last executing test programs:
5.672334338s ago: executing program 1 (id=2):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r0, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908", 0x4f}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
5.239417156s ago: executing program 1 (id=5):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
5.029148927s ago: executing program 1 (id=6):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd002300801900000000000000000000000000001800", [0x0, 0x2000000000001]}})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'})
r1 = syz_open_pts(r0, 0x400)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)
4.666341743s ago: executing program 1 (id=7):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
4.300879018s ago: executing program 0 (id=1):
r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
4.228484205s ago: executing program 3 (id=4):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014)
3.846869718s ago: executing program 3 (id=8):
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
shutdown(r0, 0x1)
2.901854382s ago: executing program 3 (id=10):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12015002d5281b08c00901024ffa0102030109021200013daea002090425070013fd42fb"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000300)={0x40, 0x13, 0x1, "cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000340)={0x0, 0x11, 0x1, "1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
2.301951761s ago: executing program 2 (id=13):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd002300801900000000000000000000000000001800", [0x0, 0x2000000000001]}})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'})
r1 = syz_open_pts(r0, 0x400)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)
1.597259759s ago: executing program 2 (id=14):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))
1.22925148s ago: executing program 1 (id=15):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)={0x24, 0x0, 0x8d61ddcfedb48df, 0x70bd25, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x24}}, 0x0)
1.212282037s ago: executing program 2 (id=16):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014)
869.141084ms ago: executing program 0 (id=17):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52)
connect$802154_dgram(r0, &(0x7f0000000000), 0x14)
843.082557ms ago: executing program 1 (id=18):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f00000002c0)={0x0, 0x1, 0x1, "cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000740)={0x0, 0x31, 0x2, "f7b2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x89, 0x2}})
686.857811ms ago: executing program 2 (id=19):
shmctl$SHM_UNLOCK(0x0, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000140)='\x00', 0x1, 0x24008084, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
shutdown(r0, 0x1)
513.335608ms ago: executing program 0 (id=20):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r0, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b", 0xe4}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}], 0x40, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f", 0x9b}, {&(0x7f0000000ac0)="3fe4c8a3288f", 0x6}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028", 0x4c}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908", 0x4f}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
377.803847ms ago: executing program 3 (id=21):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "dce02de9d7bd466b", "72e64b3892060025848c9f40363cf916", "000400", "e2b768b4bb9e0d9b"}, 0x28)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
360.881147ms ago: executing program 2 (id=22):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd002300801900000000000000000000000000001800", [0x0, 0x2000000000001]}})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'})
r1 = syz_open_pts(r0, 0x400)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)
191.065601ms ago: executing program 2 (id=23):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
71.498134ms ago: executing program 0 (id=24):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="000f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000004140)={0x1c, &(0x7f0000004040)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
0s ago: executing program 3 (id=25):
r0 = syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts.
[ 86.719441][ T5603] cgroup: Unknown subsys name 'net'
[ 86.962542][ T5603] cgroup: Unknown subsys name 'cpuset'
[ 87.014378][ T5603] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 89.031430][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.642001][ T4929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.681114][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.683018][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 91.699051][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.709648][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 91.710358][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 91.739565][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 91.752310][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 91.753651][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 91.779870][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 91.781043][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 91.781427][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 91.782386][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.783926][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 91.796947][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.906073][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 91.936699][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 91.938203][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 91.977899][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 91.979183][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 92.128924][ T9] cfg80211: failed to load regulatory.db
[ 93.965408][ T5622] Bluetooth: hci2: command tx timeout
[ 93.965413][ T60] Bluetooth: hci1: command tx timeout
[ 94.043931][ T60] Bluetooth: hci0: command tx timeout
[ 94.135010][ T60] Bluetooth: hci3: command tx timeout
[ 94.291574][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.292159][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.292763][ T5617] bridge_slave_0: entered allmulticast mode
[ 94.301727][ T5617] bridge_slave_0: entered promiscuous mode
[ 94.345049][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.345288][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.345477][ T5618] bridge_slave_0: entered allmulticast mode
[ 94.347837][ T5618] bridge_slave_0: entered promiscuous mode
[ 94.350269][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.350598][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.350875][ T5620] bridge_slave_0: entered allmulticast mode
[ 94.353491][ T5620] bridge_slave_0: entered promiscuous mode
[ 94.417069][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.417461][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.417677][ T5617] bridge_slave_1: entered allmulticast mode
[ 94.420138][ T5617] bridge_slave_1: entered promiscuous mode
[ 94.466247][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.466586][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.466866][ T5618] bridge_slave_1: entered allmulticast mode
[ 94.469434][ T5618] bridge_slave_1: entered promiscuous mode
[ 94.471340][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.471569][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.472031][ T5620] bridge_slave_1: entered allmulticast mode
[ 94.514960][ T5620] bridge_slave_1: entered promiscuous mode
[ 94.547543][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.547856][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.548049][ T5615] bridge_slave_0: entered allmulticast mode
[ 94.550501][ T5615] bridge_slave_0: entered promiscuous mode
[ 94.630410][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.630741][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.631014][ T5615] bridge_slave_1: entered allmulticast mode
[ 94.637987][ T5615] bridge_slave_1: entered promiscuous mode
[ 94.700502][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.737440][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.743243][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.768447][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.802030][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.818257][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.851348][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.914942][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.964731][ T5617] team0: Port device team_slave_0 added
[ 94.991920][ T5618] team0: Port device team_slave_0 added
[ 95.001385][ T5620] team0: Port device team_slave_0 added
[ 95.009921][ T5617] team0: Port device team_slave_1 added
[ 95.036177][ T5618] team0: Port device team_slave_1 added
[ 95.039350][ T5620] team0: Port device team_slave_1 added
[ 95.068774][ T5615] team0: Port device team_slave_0 added
[ 95.142266][ T5615] team0: Port device team_slave_1 added
[ 95.187658][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.187671][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.187691][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.240869][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.240881][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.240902][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.243591][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.243603][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.243623][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.307528][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.307572][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.307655][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.392511][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.392525][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.392545][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.443421][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.443434][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.443455][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.467154][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.467237][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.467338][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.551031][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.551045][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 95.551065][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.721416][ T5617] hsr_slave_0: entered promiscuous mode
[ 95.723264][ T5617] hsr_slave_1: entered promiscuous mode
[ 95.777529][ T5618] hsr_slave_0: entered promiscuous mode
[ 95.779137][ T5618] hsr_slave_1: entered promiscuous mode
[ 95.780532][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[ 95.780622][ T5618] Cannot create hsr debugfs directory
[ 96.015881][ T5620] hsr_slave_0: entered promiscuous mode
[ 96.017689][ T5620] hsr_slave_1: entered promiscuous mode
[ 96.019028][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[ 96.019052][ T5620] Cannot create hsr debugfs directory
[ 96.043898][ T60] Bluetooth: hci2: command tx timeout
[ 96.051496][ T5622] Bluetooth: hci1: command tx timeout
[ 96.086486][ T5615] hsr_slave_0: entered promiscuous mode
[ 96.088029][ T5615] hsr_slave_1: entered promiscuous mode
[ 96.089320][ T5615] debugfs: 'hsr0' already exists in 'hsr'
[ 96.089343][ T5615] Cannot create hsr debugfs directory
[ 96.125036][ T60] Bluetooth: hci0: command tx timeout
[ 96.214073][ T60] Bluetooth: hci3: command tx timeout
[ 96.959959][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 97.030339][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 97.044309][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 97.079833][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 97.087876][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 97.120907][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 97.151639][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 97.178936][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 97.349027][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 97.378737][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 97.381458][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 97.425999][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 97.432797][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 97.468532][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 97.500817][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 97.530790][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 97.705053][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 97.750582][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 97.766099][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 97.810036][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 97.825107][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 97.858116][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 97.890030][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 97.918602][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 98.069800][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 98.110328][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 98.123975][ T60] Bluetooth: hci2: command tx timeout
[ 98.124007][ T60] Bluetooth: hci1: command tx timeout
[ 98.126077][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 98.169800][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 98.186628][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 98.204042][ T5622] Bluetooth: hci0: command tx timeout
[ 98.226746][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 98.252215][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 98.278677][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 98.284719][ T5622] Bluetooth: hci3: command tx timeout
[ 98.358073][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.481936][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.535751][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.535920][ T1497] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.610402][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.610554][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 98.654787][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.768796][ T5615] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.817479][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.850253][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.851804][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.903239][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.903430][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.039888][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.085358][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.111315][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.111568][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.188924][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.189046][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.278713][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.346890][ T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.347164][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.423606][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.435668][ T1497] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.204928][ T5622] Bluetooth: hci1: command tx timeout
[ 100.204962][ T5622] Bluetooth: hci2: command tx timeout
[ 100.283911][ T60] Bluetooth: hci0: command tx timeout
[ 100.351076][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.378002][ T60] Bluetooth: hci3: command tx timeout
[ 100.668362][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.898160][ T5617] veth0_vlan: entered promiscuous mode
[ 100.959233][ T5617] veth1_vlan: entered promiscuous mode
[ 101.021710][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.078779][ T5615] veth0_vlan: entered promiscuous mode
[ 101.101058][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.148308][ T5615] veth1_vlan: entered promiscuous mode
[ 101.226826][ T5617] veth0_macvtap: entered promiscuous mode
[ 101.274648][ T5617] veth1_macvtap: entered promiscuous mode
[ 101.342833][ T5618] veth0_vlan: entered promiscuous mode
[ 101.388244][ T5615] veth0_macvtap: entered promiscuous mode
[ 101.399444][ T5620] veth0_vlan: entered promiscuous mode
[ 101.421746][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.442311][ T5618] veth1_vlan: entered promiscuous mode
[ 101.455902][ T5615] veth1_macvtap: entered promiscuous mode
[ 101.470595][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.516489][ T5620] veth1_vlan: entered promiscuous mode
[ 101.542207][ T832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.561737][ T832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.579593][ T832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.602082][ T832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.622285][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.722488][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.949957][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.961149][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.983936][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.990727][ T5618] veth0_macvtap: entered promiscuous mode
[ 102.025940][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.066676][ T5618] veth1_macvtap: entered promiscuous mode
[ 102.091573][ T5620] veth0_macvtap: entered promiscuous mode
[ 102.158666][ T5620] veth1_macvtap: entered promiscuous mode
[ 102.310648][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.310667][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.439609][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.505684][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.542676][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.576629][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.576644][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.621911][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.664074][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.665881][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.731023][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.746921][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.809392][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.809488][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.809504][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.812110][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.859712][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.900207][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.454854][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.454874][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.865939][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 104.088348][ T1568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.088369][ T1568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.196843][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 104.196873][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 104.196895][ T9] usb 3-1: Product: syz
[ 104.196910][ T9] usb 3-1: Manufacturer: syz
[ 104.196925][ T9] usb 3-1: SerialNumber: syz
[ 104.303177][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.303203][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.405943][ T9] usb 3-1: config 0 descriptor??
[ 104.802115][ T9] usb 3-1: f81604_read: reg: 105 failed: -EREMOTEIO
[ 104.802146][ T9] f81604 3-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO
[ 104.802188][ T9] f81604 3-1:0.0: probe with driver f81604 failed with error -121
[ 104.880282][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.880305][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.954369][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.954392][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.674617][ T822] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 105.834456][ T822] usb 2-1: Using ep0 maxpacket: 16
[ 105.839634][ T822] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 105.839667][ T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 105.896721][ T822] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 105.896754][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 105.896776][ T822] usb 2-1: Product: syz
[ 105.896791][ T822] usb 2-1: Manufacturer: syz
[ 105.896807][ T822] usb 2-1: SerialNumber: syz
[ 106.033933][ T822] usb 2-1: config 0 descriptor??
[ 106.099895][ T822] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 106.099922][ T822] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 106.204533][ T5723] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 106.517888][ T9] usb 3-1: USB disconnect, device number 2
[ 106.674870][ T5723] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 106.692861][ T5723] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 106.712547][ T5723] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 106.712579][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 106.712602][ T5723] usb 1-1: Product: syz
[ 106.712617][ T5723] usb 1-1: Manufacturer: syz
[ 106.712633][ T5723] usb 1-1: SerialNumber: syz
[ 106.866081][ T822] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 106.866708][ T822] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[ 107.349010][ T1247] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[ 107.472644][ T822] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[ 107.481758][ T822] em28xx 2-1:0.0: couldn't setup AC97 register 2
[ 107.482573][ T822] em28xx 2-1:0.0: couldn't setup AC97 register 4
[ 107.483209][ T822] em28xx 2-1:0.0: couldn't setup AC97 register 6
[ 107.518541][ T822] em28xx 2-1:0.0: couldn't setup AC97 register 54
[ 107.520589][ T822] em28xx 2-1:0.0: couldn't setup AC97 register 56
[ 107.541652][ T1247] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 107.543221][ T1247] usb 4-1: not running at top speed; connect to a high speed hub
[ 107.561184][ T1247] usb 4-1: config 61 has an invalid interface number: 37 but max is 0
[ 107.561213][ T1247] usb 4-1: config 61 has no interface number 0
[ 107.561255][ T1247] usb 4-1: config 61 interface 37 has no altsetting 0
[ 107.591561][ T1247] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f
[ 107.591592][ T1247] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 107.591613][ T1247] usb 4-1: Product: syz
[ 107.591628][ T1247] usb 4-1: Manufacturer: syz
[ 107.591643][ T1247] usb 4-1: SerialNumber: syz
[ 107.669553][ T5723] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 107.742955][ T5723] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG.
[ 107.742986][ T5723] usb 1-1: found format II with max.bitrate = 4, frame size=7372
[ 107.761668][ T822] usb 2-1: USB disconnect, device number 2
[ 107.899808][ T5723] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[ 108.470894][ T1247] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 108.940128][ T1247] gp8psk: usb out operation failed.
[ 108.940163][ T1247] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 108.940209][ T1247] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19)
[ 109.007031][ T1247] usb 4-1: USB disconnect, device number 2
[ 109.291096][ T5723] usb 1-1: USB disconnect, device number 2
[ 109.453919][ T5605] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 109.620441][ T5605] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 109.620475][ T5605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 109.620498][ T5605] usb 2-1: Product: syz
[ 109.620513][ T5605] usb 2-1: Manufacturer: syz
[ 109.620530][ T5605] usb 2-1: SerialNumber: syz
[ 109.685408][ T5605] usb 2-1: config 0 descriptor??
[ 109.941369][ T5605] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO
[ 109.941399][ T5605] f81604 2-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO
[ 109.941438][ T5605] f81604 2-1:0.0: probe with driver f81604 failed with error -121
[ 110.240886][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 110.365047][ T5605] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 110.384665][ T12] ------------[ cut here ]------------
[ 110.384677][ T12] task_rq(p) != rq
[ 110.384687][ T12] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#1: kworker/u8:0/12
[ 110.384726][ T12] Modules linked in:
[ 110.384756][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 110.384776][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 110.384788][ T12] Workqueue: 0x0 (events_unbound)
[ 110.384817][ T12] RIP: 0010:hrtick_start_fair+0x196/0x1f0
[ 110.384841][ T12] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82
[ 110.384856][ T12] RSP: 0018:ffffc90000117a20 EFLAGS: 00010006
[ 110.384870][ T12] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae
[ 110.384883][ T12] RDX: 0000000000000000 RSI: ffff888027cd9f00 RDI: ffff8880b873ba40
[ 110.384895][ T12] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721
[ 110.384908][ T12] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000
[ 110.384921][ T12] R13: 1ffff110170e78d6 R14: ffff888027cd9f00 R15: ffffffff8dc257d0
[ 110.384934][ T12] FS: 0000000000000000(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000
[ 110.384948][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 110.384959][ T12] CR2: 00002000007a8000 CR3: 0000000028d62000 CR4: 00000000003526f0
[ 110.384975][ T12] Call Trace:
[ 110.384985][ T12]
[ 110.384995][ T12] set_next_task_fair+0xa68/0xce0
[ 110.385021][ T12] __schedule+0x3e03/0x5550
[ 110.385065][ T12] ? __pfx___schedule+0x10/0x10
[ 110.385090][ T12] ? schedule+0x90/0x360
[ 110.385116][ T12] ? schedule+0x90/0x360
[ 110.385138][ T12] schedule+0x164/0x360
[ 110.385167][ T12] worker_thread+0xdaf/0x1140
[ 110.385219][ T12] kthread+0x388/0x470
[ 110.385239][ T12] ? __pfx_worker_thread+0x10/0x10
[ 110.385265][ T12] ? __pfx_kthread+0x10/0x10
[ 110.385286][ T12] ret_from_fork+0x514/0xb70
[ 110.385310][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 110.385331][ T12] ? __switch_to+0xc79/0x1410
[ 110.385350][ T12] ? __pfx_kthread+0x10/0x10
[ 110.385371][ T12] ret_from_fork_asm+0x1a/0x30
[ 110.385408][ T12]
[ 110.385417][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 110.385429][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 110.385448][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 110.385459][ T12] Workqueue: 0x0 (events_unbound)
[ 110.385479][ T12] Call Trace:
[ 110.385486][ T12]
[ 110.385492][ T12] vpanic+0x56c/0xa60
[ 110.385519][ T12] ? __pfx__printk+0x10/0x10
[ 110.385537][ T12] ? __pfx_vpanic+0x10/0x10
[ 110.385561][ T12] ? is_bpf_text_address+0x292/0x2b0
[ 110.385588][ T12] ? is_bpf_text_address+0x26/0x2b0
[ 110.385620][ T12] panic+0xc5/0xd0
[ 110.385645][ T12] ? __pfx_panic+0x10/0x10
[ 110.385677][ T12] ? ret_from_fork_asm+0x1a/0x30
[ 110.385705][ T12] __warn+0x315/0x4c0
[ 110.385729][ T12] ? hrtick_start_fair+0x196/0x1f0
[ 110.385754][ T12] ? hrtick_start_fair+0x196/0x1f0
[ 110.385778][ T12] __report_bug+0x339/0x540
[ 110.385806][ T12] ? hrtick_start_fair+0x196/0x1f0
[ 110.385830][ T12] ? __pfx___report_bug+0x10/0x10
[ 110.385853][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 110.385884][ T12] ? hrtick_start_fair+0x196/0x1f0
[ 110.385907][ T12] report_bug+0x16a/0x220
[ 110.385930][ T12] ? hrtick_start_fair+0x196/0x1f0
[ 110.385952][ T12] ? hrtick_start_fair+0x198/0x1f0
[ 110.385975][ T12] handle_bug+0x9c/0x200
[ 110.386001][ T12] exc_invalid_op+0x1a/0x50
[ 110.386027][ T12] asm_exc_invalid_op+0x1a/0x20
[ 110.386045][ T12] RIP: 0010:hrtick_start_fair+0x196/0x1f0
[ 110.386076][ T12] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82
[ 110.386090][ T12] RSP: 0018:ffffc90000117a20 EFLAGS: 00010006
[ 110.386104][ T12] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae
[ 110.386118][ T12] RDX: 0000000000000000 RSI: ffff888027cd9f00 RDI: ffff8880b873ba40
[ 110.386130][ T12] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721
[ 110.386143][ T12] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000
[ 110.386156][ T12] R13: 1ffff110170e78d6 R14: ffff888027cd9f00 R15: ffffffff8dc257d0
[ 110.386175][ T12] ? set_next_task_fair+0xa4e/0xce0
[ 110.386201][ T12] set_next_task_fair+0xa68/0xce0
[ 110.386226][ T12] __schedule+0x3e03/0x5550
[ 110.386266][ T12] ? __pfx___schedule+0x10/0x10
[ 110.386284][ T12] ? schedule+0x90/0x360
[ 110.386311][ T12] ? schedule+0x90/0x360
[ 110.386333][ T12] schedule+0x164/0x360
[ 110.386354][ T12] worker_thread+0xdaf/0x1140
[ 110.386400][ T12] kthread+0x388/0x470
[ 110.386421][ T12] ? __pfx_worker_thread+0x10/0x10
[ 110.386446][ T12] ? __pfx_kthread+0x10/0x10
[ 110.386467][ T12] ret_from_fork+0x514/0xb70
[ 110.386491][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 110.386512][ T12] ? __switch_to+0xc79/0x1410
[ 110.386532][ T12] ? __pfx_kthread+0x10/0x10
[ 110.386564][ T12] ret_from_fork_asm+0x1a/0x30
[ 110.386599][ T12]
[ 111.491436][ T12] Shutting down cpus with NMI
[ 111.492090][ T12] Kernel Offset: disabled