last executing test programs:

1m47.139495349s ago: executing program 3 (id=1236):
keyctl$clear(0x3, 0xfffffffffffffffc) (async)
keyctl$clear(0x3, 0xfffffffffffffffc)
request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000002c0)='/dev/urandom\x00', 0x0)

1m47.054726409s ago: executing program 3 (id=1237):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={<r3=>0x0, @private, @empty}, &(0x7f0000000200)=0xc)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x10, r6})
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip_vti0\x00', <r8=>0x0, 0x1, 0x8, 0x0, 0x12, {{0xa, 0x4, 0x2, 0x13, 0x28, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x13, 0xb8, [@empty, @empty, @multicast2, @remote]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6_vti0\x00', <r9=>0x0, 0x4, 0xf, 0x2, 0x511f, 0x2e, @private1, @empty, 0x8747, 0x10, 0xffffffff, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'erspan0\x00', <r10=>0x0, 0x7800, 0x80, 0x80, 0x5, {{0x7, 0x4, 0x1, 0x28, 0x1c, 0x67, 0x0, 0x2, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @end]}}}}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000019c0)={'batadv0\x00', <r13=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r13], 0x1c}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000980)={'gretap0\x00', 0x0, 0x8000, 0xf880, 0x0, 0x4, {{0x18, 0x4, 0x0, 0x6, 0x60, 0x67, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x4, 0x91, 0x0, 0xf}, @end, @generic={0x94, 0x5, "6f1589"}, @timestamp_prespec={0x44, 0xc, 0xe8, 0x3, 0x5, [{@local, 0x8}]}, @end, @rr={0x7, 0xb, 0x2d, [@empty, @multicast1]}, @noop, @timestamp_addr={0x44, 0x24, 0xbe, 0x1, 0x6, [{@private=0xa010101, 0xd0}, {@multicast1, 0x6}, {@private=0xa010100, 0x10001}, {@rand_addr=0x64010101, 0x20c}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'sit0\x00', &(0x7f00000005c0)={'erspan0\x00', <r14=>0x0, 0x10, 0x7, 0x5, 0x10001, {{0x15, 0x4, 0x1, 0x4, 0x54, 0x67, 0x0, 0x81, 0x6d817931d45f0147, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x68, 0x3, 0xc, [{@private=0xa010100, 0x10}, {@local, 0xfffffffd}]}, @timestamp_prespec={0x44, 0xc, 0xa1, 0x3, 0x0, [{@empty, 0xfffff97a}]}, @rr={0x7, 0xb, 0xd5, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @multicast2]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'syztnl2\x00', <r15=>0x0, 0x4, 0x2, 0x6, 0x3, 0x50, @private1, @empty, 0x7, 0x7, 0xc5, 0x6}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000740)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r1, @ANYBLOB="24092bbd7000ffdbdf25020000003c00018008000300000000000800030002000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="5800018008006567309209000000000000080003000000000008000300010000001400020074756e6c3000000000000000000000001400020067656e657665300000000000000000005400018089498b2f81d842a6d221bd1400020065727370616e30000000000000000000080003000100000008", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="140002007665746831000000000000000000000074000180140002006d61637365633000000000000000000008000300000000001400020076657468315f6d616376746170000000080003000100000008000300020000000800030003000000140002006970365f767469300000000000000000140002006261746164765f736c6176655f31000018000180140002006d6163767461703000000000000000002000018008000100", @ANYRES32=r15, @ANYBLOB="140002006272696467655f736c6176655f310000"], 0x1a8}}, 0x20000000)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="060008"], 0x52)
r16 = socket(0x10, 0x3, 0x6)
setsockopt$SO_BINDTODEVICE_wg(r16, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4)
write(r16, &(0x7f0000000080)="261e000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017035b12daa06d363784f6a7eb84fec9db2ce71206b5cad84612fc6e12b1305baf73ea4d8ff375e1dca470b778b69dc4ae53f6c4fde0622161bef8ad512271fc003466508aa1d9c94761e2e0f38227377a7d0f66687619c27a910a2ec98c5bf41baef4044df22466af3c58648b37b10621cdc618014e748598f82b96dee9", 0xa1)

1m47.054049204s ago: executing program 3 (id=1238):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80041)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020600030300000026bd7000fddbdf250100180006970044"], 0x18}}, 0x1c840)
syz_usb_connect(0x0, 0x2f, &(0x7f0000001e40)={{0x12, 0x1, 0x200, 0x73, 0x67, 0x14, 0x8, 0x12d1, 0x1441, 0x6c2c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x8, 0x4a, 0x60, 0x3, "", [{{0x9, 0x4, 0x55, 0xb9, 0x1, 0x2, 0x2, 0xff, 0x9, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x0, 0x9a, [@generic={0x2, 0x3}]}}]}}]}}]}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x8)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000bc0)={0x0, [{0x3, 0x798, 0x3, &(0x7f0000000080)="6082976cbcc00b72ba6d463998ee38410542eb701bbe38bf595c6653ede5de8fc20562e45f20b4388eb43fae377258d4921e003ca6cc5d4d5b52c891ec2c6a81861614870dfc2798324e475fd582cf6dbc567a4019c14a68f7d60342e2ace9d3321e1f34a46d856f6deb79a016761384bdad5f4cdae1c981a3020ebf054a7aec05fd4dd0b5fac723a9a4bbb52a933d2340f0218208fb6141641b3b522ea18a9c001d3f9c6d4914cf696b85548141db3243db52c6bbc52a81f4a7a95211e7e0104780e44ae973e6faf936a103abeeb951126dcdea164c433828a30e8f36a57902a70f5d34c2946f137212a2439be9adf52ee85a"}, {0x2, 0x98, 0x5, &(0x7f0000000180)="d515bfb47090bcb0f2c8b08184fe1ac0a95ddb"}, {0x1, 0x3b8, 0x401, &(0x7f0000000200)="6c39c24791b992e173cd2c706dc2b34cb545fdc2da42dcf128e0dcb7419277d616bcd58b5493a4101a341db6981b2ef3cb35dd5cfbfb27c4636753065e2e06ff440f5cd24ac5dd2169d38191fa441606ff530223f3586fc3e717bcecd46f33fd3b0d091a42a1bf39bc457148d378f89e999ec3a3247795"}, {0x0, 0x5c8, 0x80, &(0x7f0000000340)="df6a7f09834dcae199d517d2aada63907da565fdbae720c322a0bc106bbefa53dc7a6e5d4f3b00b712cf31b0d48b39f122a60fe579c161e8c9a826e3a93150aedfa3b3b0af7b6a1879f7bb9f72a4300e79b718afb8238d9327b8d140991416d8ad0faffad78a9549d2c70cee7c20fa38675cf1391dbe92c0ca21052a2ec314120cfebe389961d1a1838ffee4c96f34f3fa6d82789696c74e125653cd0befda2071de3c509c94ba55832bb65538e4edf00b62296e7c86835492"}, {0x0, 0x400, 0x4f7, &(0x7f0000000400)="40b4c18b7804e85655f54911c21a0642dbd30d811b1af31841354e18d9b885ee8d6e6b4e197d0d47ef1c8b3b7c169af1f54b966a744ab11690f32c6f5059a2a5c08f8ac7194bd5b63df3b62d3a34034a707486558b4166e7fea4819f276df81b2885de5ef2eab1f55afa701b17dba6630b6a229824b3f2afbd7ccc746ccbaba4"}, {0x2, 0x160, 0x0, &(0x7f0000000480)="f6437c47a12efcfc5bb537364808e61316bee70a43718e469e085c750aa7d729152921c18c0219a15c0ba0af"}, {0x2, 0x620, 0x6, &(0x7f00000004c0)="0d6f878772eedd454ab3aede1335468990fe93db51e7cc9838fbacd0b7f7109cc48ada309e577706655d452470ff361964c75f8d8878b79d1b8c7a05ffd4115c32dca26830457bce2c0b06e64e6e99e6ebee429fd1b30e46340183f636b3811552d1d3a11fdb3b4def619a984f6160cf17b569ec0645f52d97f27f71734cfb148476a283051f44ea3a2ec3365577a50aaa30cbc6d315dedf9d3d1f63ca9270b1735c7abf50069c637742e2488362840ffd3e56d227bf282fcd804b36480a972cfcafd6fd"}, {0x2, 0x5e0, 0x400, &(0x7f00000005c0)="73e8e1445c151cc07e56f346b3c7e067f238556793ad8ffeb0d88e26df33111b38cf31a706c47b8a26b3c692e2bd52e149d079659dca30d83d042b27f9161fecbe01cb5e9736c2dab049d0d47565fda44647aaa6a7428d5a6f8b96c8acbe52af6dc14f7e422f91f6e485cd8abc4b8cc9aa194ab29e60a6b3e0c1db86329f7a6ec9998e7e7ce535e8f841410fabc18e2eb7133dd493ca6ed6987d8828da04c92c59518a0815d6e4b46178cc74e0f014cc629e2e793ff48dafd610efa7"}, {0x1, 0x7b8, 0xffff, &(0x7f0000000680)="cc98f6b9eeb3bff9e37558d0a567b2a0833e4f1b5b3dd1a5d9edcb27b6c4c821d3eec5acf94e3de2d1bb5a63fe65c3a8538b40963d13104e3d773ea19fdd49def8a922dbd70e50310ef6b8f92148fc41198ef18ee7ac3cfc52aa07d11a99aefe5d6cfeeb100dbe16893440932758ff92b5250d636806a3fa5a93927712e791d9bb897cbb8b508b1c35eee095b6e5953ea0d6d47bd02e4e5298e38c9d9793bf598cefb5b98f5e0799795e24b32267494e750fe5c4217878a1b3c36ec5e78c1c93f67759c62a64e3f5cca467326173ad2680510a2e8a9e76fb084cef497cc10554ec978d2f59dca32e4e5151bf8c79781fece72ba1453a32"}, {0x1, 0x258, 0x7, &(0x7f0000000780)="0e5a43456f850f54b8e6796ce60edbae44f1d5024f9e5947ce4117d800dbbd85925976c60594ca2c97bd316bddd35d76dae1ad28b1fd199d99e5940c991eba56d3939205b638771b240041"}, {0x1, 0x178, 0xcfef, &(0x7f0000000800)="0078ac50cc8e45a3d4a7e2804b4a4aff10775311ce052d45a09cf06ff4e1b81ec9c4ec916d450b7472b1f10c4b01d6"}, {0x0, 0x688, 0x8001, &(0x7f0000000840)="fe8a08c3a563a93661b84e8f426595fba4c6edd60fd8759e1f0eb86191f9f41ca00dd40b8b3759fed6bdf83b5ae5d30178f0d91db82a9a43d4ce494bc2a078613849a38f428ef404318167ffaabf6755f43bd3b8af2481bf767ea86a77de28f7ea9f51854018f94167ef39183f999c353e37a59161e53ff7a6e7528334a9fa46ce853d55ee397f84d85f8d00b42bb6510c4ccc9ac229abefde32dfb1e68315459893eb356093008c457473116a32db4efb4cddb33949eb62ab1deb189f63505d19fce0d8bd71d2118dc84a136ad44cc3a9"}, {0x2, 0x178, 0x9, &(0x7f0000000940)="143d20945b9988774e18f2ee17e426efc277c87d4413c61482be0dda6a862403633fd9b988fe28ff1ee6884bff5b84"}, {0x1, 0x220, 0xdd5, &(0x7f0000000980)="6872f864aa6ae731a26aedb006a0911c1a76afa7f098f0407a18efb5bc5336db30b94ed1a73f2cb59cb637da678ea2d8b25632f196503c09a0b2a82799cab674baa42c77"}, {0x2, 0x510, 0x9, &(0x7f0000000a00)="da9d609990a4cbbfddaea09aadd5887368eda770cc37299fab296ba33f8a3e1151d7aded9b565896467f0ce699a7e85639fefd4baeb6a15a4a4038c0ca62723c36d908e47217c1688498ec0e7d8e5be7bb71a3fe19cf366bf5aa25ca927321afe610195481ac4c9f66f3befa22b1607074e127f4cb9af2117e0b367a36a000160c8bb1c9bafc5c9582d418a6591a38f785f68e8766c1224f0c9c0c0511d522677ae2"}, {0x2, 0x798, 0x4, &(0x7f0000000ac0)="0aecff5ab6eb4af344aff46af8a8f67cbbb634e632b90ae5a489a9b6ba0567aa5dfac7c8a88d22c59ad37d9343c90a6988388e30b9b78454bcfa5af6a0b3d7146076280d1b09b649f36443c24de111b2565e652c34550ad8fcf6590f7eabe256e99b16f8456c921dbc99fa66cb34f0a957bdb3b047e92d6f73433b6bf99844bbbf7951826d54f14a9369ff2e3068581e67fea375db74a6a041acd08051ba0cc962764e18a281a856f90e16f9d14d7435433a3ea64df8609dbca84b995e49174c813de6c4440bd3b9996c01b5e7a61190935025c7ab09103385fcb36bca7bc2e5758a1df5e3a508f7a973360e6292bbc656e29d"}]})
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x9)

1m47.01926031s ago: executing program 3 (id=1239):
r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a0000060206090500000002f803070905061000041c0d090705c1", @ANYRES8], 0x0)
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x40, 0xf, 0x5c, {0x5c, 0x7, "04f5ccafa2afe1613555756fe81634a1e09c09e20484eb748281c94cb32fe283c23ccc7b6883ddcd09c50894617488b907c9afe1235d17e01628e654bbacc6806a88f3e2ed08279ab9450370e585ff49d33a89d5cf8176c800e0"}}, &(0x7f0000000100)={0x0, 0x3, 0x82, @string={0x82, 0x3, "bda532cb0ad979d6ebff77ec3efc677b5c9f6c975f2e13c8c8083e72b3376ad503f55bc06367134ff05ce4e12ec72250f634f1e1842fdfab6bc7270716ba43bfd49da44bc4711d063ed74b2e8ed6a92e832134b9f3e243ba0a04c07b427df8b8349b9f2e60c2806e68583bb2ce6675c1326e7fdb599826ff4c2ab9e9e54ee79f"}}, &(0x7f00000001c0)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x7}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x58, 0xaec81f12705ea0e3, 0x8, 0xd, "a1c3ec12", "9779389d"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x8, 0x7f, 0x2, 0x7, 0x2, 0x4}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0x11, 0x90, "659a2d21f322c9321c98eb42af266f741d0d2d0501a2e4d0dd15bbfb1436928b409e16ea72c49c8c2319f16512747d23d5ade43922f985e328bf5a9815e05bb283599aa2d40da34431cfa5e242c21a19f51c430ced2248e28a91454a8d4090efd088d826ae65de565521b8932a1f368bf9f8c46bfe79fba09ff1636c64fd3c568a18ec41539d7f8b8f18937c359a9d8e"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x800, 0x40, [0xfff]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000500)={0x40, 0xb, 0x2, "4dad"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000600)={0x40, 0x19, 0x2, '\a\a'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7f}})

1m45.262452155s ago: executing program 3 (id=1242):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0xff80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)

1m45.011984024s ago: executing program 3 (id=1244):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x3564, 0x0, 0x1}, 0x18, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2})
close(0x3)
close(0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}}, 0x40010)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a400000000308000340000001300c000b"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0xfd, 0x3, 0xcb, 0x5, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0xd, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0xd000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]})

48.472121862s ago: executing program 0 (id=1335):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x13, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24004010}, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESDEC=r0, @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x20024011}, 0x2400c815)

48.350177654s ago: executing program 0 (id=1336):
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000002ee001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff)

48.097714773s ago: executing program 0 (id=1337):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0x400a, 0x0, 0x8})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000040)={'gre0\x00', <r3=>0x0, 0x7800, 0x10, 0x80, 0x6, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x67, 0x0, 0x81, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @empty, {[@generic={0x83, 0xa, "5b3b6e830726b559"}]}}}}})
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@allocspi={0x3ec, 0x16, 0x9c7f3c35b5d70c5b, 0x70bd27, 0x25dfdbfe, {{{@in6=@loopback, @in=@empty, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x60, 0x20, 0x6, r3, r4}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x33}, {0x4, 0x93c8, 0x1, 0x4d87, 0x1, 0x4, 0x3, 0x5}, {0x2, 0x35, 0x5, 0x9}, {0x40, 0x1896, 0x5}, 0x70bd25, 0x0, 0xa, 0x0, 0x9, 0x11}, 0x386b, 0x68b}, [@lastused={0xc, 0xf, 0x71ca}, @tmpl={0x184, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x4a}, 0xa, @in6=@private2, 0x3501, 0x4, 0x3, 0x7f, 0xc0, 0x7fffffff, 0x6b}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4d5}, 0xa, @in6=@mcast1, 0x3501, 0x3, 0x2, 0x1, 0x8, 0xa00, 0xc}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4d3, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x4, 0x0, 0x7, 0x8001, 0x1ff, 0x2}, {{@in6=@loopback, 0x4d5, 0xff}, 0xa, @in=@rand_addr=0x64010100, 0x3505, 0x3, 0x2, 0x7, 0x58c, 0xb, 0x7ff}, {{@in=@multicast1, 0x4d2, 0x3c}, 0xa, @in6=@loopback, 0x3502, 0x2, 0x3, 0x0, 0x10000, 0x0, 0x7}, {{@in6=@mcast2, 0x4d3, 0xff}, 0xa, @in=@empty, 0x3501, 0x3, 0x3, 0x7, 0x8, 0x7, 0x9}]}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2c, 0x3}}, @algo_crypt={0x73, 0x2, {{'chacha20-neon\x00'}, 0x158, "e4d8f9a1c44a01d42f60ae014ca817c9d423efd83ca81d1adf752290eae0347f0e6e6ab4100b262e54d0b6"}}, @algo_aead={0xd5, 0x12, {{'morus640-generic\x00'}, 0x448, 0x100, "ef23d1293b3c03e1a6fbf9d87b0d75c2819a68beca932c2a729ae99c82b1aa0621287f4835b3f05678ae317c00b5519c5168d89cf7e002acb757462a32e886ccc083475de3fa40ea1334932648fe2afdeab2fbc587728da96b8929905b75a2a3c43c1f2917b9045fb4d89bf722fe8d3f1e85f84dc8382f0d1df6d77e7c39f724dc4ed9c6e84a252560"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3}]}, 0x3ec}}, 0x40800)

47.905086929s ago: executing program 0 (id=1339):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000808b40461ce32d6af031415de00000000000109022400010000a293a1900abe200209040000090300030009210b000001222900090581030800000400"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200629000000a94b9f7c6841d0764fec29"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="0204bd030400000026bd7000fddb56affe000100000004d207042d010000004000000000000000000000000000000000c5276f3f3d870ab129e5f19b05c05ef2b5ab2555b3aa1214a35ff6e7c6ca432a1da3c50800c672603a927264c0c4f676b0f439de1421780a35964c550b25696dae56371278ac72901500577b22365ce28f84d2c0c0445470a9ab516296f265aef35f6d45e26a6b895efd11606f3ffb17df8c059fd498639303f5650fd4f34487dc01e8631206c1b57bd41e9d3ce9858c595b300fd8e5fb33a8f86512f20c31940bcadedca0e0b361cfb6fba120fd00b78cd91a0d99778590"], 0x20}}, 0x8040)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="10010000280007002a80000000000000000000000000001be0000001080000000000000000000000000300004e220000020000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000010000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a00000c500000000000000014000e00fe8000000000000000000000000000bb0c0008000800080001040000"], 0x110}}, 0x20040010)
r5 = dup3(r1, r0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c00)={0xe8, 0x0, &(0x7f0000000a00)=[@free_buffer={0x40086303, r7}, @acquire, @request_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000580)={@flat=@weak_binder, @fda={0x66646185, 0x3, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0x101, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x38}}, 0x1000}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000640)=""/123, 0x7b, 0x0, 0x1a}, @ptr={0x70742a85, 0x1, &(0x7f00000006c0)=""/95, 0x5f, 0x0, 0x11}}, &(0x7f00000007c0)={0x0, 0x18, 0x40}}, 0x1000}, @increfs_done, @free_buffer, @release={0x40046306, 0x1}], 0xf9, 0x0, &(0x7f0000000b00)="8bab56bc4f53ca3c838383cb24712fc01bad85158407e321dacad94804f385707d635ca8bf07b9186b54a421700e5cba44948681021b73e0192821a92894d0c0924bfffdfccf01b879d15fe7d20150422b62c5870ff4030b0484b9487987cf35962306b28f2873b86cbcdd23ef0fbc0d14dbf158adce469c8cd2547309c64da96ecf6f763efcb7327ad840f75971ae68d65dba0774de5724650c038f7cb3e335d791ed38a703d1050d08a5b7af7e310b5630f0c1f75c62376c7052546a150ffb4b74b23ee7b34e6e210bd1ab08b0c0ae7286637339d30362c054dc8f81025dd13ebb780e261b1b044d71d2a19e587ad57ed53eda678ee9918e"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000480)="c28fb1e6504f300f4f36294850a7b40d178dc45b56985f5a64a3ffafad74d840dad2ad96012152f9b053022243dab919ad330b2e236bddc99db42edf2710fb53949a", 0x42, 0xfffffffffffffffb)
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000008a00)=0xc, 0x4)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mount$cgroup2(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2018008, &(0x7f0000004200)={[{}, {@pids_localevents}, {@memory_localevents}]})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000540)={{@host, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x1, 0x0, 0x0, 0x2, 0x100000003e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0xfffffffffffffffe, 0x26}, @fda={0x66646185, 0x8, 0x1, 0xb8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0})

47.9043667s ago: executing program 2 (id=1340):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x0) (async)
r3 = socket(0x2b, 0xed414ee1f83d28a4, 0x0)
listen(r3, 0x0)
connect$phonet_pipe(r3, &(0x7f0000000080)={0x23, 0x0, 0x8, 0xaa}, 0x10)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0xffffffff, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1000, 0x4, 0x8001000, 0x4, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x5, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0x4, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x6, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x2, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0xd5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x0, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x8001, 0x3, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0xffffffff, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x100, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0xb, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0x101, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x281, 0x4, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c) (async, rerun: 64)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64)
sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000110009002dbd7000fbdbdf25ffffffff000000000010000000000000000004d20a003300"], 0x28}, 0x1, 0x0, 0x0, 0x24008080}, 0x10000044)
semop(0x0, &(0x7f00000002c0)=[{0x1, 0x8698, 0x1000}], 0x1)
semctl$GETNCNT(0x0, 0x1, 0xe, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a480000000c0a010100000000000000000a0000090900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r10, 0x4058587a, &(0x7f0000000580)={{r10, &(0x7f0000000040)='\x00', 0x80001, &(0x7f0000000480)={@align=0x101, {0xfffe, 0x6, 0x80000001, 0x40}}, 0x400, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}, {[0x5, 0x6, 0xe, 0x5]}, 0x8, 0xe8, &(0x7f00000001c0)=""/232})
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

46.245900505s ago: executing program 2 (id=1342):
socket(0x23, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000d80))
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x9, 0x0, 0x7, 0x8000, 0x1000000})
io_setup(0x8, &(0x7f00000000c0)=<r3=>0x0)
r4 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x40082)
ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000300)={0x7fffffffffffffff, 0x2, 0x2, 0xae3})
io_cancel(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x2}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="12d03715a316", 'batadv0\x00'}}, 0x1e)
sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
bind$alg(r5, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
r7 = accept4(r5, 0x0, 0x0, 0x800)
recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
sendmsg$AUDIT_GET(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x830, 0x70bd27, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0xc4)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x7, 0x8, 0x2, 0x3, {{0x23, 0x4, 0x3, 0x1, 0x8c, 0x65, 0x0, 0xf1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010101, {[@timestamp={0x44, 0xc, 0x38, 0x0, 0xd, [0x8, 0x400]}, @rr={0x7, 0x27, 0x38, [@empty, @empty, @loopback, @loopback, @remote, @multicast1, @multicast1, @broadcast, @loopback]}, @end, @lsrr={0x83, 0xf, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local]}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x18}, 0xb2a}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@remote, 0xa}, {@local, 0x4}]}, @noop]}}}}})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x10001})

44.839434909s ago: executing program 0 (id=1343):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_GET_PIT(r4, 0xc048ae65, &(0x7f0000000480))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x7f, 0x1, 0x0, 0x42, 0xfffffffffffff804, 0x0, 0x0, 0x0, 0x2000000000000, 0x7, 0x2, 0x1, 0x8], 0xeeef0000, 0x4fb40})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xf8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xe0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x4}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

44.638541742s ago: executing program 2 (id=1344):
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f00000001c0)={0xfffffffd, 0x8, 0x0, [{0x5, 0x1, 0x6, 0x5, 0x1, 0x30, 0x3, '\x00', 0x6}, {0x400, 0x5, 0xed4, 0x3, 0x7, 0xf, 0x1, '\x00', 0x8}, {0x44fa, 0x3ff, 0x1, 0x1, 0x6, 0xc, 0x1, '\x00', 0xc}, {0x1, 0x2, 0x1, 0x2, 0x5, 0x2, 0x6, '\x00', 0xfffffffffffffff8}, {0x4, 0xd, 0x0, 0x2, 0xdb, 0x80, 0x1, '\x00', 0x3}, {0x401, 0x0, 0xcaa, 0x1, 0x0, 0x5, 0x7, '\x00', 0x7}, {0x100000001, 0x6, 0x9, 0x3, 0x5, 0xcf, 0x1, '\x00', 0x3}, {0x0, 0x100000000, 0xffffffffffffffff, 0x2, 0x9, 0x1, 0x8, '\x00', 0x10002}]}) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x9}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @loopback, 0xfffffe01}, 0x1c)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x2000007, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0xc00, 0x0, 0x0)
recvfrom(r2, 0x0, 0x0, 0x40002040, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) (async)
r5 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000240)={0x81, "55b480fb16198d414a8b670a7ee5e87221b502b501d700", 0x20, 0x4, 0x7ff, 0x4, 0x1}) (async)
ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000180)={0x0, 0x5}) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) (async)
r7 = creat(&(0x7f0000002000)='./file0\x00', 0xd0)
ioctl$FS_IOC_GETFSUUID(r7, 0x80111500, &(0x7f0000002040))
sendmsg$sock(r6, &(0x7f0000001780)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000400)="511fdf19e5aa927748224d7749fc5fec0ae661167e90fbb770ea1d395e33aff3225c4010fedf23aa8bd5ba0925075c50944d29f2f82274acae9938cad0fbe7080d0c252d04a0661e82d28227c5be9ab2314e732e314ce056b05377fdfaf37c37a079d5ec718e819514db4e23bb836015fa890a0b100b79d5a1f4a7889c5b84575b34b608554b2fd73d74e886ffa3c2ba2cddba95669c3e3c26483300118748a7fcd056b511b216b7f4d91c94d372c061b75a1f6c8604ecd1097dde19bacc46d69e465317123e786246e1", 0xca}, {&(0x7f00000005c0)="2932770fc31060809c6af00393c4693f3d2cdc9e409e9d438893bc40a7bbc514aecb9d89822ec67162389124b50288b45c45f31f4197a818b5ada822c42e69e2673ccb8e72431ba9c36c6a0ad7859761f9abc95f6853172401d76cb273cbfad789e6ddc368593f60712fd3e21471394255d1554cd1548c50440cadf640b856d3a944ffcb38808d189c678d2aebdfe1", 0x8f}, {&(0x7f0000000680)="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", 0x1000}], 0x3, &(0x7f00000016c0)=[@timestamping={{0x14, 0x1, 0x25, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x8001}}], 0x90}, 0x40081) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0xc)

44.351669608s ago: executing program 2 (id=1345):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb)
mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000010c0), 0x80c000, &(0x7f0000001300)=ANY=[@ANYBLOB='mode'])
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bddf250200000014"], 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})

44.106289779s ago: executing program 2 (id=1346):
msgctl$MSG_STAT(0x0, 0xb, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x5, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x0, 0x0, 0x10001}])
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3})
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(r3, 0x0, r3)
r4 = memfd_secret(0x66f866f7beaa5e1c)
write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="635a0000000000000000ff010000000000000000000000000001870004000250020033000000000000003b000000000000000000000000000000000000000000000a00004e2200004e24000000000000000200000001000000040000000100000000000000000000000000002afe3161a864a0416e43b2252b1b83e395a1fe6eea738872e42407196ce5384b93192f7bafad7009330f0b381575ef42912a38e4a911"], 0x6c)
ptrace(0x10, r2)
syz_open_dev$media(0x0, 0xb, 0x200)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0x541b, 0x0)
ptrace(0x11, r2)
ptrace(0x10, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)
read(r5, &(0x7f0000000180)=""/15, 0xf)

42.387278879s ago: executing program 2 (id=1347):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4801}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)

38.813180116s ago: executing program 0 (id=1349):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x101000, 0x65, 0xf}, 0x18)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x5}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7b4, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0x7c2)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x6, r1, 0x80000})

26.971472336s ago: executing program 32 (id=1347):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4801}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101020000072401"], 0x0)

23.764020076s ago: executing program 33 (id=1349):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x101000, 0x65, 0xf}, 0x18)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x5}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7b4, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0x7c2)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x6, r1, 0x80000})

4.82515366s ago: executing program 1 (id=1365):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x14, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x7, 0x0, 0x7f, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x2c}}, 0x0)

4.774071375s ago: executing program 1 (id=1366):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
socket$kcm(0x29, 0x2, 0x0) (async)
ftruncate(r1, 0xee72)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52", 0xa}, {&(0x7f0000000440)="e8700e444d50a969ff67347cff6127e6ef12d28519274dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf30000000000000947bd36ce6f0ee4d9f27842e4f3eb42e9f48a2ac9f2de7f40dd540bcf0154de94eff7a", 0x5a}], 0x109, &(0x7f0000000380)=[@assoc={0x0, 0x117, 0x4, 0xfffffff9}], 0x18}], 0x1, 0x40800)
getresuid(&(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100), &(0x7f0000000140)=<r5=>0x0) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=<r6=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2800004, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@privport}, {@mmap}, {@version_L}, {@afid={'afid', 0x3d, 0x214}}, {@cache_none}, {@loose}, {@nodevmap}], [{@subj_user}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@fowner_lt={'fowner<', r4}}, {@appraise}, {@euid_lt={'euid<', r5}}, {@flag='nomand'}, {@uid_gt={'uid>', r6}}, {@context={'context', 0x3d, 'sysadm_u'}}]}}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r7 = socket$kcm(0x2, 0xa, 0x2) (async)
migrate_pages(0x0, 0x0, 0x0, &(0x7f0000005080)=0x1)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x17}, @val={0x1, 0x4, 0x3, 0x0, 0x6, 0x101}, @eth={@random="d75323f6c492", @random="10cd23d74c41", @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@mpls_mc={0x8848, {[{0x1000, 0x0, 0x1}, {0x5}, {0x9, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x1382}, {0x7fff}], @ipv6=@dccp_packet={0x5, 0x6, "698500", 0x12b, 0x21, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x40}, {[@fragment={0x62, 0x0, 0xda, 0x0, 0x0, 0x1d, 0x67}, @fragment={0x62, 0x0, 0x14, 0x1, 0x0, 0x1d, 0x66}, @srh={0x3b, 0x4, 0x4, 0x2, 0x46, 0x8, 0x7, [@remote, @private1]}], {{0x4e24, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0xa, 0x1, "23baa4", 0xfc, "471edc"}, "e29cabbb6a116362cd8dba0cd08aa30411161c715d9f528efac9e61e08e857cb5e86f884971c3cb9eae9c78d22326528a1eadbc384dbc86cdc754a047327f9ae727233eb1b6cc5200b14a5c494b9fd087b07c143b8b923e82e2c7efe54127718e725b3e6210fa8f9c0e89136405df5347322e3e81139a0298b542f2ef085cd4b9bffa0dcc13f42fa0e4b8a4ae12e5ae98b4c5070561f660acf9e782402c9c8426a4e526d2fff0395699506e6f4824d966eeca65d269302eb03174b75e3817553d940bc1670f0e40909a6a43afb72d07b7ab8c243df2ce7d2564dfba8df6f583e34fff1"}}}}}}}}, 0x18b)

3.775805089s ago: executing program 1 (id=1367):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040))
r1 = syz_open_pts(0xffffffffffffffff, 0x10200)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xf)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c40, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0)
ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000180))
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x44000, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000200)={'pimreg1\x00', {0x2, 0x4e24, @loopback}})
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x140c, 0x300, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000440)=r6)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r9=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8010040}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r8, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x6014)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000006c0))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000700)={0x0, 0x6, 0x9c1f, 0xc, 0x5, "f5d5043e9c1d682c"})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r10 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000000740)={0xffffffffffffffff, 0x4, 0xfd, 0x8, @vifc_lcl_ifindex=r9, @local}, 0x10)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000780)={[0x6, 0x340000000, 0x4, 0xc, 0x7, 0x7, 0x5, 0x5, 0x5e8, 0x9, 0x8, 0x8, 0x6, 0x67c9, 0x3, 0xffffffffffffffff], 0xc000, 0x40000})
r11 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x50, 0x1, "", [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x9, 0xc, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x28, 0x6, 0x9}}]}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x200, 0xf7, 0x2, 0xfe, 0x20, 0x9}, 0x3f, &(0x7f00000008c0)={0x5, 0xf, 0x3f, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x3, 0x1, 0x376, 0xf00, 0x7, [0xffff30]}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x9, 0x0, 0x744, [0x0, 0xff0030, 0xff3f30, 0xc000, 0xc000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x4, 0xf8, 0x7}]}, 0x9, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x2801}}, {0x8c, &(0x7f0000000980)=@string={0x8c, 0x3, "9a9337e9c3d8edc33f8d47c9c4f287fb22f656911319ad145791cb8bbd4ad8afe8e53a37d553023d71bab832339c0b900f99bc8fb72eea539a165a53c32328bb5dcb0fa4a7c5169209909d33d94e2a98167e920e46e12d8079985346be6d6ef29409f19f2bc1bd93ce67e68477e2a1c7e9d5a82a0daf7fef9c40b4f7e72a5010d330df2135bf580ea756"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x300a}}, {0xd, &(0x7f0000000b80)=@string={0xd, 0x3, "47b80e67ed9827e5ea04b0"}}]})
syz_usb_control_io$printer(r11, &(0x7f0000000d40)={0x14, &(0x7f0000000c80)={0x60, 0x2, 0x3c, {0x3c, 0x22, "3bd651ddbce3a4e733a673aba0197bf3542e5a63a0952e4c7ebfa836c16f94eb01ba6f48954f9b48aa1cd2b1c7bfb45ca413b9d317cc058806f1"}}, &(0x7f0000000d00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}}, &(0x7f0000001000)={0x34, &(0x7f0000000d80)={0x40, 0x0, 0x4f, "68b5baf0f2f7b6a9472eca581c32cd1bdb1c4fe46310b81306091cafbd3352c01a7d44da4fda3c8a3ae6864c037644beec0d82584696c3c4355866bc189360599eed489099988b612117c1531d2b2a"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000e80)={0x20, 0x0, 0xca, {0xc8, "37f586edbbb53075d0af740ce10a5a4d429a76daa2c0d5a1b6afac6061e7505a40f542947f8f12cc25e8b35b5d63dccbe02ba8e8d08736249cd82356ae9446995566a8d9d91618d5d22b97da8eb142c8cc83b43df7122d0ba8862b7c4500b742403a1089cd0ab3a196b45812de43283ba89ec05d6d4c308c91403fa571fb3979d53a7a1beb1676ac5e6a82ad2a367546649184897d28ec05e633d65a5e185ef08dbfffbcc3cd448b03fc523ceb988cdc5e5828e4f1537aa90a3b8e26d0740464ed0f58448b5f4837"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x8}})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r5)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r12, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x10)
r13 = syz_usb_connect$cdc_ncm(0x1, 0x85, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x2, 0x1, 0x4, 0x20, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "53be"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x5648, 0xb6}, {0x6, 0x24, 0x1a, 0xba6, 0x36}, [@mdlm={0x15, 0x24, 0x12, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x58, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x23, 0x81, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x70af6e48ef559422, 0x8, 0x3, 0x4}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x310, 0x4, 0x0, 0xff, 0x40, 0x3}, 0x36, &(0x7f0000001280)={0x5, 0xf, 0x36, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x8e, 0x9, 0xe, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x2, 0x0, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x8, 0xfffd}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0xc, 0x8000}, @wireless={0xb, 0x10, 0x1, 0xa, 0x60, 0x9, 0x1, 0x81, 0xa9}]}, 0x1, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x41b}}]})
syz_usb_control_io$cdc_ncm(r13, &(0x7f0000001480)={0x14, &(0x7f0000001340)={0x40, 0x6, 0xdf, {0xdf, 0x2, "59bcf32dfb5060b072c1a9187f72a6e98ae0cb86c0b057fcb2aaabb2085e62b780f810f4be659a4e81e9131d1157721a81b69da0139d9247ea5648ca16cc82a76e0bb14b32e30e62fe054831be8e131e50065261a02749437ac9061421c0b8c8a4cb40a39cedc73dec4680303baf5277bd2113b5fd732dc1c1afc47f97f722f929c97b38e281cc4fea92f35c9009bc9027a985b5bc4fdd8e76c9b0a10d1ced49911f9215b0793fc48021b8198763541eb5cfafe07586a9b1353fb6c5f26ccdd17605f9f30a2a629eae22c5d365a7b7346f2f9b24327ce4786028a4876a"}}, &(0x7f0000001440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001700)={0x44, &(0x7f00000014c0)={0x20, 0xc, 0x63, "3dd803f62f67bbf20ebcbc0e060e85eb8b1fdccb7b67c201256985add34f8409f08495622e11ffb757e06ce6a0850fcd4bcf4ff62f1057ba99e899cb1355d6367b1fa1a359519e1958db5ea00adf8d219094e573ac3a2f94e73f7c7937d707906f27b9"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0xfd}, &(0x7f00000015c0)={0x20, 0x80, 0x1c, {0x9, 0x5, 0x6, 0x7, 0xc587, 0x6, 0x5, 0x4, 0x9, 0x101, 0x4, 0x4}}, &(0x7f0000001600)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000001640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001680)={0x20, 0x87, 0x2, 0x800}, &(0x7f00000016c0)={0x20, 0x89, 0x2}})

1.055838ms ago: executing program 1 (id=1368):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x9)

584.251µs ago: executing program 1 (id=1369):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0xc2e82, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de139c2996817bb959ebab028deda525e19bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, <r4=>0xffffffffffffffff})
close_range(r0, r1, 0x0)
poll(&(0x7f0000000000)=[{r4, 0x1200}], 0x1, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 000000000000000037'], 0x2d, 0xfffffffffffffff9)
r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$update(0x2, r7, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010b26bd7000fddbdf2533"], 0x14}, 0x1, 0x0, 0x0, 0x802}, 0x8000)

0s ago: executing program 1 (id=1370):
kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef", 0xa6, 0x5, 0xff}, {0x0, 0x0, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048010000180090001006d61737100000000140001800a0001007265646972000000040002800900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e"], 0xd)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

0][ T5712] usb 2-1: USB disconnect, device number 36
[  233.862337][   T32] usb 1-1: new full-speed USB device number 67 using dummy_hcd
[  234.013779][   T32] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  234.013808][   T32] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  234.013846][   T32] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  234.013867][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.281471][   T32] usb 1-1: usb_control_msg returned -32
[  234.281517][   T32] usbtmc 1-1:16.0: can't read capabilities
[  234.471324][  T821] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  234.634691][  T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.636718][  T821] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  234.636742][  T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  234.636760][  T821] usb 4-1: SerialNumber: syz
[  234.640860][ T8645] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.1040'.
[  234.640882][ T8645] openvswitch: netlink: Key 9 has unexpected len 21752 expected 4
[  234.940841][ T5794] usb 3-1: USB disconnect, device number 73
[  234.987691][  T821] usbtest 4-1:1.0: couldn't get endpoints, -22
[  234.987773][  T821] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[  235.006820][  T821] usb 4-1: USB disconnect, device number 68
[  235.112018][ T5624] Bluetooth: hci3: unexpected event for opcode 0x4889
[  235.544100][ T8654] overlayfs: missing 'lowerdir'
[  235.587473][ T8654] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1046'.
[  236.678992][   T32] usb 1-1: USB disconnect, device number 67
[  236.756497][ T8733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1071'.
[  237.068154][ T8754] overlay: Unknown parameter 'obj_type'
[  237.391097][   T32] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  237.544425][   T32] usb 4-1: config 1 interface 0 has no altsetting 0
[  237.546759][   T32] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40
[  237.546787][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.546847][   T32] usb 4-1: Product: 㘄屋줸처磡胑�圾ᅒ懑⃭ퟄ깲ᶴ�絆苙꫗╭邙苺扳�뵬㔅࿪�寰鴋臔딲�죖팗崜�狑䓠ꅒ럢儅픖⮽彤鑃䤮춦ǜ먶䧼௴젖篽㤑秦ഭ퓮헋�陲凂䥕뫣ꔸឭ戂瞷�뮞谱梿₅蕃茽䪺扱겇㖷䛔劜⪉첔ዲ臾핒䞴�ꈺ齆倘䅃ﾻꦋ놙�
[  237.546863][   T32] usb 4-1: Manufacturer: �
[  237.546870][   T32] usb 4-1: SerialNumber: 埀�礚�쬒좯﫛뺩䱯䭖콥厮溬㛈腖쪖憵䯋膌ﵬ㪾��≀蟸�ᓰꢰﺡ姽虡倀ꤟ씗좑稫킀鹥ࠪ짉맙��諒傼쵋೴椤怔�刱푰꫾墋ﰷ诃䆓�∬苲햠㪖輪笿‼ꆙ�롌쫠䡨ꃘ匌擲��噱ᗑ왉ⵠ�꿿Ⲭ릓ҩ�棌쿔鄃뇎攊�䵇ꌾ㾸쿒⌎ꬤ�௽�㠜稱�퉢鯸ៀ��䡽騡츸ⶆᢎ”
[  237.794656][   T32] usbhid 4-1:1.0: can't add hid device: -71
[  237.795119][   T32] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  237.813915][   T32] usb 4-1: USB disconnect, device number 69
[  238.326295][ T8763] FAULT_INJECTION: forcing a failure.
[  238.326295][ T8763] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.326328][ T8763] CPU: 1 UID: 0 PID: 8763 Comm: syz.3.1082 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  238.326350][ T8763] Tainted: [L]=SOFTLOCKUP
[  238.326356][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  238.326365][ T8763] Call Trace:
[  238.326371][ T8763]  <TASK>
[  238.326378][ T8763]  dump_stack_lvl+0xe8/0x150
[  238.326402][ T8763]  should_fail_ex+0x46b/0x600
[  238.326427][ T8763]  _copy_from_user+0x2d/0xb0
[  238.326447][ T8763]  ucma_write+0x166/0x2f0
[  238.326466][ T8763]  ? __pfx_ucma_write+0x10/0x10
[  238.326485][ T8763]  ? rw_verify_area+0x25b/0x4e0
[  238.326507][ T8763]  vfs_writev+0x4c6/0x9a0
[  238.326529][ T8763]  ? __pfx_ucma_write+0x10/0x10
[  238.326549][ T8763]  ? __pfx_vfs_writev+0x10/0x10
[  238.326580][ T8763]  ? __fget_files+0x2a/0x420
[  238.326599][ T8763]  ? __fget_files+0x3a6/0x420
[  238.326613][ T8763]  ? __fget_files+0x2a/0x420
[  238.326636][ T8763]  do_writev+0x15a/0x2e0
[  238.326659][ T8763]  ? __pfx_do_writev+0x10/0x10
[  238.326737][ T8763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.326754][ T8763]  do_syscall_64+0x15f/0x560
[  238.326774][ T8763]  ? trace_irq_disable+0x3b/0x140
[  238.326792][ T8763]  ? clear_bhb_loop+0x40/0x90
[  238.326812][ T8763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.326828][ T8763] RIP: 0033:0x7fd12f33ce59
[  238.326844][ T8763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.326859][ T8763] RSP: 002b:00007fd12d58e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  238.326877][ T8763] RAX: ffffffffffffffda RBX: 00007fd12f5b5fa0 RCX: 00007fd12f33ce59
[  238.326889][ T8763] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000013
[  238.326899][ T8763] RBP: 00007fd12d58e090 R08: 0000000000000000 R09: 0000000000000000
[  238.326910][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.326919][ T8763] R13: 00007fd12f5b6038 R14: 00007fd12f5b5fa0 R15: 00007fff74cd2bb8
[  238.326943][ T8763]  </TASK>
[  238.961135][ T5720] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  239.131101][ T5720] usb 4-1: Using ep0 maxpacket: 32
[  239.139711][ T5720] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  239.139730][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.146913][ T5720] usb 4-1: config 0 descriptor??
[  239.370068][ T5720] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  239.388773][ T5720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  239.391055][ T5720] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  239.391144][ T5720] usb 4-1: media controller created
[  239.417907][ T8713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  239.433726][ T5720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  239.712650][ T5720] az6027: usb out operation failed. (-71)
[  239.717525][ T5720] az6027: usb out operation failed. (-71)
[  239.717554][ T5720] stb0899_attach: Driver disabled by Kconfig
[  239.717564][ T5720] az6027: no front-end attached
[  239.717564][ T5720] 
[  239.717926][ T5720] az6027: usb out operation failed. (-71)
[  239.717939][ T5720] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  239.852012][ T5720] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16
[  239.878601][ T5720] dvb-usb: schedule remote query interval to 400 msecs.
[  239.878624][ T5720] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  239.888353][ T5720] usb 4-1: USB disconnect, device number 70
[  240.015838][ T8784] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1090'.
[  240.016750][ T8784] tmpfs: Bad value for 'mpol'
[  240.017468][ T5720] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  240.101644][ T5794] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  240.136434][ T8788] FAULT_INJECTION: forcing a failure.
[  240.136434][ T8788] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  240.136467][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.1.1092 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  240.136492][ T8788] Tainted: [L]=SOFTLOCKUP
[  240.136497][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  240.136508][ T8788] Call Trace:
[  240.136514][ T8788]  <TASK>
[  240.136522][ T8788]  dump_stack_lvl+0xe8/0x150
[  240.136548][ T8788]  should_fail_ex+0x46b/0x600
[  240.136577][ T8788]  _copy_to_user+0x31/0xb0
[  240.136598][ T8788]  simple_read_from_buffer+0xe1/0x170
[  240.136628][ T8788]  proc_fail_nth_read+0x1be/0x230
[  240.136650][ T8788]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  240.136671][ T8788]  ? rw_verify_area+0x2ac/0x4e0
[  240.136690][ T8788]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  240.136710][ T8788]  vfs_read+0x212/0xa80
[  240.136736][ T8788]  ? __pfx_vfs_read+0x10/0x10
[  240.136764][ T8788]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  240.136788][ T8788]  ? lockdep_hardirqs_on+0x7a/0x110
[  240.136809][ T8788]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  240.136831][ T8788]  ? mutex_lock_nested+0x152/0x1d0
[  240.136847][ T8788]  ? fdget_pos+0x252/0x320
[  240.136872][ T8788]  ksys_read+0x156/0x270
[  240.136893][ T8788]  ? __pfx_ksys_read+0x10/0x10
[  240.136920][ T8788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.136939][ T8788]  do_syscall_64+0x15f/0x560
[  240.136960][ T8788]  ? trace_irq_disable+0x3b/0x140
[  240.136978][ T8788]  ? clear_bhb_loop+0x40/0x90
[  240.136999][ T8788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.137016][ T8788] RIP: 0033:0x7f89911dd68e
[  240.137032][ T8788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  240.137046][ T8788] RSP: 002b:00007f898f46dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  240.137064][ T8788] RAX: ffffffffffffffda RBX: 00007f898f46e6c0 RCX: 00007f89911dd68e
[  240.137077][ T8788] RDX: 000000000000000f RSI: 00007f898f46e0a0 RDI: 0000000000000014
[  240.137088][ T8788] RBP: 00007f898f46e090 R08: 0000000000000000 R09: 0000000000000000
[  240.137098][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.137108][ T8788] R13: 00007f8991496038 R14: 00007f8991495fa0 R15: 00007fff9cdcbcd8
[  240.137136][ T8788]  </TASK>
[  240.253732][ T5794] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  240.253766][ T5794] usb 1-1: config 0 has no interface number 0
[  240.253824][ T5794] usb 1-1: config 0 interface 41 has no altsetting 0
[  240.256378][ T5794] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  240.256403][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.256421][ T5794] usb 1-1: Product: syz
[  240.256433][ T5794] usb 1-1: Manufacturer: syz
[  240.256444][ T5794] usb 1-1: SerialNumber: syz
[  240.277584][ T5794] usb 1-1: config 0 descriptor??
[  240.826130][ T8797] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  241.240164][ T5794] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  242.251604][ T5794] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  242.251632][ T5794] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71
[  242.251870][ T5794] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[  242.286175][ T5794] usb 1-1: USB disconnect, device number 68
[  242.920674][ T8868] input: syz0 as /devices/virtual/input/input17
[  243.130972][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  243.150957][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  243.160961][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  243.170958][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  243.270972][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  243.290974][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  243.300981][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  243.310970][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  243.320972][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  243.330974][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  244.120042][ T8880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1123'.
[  244.442630][   T32] usb 2-1: new low-speed USB device number 37 using dummy_hcd
[  244.591940][   T32] usb 2-1: Invalid ep0 maxpacket: 16
[  244.721117][ T5722] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  244.741316][   T32] usb 2-1: new low-speed USB device number 38 using dummy_hcd
[  244.871505][ T5722] usb 3-1: Using ep0 maxpacket: 8
[  244.873745][ T5722] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  244.873785][ T5722] usb 3-1: config 0 has no interface number 0
[  244.873825][ T5722] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  244.873845][ T5722] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  244.873866][ T5722] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  244.873888][ T5722] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  244.873926][ T5722] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  244.873946][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.878690][ T5722] usb 3-1: config 0 descriptor??
[  244.957123][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'.
[  244.960083][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'.
[  244.971518][   T32] usb 2-1: Invalid ep0 maxpacket: 16
[  244.988560][   T32] usb usb2-port1: attempt power cycle
[  245.047615][ T5722] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  245.334800][   T32] usb 2-1: new low-speed USB device number 39 using dummy_hcd
[  245.364818][   T32] usb 2-1: Invalid ep0 maxpacket: 16
[  245.491635][   T32] usb 2-1: new low-speed USB device number 40 using dummy_hcd
[  245.514922][   T32] usb 2-1: Invalid ep0 maxpacket: 16
[  245.515339][   T32] usb usb2-port1: unable to enumerate USB device
[  245.543755][ T8918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.548187][ T8918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.641745][   T32] usb 3-1: USB disconnect, device number 74
[  245.641845][    C0] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  245.728168][ T8923] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  245.766451][   T32] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  245.781767][ T8894] ldusb: No device or device unplugged -19
[  246.388120][ T8955] nbd: must specify an index to disconnect
[  247.121141][ T5712] usb 3-1: new low-speed USB device number 75 using dummy_hcd
[  247.171105][ T5794] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  247.287313][ T5712] usb 3-1: unable to get BOS descriptor or descriptor too short
[  247.288664][ T5712] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0
[  247.288703][ T5712] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 4
[  247.288736][ T5712] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0
[  247.343054][ T5712] usb 3-1: string descriptor 0 read error: -22
[  247.343180][ T5712] usb 3-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40
[  247.343201][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.352033][ T5794] usb 1-1: Using ep0 maxpacket: 16
[  247.383473][ T5794] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  247.383496][ T5794] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  247.383513][ T5794] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  247.420334][ T5794] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  247.420362][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.420380][ T5794] usb 1-1: Product: syz
[  247.420392][ T5794] usb 1-1: Manufacturer: syz
[  247.420404][ T5794] usb 1-1: SerialNumber: syz
[  247.473050][ T5712] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  247.496940][ T5712] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  247.681988][ T5794] usb 1-1: cannot find UAC_HEADER
[  247.753894][ T7536] usb 3-1: USB disconnect, device number 75
[  247.768725][ T9015] /dev/nullb0: Can't open blockdev
[  247.801938][ T5794] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  247.848205][ T5794] usb 1-1: USB disconnect, device number 69
[  247.878276][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.031084][ T5799] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  248.182818][ T5799] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.182869][ T5799] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  248.182894][ T5799] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  248.182906][ T5799] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.182924][ T5799] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  248.182935][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.187948][ T5799] usb 2-1: config 0 descriptor??
[  248.321539][ T5712] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  249.653049][ T5722] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  249.811075][ T5722] usb 3-1: Using ep0 maxpacket: 16
[  249.814629][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short
[  249.816150][ T5722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.816171][ T5722] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.840364][ T5722] usb 3-1: New USB device found, idVendor=c395, idProduct=6d18, bcdDevice=3f.73
[  249.840391][ T5722] usb 3-1: New USB device strings: Mfr=132, Product=64, SerialNumber=3
[  249.840409][ T5722] usb 3-1: Product: syz
[  249.840420][ T5722] usb 3-1: Manufacturer: syz
[  249.840487][ T5722] usb 3-1: SerialNumber: syz
[  249.998607][ T5799] usbhid 2-1:0.0: can't add hid device: -71
[  249.998770][ T5799] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  250.022804][ T5799] usb 2-1: USB disconnect, device number 41
[  250.159278][ T9071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.159913][ T9071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.179107][ T5722] usb 3-1: 0:1 : does not exist
[  250.217087][ T5722] usb 3-1: USB disconnect, device number 76
[  250.254117][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.361063][ T5712] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  250.521069][ T5712] usb 4-1: Using ep0 maxpacket: 32
[  250.523406][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short
[  250.525196][ T5712] usb 4-1: config 1 has an invalid interface number: 16 but max is 0
[  250.525219][ T5712] usb 4-1: config 1 has no interface number 0
[  250.525257][ T5712] usb 4-1: config 1 interface 16 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  250.525282][ T5712] usb 4-1: config 1 interface 16 has no altsetting 0
[  250.527472][ T5712] usb 4-1: New USB device found, idVendor=041e, idProduct=0008, bcdDevice= 0.00
[  250.527495][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.527511][ T5712] usb 4-1: Product: syz
[  250.527522][ T5712] usb 4-1: Manufacturer: syz
[  250.527533][ T5712] usb 4-1: SerialNumber: syz
[  250.867592][ T5712] usb 4-1: USB disconnect, device number 72
[  250.984742][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'.
[  251.164165][ T9105] comedi comedi0: s526: I/O base address or length out of range
[  251.217242][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1206'.
[  251.466307][ T5722] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  251.645014][ T5722] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  251.645042][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.645059][ T5722] usb 1-1: Product: syz
[  251.645072][ T5722] usb 1-1: Manufacturer: syz
[  251.645083][ T5722] usb 1-1: SerialNumber: syz
[  251.681183][ T5712] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  251.695272][ T5722] usb 1-1: config 0 descriptor??
[  251.702315][ T5722] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  251.702409][ T5722] dvb-usb: bulk message failed: -22 (4/0)
[  251.702429][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  251.702539][ T5722] dvb-usb: bulk message failed: -22 (5/0)
[  251.702550][ T5722] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  251.735782][ T5722] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  251.765308][ T5722] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19)
[  251.841036][ T5712] usb 2-1: Using ep0 maxpacket: 8
[  251.848626][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  251.848671][ T5712] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  251.848688][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.900521][ T5712] usb 2-1: config 0 descriptor??
[  252.101091][ T5722] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  252.120046][ T5712] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  252.241093][ T5721] usb 4-1: new low-speed USB device number 73 using dummy_hcd
[  252.262232][ T5722] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  252.262258][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.262269][ T5722] usb 3-1: Product: syz
[  252.262275][ T5722] usb 3-1: Manufacturer: syz
[  252.262282][ T5722] usb 3-1: SerialNumber: syz
[  252.266894][ T5722] usb 3-1: config 0 descriptor??
[  252.371102][ T5721] usb 4-1: device descriptor read/64, error -71
[  252.510254][ T9123] netlink: 'syz.2.1214': attribute type 2 has an invalid length.
[  252.510324][ T9123] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1214'.
[  252.611102][ T5721] usb 4-1: new low-speed USB device number 74 using dummy_hcd
[  252.712632][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  252.713754][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  252.741125][ T5721] usb 4-1: device descriptor read/64, error -71
[  252.851491][ T5721] usb usb4-port1: attempt power cycle
[  253.201071][ T5721] usb 4-1: new low-speed USB device number 75 using dummy_hcd
[  253.226062][ T5721] usb 4-1: device descriptor read/8, error -71
[  253.338877][ T5712] usb 2-1: USB disconnect, device number 42
[  253.338985][    C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  253.356731][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.358810][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.471031][ T5721] usb 4-1: new low-speed USB device number 76 using dummy_hcd
[  253.495567][ T5721] usb 4-1: device descriptor read/8, error -71
[  253.583202][ T5722] usb 3-1: non-Atmel transceiver xxxx080e
[  253.601728][ T5721] usb usb4-port1: unable to enumerate USB device
[  253.784164][ T5722] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  253.784185][ T5722] usb 3-1: Firmware version (0.0) predates our first public release.
[  253.784193][ T5722] usb 3-1: Please update to version 0.2 or newer
[  254.053629][ T7536] usb 1-1: USB disconnect, device number 70
[  254.439821][ T5722] usb 3-1: atusb_probe: initialization failed, error = -19
[  254.451166][ T5722] usb 3-1: USB disconnect, device number 77
[  254.521084][ T5694] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  254.671441][ T9134] 9p: Bad value for 'rfdno'
[  254.674183][ T5694] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  254.674209][ T5694] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.676420][ T5694] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  254.676444][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.676461][ T5694] usb 1-1: Product: syz
[  254.676468][ T5694] usb 1-1: Manufacturer: syz
[  254.676475][ T5694] usb 1-1: SerialNumber: syz
[  254.683874][ T9135] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  254.886905][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.888134][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.890675][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.901802][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.904980][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.905493][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.918755][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.920401][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.929537][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.932519][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.997150][ T5694] usb 1-1: USB disconnect, device number 71
[  255.612941][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  255.613036][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  255.765294][ T9168] evm: overlay not supported
[  255.943126][ T5799] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  255.958965][ T5794] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  256.061600][ T5694] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  256.091097][ T5799] usb 1-1: Using ep0 maxpacket: 16
[  256.096443][ T5799] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  256.096468][ T5799] usb 1-1: config 0 has no interface number 0
[  256.096509][ T5799] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  256.096530][ T5799] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  256.098810][ T5799] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  256.098835][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.098852][ T5799] usb 1-1: Product: syz
[  256.098864][ T5799] usb 1-1: Manufacturer: syz
[  256.098883][ T5799] usb 1-1: SerialNumber: syz
[  256.109620][ T5799] usb 1-1: config 0 descriptor??
[  256.140932][ T9173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  256.141090][ T9173] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  256.158372][ T5794] usb 3-1: Using ep0 maxpacket: 16
[  256.174048][ T5794] usb 3-1: unable to get BOS descriptor or descriptor too short
[  256.206809][ T5794] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  256.221415][ T5794] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  256.221441][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.221458][ T5794] usb 3-1: Product: syz
[  256.221470][ T5794] usb 3-1: Manufacturer: syz
[  256.221483][ T5794] usb 3-1: SerialNumber: syz
[  256.294653][ T5694] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.294679][ T5694] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.296411][ T5694] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  256.296436][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  256.296452][ T5694] usb 2-1: SerialNumber: syz
[  256.351029][  T821] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  256.371525][ T9165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  256.371706][ T9165] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  256.376994][ T5694] usb 2-1: 0:2 : does not exist
[  256.531143][  T821] usb 4-1: Using ep0 maxpacket: 16
[  256.534300][  T821] usb 4-1: config 251 has an invalid interface number: 202 but max is 0
[  256.534326][  T821] usb 4-1: config 251 has no interface number 0
[  256.534426][  T821] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  256.534449][  T821] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  256.534470][  T821] usb 4-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  256.534488][  T821] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  256.534510][  T821] usb 4-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  256.534580][  T821] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.534602][  T821] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.534622][  T821] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  256.534646][  T821] usb 4-1: config 251 interface 202 has no altsetting 0
[  256.537556][  T821] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  256.537582][  T821] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  256.537600][  T821] usb 4-1: Product: syz
[  256.537732][  T821] usb 4-1: SerialNumber: syz
[  256.597266][ T5799] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  256.597529][ T5799] asix 1-1:0.34: probe with driver asix failed with error -71
[  256.635611][   T38] audit: type=1804 audit(1779600630.214:81): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1233" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1145 res=1 errno=0
[  256.666318][   T38] audit: type=1800 audit(1779600630.244:82): pid=9178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1233" name="cgroup.controllers" dev="tmpfs" ino=1145 res=0 errno=0
[  256.705782][ T9191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.706317][ T9191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.706429][ T5799] usb 1-1: USB disconnect, device number 72
[  256.828043][ T5794] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  256.844982][ T5794] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  256.872109][ T5694] usb 2-1: USB disconnect, device number 43
[  257.024136][ T5794] usb 3-1: 2:1 : bogus bTerminalLink 6
[  257.193772][  T821] cxacru 4-1:251.202: cxacru_bind: interface has incorrect endpoints
[  257.193945][  T821] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19!
[  257.240499][  T821] usb 4-1: USB disconnect, device number 77
[  257.362973][ T5794] usb 3-1: USB disconnect, device number 78
[  257.407461][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.509838][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  258.447566][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  258.504546][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  258.507187][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  258.529289][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  258.559204][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  260.057227][ T5799] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  260.221034][ T5799] usb 1-1: device descriptor read/64, error -71
[  260.731087][   T60] Bluetooth: hci4: command tx timeout
[  262.317511][ T5799] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  262.811150][   T60] Bluetooth: hci4: command tx timeout
[  264.825344][ T9245] netlink: 'syz.1.1249': attribute type 21 has an invalid length.
[  264.891029][   T60] Bluetooth: hci4: command tx timeout
[  266.971076][   T60] Bluetooth: hci4: command tx timeout
[  267.997570][ T9245] netlink: 'syz.1.1249': attribute type 1 has an invalid length.
[  268.371227][ T5694] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  268.541196][ T5694] usb 2-1: Using ep0 maxpacket: 8
[  268.547838][ T5694] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  268.547886][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  268.547903][ T5694] usb 2-1: Product: syz
[  268.547915][ T5694] usb 2-1: Manufacturer: syz
[  268.547927][ T5694] usb 2-1: SerialNumber: syz
[  268.569008][ T9215] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.579899][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.580190][ T9215] bridge_slave_0: entered allmulticast mode
[  268.617556][ T9215] bridge_slave_0: entered promiscuous mode
[  268.636041][ T5694] usb 2-1: config 0 descriptor??
[  268.655412][ T5694] gspca_main: sq905-2.14.0 probing 2770:9120
[  268.697499][ T9215] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.697828][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.698070][ T9215] bridge_slave_1: entered allmulticast mode
[  268.703213][ T9215] bridge_slave_1: entered promiscuous mode
[  268.745042][ T5794] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  268.901036][ T5794] usb 3-1: Using ep0 maxpacket: 32
[  268.903448][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.903473][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.903702][ T5794] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  268.903725][ T5794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.978127][ T5794] usb 3-1: config 0 descriptor??
[  269.014546][ T9215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.043924][ T5794] hub 3-1:0.0: USB hub found
[  269.180668][ T9215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.207184][ T5794] hub 3-1:0.0: 1 port detected
[  269.616858][ T5799] usb 1-1: new low-speed USB device number 75 using dummy_hcd
[  269.665650][ T5694] gspca_sq905: bulk read fail (-22) len 0/4
[  269.665735][ T5694] sq905 2-1:0.0: probe with driver sq905 failed with error -5
[  269.778805][ T5799] usb 1-1: No LPM exit latency info found, disabling LPM.
[  269.788554][ T5799] usb 1-1: config 9 has an invalid interface number: 173 but max is 0
[  269.788579][ T5799] usb 1-1: config 9 has no interface number 0
[  269.788634][ T5799] usb 1-1: config 9 interface 173 altsetting 112 endpoint 0x4 has invalid maxpacket 32, setting to 0
[  269.788658][ T5799] usb 1-1: config 9 interface 173 altsetting 112 endpoint 0x5 has invalid maxpacket 1023, setting to 8
[  269.788682][ T5799] usb 1-1: config 9 interface 173 altsetting 112 endpoint 0x9 has invalid maxpacket 64, setting to 8
[  269.788705][ T5799] usb 1-1: config 9 interface 173 has no altsetting 0
[  269.824578][ T5794] hub 3-1:0.0: activate --> -90
[  269.886907][ T7536] usb 2-1: USB disconnect, device number 44
[  270.901380][  T821] hub 3-1:0.0: hub_ext_port_status failed (err = -32)
[  272.661798][ T5799] usb 1-1: New USB device found, idVendor=413c, idProduct=8195, bcdDevice=cb.45
[  272.661828][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.794670][ T5799] usb 1-1: can't set config #9, error -71
[  273.041027][ T5799] usb 1-1: USB disconnect, device number 75
[  273.300141][   T92] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.761136][ T7536] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  273.840351][ T9215] team0: Port device team_slave_0 added
[  273.857816][ T9215] team0: Port device team_slave_1 added
[  273.935582][ T7536] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  273.935616][ T7536] usb 2-1: config 1 has no interface number 0
[  273.935644][ T7536] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  273.935656][ T7536] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  273.935669][ T7536] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.012024][ T7536] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  274.012052][ T7536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.012070][ T7536] usb 2-1: Product: syz
[  274.012081][ T7536] usb 2-1: Manufacturer: syz
[  274.012092][ T7536] usb 2-1: SerialNumber: syz
[  274.056711][ T9288] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  274.118031][ T7536] usb 2-1: can't set config #1, error -71
[  274.131095][ T7536] usb 2-1: USB disconnect, device number 45
[  274.162694][ T5722] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  274.351231][ T5722] usb 1-1: Using ep0 maxpacket: 32
[  274.355302][ T5722] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  274.355327][ T5722] usb 1-1: config 0 has no interface number 0
[  274.355364][ T5722] usb 1-1: config 0 interface 12 has no altsetting 0
[  274.357291][ T5722] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  274.357315][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.357331][ T5722] usb 1-1: Product: syz
[  274.357342][ T5722] usb 1-1: Manufacturer: syz
[  274.357353][ T5722] usb 1-1: SerialNumber: syz
[  274.380693][ T5722] usb 1-1: config 0 descriptor??
[  277.817091][ T5722] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  277.817145][ T5722] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  277.817159][ T5722] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  277.817244][ T5722] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  278.057640][ T5722] usb 1-1: USB disconnect, device number 76
[  278.079573][ T9313] sctp: [Deprecated]: syz.0.1273 (pid 9313) Use of struct sctp_assoc_value in delayed_ack socket option.
[  278.079573][ T9313] Use struct sctp_sack_info instead
[  278.318752][   T92] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.331532][  T821] usb 3-1: USB disconnect, device number 79
[  278.851136][  T821] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  278.981144][  T821] usb 3-1: device descriptor read/64, error -71
[  279.147300][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  279.147316][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.147340][ T9215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  279.251114][  T821] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  279.351063][ T5722] usb 1-1: new low-speed USB device number 77 using dummy_hcd
[  279.382910][  T821] usb 3-1: device descriptor read/64, error -71
[  279.403726][ T9215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  279.403742][ T9215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  279.403766][ T9215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  279.491549][  T821] usb usb3-port1: attempt power cycle
[  279.764230][ T9215] hsr_slave_0: entered promiscuous mode
[  279.767867][ T9215] hsr_slave_1: entered promiscuous mode
[  279.778012][ T9215] debugfs: 'hsr0' already exists in 'hsr'
[  279.778038][ T9215] Cannot create hsr debugfs directory
[  279.854002][  T821] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  279.875541][  T821] usb 3-1: device descriptor read/8, error -71
[  280.111142][  T821] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  280.133712][  T821] usb 3-1: device descriptor read/8, error -71
[  280.241506][  T821] usb usb3-port1: unable to enumerate USB device
[  281.366196][ T9328] binder: 9325:9328 ioctl 82307201 20000000a340 returned -22
[  281.367446][ T9327] binder: 9325:9327 ioctl 82307201 20000000a340 returned -22
[  281.517024][ T5722] usb 1-1: device descriptor read/all, error -71
[  283.054464][ T9337] tmpfs: Unknown parameter 'usrquot!©À~VA:óX;+ËÀÛç&lW9;Æõð·ÕëÌphÜ--‰Ê‘'
[  283.074808][ T9337] overlayfs: missing 'workdir'
[  283.333835][   T92] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.821205][ T5794] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  283.982820][ T5794] usb 2-1: Using ep0 maxpacket: 32
[  283.986506][ T5794] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  283.986531][ T5794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  283.986548][ T5794] usb 2-1: config 0 has no interface number 0
[  283.989285][ T5794] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  283.989327][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.989346][ T5794] usb 2-1: Product: syz
[  283.989358][ T5794] usb 2-1: Manufacturer: syz
[  283.989370][ T5794] usb 2-1: SerialNumber: syz
[  284.059645][ T5794] usb 2-1: config 0 descriptor??
[  284.073292][ T5794] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  284.273810][ T5794] usb 2-1: qt2_setup_urbs - submit read urb failed -8
[  284.274032][ T5794] quatech2 2-1:0.51: probe with driver quatech2 failed with error -8
[  285.637981][   T92] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.807485][ T5722] usb 2-1: USB disconnect, device number 46
[  286.183093][ T5712] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  286.183347][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[  286.311152][ T5712] usb 3-1: device descriptor read/64, error -32
[  286.573075][ T5712] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  286.574349][    C0] raw-gadget.1 gadget.2: ignoring, device is not running
[  286.701394][ T5712] usb 3-1: device descriptor read/64, error -32
[  286.811558][ T5712] usb usb3-port1: attempt power cycle
[  287.161067][ T5712] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  287.207199][ T5712] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  287.207228][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.207245][ T5712] usb 3-1: Product: syz
[  287.207257][ T5712] usb 3-1: Manufacturer: syz
[  287.207269][ T5712] usb 3-1: SerialNumber: syz
[  287.371326][ T5794] usb 1-1: new low-speed USB device number 79 using dummy_hcd
[  287.541126][ T5794] usb 1-1: Invalid ep0 maxpacket: 32
[  287.672119][ T5794] usb 1-1: new low-speed USB device number 80 using dummy_hcd
[  287.701365][ T9371] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1287'.
[  287.701402][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'.
[  287.708473][ T9371] netlink: 'syz.2.1287': attribute type 46 has an invalid length.
[  287.842576][ T5794] usb 1-1: Invalid ep0 maxpacket: 32
[  287.843293][ T5794] usb usb1-port1: attempt power cycle
[  288.201376][ T5794] usb 1-1: new low-speed USB device number 81 using dummy_hcd
[  288.238529][ T5794] usb 1-1: Invalid ep0 maxpacket: 32
[  288.372583][ T5794] usb 1-1: new low-speed USB device number 82 using dummy_hcd
[  288.407994][ T5794] usb 1-1: Invalid ep0 maxpacket: 32
[  288.422165][ T5794] usb usb1-port1: unable to enumerate USB device
[  289.043892][ T5712] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  289.044013][ T5712] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  289.044032][ T5712] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  289.439202][ T9382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.458398][ T9382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.671189][ T5694] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  289.882718][ T5694] usb 2-1: device descriptor read/64, error -71
[  290.131148][ T5694] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  290.271112][ T5694] usb 2-1: device descriptor read/64, error -71
[  290.373826][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1
[  290.391652][ T5694] usb usb2-port1: attempt power cycle
[  290.761411][ T5694] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  290.781798][ T5694] usb 2-1: device descriptor read/8, error -71
[  290.844387][ T5712] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  290.916171][ T5712] usb 3-1: USB disconnect, device number 86
[  291.031112][ T5694] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  291.066154][ T5694] usb 2-1: device descriptor read/8, error -71
[  291.228204][ T5694] usb usb2-port1: unable to enumerate USB device
[  292.051100][ T5794] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  292.181457][ T5794] usb 3-1: device descriptor read/64, error -71
[  292.257334][   T92] bridge_slave_1: left allmulticast mode
[  292.257525][   T92] bridge_slave_1: left promiscuous mode
[  292.303340][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.423099][ T5794] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  292.552531][ T5794] usb 3-1: device descriptor read/64, error -71
[  292.661022][  T821] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  292.662808][ T5794] usb usb3-port1: attempt power cycle
[  292.832799][  T821] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  292.832826][  T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.832843][  T821] usb 1-1: Product: syz
[  292.832853][  T821] usb 1-1: Manufacturer: syz
[  292.832864][  T821] usb 1-1: SerialNumber: syz
[  292.908578][  T821] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  293.031127][ T5794] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  293.052519][ T5794] usb 3-1: device descriptor read/8, error -71
[  293.170069][ T5694] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  293.294504][ T5794] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  293.332016][ T5794] usb 3-1: device descriptor read/8, error -71
[  294.374012][ T5694] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  294.431441][ T5799] usb 1-1: USB disconnect, device number 83
[  294.503241][ T5794] usb usb3-port1: unable to enumerate USB device
[  294.784934][ T5694] ath9k_htc: Failed to initialize the device
[  294.847705][ T5799] usb 1-1: ath9k_htc: USB layer deinitialized
[  294.903597][   T92] bridge_slave_0: left allmulticast mode
[  294.903630][   T92] bridge_slave_0: left promiscuous mode
[  294.903880][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.988801][ T9433] overlayfs: overlapping lowerdir path
[  299.017329][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2
[  299.063612][ T9413] bond0: (slave bond_slave_1): Releasing backup interface
[  299.167417][ T9440] batadv_slave_1: entered promiscuous mode
[  299.167858][ T9442] batadv_slave_1: left promiscuous mode
[  299.381409][ T9446] netlink: 'syz.0.1307': attribute type 2 has an invalid length.
[  299.416825][ T9448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1307'.
[  300.792511][ T9460] affs: No valid root block on device nullb0
[  300.838239][ T9460] affs: No valid root block on device nullb0
[  300.857030][ T9460] affs: No valid root block on device nullb0
[  300.875222][ T9460] affs: No valid root block on device nullb0
[  300.910003][ T9460] affs: No valid root block on device nullb0
[  300.955136][ T9460] affs: No valid root block on device nullb0
[  300.968945][ T9460] affs: No valid root block on device nullb0
[  300.980129][ T9460] affs: No valid root block on device nullb0
[  301.008537][ T9460] affs: No valid root block on device nullb0
[  301.024120][ T9460] affs: No valid root block on device nullb0
[  301.028533][ T9460] affs: No valid root block on device nullb0
[  301.059724][ T9460] affs: No valid root block on device nullb0
[  301.080251][ T9460] affs: No valid root block on device nullb0
[  301.100771][ T9460] affs: No valid root block on device nullb0
[  301.142412][ T9460] affs: No valid root block on device nullb0
[  301.183266][ T9460] affs: No valid root block on device nullb0
[  301.221997][ T9460] affs: No valid root block on device nullb0
[  301.295922][ T9460] affs: No valid root block on device nullb0
[  301.357303][ T9460] affs: No valid root block on device nullb0
[  301.372404][ T9460] affs: No valid root block on device nullb0
[  301.395459][ T9460] affs: No valid root block on device nullb0
[  301.421238][ T9460] affs: No valid root block on device nullb0
[  301.446875][ T9460] affs: No valid root block on device nullb0
[  301.473668][ T9460] affs: No valid root block on device nullb0
[  301.498161][ T9460] affs: No valid root block on device nullb0
[  301.519395][ T9460] affs: No valid root block on device nullb0
[  301.721171][ T9471] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1314'.
[  302.007437][ T9473] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  302.007464][ T9473] overlayfs: failed to set xattr on upper
[  302.007472][ T9473] overlayfs: ...falling back to redirect_dir=nofollow.
[  302.007479][ T9473] overlayfs: ...falling back to index=off.
[  302.007485][ T9473] overlayfs: ...falling back to uuid=null.
[  302.007524][ T9473] overlayfs: conflicting lowerdir path
[  304.111061][ T5799] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  304.272208][ T5799] usb 3-1: Using ep0 maxpacket: 32
[  304.274564][ T5799] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  304.274586][ T5799] usb 3-1: config 0 has no interface number 0
[  304.274625][ T5799] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7
[  304.274645][ T5799] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024
[  304.277223][ T5799] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  304.277248][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.277264][ T5799] usb 3-1: Product: syz
[  304.277276][ T5799] usb 3-1: Manufacturer: syz
[  304.277287][ T5799] usb 3-1: SerialNumber: syz
[  304.284750][ T5799] usb 3-1: config 0 descriptor??
[  304.377688][ T5799] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  304.377709][ T5799] em28xx 3-1:0.132: Video interface 132 found: isoc
[  305.411889][ T5799] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[  306.370268][ T5722] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  306.662606][ T5799] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  306.662626][ T5799] em28xx 3-1:0.132: board has no eeprom
[  307.051449][ T5799] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  307.051490][ T5799] em28xx 3-1:0.132: analog set to isoc mode.
[  307.056131][  T927] em28xx 3-1:0.132: Registering V4L2 extension
[  307.144329][ T5722] usb 2-1: device not accepting address 51, error -71
[  307.146313][ T5799] usb 3-1: USB disconnect, device number 91
[  307.147753][ T5799] em28xx 3-1:0.132: Disconnecting em28xx
[  307.612103][  T927] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[  307.612123][  T927] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[  307.612136][  T927] em28xx 3-1:0.132: No AC97 audio processor
[  307.952838][  T927] usb 3-1: Decoder not found
[  307.952857][  T927] em28xx 3-1:0.132: failed to create media graph
[  307.952910][  T927] em28xx 3-1:0.132: V4L2 device video103 deregistered
[  308.011152][   T38] audit: type=1800 audit(1779600681.614:83): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1324" name="file0" dev="tmpfs" ino=1312 res=0 errno=0
[  309.113801][  T927] em28xx 3-1:0.132: Remote control support is not available for this card.
[  309.115728][ T5799] em28xx 3-1:0.132: Closing input extension
[  310.162888][ T5799] em28xx 3-1:0.132: Freeing device
[  311.031042][ T5722] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  311.051563][ T5799] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  311.481083][ T5694] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  311.531889][ T5722] usb 2-1: device descriptor read/all, error -71
[  311.630983][ T5694] usb 1-1: Using ep0 maxpacket: 32
[  311.634542][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short
[  311.638714][ T5694] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 173, changing to 7
[  311.638761][ T5694] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024
[  311.678370][ T5694] usb 1-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40
[  311.678398][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.678415][ T5694] usb 1-1: Product: syz
[  311.678427][ T5694] usb 1-1: Manufacturer: syz
[  311.678439][ T5694] usb 1-1: SerialNumber: syz
[  311.781061][ T5799] usb 3-1: device not accepting address 92, error -71
[  312.025474][ T5694] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  312.039346][ T5694] usb 1-1: unable to issue vendor read request (ret = -71)
[  312.051706][ T5694] usb 1-1: unable to issue vendor read request (ret = -71)
[  312.053154][ T5694] usb 1-1: unable to issue vendor read request (ret = -71)
[  312.053705][ T5694] usb 1-1: unable to issue vendor read request (ret = -71)
[  312.054613][ T5694] usb 1-1: unable to issue vendor read request (ret = -71)
[  312.055162][ T5694] usb 1-1: unable to issue vendor read request (ret = -71)
[  312.055718][ T5694] usb 1-1: unable to issue vendor read request (ret = -71)
[  312.056338][ T5694] usb 1-1: unable to issue vendor read request (ret = -71)
[  312.273929][ T5694] usb 1-1: USB disconnect, device number 84
[  312.447098][ T6187] udevd[6187]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  312.961136][ T5694] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  313.118319][ T5694] usb 1-1: unable to get BOS descriptor or descriptor too short
[  313.119837][ T5694] usb 1-1: config 114 has an invalid interface number: 240 but max is 0
[  313.119859][ T5694] usb 1-1: config 114 has no interface number 0
[  313.119899][ T5694] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[  313.119920][ T5694] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  313.119943][ T5694] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[  313.119963][ T5694] usb 1-1: config 114 interface 240 has no altsetting 0
[  313.255318][ T5694] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[  313.255349][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.255368][ T5694] usb 1-1: Product: à°‰
[  313.255381][ T5694] usb 1-1: Manufacturer: à ´
[  313.255394][ T5694] usb 1-1: SerialNumber: â°Š
[  313.296214][ T9564] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  313.296369][ T9564] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  313.334146][ T5799] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  313.621017][ T5799] usb 3-1: device descriptor read/64, error -71
[  313.738521][ T5799] usb usb3-port1: attempt power cycle
[  314.203154][ T5799] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  314.271972][ T5799] usb 3-1: device descriptor read/8, error -71
[  314.345222][ T5694] ir_usb 1-1:114.240: IR Dongle converter detected
[  314.366106][ T5694] usb 1-1: IRDA class descriptor not found, device not bound
[  314.397096][ T9129] usb 2-1: new low-speed USB device number 55 using dummy_hcd
[  314.419361][ T5694] usb 1-1: USB disconnect, device number 85
[  314.581104][ T5799] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  314.586635][ T9129] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  314.586660][ T9129] usb 2-1: config 0 has no interface number 0
[  314.586702][ T9129] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  314.586726][ T9129] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  314.586762][ T9129] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  314.586780][ T9129] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.611596][ T5799] usb 3-1: device descriptor read/8, error -71
[  314.722586][ T5799] usb usb3-port1: unable to enumerate USB device
[  314.727228][ T9129] usb 2-1: config 0 descriptor??
[  314.732365][ T9579] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  314.860372][ T9129] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  314.950000][ T5694] usb 2-1: USB disconnect, device number 55
[  315.048429][ T9599] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  315.294354][   T10] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  315.521142][   T10] usb 1-1: Using ep0 maxpacket: 8
[  315.525330][   T10] usb 1-1: too many configurations: 21, using maximum allowed: 8
[  315.527837][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[  315.527868][   T10] usb 1-1: can't read configurations, error -61
[  315.741026][   T10] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  315.921092][   T10] usb 1-1: Using ep0 maxpacket: 8
[  315.922075][   T10] usb 1-1: too many configurations: 21, using maximum allowed: 8
[  315.937803][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[  315.937837][   T10] usb 1-1: can't read configurations, error -61
[  315.938267][   T10] usb usb1-port1: attempt power cycle
[  316.301186][   T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  316.323880][   T10] usb 1-1: Using ep0 maxpacket: 8
[  316.324680][   T10] usb 1-1: too many configurations: 21, using maximum allowed: 8
[  316.326591][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[  316.326622][   T10] usb 1-1: can't read configurations, error -61
[  316.455127][   T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  316.471913][   T10] usb 1-1: Using ep0 maxpacket: 8
[  316.472705][   T10] usb 1-1: too many configurations: 21, using maximum allowed: 8
[  316.474819][   T10] usb 1-1: unable to read config index 0 descriptor/start: -61
[  316.474851][   T10] usb 1-1: can't read configurations, error -61
[  316.475367][   T10] usb usb1-port1: unable to enumerate USB device
[  317.140664][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  317.140738][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  318.650783][ T9649] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  318.775761][ T9653] bpf: Bad value for 'mode'
[  319.227833][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  319.273575][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  319.280377][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  319.334064][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  319.359127][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  320.931128][  T821] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  321.086922][  T821] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  321.086952][  T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.086970][  T821] usb 3-1: Product: syz
[  321.086981][  T821] usb 3-1: Manufacturer: syz
[  321.086992][  T821] usb 3-1: SerialNumber: syz
[  321.560101][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  321.560162][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  321.611051][   T60] Bluetooth: hci1: command tx timeout
[  322.854902][ T9666] netlink: 'syz.2.1347': attribute type 3 has an invalid length.
[  322.907438][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  323.691132][   T60] Bluetooth: hci1: command tx timeout
[  323.970545][ T9668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.990441][ T9668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.161240][ T5694] usb 2-1: new low-speed USB device number 56 using dummy_hcd
[  324.213687][   T92] hsr_slave_0: left promiscuous mode
[  324.363076][ T5694] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  324.363102][ T5694] usb 2-1: config 0 has no interface number 0
[  324.363848][ T5694] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  324.363892][ T5694] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  324.364547][ T5694] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  324.365114][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.500055][ T5694] usb 2-1: config 0 descriptor??
[  324.508161][ T9670] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  324.552757][   T92] hsr_slave_1: left promiscuous mode
[  324.643084][   T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.730600][   T92] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.952230][ T5694] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  325.041427][ T5694] usb 2-1: USB disconnect, device number 56
[  325.767089][   T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.767174][   T92] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.771765][   T60] Bluetooth: hci1: command tx timeout
[  327.851713][   T60] Bluetooth: hci1: command tx timeout
[  328.099787][   T92] veth1_macvtap: left promiscuous mode
[  328.100060][   T92] veth0_macvtap: left promiscuous mode
[  328.100500][   T92] veth1_vlan: left promiscuous mode
[  328.141189][   T92] veth0_vlan: left promiscuous mode
[  328.823004][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -ETIMEDOUT
[  328.873842][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPIPE
[  328.873899][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  328.878294][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  329.291031][ T5720] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  329.315465][  T821] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[  329.447292][ T5720] usb 2-1: config 0 has no interfaces?
[  329.449356][ T5720] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  329.449382][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  329.449399][ T5720] usb 2-1: SerialNumber: syz
[  329.487746][ T5720] usb 2-1: config 0 descriptor??
[  329.709098][ T5720] usb 2-1: USB disconnect, device number 57
[  330.805785][ T5720] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  330.999900][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  330.999933][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  330.999969][ T5720] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  330.999988][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.065647][ T5720] usb 2-1: config 0 descriptor??
[  331.498153][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.498189][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.498213][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.498236][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.498258][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.498281][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.498303][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.498326][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.498348][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.500004][ T5720] sunplus 0003:04FC:05D8.000C: unknown main item tag 0x0
[  331.620598][ T5720] sunplus 0003:04FC:05D8.000C: hidraw0: USB HID v7f.fe Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0
[  332.347531][ T5712] usb 2-1: USB disconnect, device number 58
[  334.735824][   T92] team0 (unregistering): Port device team_slave_1 removed
[  335.046295][   T92] team0 (unregistering): Port device team_slave_0 removed
[  336.031870][ T9672] syzkaller1: entered promiscuous mode
[  336.031892][ T9672] syzkaller1: entered allmulticast mode
[  336.036990][  T821] usb 3-1: USB disconnect, device number 96
[  336.678881][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  336.727036][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  336.750436][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  336.793089][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  336.795087][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  338.894139][   T60] Bluetooth: hci5: command tx timeout
[  340.056252][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.154584][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.197005][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.198249][ T5624] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.232674][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  340.971137][ T5624] Bluetooth: hci5: command tx timeout
[  342.251108][ T5624] Bluetooth: hci2: command tx timeout
[  342.293778][ T9718] input: syz0 as /devices/virtual/input/input21
[  342.624033][  T821] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  342.827673][  T821] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  342.827701][  T821] usb 2-1: config 0 has no interface number 0
[  342.827746][  T821] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  342.831198][  T821] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  342.831227][  T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.831246][  T821] usb 2-1: Product: syz
[  342.831260][  T821] usb 2-1: Manufacturer: syz
[  342.831273][  T821] usb 2-1: SerialNumber: syz
[  342.895399][  T821] usb 2-1: config 0 descriptor??
[  342.955865][  T821] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  343.052844][ T5624] Bluetooth: hci5: command tx timeout
[  343.168245][ T5694] usb 2-1: USB disconnect, device number 59
[  343.260192][ T1372] smc: removing ib device syz1
[  343.317482][ T5694] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  344.068593][ T5720] syz1: Port: 1 Link DOWN
[  344.331082][ T5624] Bluetooth: hci2: command tx timeout
[  344.641022][ T5712] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  344.784723][ T5712] usb 2-1: device descriptor read/64, error -71
[  345.024274][ T5712] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  345.144355][ T5624] Bluetooth: hci5: command tx timeout
[  345.179478][ T5712] usb 2-1: device descriptor read/64, error -71
[  345.287551][ T5712] usb usb2-port1: attempt power cycle
[  345.641028][ T5712] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  345.740951][ T5712] usb 2-1: device descriptor read/8, error -71
[  345.843501][ T1372] smbdirect: ib_dev[syz1] removed
[  345.960040][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.960402][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.960675][ T9654] bridge_slave_0: entered allmulticast mode
[  345.985417][ T9654] bridge_slave_0: entered promiscuous mode
[  346.001025][ T5712] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  346.023381][ T5712] usb 2-1: device descriptor read/8, error -71
[  346.050342][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.050656][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.068266][ T9654] bridge_slave_1: entered allmulticast mode
[  346.079328][ T9654] bridge_slave_1: entered promiscuous mode
[  346.148842][ T5712] usb usb2-port1: unable to enumerate USB device
[  346.438758][ T5624] Bluetooth: hci2: command tx timeout
[  346.868263][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.965288][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.417803][ T9654] team0: Port device team_slave_0 added
[  347.941020][ T5694] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  348.091081][ T5694] usb 2-1: Using ep0 maxpacket: 8
[  348.098749][ T5694] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  348.098787][ T5694] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  348.098821][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  348.098861][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  348.098883][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  348.098905][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  348.098928][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  348.098951][ T5694] usb 2-1: config 168 interface 0 has no altsetting 0
[  348.186556][ T5694] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  348.186602][ T5694] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  348.186648][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  348.186671][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  348.186693][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  348.186717][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  348.186740][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  348.186761][ T5694] usb 2-1: config 168 interface 0 has no altsetting 0
[  348.188376][ T5694] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  348.188410][ T5694] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  348.188444][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  348.188468][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  348.188488][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  348.188509][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  348.188531][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  348.188553][ T5694] usb 2-1: config 168 interface 0 has no altsetting 0
[  348.379278][ T5694] usb 2-1: string descriptor 0 read error: -22
[  348.379419][ T5694] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  348.379441][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.491041][ T5624] Bluetooth: hci2: command tx timeout
[  348.615615][ T5694] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  348.692023][ T5694] usb 2-1: USB disconnect, device number 64
[  349.251212][ T5694] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  349.401426][ T5694] usb 2-1: Using ep0 maxpacket: 8
[  349.404324][ T5694] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  349.404386][ T5694] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  349.404422][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  349.404448][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  349.404470][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  349.404492][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  349.404513][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  349.404535][ T5694] usb 2-1: config 168 interface 0 has no altsetting 0
[  349.406189][ T5694] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  349.406225][ T5694] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  349.406260][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  349.406283][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  349.406304][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  349.406326][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  349.406359][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  349.406380][ T5694] usb 2-1: config 168 interface 0 has no altsetting 0
[  349.407827][ T5694] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  349.407860][ T5694] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  349.407893][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  349.407917][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  349.407939][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  349.407962][ T5694] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  349.407984][ T5694] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  349.408006][ T5694] usb 2-1: config 168 interface 0 has no altsetting 0
[  349.424536][ T5694] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  349.424564][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.424581][ T5694] usb 2-1: Product: syz
[  349.424593][ T5694] usb 2-1: Manufacturer: syz
[  349.424604][ T5694] usb 2-1: SerialNumber: syz
[  350.231426][ T9654] team0: Port device team_slave_1 added
[  350.295122][ T5694] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  350.317010][ T5694] usb 2-1: USB disconnect, device number 65
[  350.563517][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.563532][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  350.563551][ T9654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.632178][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.632194][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  350.632227][ T9654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.846359][ T9746] 9p: Bad value for 'wfdno'
[  351.153535][ T9654] hsr_slave_0: entered promiscuous mode
[  351.222864][ T9654] hsr_slave_1: entered promiscuous mode
[  351.227649][ T9654] debugfs: 'hsr0' already exists in 'hsr'
[  351.227759][ T9654] Cannot create hsr debugfs directory
[  351.937616][ T9757] ubi0: attaching mtd0
[  351.960725][ T9757] ubi0: scanning is finished
[  351.960745][ T9757] ubi0: empty MTD device detected
[  354.087266][ T9757] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  354.087292][ T9757] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3774 bytes
[  354.087307][ T9757] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  354.087321][ T9757] ubi0: VID header offset: 258 (aligned 258), data offset: 322
[  354.087336][ T9757] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  354.087350][ T9757] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 21
[  354.087365][ T9757] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1673177160
[  354.087380][ T9757] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  354.177112][ T9761] ubi0: background thread "ubi_bgt0d" started, PID 9761
[  356.168093][ T9713] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.168485][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.168753][ T9713] bridge_slave_0: entered allmulticast mode
[  356.193500][ T9713] bridge_slave_0: entered promiscuous mode
[  356.224330][   T10] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[  356.281413][ T9713] bridge0: port 2(bridge_slave_1) entered blocking state
[  356.281652][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.281864][ T9713] bridge_slave_1: entered allmulticast mode
[  356.288253][ T9713] bridge_slave_1: entered promiscuous mode
[  356.392853][   T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  356.392877][   T10] usb 2-1: config 0 has no interface number 0
[  356.392915][   T10] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  356.392938][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  356.392960][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  356.394594][   T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  356.394619][   T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  356.394637][   T10] usb 2-1: Product: syz
[  356.394649][   T10] usb 2-1: SerialNumber: syz
[  356.485807][   T10] usb 2-1: config 0 descriptor??
[  356.502634][   T10] cm109 2-1:0.8: invalid payload size 0, expected 4
[  356.522553][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input22
[  356.703304][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  357.256884][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.259753][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.260160][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.260388][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.260624][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.260890][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.261130][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.261382][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.261609][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.261834][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  357.493325][ T5712] usb 2-1: USB disconnect, device number 66
[  357.493433][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  357.566752][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.567854][ T9706] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.568153][ T9706] bridge_slave_0: entered allmulticast mode
[  357.594575][ T9706] bridge_slave_0: entered promiscuous mode
[  357.694294][ T9706] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.694602][ T9706] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.694863][ T9706] bridge_slave_1: entered allmulticast mode
[  357.698857][ T9706] bridge_slave_1: entered promiscuous mode
[  358.782435][ T5712] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  358.948359][ T9713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.015409][ T9713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.123008][ T9706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.167650][ T9706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.211508][ T9713] team0: Port device team_slave_0 added
[  359.240428][ T9713] team0: Port device team_slave_1 added
[  359.274549][ T9706] team0: Port device team_slave_0 added
[  359.322608][ T9706] team0: Port device team_slave_1 added
[  359.324632][ T9713] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.324646][ T9713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.324669][ T9713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.461765][ T9713] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.461781][ T9713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.461805][ T9713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.545101][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.545117][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.545151][ T9706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.596248][ T9706] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.596263][ T9706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  359.596287][ T9706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.820483][ T9713] hsr_slave_0: entered promiscuous mode
[  359.828753][ T9713] hsr_slave_1: entered promiscuous mode
[  359.830357][ T9713] debugfs: 'hsr0' already exists in 'hsr'
[  359.830380][ T9713] Cannot create hsr debugfs directory
[  359.898036][ T9706] hsr_slave_0: entered promiscuous mode
[  359.900086][ T9706] hsr_slave_1: entered promiscuous mode
[  359.913967][ T9706] debugfs: 'hsr0' already exists in 'hsr'
[  359.913992][ T9706] Cannot create hsr debugfs directory
[  363.070593][ T5624] Bluetooth: hci3: unexpected event for opcode 0x0010
[  365.050303][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2
[  366.378050][   T92] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.780277][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3
[  367.134449][ T5624] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  367.134618][ T5624] Bluetooth: hci3: Injecting HCI hardware error event
[  367.148048][   T60] Bluetooth: hci3: hardware error 0x00
[  367.605985][   T92] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.865091][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1
[  369.371672][   T60] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  370.730791][   T92] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.738601][   T92] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.501704][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  378.501802][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  378.839052][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  378.895737][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  378.913964][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  378.956102][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  378.961894][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  379.230581][ T9713] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  381.131152][   T60] Bluetooth: hci0: command tx timeout
[  381.735943][ T9713] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  381.762663][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1
[  382.331136][   T92] bridge_slave_1: left allmulticast mode
[  382.331174][   T92] bridge_slave_1: left promiscuous mode
[  382.331419][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.595609][   T92] bridge_slave_0: left allmulticast mode
[  382.595644][   T92] bridge_slave_0: left promiscuous mode
[  382.613503][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.892256][   T92] bridge_slave_1: left allmulticast mode
[  382.892291][   T92] bridge_slave_1: left promiscuous mode
[  382.915313][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.073494][   T92] bridge_slave_0: left allmulticast mode
[  383.073535][   T92] bridge_slave_0: left promiscuous mode
[  383.073781][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.211062][   T60] Bluetooth: hci0: command tx timeout
[  383.877936][   T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.001811][   T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.083465][   T92] bond0 (unregistering): Released all slaves
[  384.881971][   T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.964349][   T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  385.005063][   T92] bond0 (unregistering): Released all slaves
[  385.042193][ T9713] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  385.096887][ T9713] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  385.167045][ T9713] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  385.208969][ T9713] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  385.283813][ T9713] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  385.291643][   T60] Bluetooth: hci0: command tx timeout
[  387.321459][ T9713] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  387.371095][   T60] Bluetooth: hci0: command tx timeout
[  388.210960][ T9706] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  389.254985][ T9706] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  389.403919][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2
[  389.430132][ T9706] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  391.248357][ T9706] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  391.268101][ T9706] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  391.877477][ T9706] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  392.059503][ T9706] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  392.089882][ T9706] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  395.179842][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3
[  395.662473][ T9713] 8021q: adding VLAN 0 to HW filter on device bond0
[  395.881042][   T92] hsr_slave_0: left promiscuous mode
[  395.922548][   T92] hsr_slave_1: left promiscuous mode
[  395.923647][   T92] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.964885][   T92] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.171502][   T92] hsr_slave_0: left promiscuous mode
[  396.231081][   T92] hsr_slave_1: left promiscuous mode
[  396.232110][   T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.232132][   T92] batman_adv: batadv0: Removing interface: batadv_slave_0
[  396.272275][   T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.272302][   T92] batman_adv: batadv0: Removing interface: batadv_slave_1
[  396.366560][   T92] veth1_macvtap: left promiscuous mode
[  396.366656][   T92] veth0_macvtap: left promiscuous mode
[  396.366929][   T92] veth1_vlan: left promiscuous mode
[  396.387820][   T92] veth0_vlan: left promiscuous mode
[  397.199984][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  397.247270][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  397.249463][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  397.250661][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  397.274851][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  398.613330][   T92] team0 (unregistering): Port device team_slave_1 removed
[  398.727965][   T92] team0 (unregistering): Port device team_slave_0 removed
[  399.463497][ T5624] Bluetooth: hci1: command tx timeout
[  399.652559][   T92] team0 (unregistering): Port device team_slave_1 removed
[  399.711782][   T92] team0 (unregistering): Port device team_slave_0 removed
[  400.326040][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  400.390611][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  400.433751][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  400.438414][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  400.439205][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  400.707617][ T9952] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.707891][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.708180][ T9952] bridge_slave_0: entered allmulticast mode
[  400.748114][ T9952] bridge_slave_0: entered promiscuous mode
[  400.826249][ T9952] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.826532][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.826814][ T9952] bridge_slave_1: entered allmulticast mode
[  400.891662][ T9952] bridge_slave_1: entered promiscuous mode
[  401.715247][ T5624] Bluetooth: hci1: command tx timeout
[  401.806227][ T9952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.774087][ T5624] Bluetooth: hci4: command tx timeout
[  403.781823][ T5624] Bluetooth: hci1: command tx timeout
[  405.091601][ T9952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.142576][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4
[  405.599099][ T9952] team0: Port device team_slave_0 added
[  405.630713][ T9952] team0: Port device team_slave_1 added
[  405.852046][ T5624] Bluetooth: hci4: command tx timeout
[  405.931652][ T5624] Bluetooth: hci1: command tx timeout
[  406.115113][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  406.115129][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.115154][ T9952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  406.310050][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  406.310066][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  406.310091][ T9952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.941907][ T5624] Bluetooth: hci4: command tx timeout
[  408.999147][ T9952] hsr_slave_0: entered promiscuous mode
[  409.007048][ T9952] hsr_slave_1: entered promiscuous mode
[  409.008764][ T9952] debugfs: 'hsr0' already exists in 'hsr'
[  409.008785][ T9952] Cannot create hsr debugfs directory
[  410.011010][ T5624] Bluetooth: hci4: command tx timeout
[  412.824800][T10022] bridge0: port 1(bridge_slave_0) entered blocking state
[  412.826702][T10022] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.827027][T10022] bridge_slave_0: entered allmulticast mode
[  412.861080][T10022] bridge_slave_0: entered promiscuous mode
[  412.896730][T10022] bridge0: port 2(bridge_slave_1) entered blocking state
[  412.897079][T10022] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.897356][T10022] bridge_slave_1: entered allmulticast mode
[  412.942948][T10022] bridge_slave_1: entered promiscuous mode
[  414.483103][T10022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.556816][T10022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.707838][T10022] team0: Port device team_slave_0 added
[  414.781390][T10022] team0: Port device team_slave_1 added
[  415.408495][T10027] bridge0: port 1(bridge_slave_0) entered blocking state
[  415.408899][T10027] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.409212][T10027] bridge_slave_0: entered allmulticast mode
[  415.435606][T10027] bridge_slave_0: entered promiscuous mode
[  415.447536][T10022] batman_adv: batadv0: Adding interface: batadv_slave_0
[  415.447550][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.447574][T10022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  415.505095][T10022] batman_adv: batadv0: Adding interface: batadv_slave_1
[  415.505111][T10022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  415.505136][T10022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  415.558024][T10027] bridge0: port 2(bridge_slave_1) entered blocking state
[  415.558287][T10027] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.558583][T10027] bridge_slave_1: entered allmulticast mode
[  415.584851][T10027] bridge_slave_1: entered promiscuous mode
[  415.821357][T10027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  416.156027][T10027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  416.256970][T10022] hsr_slave_0: entered promiscuous mode
[  416.259033][T10022] hsr_slave_1: entered promiscuous mode
[  416.260285][T10022] debugfs: 'hsr0' already exists in 'hsr'
[  416.260303][T10022] Cannot create hsr debugfs directory
[  416.424911][T10027] team0: Port device team_slave_0 added
[  416.733577][T10027] team0: Port device team_slave_1 added
[  418.273805][ T9952] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  418.361983][ T9952] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  418.517182][ T9952] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  418.556400][ T9952] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  418.793210][T10027] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.793226][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.793250][T10027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.860768][ T9952] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  419.062790][ T9952] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  419.065706][T10027] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.065720][T10027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.065744][T10027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.143885][ T9952] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  421.302391][ T9952] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  421.688315][T10027] hsr_slave_0: entered promiscuous mode
[  421.723197][T10027] hsr_slave_1: entered promiscuous mode
[  421.756953][T10027] debugfs: 'hsr0' already exists in 'hsr'
[  421.756979][T10027] Cannot create hsr debugfs directory
[  425.645817][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0
[  425.706802][ T9952] 8021q: adding VLAN 0 to HW filter on device team0
[  425.756208][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[  425.756466][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[  425.797778][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  425.797999][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.852426][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  432.009514][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5
[  434.312181][ T9952] veth0_vlan: entered promiscuous mode
[  434.341125][ T9952] veth1_vlan: entered promiscuous mode
[  434.852757][ T9952] veth0_macvtap: entered promiscuous mode
[  434.887148][ T9952] veth1_macvtap: entered promiscuous mode
[  435.006147][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.078318][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.220583][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.230369][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.260055][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.314016][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  438.669929][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  438.717119][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  438.739551][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  438.787135][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  438.790721][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  439.510563][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  439.510583][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  440.026890][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  440.026984][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  440.620763][   T92] bridge_slave_1: left allmulticast mode
[  440.620796][   T92] bridge_slave_1: left promiscuous mode
[  440.646252][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.890999][ T5624] Bluetooth: hci2: command tx timeout
[  442.971008][ T5624] Bluetooth: hci2: command tx timeout
[  445.051610][ T5624] Bluetooth: hci2: command tx timeout
[  445.338147][   T92] bridge_slave_0: left allmulticast mode
[  445.339259][   T92] bridge_slave_0: left promiscuous mode
[  445.339524][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  445.853046][   T92] bridge_slave_1: left allmulticast mode
[  445.853080][   T92] bridge_slave_1: left promiscuous mode
[  445.853332][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.031589][   T92] bridge_slave_0: left allmulticast mode
[  446.031622][   T92] bridge_slave_0: left promiscuous mode
[  446.031882][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.301235][   T92] bridge_slave_1: left allmulticast mode
[  446.301269][   T92] bridge_slave_1: left promiscuous mode
[  446.301517][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.462580][   T92] bridge_slave_0: left allmulticast mode
[  446.462615][   T92] bridge_slave_0: left promiscuous mode
[  446.462857][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.131057][ T5624] Bluetooth: hci2: command tx timeout
[  447.374341][   T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  447.491858][   T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  447.581730][   T92] bond0 (unregistering): Released all slaves
[  449.510064][   T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.627281][   T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.704058][   T92] bond0 (unregistering): Released all slaves
[  450.092343][   T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  450.225607][   T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  450.314836][   T92] bond0 (unregistering): Released all slaves
[  450.899184][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5
[  453.082030][   T92] hsr_slave_0: left promiscuous mode
[  453.122636][   T92] hsr_slave_1: left promiscuous mode
[  453.137122][   T92] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.171948][   T92] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.376021][   T92] hsr_slave_0: left promiscuous mode
[  453.400402][   T92] hsr_slave_1: left promiscuous mode
[  453.403344][   T92] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.433329][   T92] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.622433][   T92] hsr_slave_0: left promiscuous mode
[  453.661113][   T92] hsr_slave_1: left promiscuous mode
[  453.666030][   T92] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.710649][   T92] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.367976][   T92] team0 (unregistering): Port device team_slave_1 removed
[  454.421729][   T92] team0 (unregistering): Port device team_slave_0 removed
[  456.272610][   T92] team0 (unregistering): Port device team_slave_1 removed
[  456.332792][   T92] team0 (unregistering): Port device team_slave_0 removed
[  456.973135][   T92] team0 (unregistering): Port device team_slave_1 removed
[  457.021762][   T92] team0 (unregistering): Port device team_slave_0 removed
[  457.758173][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  457.827106][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  457.828712][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  457.917601][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  457.918903][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  458.794797][T10219] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.795967][T10219] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.799943][T10219] bridge_slave_0: entered allmulticast mode
[  458.829514][T10219] bridge_slave_0: entered promiscuous mode
[  458.865959][T10219] bridge0: port 2(bridge_slave_1) entered blocking state
[  458.866304][T10219] bridge0: port 2(bridge_slave_1) entered disabled state
[  458.866591][T10219] bridge_slave_1: entered allmulticast mode
[  458.869580][T10219] bridge_slave_1: entered promiscuous mode
[  459.067205][T10219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  459.107462][T10219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  459.198471][T10219] team0: Port device team_slave_0 added
[  459.227428][T10219] team0: Port device team_slave_1 added
[  459.299070][T10219] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.299086][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.299109][T10219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.349202][T10219] batman_adv: batadv0: Adding interface: batadv_slave_1
[  459.349217][T10219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  459.349241][T10219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.011129][   T60] Bluetooth: hci0: command tx timeout
[  460.774231][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  460.841077][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  460.854930][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  460.906342][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  460.908509][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  462.092373][   T60] Bluetooth: hci0: command tx timeout
[  463.051156][   T60] Bluetooth: hci5: command tx timeout
[  464.178983][   T60] Bluetooth: hci0: command tx timeout
[  464.438295][T10219] hsr_slave_0: entered promiscuous mode
[  464.441549][T10219] hsr_slave_1: entered promiscuous mode
[  464.443426][T10219] debugfs: 'hsr0' already exists in 'hsr'
[  464.443450][T10219] Cannot create hsr debugfs directory
[  465.131138][   T60] Bluetooth: hci5: command tx timeout
[  466.251722][   T60] Bluetooth: hci0: command tx timeout
[  467.211906][   T60] Bluetooth: hci5: command tx timeout
[  469.297381][   T60] Bluetooth: hci5: command tx timeout
[  470.908330][T10219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.789132][T10219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.902746][T10268] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.903173][T10268] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.903488][T10268] bridge_slave_0: entered allmulticast mode
[  471.906705][T10268] bridge_slave_0: entered promiscuous mode
[  471.969719][T10268] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.970001][T10268] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.970277][T10268] bridge_slave_1: entered allmulticast mode
[  472.004261][T10268] bridge_slave_1: entered promiscuous mode
[  472.118168][T10268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  472.154700][T10268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  472.658187][T10219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.702697][T10297] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.703105][T10297] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.703443][T10297] bridge_slave_0: entered allmulticast mode
[  472.706653][T10297] bridge_slave_0: entered promiscuous mode
[  472.783290][T10297] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.783606][T10297] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.783910][T10297] bridge_slave_1: entered allmulticast mode
[  472.790696][T10297] bridge_slave_1: entered promiscuous mode
[  472.833829][T10268] team0: Port device team_slave_0 added
[  472.878164][T10268] team0: Port device team_slave_1 added
[  473.007069][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.287827][T10219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  473.350781][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  473.354385][T10268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  473.354400][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.354424][T10268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  473.619712][T10268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  473.619728][T10268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  473.619752][T10268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  473.817677][T10297] team0: Port device team_slave_0 added
[  473.828283][T10297] team0: Port device team_slave_1 added
[  474.052082][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.052097][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.052120][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.111586][T10268] hsr_slave_0: entered promiscuous mode
[  474.113650][T10268] hsr_slave_1: entered promiscuous mode
[  474.115309][T10268] debugfs: 'hsr0' already exists in 'hsr'
[  474.115331][T10268] Cannot create hsr debugfs directory
[  474.118069][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.118081][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  474.118104][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.345523][T10297] hsr_slave_0: entered promiscuous mode
[  474.347713][T10297] hsr_slave_1: entered promiscuous mode
[  474.349417][T10297] debugfs: 'hsr0' already exists in 'hsr'
[  474.349441][T10297] Cannot create hsr debugfs directory
[  476.123468][T10219] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  476.563621][T10219] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  476.602923][T10219] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  476.764103][T10219] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  476.793633][T10219] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  476.841198][T10219] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  477.002485][T10219] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  477.051012][T10219] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  477.615837][T10219] 8021q: adding VLAN 0 to HW filter on device bond0
[  477.865151][T10219] 8021q: adding VLAN 0 to HW filter on device team0
[  477.982233][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.982523][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.064055][   T44] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.064209][   T44] bridge0: port 2(bridge_slave_1) entered forwarding state
[  480.071242][   T92] bridge_slave_1: left allmulticast mode
[  480.071278][   T92] bridge_slave_1: left promiscuous mode
[  480.071580][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.392486][   T92] bridge_slave_0: left allmulticast mode
[  480.392520][   T92] bridge_slave_0: left promiscuous mode
[  480.392785][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.671125][   T92] bridge_slave_1: left allmulticast mode
[  480.671160][   T92] bridge_slave_1: left promiscuous mode
[  480.671410][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.832454][   T92] bridge_slave_0: left allmulticast mode
[  480.832487][   T92] bridge_slave_0: left promiscuous mode
[  480.832728][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.115922][   T92] bridge_slave_1: left allmulticast mode
[  481.115956][   T92] bridge_slave_1: left promiscuous mode
[  481.116195][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.902575][   T92] bridge_slave_0: left allmulticast mode
[  482.902609][   T92] bridge_slave_0: left promiscuous mode
[  482.902862][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.457043][   T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  484.571886][   T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  484.653567][   T92] bond0 (unregistering): Released all slaves
[  485.065440][   T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  485.173598][   T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.258124][   T92] bond0 (unregistering): Released all slaves
[  486.031805][   T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.111852][   T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.154496][   T92] bond0 (unregistering): Released all slaves
[  486.973212][T10268] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  487.698785][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  487.727855][T10268] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  487.893349][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  487.927949][T10268] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  487.977305][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  488.023397][T10219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  488.034831][T10268] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  489.191245][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  489.934290][T10219] veth0_vlan: entered promiscuous mode
[  489.979227][T10297] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  491.103403][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  491.108998][T10297] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  491.309448][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  491.652883][T10297] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  491.707415][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  491.821057][T10297] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  492.036676][T10297] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  492.038383][T10219] veth1_vlan: entered promiscuous mode
[  493.420985][   T92] hsr_slave_0: left promiscuous mode
[  493.461014][   T92] hsr_slave_1: left promiscuous mode
[  493.462087][   T92] batman_adv: batadv0: Removing interface: batadv_slave_0
[  493.501937][   T92] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.711011][   T92] hsr_slave_0: left promiscuous mode
[  493.750982][   T92] hsr_slave_1: left promiscuous mode
[  493.751968][   T92] batman_adv: batadv0: Removing interface: batadv_slave_0
[  493.810190][   T92] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.000985][   T92] hsr_slave_0: left promiscuous mode
[  494.042162][   T92] hsr_slave_1: left promiscuous mode
[  494.044215][   T92] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.044235][   T92] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.122243][   T92] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.122268][   T92] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.215016][   T92] veth1_macvtap: left promiscuous mode
[  494.215115][   T92] veth0_macvtap: left promiscuous mode
[  494.215389][   T92] veth1_vlan: left promiscuous mode
[  494.215574][   T92] veth0_vlan: left promiscuous mode
[  495.102256][   T92] team0 (unregistering): Port device team_slave_1 removed
[  495.177756][   T92] team0 (unregistering): Port device team_slave_0 removed
[  495.899984][   T92] team0 (unregistering): Port device team_slave_1 removed
[  495.983506][   T92] team0 (unregistering): Port device team_slave_0 removed
[  496.850387][   T92] team0 (unregistering): Port device team_slave_1 removed
[  496.903065][   T92] team0 (unregistering): Port device team_slave_0 removed
[  497.456040][T10268] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.495299][T10219] veth0_macvtap: entered promiscuous mode
[  497.598886][T10219] veth1_macvtap: entered promiscuous mode
[  497.889203][T10268] 8021q: adding VLAN 0 to HW filter on device team0
[  497.960714][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.971122][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.995062][T10219] batman_adv: batadv0: Interface activated: batadv_slave_0
[  498.076485][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.076602][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  498.113842][T10219] batman_adv: batadv0: Interface activated: batadv_slave_1
[  498.163569][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.209444][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  498.420053][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  498.452722][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  498.475987][T10297] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.746865][T10297] 8021q: adding VLAN 0 to HW filter on device team0
[  499.608565][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  499.678851][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  499.689050][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  499.725927][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  499.756165][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  500.057483][ T3065] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.059155][ T3065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.386262][ T3065] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.386420][ T3065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  501.489161][ T1335] ieee802154 phy0 wpan0: encryption failed: -22
[  501.489250][ T1335] ieee802154 phy1 wpan1: encryption failed: -22
[  501.861713][ T5624] Bluetooth: hci1: command tx timeout
[  503.943105][ T5624] Bluetooth: hci1: command tx timeout
[  504.096216][T10268] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.563742][T10371] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.565587][T10371] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.565884][T10371] bridge_slave_0: entered allmulticast mode
[  504.568863][T10371] bridge_slave_0: entered promiscuous mode
[  504.629190][T10371] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.629455][T10371] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.629769][T10371] bridge_slave_1: entered allmulticast mode
[  504.654622][T10371] bridge_slave_1: entered promiscuous mode
[  504.793528][T10297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  504.896508][T10371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.940540][T10371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  505.096945][T10371] team0: Port device team_slave_0 added
[  505.121732][T10371] team0: Port device team_slave_1 added
[  505.468029][T10371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  505.468046][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.468069][T10371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  505.539469][T10371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  505.539485][T10371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  505.539514][T10371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.011032][ T5624] Bluetooth: hci1: command tx timeout
[  508.091032][ T5624] Bluetooth: hci1: command tx timeout
[  511.385690][T10371] hsr_slave_0: entered promiscuous mode
[  511.387758][T10371] hsr_slave_1: entered promiscuous mode
[  511.389407][T10371] debugfs: 'hsr0' already exists in 'hsr'
[  511.389430][T10371] Cannot create hsr debugfs directory
[  511.755766][T10268] veth0_vlan: entered promiscuous mode
[  512.050280][T10268] veth1_vlan: entered promiscuous mode
[  512.183599][T10297] veth0_vlan: entered promiscuous mode
[  512.291243][T10297] veth1_vlan: entered promiscuous mode
[  512.495863][T10268] veth0_macvtap: entered promiscuous mode
[  513.024375][T10371] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.110156][T10268] veth1_macvtap: entered promiscuous mode
[  513.246245][T10297] veth0_macvtap: entered promiscuous mode
[  513.264951][T10268] batman_adv: batadv0: Interface activated: batadv_slave_0
[  513.770013][T10371] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.853270][T10297] veth1_macvtap: entered promiscuous mode
[  513.868704][T10268] batman_adv: batadv0: Interface activated: batadv_slave_1
[  513.909344][   T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.926386][   T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.929707][ T1364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.963598][ T1364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.081432][T10297] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.119338][T10297] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.368376][T10371] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.348883][   T44] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  517.425495][   T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  517.432129][   T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  517.444419][   T44] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.167948][T10371] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.336266][   T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.336284][   T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.482127][   T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  519.575532][   T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  519.577123][   T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  519.618502][   T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  519.619621][   T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  520.005072][T10391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.005094][T10391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.733851][   T92] bridge_slave_1: left allmulticast mode
[  520.733885][   T92] bridge_slave_1: left promiscuous mode
[  520.734145][   T92] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.979918][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  521.018634][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  521.020472][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  521.021724][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  521.022485][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  521.771040][ T5624] Bluetooth: hci2: command tx timeout
[  522.255379][   T92] bridge_slave_0: left allmulticast mode
[  522.255413][   T92] bridge_slave_0: left promiscuous mode
[  522.255713][   T92] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.132920][ T5624] Bluetooth: hci0: command tx timeout
[  523.850950][ T5624] Bluetooth: hci2: command tx timeout
[  524.419449][   T39] INFO: task kworker/1:1:37 blocked for more than 143 seconds.
[  524.419488][   T39]       Tainted: G             L      syzkaller #0
[  524.419499][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  524.419507][   T39] task:kworker/1:1     state:D stack:19008 pid:37    tgid:37    ppid:2      task_flags:0x4208060 flags:0x00080000
[  524.419565][   T39] Workqueue: usb_hub_wq hub_event
[  524.419601][   T39] Call Trace:
[  524.419611][   T39]  <TASK>
[  524.419623][   T39]  __schedule+0x16f9/0x5500
[  524.419674][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  524.419712][   T39]  ? __pfx___schedule+0x10/0x10
[  524.419741][   T39]  ? schedule+0x90/0x360
[  524.419764][   T39]  schedule+0x164/0x360
[  524.419785][   T39]  usb_kill_urb+0x1cf/0x2f0
[  524.419811][   T39]  ? __pfx_usb_kill_urb+0x10/0x10
[  524.419833][   T39]  ? __pfx_autoremove_wake_function+0x10/0x10
[  524.419864][   T39]  usb_start_wait_urb+0x22a/0x5b0
[  524.419893][   T39]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  524.419934][   T39]  usb_control_msg+0x234/0x3e0
[  524.419962][   T39]  hub_port_init+0xb1e/0x28c0
[  524.419998][   T39]  hub_event+0x25d3/0x4f60
[  524.420056][   T39]  ? __pfx_hub_event+0x10/0x10
[  524.420074][   T39]  ? process_one_work+0x8be/0x1630
[  524.420108][   T39]  ? process_one_work+0x8be/0x1630
[  524.420127][   T39]  process_one_work+0x98b/0x1630
[  524.420168][   T39]  ? __pfx_process_one_work+0x10/0x10
[  524.420187][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  524.420219][   T39]  worker_thread+0xb49/0x1140
[  524.420265][   T39]  kthread+0x388/0x470
[  524.420284][   T39]  ? __pfx_worker_thread+0x10/0x10
[  524.420304][   T39]  ? __pfx_kthread+0x10/0x10
[  524.420323][   T39]  ret_from_fork+0x514/0xb70
[  524.420346][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  524.420366][   T39]  ? __switch_to+0xc79/0x1410
[  524.420385][   T39]  ? __pfx_kthread+0x10/0x10
[  524.420427][   T39]  ret_from_fork_asm+0x1a/0x30
[  524.420471][   T39]  </TASK>
[  524.420652][   T39] 
[  524.420652][   T39] Showing all locks held in the system:
[  524.420662][   T39] 3 locks held by kworker/u8:1/13:
[  524.420673][   T39]  #0: ffff88803292f138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  524.420721][   T39]  #1: ffffc90000127c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  524.420766][   T39]  #2: ffffffff8f5a0338 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680
[  524.430489][   T39] 4 locks held by pr/legacy/17:
[  524.430501][   T39]  #0: ffffffff8e1bce40 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250
[  524.430544][   T39]  #1: ffffffff8e0a4738 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90
[  524.430583][   T39]  #2: ffffffff99dfa098 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90
[  524.430625][ [  524.430625][   T39]  #3: ffffffff8e1cabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  524.430667][   T39] 8 locks held by rcuc/1/29:
[  524.430676][   T39]  #0: ffffffff8e1cabc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  524.430720][   T39]  #1: ffffffff8e1cabc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  524.430760][   T39]  #2: ffffffff8e1cabc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  524.430962][   T39]  #3: ffffffff8e1cabc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[  524.431006][   T39]  #4: ffff8880b873d4c0 ((process_queue_bh_lock).lock.wait_lock){....}-{2:2}, at: napi_skb_cache_get+0xbf/0x410
[  524.431050][   T39]  #5: ffffffff8e1cabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  524.431089][   T39]  #6: ffffffff99a85708 (&____s->seqcount#2){--..}-{0:0}, at: ktime_get+0x45/0x220
[  524.431131][   T39]  #7: ffff8880b873d710 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0x8b0
[  524.431173][   T39] 5 locks held by kworker/1:1/37:
[  524.431182][   T39]  #0: ffff88801eeba138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  524.431234][   T39]  #1: ffffc90000ac7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  524.431276][   T39]  #2: ffff88802b2b8210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60
[  524.431313][   T39]  #3: ffff88802b2b6658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60
[  524.431350][   T39]  #4: ffff888029959d58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60
[  524.431386][   T39] 1 lock held by khungtaskd/39:
[  524.431395][   T39]  #0: ffffffff8e1cabc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  524.431447][   T39] 4 locks held by kworker/u8:5/92:
[  524.431457][   T39]  #0: ffff88801bade138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  524.431499][   T39]  #1: ffffc9000155fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  524.431540][   T39]  #2: ffffffff8f590e00 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  524.431580][   T39]  #3: ffffffff8f5a0338 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940
[  524.431631][   T39] 3 locks held by kworker/u8:10/1364:
[  524.431640][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  524.431681][   T39]  #1: ffffc90006b17c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  524.431732][   T39]  #2: ffffffff8f5a0338 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  524.431788][   T39] 2 locks held by getty/5378:
[  524.431796][   T39]  #0: ffff8880371230a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  524.431835][   T39]  #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[  524.431881][   T39] 3 locks held by kworker/0:5/5720:
[  524.431889][   T39]  #0: ffff88813fe13938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  524.431931][   T39]  #1: ffffc90004c8fc40 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  524.431974][   T39]  #2: ffffffff8f5a0338 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  524.432018][   T39] 4 locks held by kworker/1:7/7536:
[  524.432027][   T39]  #0: ffff888033bce538 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  524.432072][   T39]  #1: ffffc9001a7b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  524.432146][   T39]  #2: ffff88804cc323f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0
[  524.548866][   T39]  #3: ffffffff8e311030 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  524.548912][   T39] 1 lock held by syz-executor/10268:
[  524.548922][   T39]  #0: ffffffff8f5a0338 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  524.548966][   T39] 2 locks held by syz-executor/10297:
[  524.548976][   T39]  #0: ffffffff8f610ec0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  524.549015][   T39]  #1: ffffffff8f5a0338 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8d0
[  524.549057][   T39] 7 locks held by syz-executor/10371:
[  524.549066][   T39]  #0: ffff888037232480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  524.549110][   T39]  #1: ffff88805ebba878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  524.549161][   T39]  #2: ffff888029d80878 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  524.549205][   T39]  #3: ffffffff8ee14cb8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710
[  524.549248][   T39]  #4: ffff88805ccc3160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  524.549288][   T39]  #5: ffff88802562e310 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_drv_probe+0xc9/0xc30
[  524.549330][   T39]  #6: ffffffff8f5a0338 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[  524.549374][   T39] 6 locks held by kworker/u8:3/10391:
[  524.549382][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  524.549423][   T39]  #1: ffffc90006447c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  524.549468][   T39]  #2: ffff88803ba18310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbd0
[  524.549514][   T39]  #3: ffff88804cc44d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbd0
[  524.549555][   T39]  #4: ffffffff8e1cabc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  524.549593][   T39]  #5: ffff8880b8636e50 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x162/0x5d0
[  524.549636][   T39] 1 lock held by syz-executor/10431:
[  524.549646][   T39]  #0: ffffffff8f5a0338 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  524.549689][   T39] 1 lock held by syz-executor/10440:
[  524.549698][   T39]  #0: ffffffff8f5a0338 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  524.549738][   T39] 
[  524.549742][   T39] =============================================
[  524.549742][   T39] 
[  524.549767][   T39] NMI backtrace for cpu 0
[  524.549786][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  524.549808][   T39] Tainted: [L]=SOFTLOCKUP
[  524.549813][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  524.549823][   T39] Call Trace:
[  524.549830][   T39]  <TASK>
[  524.549837][   T39]  dump_stack_lvl+0xe8/0x150
[  524.549860][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  524.549879][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  524.549901][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  524.549922][   T39]  sys_info+0x135/0x170
[  524.549936][   T39]  watchdog+0xfd3/0x1030
[  524.549960][   T39]  ? watchdog+0x1c9/0x1030
[  524.549980][   T39]  kthread+0x388/0x470
[  524.549998][   T39]  ? __pfx_watchdog+0x10/0x10
[  524.550012][   T39]  ? __pfx_kthread+0x10/0x10
[  524.550030][   T39]  ret_from_fork+0x514/0xb70
[  524.550051][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  524.550069][   T39]  ? __switch_to+0xc79/0x1410
[  524.550088][   T39]  ? __pfx_kthread+0x10/0x10
[  524.550107][   T39]  ret_from_fork_asm+0x1a/0x30
[  524.550145][   T39]  </TASK>
[  524.550152][   T39] Sending NMI from CPU 0 to CPUs 1:
[  524.550180][    C1] NMI backtrace for cpu 1
[  524.550195][    C1] CPU: 1 UID: 0 PID: 29 Comm: rcuc/1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  524.550217][    C1] Tainted: [L]=SOFTLOCKUP
[  524.550222][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  524.550231][    C1] RIP: 0010:check_preemption_disabled+0x1c/0xe0
[  524.550256][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 27 9f 60 07 65 8b 0d 1c 9f 60 07 f7 c1 ff ff ff 7f 74 0c <5b> 41 5e 41 5f 5d c3 cc cc cc cc cc 9c 59 f7 c1 00 02 00 00 74 ea
[  524.550269][    C1] RSP: 0018:ffffc90000a3f4c8 EFLAGS: 00000046
[  524.550282][    C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 0000000000000046
[  524.550292][    C1] RDX: 0000000000000003 RSI: ffffffff8d9c1e2e RDI: ffffffff8babe080
[  524.550303][    C1] RBP: ffff88801e2d4a78 R08: ffffc90000a3ff38 R09: 0000000000000000
[  524.550313][    C1] R10: ffffc90000a3f678 R11: fffff52000147ed1 R12: 0000000000000003
[  524.550324][    C1] R13: 0000000000000003 R14: ffffffff8e1cabc0 R15: ffff88801e2d3e00
[  524.550334][    C1] FS:  0000000000000000(0000) GS:ffff888125d94000(0000) knlGS:0000000000000000
[  524.550355][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  524.550365][    C1] CR2: 00007f0c27336038 CR3: 0000000059cc4000 CR4: 00000000003526f0
[  524.550378][    C1] Call Trace:
[  524.550390][    C1]  <TASK>
[  524.550397][    C1]  lock_release+0x259/0x3c0
[  524.550416][    C1]  ? unwind_next_frame+0xa6/0x2550
[  524.550436][    C1]  ? unwind_next_frame+0xa6/0x2550
[  524.550453][    C1]  unwind_next_frame+0x1bba/0x2550
[  524.550472][    C1]  ? unwind_next_frame+0xa6/0x2550
[  524.550490][    C1]  ? ret_from_fork+0x514/0xb70
[  524.550507][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  524.550523][    C1]  arch_stack_walk+0x11b/0x150
[  524.550543][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  524.550562][    C1]  stack_trace_save+0xa9/0x100
[  524.550575][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  524.550590][    C1]  ? __lock_acquire+0x6b5/0x2d10
[  524.550608][    C1]  kasan_save_track+0x3e/0x80
[  524.550622][    C1]  ? kasan_save_track+0x3e/0x80
[  524.550635][    C1]  ? kasan_save_free_info+0x46/0x50
[  524.550652][    C1]  ? __kasan_slab_free+0x5c/0x80
[  524.550666][    C1]  ? kfree+0x1c5/0x6c0
[  524.550678][    C1]  ? ref_tracker_free+0x509/0x820
[  524.550698][    C1]  ? dst_destroy+0x12a/0x570
[  524.550711][    C1]  ? rcu_cpu_kthread+0x99e/0x1470
[  524.550728][    C1]  ? smpboot_thread_fn+0x541/0xa50
[  524.550741][    C1]  ? kthread+0x388/0x470
[  524.550754][    C1]  ? ret_from_fork+0x514/0xb70
[  524.550789][    C1]  kasan_save_free_info+0x46/0x50
[  524.550805][    C1]  __kasan_slab_free+0x5c/0x80
[  524.550820][    C1]  kfree+0x1c5/0x6c0
[  524.550832][    C1]  ? ref_tracker_free+0x509/0x820
[  524.550853][    C1]  ref_tracker_free+0x509/0x820
[  524.550872][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  524.550890][    C1]  ? dst_destroy+0x12a/0x570
[  524.550902][    C1]  ? rcu_cpu_kthread+0x99e/0x1470
[  524.550918][    C1]  ? smpboot_thread_fn+0x541/0xa50
[  524.550930][    C1]  ? kthread+0x388/0x470
[  524.550944][    C1]  ? ret_from_fork+0x514/0xb70
[  524.550958][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  524.550980][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  524.550999][    C1]  dst_destroy+0x12a/0x570
[  524.551013][    C1]  ? __pfx_dst_destroy_rcu+0x10/0x10
[  524.551027][    C1]  rcu_cpu_kthread+0x99e/0x1470
[  524.551046][    C1]  ? rcu_cpu_kthread+0x205/0x1470
[  524.551066][    C1]  ? __pfx_rcu_cpu_kthread+0x10/0x10
[  524.551083][    C1]  ? schedule+0x90/0x360
[  524.551102][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  524.551114][    C1]  smpboot_thread_fn+0x541/0xa50
[  524.551128][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  524.551145][    C1]  kthread+0x388/0x470
[  524.551159][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  524.551172][    C1]  ? __pfx_kthread+0x10/0x10
[  524.551188][    C1]  ret_from_fork+0x514/0xb70
[  524.551204][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  524.551220][    C1]  ? __switch_to+0xc79/0x1410
[  524.551234][    C1]  ? __pfx_kthread+0x10/0x10
[  524.551249][    C1]  ret_from_fork_asm+0x1a/0x30
[  524.551272][    C1]  </TASK>
[  524.712459][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  524.712481][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  524.712507][   T39] Tainted: [L]=SOFTLOCKUP
[  524.712513][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  524.712523][   T39] Call Trace:
[  524.712531][   T39]  <TASK>
[  524.712539][   T39]  vpanic+0x56c/0xa60
[  524.712566][   T39]  ? __pfx___schedule+0x10/0x10
[  524.712587][   T39]  ? __pfx_vpanic+0x10/0x10
[  524.712616][   T39]  panic+0xc5/0xd0
[  524.712636][   T39]  ? __pfx_panic+0x10/0x10
[  524.712658][   T39]  ? preempt_schedule_thunk+0x16/0x40
[  524.712684][   T39]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  524.712708][   T39]  watchdog+0x102c/0x1030
[  524.712730][   T39]  ? watchdog+0x1c9/0x1030
[  524.712752][   T39]  kthread+0x388/0x470
[  524.712771][   T39]  ? __pfx_watchdog+0x10/0x10
[  524.712785][   T39]  ? __pfx_kthread+0x10/0x10
[  524.712803][   T39]  ret_from_fork+0x514/0xb70
[  524.712825][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  524.712843][   T39]  ? __switch_to+0xc79/0x1410
[  524.712860][   T39]  ? __pfx_kthread+0x10/0x10
[  524.712880][   T39]  ret_from_fork_asm+0x1a/0x30
[  524.712911][   T39]  </TASK>
[  524.713069][   T39] Kernel Offset: disabled