258650][ T8710]  __x64_sys_sendmsg+0x1b1/0x290
[  244.258684][ T8710]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  244.258735][ T8710]  do_syscall_64+0x166/0x520
[  244.258763][ T8710]  ? trace_irq_disable+0x3b/0x140
[  244.258785][ T8710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.258808][ T8710]  ? clear_bhb_loop+0x70/0xc0
[  244.258836][ T8710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.258858][ T8710] RIP: 0033:0x7fce2bd9e159
[  244.258880][ T8710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.258899][ T8710] RSP: 002b:00007fce2cc79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  244.258923][ T8710] RAX: ffffffffffffffda RBX: 00007fce2c025fa0 RCX: 00007fce2bd9e159
[  244.258940][ T8710] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003
[  244.258954][ T8710] RBP: 00007fce2cc79090 R08: 0000000000000000 R09: 0000000000000000
[  244.258968][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.258982][ T8710] R13: 00007fce2c026038 R14: 00007fce2c025fa0 R15: 00007fce2c14fa48
[  244.259016][ T8710]  </TASK>
[  244.259637][ T5710] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  244.458517][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short
[  244.467222][ T5710] usb 4-1: not running at top speed; connect to a high speed hub
[  244.467315][ T5710] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40
[  244.573673][ T5710] usb 4-1: unable to read config index 0 descriptor/start: -61
[  244.573702][ T5710] usb 4-1: can't read configurations, error -61
[  244.576722][ T5710] usb usb4-port1: attempt power cycle
[  244.938833][ T5710] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  244.962282][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short
[  244.963020][ T5710] usb 4-1: not running at top speed; connect to a high speed hub
[  244.963054][ T5710] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40
[  244.966715][ T5710] usb 4-1: unable to read config index 0 descriptor/start: -61
[  244.966753][ T5710] usb 4-1: can't read configurations, error -61
[  245.088940][ T5710] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  245.116924][ T5710] usb 4-1: unable to get BOS descriptor or descriptor too short
[  245.120648][ T5710] usb 4-1: not running at top speed; connect to a high speed hub
[  245.120810][ T5710] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 8.40
[  245.148485][ T5710] usb 4-1: unable to read config index 0 descriptor/start: -61
[  245.148515][ T5710] usb 4-1: can't read configurations, error -61
[  245.153855][ T5710] usb usb4-port1: unable to enumerate USB device
[  246.076900][ T8746] loop2: detected capacity change from 0 to 7
[  246.100142][ T8746] Dev loop2: unable to read RDB block 7
[  246.105423][ T8746]  loop2: unable to read partition table
[  246.105652][ T8746] loop2: partition table beyond EOD, truncated
[  246.105689][ T8746] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  246.292540][ T8748] bond8: option lp_interval: invalid value (18446744071562067969)
[  246.292569][ T8748] bond8: option lp_interval: allowed values 1 - 2147483647
[  246.298263][ T8748] bond8 (unregistering): Released all slaves
[  246.413779][ T8736] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  246.413926][ T8736] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  246.481979][ T8736] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  246.482068][ T8736] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  246.487693][ T8736] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  246.487836][ T8736] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  246.551412][ T8736] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  246.551525][ T8736] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  246.592033][ T8736] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  246.592115][ T8736] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  246.617309][ T8736] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  247.239153][  T944] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  247.358828][ T5679] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  247.388804][  T944] usb 4-1: Using ep0 maxpacket: 32
[  247.389538][  T944] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  247.389589][  T944] usb 4-1: no configurations
[  247.389602][  T944] usb 4-1: can't read configurations, error -22
[  247.498740][ T5679] usb 1-1: device descriptor read/64, error -71
[  247.518681][  T944] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  247.679345][  T944] usb 4-1: Using ep0 maxpacket: 32
[  247.681185][  T944] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  247.681226][  T944] usb 4-1: no configurations
[  247.681241][  T944] usb 4-1: can't read configurations, error -22
[  247.681480][  T944] usb usb4-port1: attempt power cycle
[  247.740014][ T5679] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  247.869082][ T5679] usb 1-1: device descriptor read/64, error -71
[  247.954007][ T5622] Bluetooth: hci0: command 0x0406 tx timeout
[  247.978797][  T192] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  247.979407][ T5679] usb usb1-port1: attempt power cycle
[  248.029065][  T944] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  248.049517][  T944] usb 4-1: Using ep0 maxpacket: 32
[  248.050258][  T944] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  248.050301][  T944] usb 4-1: no configurations
[  248.050316][  T944] usb 4-1: can't read configurations, error -22
[  248.129620][  T192] usb 3-1: Using ep0 maxpacket: 16
[  248.131467][  T192] usb 3-1: New USB device found, idVendor=12d1, idProduct=e155, bcdDevice=ce.aa
[  248.139835][  T192] usb 3-1: config 6 has an invalid interface number: 105 but max is 0
[  248.139909][  T192] usb 3-1: config 6 has no interface number 0
[  248.139985][  T192] usb 3-1: config 6 interface 105 has no altsetting 0
[  248.158972][  T192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.159010][  T192] usb 3-1: Product: syz
[  248.159025][  T192] usb 3-1: Manufacturer: syz
[  248.159041][  T192] usb 3-1: SerialNumber: syz
[  248.185740][  T944] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  248.219553][  T944] usb 4-1: Using ep0 maxpacket: 32
[  248.220368][  T944] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  248.220409][  T944] usb 4-1: no configurations
[  248.220422][  T944] usb 4-1: can't read configurations, error -22
[  248.220681][  T944] usb usb4-port1: unable to enumerate USB device
[  248.319437][ T5679] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  248.339711][ T5679] usb 1-1: device descriptor read/8, error -71
[  248.445808][ T8791] netlink: 112 bytes leftover after parsing attributes in process `syz.1.920'.
[  248.509023][ T5622] Bluetooth: hci2: command 0x0406 tx timeout
[  248.509080][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  248.533398][  T944] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  248.588751][ T5679] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  248.588795][ T5622] Bluetooth: hci4: command 0x0406 tx timeout
[  248.596249][  T192] uvcvideo 3-1:6.105: Found Unit with invalid ID 0
[  248.597492][  T192] uvcvideo 3-1:6.105: probe with driver uvcvideo failed with error -22
[  248.620248][ T5679] usb 1-1: device descriptor read/8, error -71
[  248.622515][  T192] usb 3-1: USB disconnect, device number 37
[  248.669432][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout
[  248.719496][  T944] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  248.720060][  T944] usb 6-1: config 0 has no interfaces?
[  248.723368][  T944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.723394][  T944] usb 6-1: Product: syz
[  248.723410][  T944] usb 6-1: Manufacturer: syz
[  248.723425][  T944] usb 6-1: SerialNumber: syz
[  248.743943][ T5679] usb usb1-port1: unable to enumerate USB device
[  248.753675][  T944] usb 6-1: config 0 descriptor??
[  248.993911][ T8786] mmap: syz.5.919 (8786): VmData 37650432 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[  249.122603][  T944] usb 6-1: USB disconnect, device number 9
[  250.028917][ T5622] Bluetooth: hci0: command 0x0406 tx timeout
[  250.277084][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.926'.
[  250.590554][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  250.590588][ T5622] Bluetooth: hci2: command 0x0406 tx timeout
[  250.669613][ T5619] Bluetooth: hci4: command 0x0406 tx timeout
[  250.750408][ T5619] Bluetooth: hci5: command 0x0c1a tx timeout
[  251.367063][ T8830] bond1 (unregistering): Released all slaves
[  251.597091][ T8848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.940'.
[  251.616012][ T8848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.940'.
[  251.809088][  T192] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  251.961740][  T192] usb 2-1: Using ep0 maxpacket: 32
[  251.963458][  T192] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  251.964880][  T192] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  251.964905][  T192] usb 2-1: config 0 has too many interfaces: 92, using maximum allowed: 32
[  251.964925][  T192] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.964946][  T192] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 92
[  251.964984][  T192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.996650][  T192] usb 2-1: config 0 descriptor??
[  252.057580][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.943'.
[  252.151056][ T8866] team0: Device ipvlan0 failed to register rx_handler
[  252.221994][    T9] usb 2-1: USB disconnect, device number 28
[  252.360294][ T5619] Bluetooth: hci4: unexpected event for opcode 0x0403
[  252.589953][  T192] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  252.739363][  T192] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  252.740440][  T192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.740501][  T192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.742857][  T192] usb 6-1: config 0 descriptor??
[  252.828969][ T5619] Bluetooth: hci5: command 0x0c1a tx timeout
[  252.903469][ T8876] netlink: 104 bytes leftover after parsing attributes in process `syz.2.952'.
[  253.083174][ T8884] netlink: 96 bytes leftover after parsing attributes in process `syz.3.954'.
[  253.198233][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.198274][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.198304][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.198331][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.198358][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.198386][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.198414][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.198441][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.198468][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.198494][  T192] uclogic 0003:5543:0064.0002: unknown main item tag 0x0
[  253.273553][  T192] uclogic 0003:5543:0064.0002: unexpected long global item
[  253.274358][  T192] uclogic 0003:5543:0064.0002: parse failed
[  253.275572][  T192] uclogic 0003:5543:0064.0002: probe with driver uclogic failed with error -22
[  253.353081][   T31] kauditd_printk_skb: 28 callbacks suppressed
[  253.353103][   T31] audit: type=1326 audit(1790253273.361:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.353545][   T31] audit: type=1326 audit(1790253273.361:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.353708][   T31] audit: type=1326 audit(1790253273.361:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.354747][   T31] audit: type=1326 audit(1790253273.361:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.354997][   T31] audit: type=1326 audit(1790253273.361:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.355147][   T31] audit: type=1326 audit(1790253273.361:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.355501][   T31] audit: type=1326 audit(1790253273.361:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.356654][   T31] audit: type=1326 audit(1790253273.361:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.358235][   T31] audit: type=1326 audit(1790253273.361:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.358287][   T31] audit: type=1326 audit(1790253273.361:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8892 comm="syz.0.957" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f414bd9e159 code=0x7ffc0000
[  253.405912][ T5679] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  253.602944][ T5679] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=49.83
[  253.613385][ T5679] usb 4-1: config 0 has an invalid interface number: 88 but max is 0
[  253.613461][ T5679] usb 4-1: config 0 has no interface number 0
[  253.661369][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.661400][ T5679] usb 4-1: Product: syz
[  253.661417][ T5679] usb 4-1: Manufacturer: syz
[  253.661433][ T5679] usb 4-1: SerialNumber: syz
[  253.699244][ T5679] usb 4-1: config 0 descriptor??
[  253.922190][ T5679] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  253.935944][ T5679] gspca_m5602: Failed to find a sensor
[  253.935960][ T5679] ALi m5602 4-1:0.88: ALi m5602 webcam failed
[  253.957549][ T5679] usb 4-1: USB disconnect, device number 43
[  254.228867][ T5710] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  254.378720][ T5710] usb 3-1: Using ep0 maxpacket: 32
[  254.379458][ T5710] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  254.380606][ T5710] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  254.380634][ T5710] usb 3-1: config 0 has too many interfaces: 92, using maximum allowed: 32
[  254.380657][ T5710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.380671][ T5710] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 92
[  254.380698][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.383220][ T5710] usb 3-1: config 0 descriptor??
[  254.602567][  T192] usb 3-1: USB disconnect, device number 38
[  254.808924][ T5710] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  254.960400][ T5710] usb 4-1: not running at top speed; connect to a high speed hub
[  254.960438][ T5710] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  254.961803][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.961865][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.006535][ T5712] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  255.015645][ T5710] gspca_main: spca501-2.14.0 probing 0000:0000
[  255.158744][ T5712] usb 1-1: Using ep0 maxpacket: 16
[  255.159974][ T5712] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  255.189832][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.189858][ T5712] usb 1-1: Product: syz
[  255.189873][ T5712] usb 1-1: Manufacturer: syz
[  255.189887][ T5712] usb 1-1: SerialNumber: syz
[  255.194792][ T5712] usb 1-1: config 0 descriptor??
[  255.198531][ T5710] gspca_spca501: reg write: error -71
[  255.198546][ T5710] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  255.239292][ T5710] spca501 4-1:1.0: probe with driver spca501 failed with error -22
[  255.240518][ T5710] uvcvideo 4-1:1.0: Found UVC 1.00 device <unnamed> (0000:0000)
[  255.244603][ T5710] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  255.245233][ T5710] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  255.245295][ T5710] uvcvideo 4-1:1.1: Failed to initialize the device (-71).
[  255.245882][ T5710] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71
[  255.317810][ T5712] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  255.328387][ T5710] usb 4-1: USB disconnect, device number 44
[  255.337023][ T5712] usb 1-1: Detected FT-X
[  255.428202][    T9] usb 6-1: USB disconnect, device number 10
[  255.588182][ T5712] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  255.598843][ T5712] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  255.599552][ T5712] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  255.629696][ T5712] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  255.637620][ T5712] usb 1-1: USB disconnect, device number 43
[  255.660673][ T5712] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  255.661680][ T5712] ftdi_sio 1-1:0.0: device disconnected
[  255.716006][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  255.716069][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  255.759095][  T192] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  255.909458][  T192] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  255.910633][  T192] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  255.910661][  T192] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  255.910681][  T192] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  255.910725][  T192] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.913051][  T192] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  255.913077][  T192] usb 3-1: Product: syz
[  255.913101][  T192] usb 3-1: Manufacturer: syz
[  255.990016][  T192] cdc_wdm 3-1:1.0: skipping garbage
[  255.990038][  T192] cdc_wdm 3-1:1.0: skipping garbage
[  255.996867][  T192] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  255.996903][  T192] cdc_wdm 3-1:1.0: Unknown control protocol
[  256.037042][ T8939] netlink: 76 bytes leftover after parsing attributes in process `syz.1.974'.
[  256.037197][ T8939] netlink: 64 bytes leftover after parsing attributes in process `syz.1.974'.
[  256.158724][   T30] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  256.321690][   T30] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  256.325759][   T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.325795][   T30] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  256.325815][   T30] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.325850][   T30] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  256.325870][   T30] usb 4-1: config 0 interface 0 has no altsetting 0
[  256.325894][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.328513][   T30] usb 4-1: config 0 descriptor??
[  256.498344][ T5679] usb 3-1: USB disconnect, device number 39
[  256.709610][  T944] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  256.860067][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.983'.
[  256.860160][  T944] usb 2-1: Using ep0 maxpacket: 32
[  256.860913][  T944] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  256.863779][  T944] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  256.863806][  T944] usb 2-1: config 0 has too many interfaces: 92, using maximum allowed: 32
[  256.863829][  T944] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.863849][  T944] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 92
[  256.863887][  T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.895387][  T944] usb 2-1: config 0 descriptor??
[  257.002219][ T8963] bridge1: port 1(dummy0) entered blocking state
[  257.002412][ T8963] bridge1: port 1(dummy0) entered disabled state
[  257.002633][ T8963] dummy0: entered allmulticast mode
[  257.011904][   T30] logitech-djreceiver 0003:046D:C53A.0003: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.3-1/input0
[  257.043417][ T8963] dummy0: entered promiscuous mode
[  257.124976][ T8937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.127360][ T8937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.158966][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.159409][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.172738][   T30] usb 2-1: USB disconnect, device number 29
[  257.192670][  T192] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  257.348701][  T192] usb 1-1: Using ep0 maxpacket: 32
[  257.351215][  T192] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  257.356025][  T192] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  257.356051][  T192] usb 1-1: config 0 has no interface number 0
[  257.356093][  T192] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  257.356116][  T192] usb 1-1: config 0 interface 1 has no altsetting 0
[  257.415227][  T192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.415256][  T192] usb 1-1: Product: syz
[  257.415273][  T192] usb 1-1: Manufacturer: syz
[  257.415289][  T192] usb 1-1: SerialNumber: syz
[  257.445000][  T192] usb 1-1: config 0 descriptor??
[  257.665265][  T192] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  257.689710][  T192] cx231xx 1-1:0.1: Failed to read PCB config
[  257.689781][  T192] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71
[  257.692671][  T192] usb 1-1: USB disconnect, device number 44
[  257.852319][ T8988] netlink: 52 bytes leftover after parsing attributes in process `syz.2.989'.
[  257.852344][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'.
[  257.852381][ T8988] netlink: 52 bytes leftover after parsing attributes in process `syz.2.989'.
[  257.852396][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'.
[  257.852412][ T8988] netlink: 52 bytes leftover after parsing attributes in process `syz.2.989'.
[  257.961061][ T8991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.990'.
[  258.126756][ T8994] syzkaller0: entered promiscuous mode
[  258.126785][ T8994] syzkaller0: entered allmulticast mode
[  258.154731][  T944] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  258.205805][ T8997] netlink: 'syz.2.993': attribute type 8 has an invalid length.
[  258.205829][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.993'.
[  258.319468][  T944] usb 1-1: Using ep0 maxpacket: 32
[  258.333561][  T944] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  258.353479][  T944] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  258.353509][  T944] usb 1-1: config 0 has no interface number 0
[  258.353552][  T944] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  258.353587][  T944] usb 1-1: config 0 interface 1 has no altsetting 0
[  258.388854][   T31] kauditd_printk_skb: 116 callbacks suppressed
[  258.388874][   T31] audit: type=1326 audit(1790253278.381:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.388925][   T31] audit: type=1326 audit(1790253278.381:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.388974][   T31] audit: type=1326 audit(1790253278.401:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.389312][   T31] audit: type=1326 audit(1790253278.401:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.396032][   T31] audit: type=1326 audit(1790253278.401:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.427216][   T31] audit: type=1326 audit(1790253278.401:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.427813][  T944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.427885][  T944] usb 1-1: Product: syz
[  258.427927][  T944] usb 1-1: Manufacturer: syz
[  258.427970][  T944] usb 1-1: SerialNumber: syz
[  258.452672][   T31] audit: type=1326 audit(1790253278.441:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.620980][  T944] usb 1-1: config 0 descriptor??
[  258.624192][ T5679] usb 4-1: reset full-speed USB device number 45 using dummy_hcd
[  258.626935][   T31] audit: type=1326 audit(1790253278.631:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.627887][   T31] audit: type=1326 audit(1790253278.631:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.627935][   T31] audit: type=1326 audit(1790253278.631:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8961 comm="syz.0.982" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f414bd9ddeb code=0x7ffc0000
[  258.955041][  T944] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  258.957935][  T944] cx231xx 1-1:0.1: bad scenario!!!!!
[  258.957935][  T944] config_info=0
[  258.957957][  T944] cx231xx 1-1:0.1: Failed to read PCB config
[  258.990851][ T5710] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  259.139499][ T5710] usb 6-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  259.140517][ T5710] usb 6-1: config 0 has an invalid interface number: 205 but max is 0
[  259.140544][ T5710] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  259.140564][ T5710] usb 6-1: config 0 has no interface number 0
[  259.140594][ T5710] usb 6-1: config 0 interface 205 has no altsetting 0
[  259.194631][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.194659][ T5710] usb 6-1: Product: syz
[  259.194675][ T5710] usb 6-1: Manufacturer: syz
[  259.194691][ T5710] usb 6-1: SerialNumber: syz
[  259.196963][  T944] usb 1-1: USB disconnect, device number 45
[  259.217639][ T5710] usb 6-1: config 0 descriptor??
[  259.253694][ T5710] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  259.253742][ T5710] dvb-usb: bulk message failed: -22 (3/0)
[  259.292178][ T5710] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  259.293136][ T5710] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  259.293200][ T5710] usb 6-1: media controller created
[  259.296607][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  259.406542][ T5710] dvb-usb: bulk message failed: -22 (6/0)
[  259.406631][ T5710] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  259.440420][ T5710] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input31
[  259.442796][ T5710] dvb-usb: schedule remote query interval to 150 msecs.
[  259.442849][ T5710] dvb-usb: bulk message failed: -22 (3/0)
[  259.473620][ T5710] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  259.509544][ T5680] usb 6-1: USB disconnect, device number 11
[  259.622154][ T5680] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  259.871380][   T30] usb 4-1: USB disconnect, device number 45
[  260.089698][   T30] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  260.169385][ T5712] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  260.235664][ T9009] netlink: 'syz.2.997': attribute type 16 has an invalid length.
[  260.235697][ T9009] netlink: 'syz.2.997': attribute type 17 has an invalid length.
[  260.277890][   T30] usb 4-1: Using ep0 maxpacket: 32
[  260.285387][   T30] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  260.291346][   T30] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  260.291421][   T30] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  260.291669][   T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  260.291720][   T30] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 92
[  260.291820][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.330110][ T5712] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  260.331235][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.331266][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.331291][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  260.331333][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.334335][ T5712] usb 1-1: config 0 descriptor??
[  260.578765][ T9017] fuse: Bad value for 'fd'
[  260.603769][ T5680] usb 4-1: USB disconnect, device number 46
[  260.809488][ T5712] hid_parser_main: 64 callbacks suppressed
[  260.809518][ T5712] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  260.809550][ T5712] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  260.865051][ T5712] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  261.001917][ T9031] ip_tables: iptables: counters copy to user failed while replacing table
[  262.341446][ T9009] bond1: left promiscuous mode
[  262.341464][ T9009] bridge1: left promiscuous mode
[  262.344001][ T9009] vlan2: left allmulticast mode
[  262.344016][ T9009] bond1: left allmulticast mode
[  262.344026][ T9009] bridge1: left allmulticast mode
[  262.348448][ T9009] bond2: left promiscuous mode
[  262.348464][ T9009] bridge2: left promiscuous mode
[  262.396312][ T9009] vlan3: left allmulticast mode
[  262.396336][ T9009] bond2: left allmulticast mode
[  262.396351][ T9009] bridge2: left allmulticast mode
[  262.422015][ T9037] bridge0: port 3(veth0_to_bridge) entered blocking state
[  262.422190][ T9037] bridge0: port 3(veth0_to_bridge) entered disabled state
[  262.422320][ T9037] veth0_to_bridge: entered allmulticast mode
[  262.424753][ T9037] veth0_to_bridge: entered promiscuous mode
[  262.424907][ T9037] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  262.425621][ T9037] bridge0: port 3(veth0_to_bridge) entered blocking state
[  262.425746][ T9037] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  262.691290][ T1659] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  262.691637][ T1659] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  262.739391][ T7343] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  263.410352][ T5679] usb 1-1: USB disconnect, device number 46
[  264.492201][ T3347] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  264.656834][ T7343] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  264.657088][ T7343] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  264.680718][ T5679] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  265.166713][ T9056] __nla_validate_parse: 2 callbacks suppressed
[  265.166736][ T9056] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1011'.
[  265.211964][ T9056] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1011'.
[  265.254675][   T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  265.556849][ T5679] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  265.599731][    C0] sched: DL replenish lagged too much
[  265.908352][ T9064] team0: Device ipvlan0 failed to register rx_handler
[  266.201105][ T5679] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  266.358999][ T5679] usb 2-1: Using ep0 maxpacket: 32
[  266.362652][ T5679] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  266.365921][ T5679] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  266.365947][ T5679] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  266.365998][ T5679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.366019][ T5679] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 92
[  266.366056][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.707975][ T5679] usb 2-1: USB disconnect, device number 30
[  268.278801][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  275.549069][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  277.348821][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  279.958973][   T31] kauditd_printk_skb: 78 callbacks suppressed
[  279.958996][   T31] audit: type=1326 audit(1790253299.941:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  279.959045][   T31] audit: type=1326 audit(1790253299.941:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  279.959091][   T31] audit: type=1326 audit(1790253299.951:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  279.959137][   T31] audit: type=1326 audit(1790253299.951:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  279.959182][   T31] audit: type=1326 audit(1790253299.951:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  279.959227][   T31] audit: type=1326 audit(1790253299.961:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  279.959272][   T31] audit: type=1326 audit(1790253299.961:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  279.968353][   T31] audit: type=1326 audit(1790253299.971:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  280.000220][   T31] audit: type=1326 audit(1790253299.971:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  280.000278][   T31] audit: type=1326 audit(1790253300.011:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1028" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bd9f9e159 code=0x7ffc0000
[  280.712080][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1025'.
[  280.730424][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  282.433273][ T9102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1025'.
[  284.052261][  T944] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  284.082393][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  284.618863][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!!
[  284.638604][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  289.368730][ T5679] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  289.898756][ T5679] usb 6-1: Using ep0 maxpacket: 32
[  290.101702][ T5679] usb 6-1: device descriptor read/all, error -71
[  290.270401][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  290.421531][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  290.425751][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  290.426929][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  290.428140][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  290.429547][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  292.679001][ T5619] Bluetooth: hci3: command tx timeout
[  294.759086][ T5622] Bluetooth: hci3: command tx timeout
[  296.838871][ T5619] Bluetooth: hci3: command tx timeout
[  298.918808][ T5619] Bluetooth: hci3: command tx timeout
[  316.573804][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  316.588129][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  316.599561][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  316.624891][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  316.637170][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.787115][ T5619] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  316.797062][ T5619] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  316.822216][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.841295][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.844684][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.846109][ T5619] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  316.855979][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.895086][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  316.972239][ T5622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  317.159235][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  317.159319][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  317.192838][ T5622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  317.813096][ T4936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.825940][ T4936] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.827453][ T4936] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.847695][ T4936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  317.848368][ T4936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  318.428794][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  318.832225][ T4936] Bluetooth: hci7: command tx timeout
[  319.308916][ T4936] Bluetooth: hci8: command tx timeout
[  319.549035][ T4936] Bluetooth: hci6: command tx timeout
[  320.828963][ T4936] Bluetooth: hci2: command tx timeout
[  320.908890][ T4936] Bluetooth: hci7: command tx timeout
[  321.388836][ T4936] Bluetooth: hci8: command tx timeout
[  321.628840][ T4936] Bluetooth: hci6: command tx timeout
[  322.292070][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.325188][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.355361][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.385031][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.415991][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.446161][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.467004][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.487822][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.509076][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.530452][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  322.908993][ T4936] Bluetooth: hci2: command tx timeout
[  322.988734][ T5622] Bluetooth: hci7: command tx timeout
[  327.314990][    C0] net_ratelimit: 226 callbacks suppressed
[  327.315008][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  327.336515][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  327.357205][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  327.378033][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  327.392655][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  327.393178][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  327.393736][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  327.394182][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  327.394509][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  327.394950][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.318691][    C1] net_ratelimit: 8357 callbacks suppressed
[  332.318715][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.319033][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.319462][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.319770][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.320205][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.326614][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  332.328676][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.329128][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.329416][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.329814][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.328685][    C1] net_ratelimit: 8406 callbacks suppressed
[  337.328709][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.329191][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.329511][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.329940][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.330287][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.330721][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.331025][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.331460][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.331767][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.332194][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  339.658234][ T5622] Bluetooth: hci8: command tx timeout
[  339.681701][ T5622] Bluetooth: hci6: command tx timeout
[  339.681738][ T5622] Bluetooth: hci7: command tx timeout
[  342.338689][    C1] net_ratelimit: 10268 callbacks suppressed
[  342.338713][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.339049][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.339530][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.339855][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.340340][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.340679][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.341173][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.341536][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.342009][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.342342][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.385941][ T5622] Bluetooth: hci8: command tx timeout
[  342.385983][ T5622] Bluetooth: hci2: command tx timeout
[  342.386009][ T5622] Bluetooth: hci6: command tx timeout
[  344.468892][ T4936] Bluetooth: hci2: command tx timeout
[  347.350333][    C1] net_ratelimit: 12258 callbacks suppressed
[  347.350357][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.350709][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.351179][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.351521][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.351989][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.352323][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.352800][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.353176][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.353655][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.354010][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.358940][    C1] net_ratelimit: 12564 callbacks suppressed
[  352.358976][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.359417][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.359735][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.360166][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.360535][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.360998][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.361318][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.361775][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.362099][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.362574][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.368687][    C1] net_ratelimit: 13387 callbacks suppressed
[  357.368713][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.369023][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.369458][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.369799][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.370248][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.370613][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.371092][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.371453][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.371893][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.372199][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.378617][    C1] net_ratelimit: 13330 callbacks suppressed
[  362.378642][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.379098][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.379449][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.379927][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.380229][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.380671][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.380978][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.381447][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.381760][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.382191][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.388732][    C1] net_ratelimit: 7216 callbacks suppressed
[  367.388756][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.390044][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.390348][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.391672][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.392034][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.393345][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.393646][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.394929][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.395276][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.396644][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.398872][    C1] net_ratelimit: 6121 callbacks suppressed
[  372.398898][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.399204][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.400544][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.400848][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.402260][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.402570][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.403797][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.404083][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.405409][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.405782][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.409851][    C1] net_ratelimit: 5900 callbacks suppressed
[  377.409873][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.410202][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.411727][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.412060][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.413475][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.413785][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.415323][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.415655][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.417195][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.417504][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  378.597286][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  379.244270][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  379.257399][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  382.419900][    C1] net_ratelimit: 5541 callbacks suppressed
[  382.419925][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.420233][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.421654][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.421973][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.423339][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.423386][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  382.423645][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.424944][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.425316][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.427333][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.428819][    C1] net_ratelimit: 6532 callbacks suppressed
[  387.428844][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.429257][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  387.430701][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.431046][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.431508][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  387.433026][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.433386][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.433811][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  387.435296][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  387.435629][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.439713][    C0] net_ratelimit: 6850 callbacks suppressed
[  392.439738][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  392.439981][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.440396][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.440824][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  392.442291][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.442623][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.443062][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  392.444585][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.444919][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  392.445345][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  397.449765][    C1] net_ratelimit: 6865 callbacks suppressed
[  397.449790][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.450208][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.450727][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  397.452497][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.452912][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.453423][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  397.455169][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.458632][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  397.459162][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  397.460896][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.458635][    C1] net_ratelimit: 6912 callbacks suppressed
[  402.458661][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  402.460154][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.460486][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.460886][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  402.462380][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.462738][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.463149][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  402.464658][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.465006][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  402.465416][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  407.469522][    C0] net_ratelimit: 6682 callbacks suppressed
[  407.469548][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  407.469701][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.470058][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.470481][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  407.472040][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.472416][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.472832][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  407.474313][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.474677][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  407.475148][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  412.478679][    C1] net_ratelimit: 6903 callbacks suppressed
[  412.478705][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  412.478709][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:2e:c6:b0:3b:d7:b9, vlan:0)
[  412.480182][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.480515][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.480946][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  412.482417][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.482995][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.483398][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  412.484960][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  412.485296][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.489625][    C1] net_ratelimit: 6850 callbacks suppressed
[  417.489652][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.489994][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.490411][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  417.491828][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.492156][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.492566][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  417.494163][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.494510][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  417.494922][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  417.496380][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  418.157211][ T4936] Bluetooth: hci3: command 0x0406 tx timeout
[  422.499213][    C1] net_ratelimit: 6852 callbacks suppressed
[  422.499238][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.499595][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.499985][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  422.501382][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.501692][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.502153][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  422.503483][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.503784][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  422.504173][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  422.505510][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.508770][    C1] net_ratelimit: 6697 callbacks suppressed
[  427.508799][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.509166][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  427.510427][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.510750][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.511087][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  427.512421][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.512722][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.513106][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  427.514483][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  427.514794][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.518680][    C1] net_ratelimit: 6757 callbacks suppressed
[  432.518705][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.519117][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  432.520615][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.520952][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.521366][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  432.522889][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.523246][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.523676][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  432.525199][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  432.525595][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.530484][    C1] net_ratelimit: 7072 callbacks suppressed
[  437.530512][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.530853][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.531257][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  437.532787][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.533142][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.533548][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  437.535007][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.535341][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  437.535796][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  437.537313][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  440.175684][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  440.189289][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  442.538843][    C1] net_ratelimit: 6834 callbacks suppressed
[  442.538869][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.539238][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.539657][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  442.541118][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.541513][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.541903][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  442.544002][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.544321][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  442.544704][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  442.546027][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  443.758808][ T7908] Bluetooth: hci2: command 0x0406 tx timeout
[  443.758910][ T7908] Bluetooth: hci8: command 0x0406 tx timeout
[  443.758959][ T7908] Bluetooth: hci6: command 0x0406 tx timeout
[  443.759005][ T7908] Bluetooth: hci7: command 0x0406 tx timeout
[  447.549320][    C1] net_ratelimit: 6789 callbacks suppressed
[  447.549345][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.549718][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.550135][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  447.551659][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.552007][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.552466][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  447.554029][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.554377][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  447.554822][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  447.556336][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.558910][    C1] net_ratelimit: 6820 callbacks suppressed
[  452.558935][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.559280][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.559705][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  452.561397][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.561791][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.562201][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  452.563743][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.564088][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  452.564513][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  452.566019][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.569472][    C1] net_ratelimit: 6819 callbacks suppressed
[  457.569495][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.569803][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.570182][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  457.571615][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.571961][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.572335][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  457.573824][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.574166][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  457.574576][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  457.576273][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.579504][    C1] net_ratelimit: 6709 callbacks suppressed
[  462.579528][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.579867][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.580289][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  462.581792][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.582171][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.582577][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  462.584004][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.584317][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  462.584694][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  462.586160][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.588840][    C1] net_ratelimit: 6804 callbacks suppressed
[  467.588863][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.589233][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.589619][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  467.591027][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.591351][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.591750][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  467.593251][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.593584][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.594011][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  467.595425][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  467.881691][   T32] INFO: task syz-executor:9134 blocked for more than 144 seconds.
[  467.881721][   T32]       Not tainted syzkaller #0
[  467.881733][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  467.881744][   T32] task:syz-executor    state:D stack:26128 pid:9134  tgid:9134  ppid:1      task_flags:0x400140 flags:0x00080002
[  467.881887][   T32] Call Trace:
[  467.881920][   T32]  <TASK>
[  467.881935][   T32]  __schedule+0x17db/0x58f0
[  467.881988][   T32]  ? clockevents_program_event+0x491/0x630
[  467.882035][   T32]  ? __pfx___schedule+0x10/0x10
[  467.882070][   T32]  ? schedule+0x90/0x2b0
[  467.882098][   T32]  schedule+0x164/0x2b0
[  467.882125][   T32]  schedule_preempt_disabled+0x13/0x30
[  467.882151][   T32]  __mutex_lock+0x7c1/0x1550
[  467.882185][   T32]  ? __mutex_lock+0x5d4/0x1550
[  467.882217][   T32]  ? inet_rtm_newaddr+0x470/0x19f0
[  467.882254][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  467.882295][   T32]  ? __nla_parse+0x40/0x60
[  467.882330][   T32]  inet_rtm_newaddr+0x470/0x19f0
[  467.882365][   T32]  ? __kernel_text_address+0xd/0x30
[  467.882392][   T32]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  467.882423][   T32]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  467.882487][   T32]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  467.882517][   T32]  rtnetlink_rcv_msg+0x802/0xc00
[  467.882544][   T32]  ? netlink_sendmsg+0x5d4/0xb40
[  467.882567][   T32]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  467.882593][   T32]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  467.882622][   T32]  ? __lock_acquire+0x747/0x2de0
[  467.882656][   T32]  netlink_rcv_skb+0x226/0x4a0
[  467.882689][   T32]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  467.882718][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  467.882761][   T32]  ? netlink_deliver_tap+0x2e/0x1b0
[  467.882794][   T32]  ? netlink_deliver_tap+0x2e/0x1b0
[  467.882832][   T32]  netlink_unicast+0x7bd/0x940
[  467.882872][   T32]  netlink_sendmsg+0x813/0xb40
[  467.882903][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  467.882932][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  467.882958][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  467.882978][   T32]  sock_sendmsg_nosec+0x13a/0x180
[  467.883004][   T32]  __sys_sendto+0x408/0x5a0
[  467.883044][   T32]  ? __pfx___sys_sendto+0x10/0x10
[  467.883068][   T32]  ? lockdep_hardirqs_on+0x7b/0x110
[  467.883105][   T32]  ? fput_close_sync+0x11f/0x240
[  467.883132][   T32]  ? kmem_cache_free+0x471/0x650
[  467.883163][   T32]  ? __pfx_fput_close_sync+0x10/0x10
[  467.883198][   T32]  __x64_sys_sendto+0xde/0x100
[  467.883229][   T32]  do_syscall_64+0x166/0x520
[  467.883256][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.883278][   T32]  ? clear_bhb_loop+0x70/0xc0
[  467.883303][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.883323][   T32] RIP: 0033:0x7fd8ff75e98e
[  467.883341][   T32] RSP: 002b:00007fd8ffb4fd98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  467.883362][   T32] RAX: ffffffffffffffda RBX: 0000555589e00500 RCX: 00007fd8ff75e98e
[  467.883378][   T32] RDX: 0000000000000028 RSI: 00007fd900554670 RDI: 0000000000000003
[  467.883392][   T32] RBP: 0000000000000001 R08: 00007fd8ffb4fe14 R09: 000000000000000c
[  467.883405][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  467.883417][   T32] R13: 0000000000000000 R14: 00007fd900554670 R15: 0000000000000000
[  467.883448][   T32]  </TASK>
[  467.883491][   T32] 
[  467.883491][   T32] Showing all locks held in the system:
[  467.883500][   T32] locks held by init/1: 3, last CPU#0:
[  467.883514][   T32]  #0: ffff88801b0969b8 (&mm->mmap_lock){++++}-{4:4}, at: task_numa_work+0x393/0x15b0
[  467.883577][   T32]  #1: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  467.883628][   T32]  #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  467.883682][   T32] locks held by kthreadd/2: 2, last CPU#0:
[  467.883696][   T32]  #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  467.883744][   T32]  #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  467.883798][   T32] locks held by kworker/0:0/9: 4, last CPU#0:
[  467.883812][   T32]  #0: ffff888058977140 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.883875][   T32]  #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.883948][   T32]  #2: ffff88804de2d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  467.884011][   T32]  #3: ffff88807ca41700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  467.884081][   T32] locks held by kworker/0:1/10: 4, last CPU#0:
[  467.884096][   T32]  #0: ffff888059961940 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.884157][   T32]  #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.884230][   T32]  #2: ffff888034db1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  467.884292][   T32]  #3: ffff88807ca45270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  467.884355][   T32] locks held by kworker/u8:0/12: 4, last CPU#0:
[  467.884370][   T32]  #0: ffff8880769e5940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.884425][   T32]  #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.884480][   T32]  #2: ffff888034d55440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  467.884543][   T32]  #3: ffff88807c8d0d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  467.884605][   T32] locks held by kworker/R-mm_pe/14: 1, on CPU#1:
[  467.884620][   T32]  #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  467.884680][   T32] locks held by kworker/1:0/25: 3, last CPU#1:
[  467.884695][   T32]  #0: ffff888059e40140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.884758][   T32]  #1: ffffc900001f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.884831][   T32]  #2: ffff88807c8d5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  467.884895][   T32] locks held by kworker/1:1/30: 3, on CPU#1:
[  467.884910][   T32]  #0: ffff888059e42140 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.884972][   T32]  #1: ffffc90000a67c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.885051][   T32]  #2: ffff88807c8d2cb0 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0
[  467.885112][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  467.885126][   T32]  #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  467.885176][   T32] locks held by kworker/u8:2/43: 3, last CPU#0:
[  467.885190][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.885246][   T32]  #1: ffffc90000b37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.885303][   T32]  #2: ffff8880536e0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  467.885355][   T32] locks held by kworker/u8:3/50: 4, last CPU#0:
[  467.885369][   T32]  #0: ffff88807e011940 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.885430][   T32]  #1: ffffc90000bb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.885487][   T32]  #2: ffff88807eaad440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  467.885550][   T32]  #3: ffff888026ba0d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  467.885612][   T32] locks held by kworker/u9:0/52: 5, on CPU#0:
[  467.885626][   T32]  #0: ffff88802a2a1940 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.885702][   T32]  #1: ffffc90000bd7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.885788][   T32]  #2: ffff88807e1a0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0
[  467.885851][   T32]  #3: ffff88807e1a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  467.885914][   T32]  #4: ffffffff903daf80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370
[  467.885977][   T32] locks held by kworker/u8:5/61: 4, last CPU#0:
[  467.885993][   T32]  #0: ffff88807ec4f940 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.886068][   T32]  #1: ffffc9000202fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.886132][   T32]  #2: ffff888034385440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  467.886202][   T32]  #3: ffff88807c8d7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  467.886274][   T32] locks held by kworker/u8:6/169: 4, last CPU#0:
[  467.886291][   T32]  #0: ffff8880332cd940 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.886359][   T32]  #1: ffffc9000302fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.886423][   T32]  #2: ffff88807e931440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  467.886492][   T32]  #3: ffff888026ba5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  467.886562][   T32] locks held by kworker/0:2/192: 3, on CPU#0:
[  467.886577][   T32]  #0: ffff888059e40140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.886645][   T32]  #1: ffffc9000307fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.886726][   T32]  #2: ffff88807c8d5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  467.886797][   T32] locks held by kworker/1:2/944: 3, on CPU#1:
[  467.886813][   T32]  #0: ffff888058977140 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.886881][   T32]  #1: ffffc90004c2fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.886962][   T32]  #2: ffff88807ca41700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  467.887054][   T32] locks held by kworker/u8:8/1266: 4, on CPU#0:
[  467.887069][   T32]  #0: ffff88807ec4e940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.887135][   T32]  #1: ffffc90005937c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.887197][   T32]  #2: ffff888034205440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  467.887264][   T32]  #3: ffff888026ba7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  467.887331][   T32] locks held by kworker/u8:9/1409: 3, last CPU#0:
[  467.887347][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.887408][   T32]  #1: ffffc90005da7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.887471][   T32]  #2: ffff88802abd9258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  467.887542][   T32] locks held by kworker/u8:10/1659: 6, on CPU#0:
[  467.887558][   T32]  #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.887618][   T32]  #1: ffffc90006467c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.887677][   T32]  #2: ffffffff90245b08 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[  467.887736][   T32]  #3: ffff88807c501128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  467.887794][   T32]  #4: ffff88807c504258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  467.887857][   T32]  #5: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[  467.887914][   T32] locks held by kworker/0:3/2246: 3, last CPU#0:
[  467.887930][   T32]  #0: ffff888032830d40 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.887996][   T32]  #1: ffffc900075ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.888081][   T32]  #2: ffff88807ca40330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0
[  467.888160][   T32] locks held by kworker/u8:11/3296: 3, last CPU#0:
[  467.888177][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.888237][   T32]  #1: ffffc9000ef37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.888298][   T32]  #2: ffff888058140800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  467.888352][   T32] locks held by kworker/u8:12/3347: 3, last CPU#0:
[  467.888368][   T32]  #0: ffff8880769e7140 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  467.888429][   T32]  #1: ffffc9000f0e7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  472.598634][    C1] net_ratelimit: 6785 callbacks suppressed
[  472.598657][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  472.599006][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  472.599387][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  472.600960][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  472.601371][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  472.601798][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  472.603133][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  472.603446][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  472.603820][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  472.605272][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  473.352092][   T32]  #2: ffff88802bba9258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  473.352184][   T32] locks held by kworker/u8:13/3397: 2, last CPU#0:
[  473.352201][   T32]  #0: ffff88801b0ab940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.352268][   T32]  #1: ffffc9000f1d7c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.352334][   T32] locks held by klogd/4976: 1, last CPU#1:
[  473.352350][   T32]  #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  473.352407][   T32] locks held by udevd/4987: 1, last CPU#0:
[  473.352423][   T32]  #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  473.352477][   T32] locks held by dhcpcd/5281: 3, last CPU#1:
[  473.352493][   T32]  #0: ffffffff8f4f25f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0
[  473.352560][   T32]  #1: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  473.352613][   T32]  #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0
[  473.352675][   T32] locks held by dhcpcd/5282: 3, last CPU#0:
[  473.352691][   T32]  #0: ffff88801b09c378 (&mm->mmap_lock){++++}-{4:4}, at: task_numa_work+0x393/0x15b0
[  473.352756][   T32]  #1: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  473.352810][   T32]  #2: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  473.352870][   T32] locks held by crond/5360: 2, last CPU#0:
[  473.352886][   T32]  #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  473.352940][   T32]  #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0
[  473.352995][   T32] locks held by getty/5374: 2, on CPU#0:
[  473.353011][   T32]  #0: ffff88803636c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  473.353078][   T32]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  473.353138][   T32] locks held by syz-executor/5608: 2, last CPU#1:
[  473.353154][   T32]  #0: ffffffff8eeac430 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  473.353218][   T32]  #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: page_ext_get+0x22/0x2e0
[  473.353271][   T32] locks held by kworker/1:3/5618: 3, last CPU#1:
[  473.353287][   T32]  #0: ffff888032830d40 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.353352][   T32]  #1: ffffc90003c2fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.353429][   T32]  #2: ffff88804d7a1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  473.353504][   T32] locks held by kworker/u9:2/5619: 5, on CPU#0:
[  473.353520][   T32]  #0: ffff88807b6e6940 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.353580][   T32]  #1: ffffc90003b6fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.353638][   T32]  #2: ffff88807a42cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0
[  473.353688][   T32]  #3: ffff88807a42c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  473.353745][   T32]  #4: ffffffff903daf80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370
[  473.353803][   T32] locks held by syz-executor/5629: 1, last CPU#1:
[  473.353818][   T32]  #0: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  473.353874][   T32] locks held by kworker/R-wg-cr/5665: 1, on CPU#0:
[  473.353889][   T32]  #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0
[  473.353951][   T32] locks held by kworker/R-wg-cr/5669: 1, last CPU#1:
[  473.353967][   T32]  #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390
[  473.354031][   T32] locks held by kworker/1:4/5678: 4, last CPU#1:
[  473.354046][   T32]  #0: ffff88807e862140 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.354112][   T32]  #1: ffffc900042dfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.354189][   T32]  #2: ffff88807e935440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  473.354256][   T32]  #3: ffff888026ba6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  473.354323][   T32] locks held by kworker/1:5/5679: 3, last CPU#1:
[  473.354339][   T32]  #0: ffff888059cf4d40 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.354405][   T32]  #1: ffffc900042efc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.354483][   T32]  #2: ffff888034205440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  473.354558][   T32] locks held by kworker/1:6/5680: 3, last CPU#1:
[  473.354573][   T32]  #0: ffff888059961940 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.354640][   T32]  #1: ffffc900042ffc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.354718][   T32]  #2: ffff888034db1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  473.354789][   T32] locks held by kworker/1:7/5694: 2, last CPU#1:
[  473.354805][   T32]  #0: ffff88807e860940 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.354870][   T32]  #1: ffffc900043dfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.354950][   T32] locks held by kworker/0:4/5709: 3, last CPU#0:
[  473.354965][   T32]  #0: ffff888059cf4d40 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.355031][   T32]  #1: ffffc900044bfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.355109][   T32]  #2: ffff888034205440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  473.355177][   T32] locks held by kworker/0:5/5710: 4, on CPU#0:
[  473.355193][   T32]  #0: ffff88807e862140 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.355259][   T32]  #1: ffffc900044cfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.355337][   T32]  #2: ffff88807e935440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0
[  473.355405][   T32]  #3: ffff888026ba6640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0
[  473.355473][   T32] locks held by kworker/0:6/5712: 3, on CPU#0:
[  473.355489][   T32]  #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.355555][   T32]  #1: ffffc900044efc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.355615][   T32]  #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  473.355679][   T32] locks held by kworker/u8:14/6551: 4, last CPU#1:
[  473.355695][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.355773][   T32]  #1: ffffc900034dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.355837][   T32]  #2: ffff888034620800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  473.355892][   T32]  #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  473.355952][   T32] locks held by kworker/u8:15/6552: 3, on CPU#1:
[  473.355967][   T32]  #0: ffff888032e59140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.356030][   T32]  #1: ffffc9000342fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.356095][   T32]  #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  473.356157][   T32] locks held by kworker/u8:17/6554: 3, last CPU#1:
[  473.356173][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.356236][   T32]  #1: ffffc900032ffc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.356302][   T32]  #2: ffff88807c912258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  473.356375][   T32] locks held by kworker/u8:19/6556: 3, on CPU#1:
[  473.356391][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.356454][   T32]  #1: ffffc9000332fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.356523][   T32]  #2: ffffffff90254380 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  473.356579][   T32] locks held by kworker/u8:20/7328: 4, on CPU#0:
[  473.356596][   T32]  #0: ffff8880332c8140 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.356664][   T32]  #1: ffffc900087a7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.356727][   T32]  #2: ffff888034201440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  473.356797][   T32]  #3: ffff88807c8d5270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  473.356866][   T32] locks held by kworker/u8:21/7329: 4, last CPU#0:
[  473.356883][   T32]  #0: ffff88802c795940 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.356962][   T32]  #1: ffffc900087b7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.357023][   T32]  #2: ffff888033925440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  473.357090][   T32]  #3: ffff88807ca43ea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  473.357157][   T32] locks held by kworker/u8:22/7330: 4, last CPU#1:
[  473.357173][   T32]  #0: ffff88802a25c940 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.357240][   T32]  #1: ffffc900087c7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.357301][   T32]  #2: ffff88807da65440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  473.357368][   T32]  #3: ffff88807ca420e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  473.357435][   T32] locks held by kworker/u8:23/7331: 4, last CPU#1:
[  473.357450][   T32]  #0: ffff88802a25c940 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.357524][   T32]  #1: ffffc900087d7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.357586][   T32]  #2: ffff88807da65440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  473.357653][   T32]  #3: ffff88807ca42ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  473.357720][   T32] locks held by kworker/u8:24/7332: 4, on CPU#0:
[  473.357735][   T32]  #0: ffff88802a25d140 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.357801][   T32]  #1: ffffc90007f2fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.357863][   T32]  #2: ffff88804de2d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  473.357930][   T32]  #3: ffff88807ca41700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  473.357997][   T32] locks held by kworker/u8:25/7333: 4, last CPU#0:
[  473.358013][   T32]  #0: ffff888033175140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.358074][   T32]  #1: ffffc900087e7c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.358136][   T32]  #2: ffff88807d9289c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0
[  473.358195][   T32]  #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x869/0xfc0
[  473.358253][   T32] locks held by kworker/u8:27/7335: 4, last CPU#1:
[  473.358269][   T32]  #0: ffff88807ec4e940 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.358335][   T32]  #1: ffffc9000831fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.358397][   T32]  #2: ffff888034205440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  473.358463][   T32]  #3: ffff88807c8d5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  473.373534][   T32] locks held by kworker/u8:28/7336: 4, last CPU#1:
[  473.373551][   T32]  #0: ffff88802a25d140 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.373616][   T32]  #1: ffffc900032cfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.373673][   T32]  #2: ffff88804de2d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  473.373736][   T32]  #3: ffff88807ca40d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  473.373798][   T32] locks held by kworker/u8:29/7340: 3, last CPU#1:
[  473.373813][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.373869][   T32]  #1: ffffc900032bfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.373925][   T32]  #2: ffff888058390800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  473.373977][   T32] locks held by kworker/u8:30/7341: 3, last CPU#1:
[  473.373991][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374048][   T32]  #1: ffffc90008827c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374106][   T32]  #2: ffff88807e826258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  473.374172][   T32] locks held by kworker/u8:31/7342: 4, last CPU#1:
[  473.374187][   T32]  #0: ffff8880332ce140 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374248][   T32]  #1: ffffc90008837c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374305][   T32]  #2: ffff88807e935440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[  473.374368][   T32]  #3: ffff888026ba5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[  473.374430][   T32] locks held by kworker/u8:32/7343: 3, last CPU#0:
[  473.374445][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374507][   T32]  #1: ffffc90008c2fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374564][   T32]  #2: ffff888058060800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  473.374614][   T32] locks held by kworker/u8:33/7344: 3, last CPU#0:
[  473.374629][   T32]  #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374684][   T32]  #1: ffffc90008c3fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374742][   T32]  #2: ffff88807f64d258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  473.374805][   T32] locks held by kworker/u9:4/7905: 5, on CPU#0:
[  473.374820][   T32]  #0: ffff88807f4f2140 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374876][   T32]  #1: ffffc9000ae47c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.374933][   T32]  #2: ffff88802a508ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0
[  473.374984][   T32]  #3: ffff88802a5080b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  473.375042][   T32]  #4: ffffffff903daf80 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370
[  473.375100][   T32] locks held by kworker/u9:6/7907: 5, on CPU#0:
[  473.375115][   T32]  #0: ffff888057f08940 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.375171][   T32]  #1: ffffc900098c7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.375228][   T32]  #2: ffff888074f9cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0
[  473.375278][   T32]  #3: ffff888074f9c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  473.375335][   T32]  #4: ffffffff8ed62ce8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  473.375396][   T32] locks held by kworker/0:7/8190: 5, last CPU#0:
[  473.375410][   T32]  #0: ffff888059cf5d40 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  473.375472][   T32]  #1: ffffc900035dfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630