last executing test programs:

30.227890396s ago: executing program 0 (id=3436):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "000400"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f5db"], 0x0, 0x0, 0x0, 0x0})

28.310692511s ago: executing program 2 (id=3458):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='-4'], 0xc)

28.140647566s ago: executing program 2 (id=3459):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000})

27.979521426s ago: executing program 2 (id=3460):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000})
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)

27.793688915s ago: executing program 2 (id=3461):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0)

27.477397954s ago: executing program 2 (id=3464):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0)

27.222026051s ago: executing program 2 (id=3466):
r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000180)={0x0, 0x7270, 0x13580}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0x3, 0x7, 0x0, 0x0, 0xb})
io_uring_enter(r0, 0x45e0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0)

26.996784659s ago: executing program 0 (id=3468):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x14, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, 'bond_slave_1\x00'}}, 0x1e)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0)

26.501893433s ago: executing program 0 (id=3469):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x7f000000, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0)

26.263774297s ago: executing program 0 (id=3470):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000023000b02d25a806f8c6394f91f24fc60", 0x14}], 0x1}, 0x0)

25.951890708s ago: executing program 0 (id=3473):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000200), 0x4)

25.657319387s ago: executing program 0 (id=3476):
r0 = io_uring_setup(0x260d, &(0x7f0000001300)={0x0, 0x0, 0x1046, 0x0, 0x25c})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000002200000c0000000000fee300760000000f8a49dc75000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0x19, 0x0, 0x0)

13.401459587s ago: executing program 1 (id=3535):
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$netlink(0x10, 0x3, 0x4)
write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)

13.009276907s ago: executing program 1 (id=3539):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc001001b}]})

12.682455166s ago: executing program 4 (id=3540):
r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
unshare(0x28000600)
signalfd4(r0, &(0x7f0000000080), 0x8, 0x0)

11.639864721s ago: executing program 4 (id=3541):
r0 = socket(0x840000000002, 0x3, 0x100)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macvlan0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)

10.757199919s ago: executing program 4 (id=3542):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f00000002c0)=""/59, 0x3b}, {0x0}], 0x3}}], 0x1, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

10.75466304s ago: executing program 1 (id=3550):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000440)={0x80})

10.468634943s ago: executing program 1 (id=3543):
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

9.951895802s ago: executing program 1 (id=3545):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000480000000000000008"])

9.373293681s ago: executing program 4 (id=3547):
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}})
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

9.113236361s ago: executing program 4 (id=3548):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f00000000c0)={0x18, 0x0, 0x4000})

8.822971678s ago: executing program 4 (id=3551):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0x12}, [@FRA_SRC={0x14, 0x2, @dev}]}, 0x30}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

7.860487001s ago: executing program 1 (id=3552):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc3f}]}, 0x48}}, 0x0)

3.712547063s ago: executing program 3 (id=3557):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.939070311s ago: executing program 3 (id=3558):
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)})
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}})

2.651011963s ago: executing program 3 (id=3559):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x803, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000700)={0x2, 0x2, 0x5, 0x4})

2.370141425s ago: executing program 3 (id=3560):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0xa400)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]})

348.706158ms ago: executing program 3 (id=3561):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000280)={r2})

0s ago: executing program 3 (id=3562):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

kernel console output (not intermixed with test programs):

"rtlwifi/rtl8712u.bin"
[  207.884225][ T5269] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  208.022447][T10622] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.066999][ T5269] usb 4-1: Using ep0 maxpacket: 8
[  208.075141][T10622] 8021q: adding VLAN 0 to HW filter on device team0
[  208.082969][    T8] usb 2-1: USB disconnect, device number 26
[  208.086126][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  208.110657][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  208.129728][ T5269] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  208.150702][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.157930][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.166867][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  208.180785][ T5269] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  208.200032][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.207227][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.219017][ T5269] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  208.256641][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.282471][ T5269] usb 4-1: config 0 descriptor??
[  208.328142][ T5232] Bluetooth: hci5: urb ffff88814aabc300 submission failed (90)
[  208.367051][ T5232] Bluetooth: hci3: command tx timeout
[  208.541504][T10622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.543256][ T5223] usb 4-1: USB disconnect, device number 30
[  208.628480][T10622] veth0_vlan: entered promiscuous mode
[  208.651512][T10622] veth1_vlan: entered promiscuous mode
[  208.732617][T10884] netlink: 'syz.1.2457': attribute type 10 has an invalid length.
[  208.768607][T10884] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  208.809881][T10884] team0: Port device netdevsim0 added
[  208.817562][T10887] netlink: 'syz.1.2457': attribute type 10 has an invalid length.
[  208.852942][T10887] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  208.901340][T10887] team0: Port device netdevsim0 removed
[  208.934565][T10887] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  208.958830][T10622] veth0_macvtap: entered promiscuous mode
[  208.986810][T10622] veth1_macvtap: entered promiscuous mode
[  209.032927][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.063917][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.094450][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.125640][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.148886][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.174390][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.195059][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.221993][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.238774][T10622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.272034][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.283365][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.305631][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.338298][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.356277][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.382051][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.404152][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.414835][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.426710][T10622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.443288][T10622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.454603][T10622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.464133][T10622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.473036][T10622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.704450][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.748272][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.806604][ T5269] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  209.820902][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.852164][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.979119][ T5269] usb 4-1: Using ep0 maxpacket: 16
[  209.990654][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.008203][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.023861][ T5269] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00
[  210.077773][ T5227] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  210.085503][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.149120][ T5269] usb 4-1: config 0 descriptor??
[  210.256812][ T5227] usb 3-1: Using ep0 maxpacket: 32
[  210.264596][ T5227] usb 3-1: config 0 has no interfaces?
[  210.270451][   T51] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  210.365606][ T5227] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  210.381064][ T5227] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  210.394663][ T5227] usb 3-1: Product: syz
[  210.399072][ T5227] usb 3-1: Manufacturer: syz
[  210.406248][ T5227] usb 3-1: config 0 descriptor??
[  210.466373][   T51] usb 1-1: Using ep0 maxpacket: 16
[  210.477922][   T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.489267][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  210.501368][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  210.511165][   T51] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  210.521106][   T51] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.535757][   T51] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  210.545116][   T51] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  210.563027][   T51] usb 1-1: Manufacturer: syz
[  210.574256][   T51] usb 1-1: config 0 descriptor??
[  210.589672][ T5269] glorious 0003:22D4:1503.0045: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.3-1/input0
[  210.627811][ T5269] usb 3-1: USB disconnect, device number 27
[  210.790228][ T5227] usb 4-1: USB disconnect, device number 31
[  210.957600][   T51] rc_core: IR keymap rc-hauppauge not found
[  210.963567][   T51] Registered IR keymap rc-empty
[  210.982046][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.012487][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.047007][   T51] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  211.067829][   T51] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50
[  211.099770][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.130946][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.177433][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.216569][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.256838][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.286490][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.307119][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.336435][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.376911][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.406326][   T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  211.432022][   T51] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  211.447511][   T51] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  211.469914][   T51] usb 1-1: USB disconnect, device number 30
[  211.916202][ T5227] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  212.082871][ T5227] usb 4-1: too many configurations: 65, using maximum allowed: 8
[  212.098676][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.119757][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.151409][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.175042][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.201004][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.218500][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.253912][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.275376][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.306323][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.326823][T11031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2492'.
[  212.331788][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.373059][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.411669][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.467200][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.486190][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.526754][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.531779][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'.
[  212.563411][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.622946][ T5227] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  212.662948][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.673581][ T5227] usb 4-1: config 0 descriptor??
[  212.782730][T11050] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2498'.
[  212.792012][T11050] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2498'.
[  212.854667][T11052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2501'.
[  212.876769][T11052] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.886564][T11052] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.144541][ T5227] cypress 0003:04B4:07B1.0046: unknown main item tag 0x0
[  213.155091][ T5227] cypress 0003:04B4:07B1.0046: unknown main item tag 0x0
[  213.166799][T11062] tap0: tun_chr_ioctl cmd 1074025677
[  213.175620][T11062] tap0: linktype set to 780
[  213.186351][ T5227] cypress 0003:04B4:07B1.0046: unknown main item tag 0x0
[  213.203961][ T5227] cypress 0003:04B4:07B1.0046: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0
[  213.415710][ T5227] usb 4-1: USB disconnect, device number 32
[  213.890155][T11097] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2520'.
[  214.236304][ T5223] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  214.400659][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2528'.
[  214.428187][ T5223] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.446469][ T5223] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  214.481883][ T5223] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  214.509150][ T5223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  214.542508][ T5223] usb 3-1: SerialNumber: syz
[  214.775012][ T5223] usb 3-1: 0:2 : does not exist
[  214.843298][ T5223] usb 3-1: USB disconnect, device number 28
[  214.928023][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  215.019380][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'.
[  215.447270][T11139] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  215.621715][T11147] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  215.789831][T11154] pimreg3: entered allmulticast mode
[  215.950675][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'.
[  216.097096][T11176] tap0: tun_chr_ioctl cmd 1074025677
[  216.102877][T11176] tap0: linktype set to 8
[  216.124137][T11178] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  216.456415][ T5223] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  216.547302][T11201] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2568'.
[  216.564872][T11201] openvswitch: netlink: VXLAN extension 43 out of range max 1
[  216.618748][ T5223] usb 3-1: Using ep0 maxpacket: 8
[  216.626253][ T5223] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  216.641177][ T5223] usb 3-1: config 0 has no interface number 0
[  216.651503][T11208] sch_tbf: burst 4 is lower than device lo mtu (65550) !
[  216.652689][ T5223] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92
[  216.681747][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.693107][ T5223] usb 3-1: Product: syz
[  216.702100][ T5223] usb 3-1: Manufacturer: syz
[  216.713146][ T5223] usb 3-1: SerialNumber: syz
[  216.739389][ T5223] usb 3-1: config 0 descriptor??
[  216.772209][ T5223] usb 3-1: selecting invalid altsetting 2
[  216.789197][ T5223] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  216.802336][T11213] netlink: 'syz.4.2574': attribute type 1 has an invalid length.
[  216.894203][T11219] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  216.903796][T11219] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  216.913685][T11219] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  216.923002][T11219] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  216.934271][T11219] vxlan0: entered promiscuous mode
[  216.940449][T11219] vxlan0: entered allmulticast mode
[  217.069612][ T5379] usb 3-1: USB disconnect, device number 29
[  217.189289][   T29] audit: type=1326 audit(1728902944.014:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000
[  217.255757][   T29] audit: type=1326 audit(1728902944.014:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000
[  217.306537][   T29] audit: type=1326 audit(1728902944.054:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000
[  217.352984][   T29] audit: type=1326 audit(1728902944.054:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000
[  217.384197][   T29] audit: type=1326 audit(1728902944.054:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000
[  217.420384][   T29] audit: type=1326 audit(1728902944.054:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000
[  217.420567][T11245] netlink: 'syz.0.2589': attribute type 1 has an invalid length.
[  217.449290][   T29] audit: type=1326 audit(1728902944.054:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000
[  217.490002][   T29] audit: type=1326 audit(1728902944.054:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000
[  217.826228][ T5324] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  217.978290][ T5324] usb 2-1: Using ep0 maxpacket: 16
[  217.988020][ T5324] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  218.002138][ T5324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.014757][ T5324] usb 2-1: Product: syz
[  218.022709][ T5324] usb 2-1: Manufacturer: syz
[  218.030575][ T5324] usb 2-1: SerialNumber: syz
[  218.036323][ T5379] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  218.038672][ T5324] usb 2-1: config 0 descriptor??
[  218.057666][ T5324] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  218.219429][ T5379] usb 3-1: Using ep0 maxpacket: 16
[  218.232806][ T5379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.255990][ T5379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.279320][ T5379] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  218.303179][ T5379] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  218.323985][ T5379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.353763][ T5379] usb 3-1: config 0 descriptor??
[  218.406612][   T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  218.560266][   T25] usb 1-1: Using ep0 maxpacket: 8
[  218.582534][   T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  218.599219][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.613272][   T25] usb 1-1: Product: syz
[  218.621944][   T25] usb 1-1: Manufacturer: syz
[  218.629518][   T25] usb 1-1: SerialNumber: syz
[  218.641281][   T25] usb 1-1: config 0 descriptor??
[  218.688882][ T5324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  218.709494][ T5324] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  218.724607][T11302] wg1 speed is unknown, defaulting to 1000
[  218.733699][T11302] wg1 speed is unknown, defaulting to 1000
[  218.735949][ T5324] usb 2-1: media controller created
[  218.740294][T11302] wg1 speed is unknown, defaulting to 1000
[  218.769490][ T5324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  218.778892][ T5379] microsoft 0003:045E:07DA.0047: item 0 4 0 8 parsing failed
[  218.794616][ T5324] gp8psk_fe: Frontend revision 1 attached
[  218.804618][ T5379] microsoft 0003:045E:07DA.0047: parse failed
[  218.804937][ T5324] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  218.823269][ T5379] microsoft 0003:045E:07DA.0047: probe with driver microsoft failed with error -22
[  218.825535][ T5324] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  218.877481][   T25] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  218.923337][ T5324] gp8psk: usb in 138 operation failed.
[  218.936206][ T5324] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  218.952679][ T5324] gp8psk: found Genpix USB device pID = 201 (hex)
[  218.959671][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'.
[  218.981436][ T5324] usb 2-1: USB disconnect, device number 27
[  219.040235][ T5227] usb 3-1: USB disconnect, device number 30
[  219.046941][T11302] infiniband syz1: set active
[  219.052910][T11302] infiniband syz1: added wg1
[  219.058555][    T8] wg1 speed is unknown, defaulting to 1000
[  219.155720][T11302] RDS/IB: syz1: added
[  219.177106][T11302] smc: adding ib device syz1 with port count 1
[  219.181829][ T5324] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  219.183565][T11302] smc:    ib device syz1 port 1 has pnetid 
[  219.210484][    T8] wg1 speed is unknown, defaulting to 1000
[  219.231515][T11302] wg1 speed is unknown, defaulting to 1000
[  219.328885][T11302] wg1 speed is unknown, defaulting to 1000
[  219.408047][T11302] wg1 speed is unknown, defaulting to 1000
[  219.489677][   T25] usb write operation failed. (-71)
[  219.507142][   T25] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  219.526508][   T25] dvbdev: DVB: registering new adapter (Terratec H7)
[  219.533247][   T25] usb 1-1: media controller created
[  219.540070][T11302] wg1 speed is unknown, defaulting to 1000
[  219.546818][   T25] usb read operation failed. (-71)
[  219.556182][   T25] usb write operation failed. (-71)
[  219.568089][   T25] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  219.597562][   T25] usb 1-1: USB disconnect, device number 31
[  219.714616][T11302] wg1 speed is unknown, defaulting to 1000
[  219.952073][T11320] xt_CT: No such helper "syz0"
[  220.037783][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'.
[  220.547069][   T25] kernel write not supported for file /snd/seq (pid: 25 comm: kworker/1:0)
[  220.716514][ T5379] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  220.880618][ T5379] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  220.891106][ T5379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.899828][ T5379] usb 2-1: Product: syz
[  220.911681][ T5379] usb 2-1: Manufacturer: syz
[  220.926669][ T5379] usb 2-1: SerialNumber: syz
[  220.943513][ T5379] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  220.977622][ T5223] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  221.160604][T11383] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  221.182275][ T5232] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  221.271105][   T29] audit: type=1326 audit(1728902948.094:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11387 comm="syz.3.2655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x0
[  221.513649][T11400] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  222.223811][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'.
[  222.286670][ T5223] usb 2-1: Service connection timeout for: 256
[  222.293181][ T5223] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  222.305346][T11421] bond1: entered promiscuous mode
[  222.327916][ T5223] ath9k_htc: Failed to initialize the device
[  222.332246][T11421] bond1: entered allmulticast mode
[  222.342632][ T5223] usb 2-1: ath9k_htc: USB layer deinitialized
[  222.362984][T11421] 8021q: adding VLAN 0 to HW filter on device bond1
[  222.512274][T11421] bond1 (unregistering): Released all slaves
[  222.561657][ T5223] usb 2-1: USB disconnect, device number 28
[  222.664586][T11432] block nbd2: NBD_DISCONNECT
[  224.597906][   T29] audit: type=1326 audit(1728902951.424:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.1.2704" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0107f7dff9 code=0x0
[  225.245979][T11518] pimreg: entered allmulticast mode
[  225.292072][T11517] pimreg: left allmulticast mode
[  225.414388][T11531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2712'.
[  225.616462][   T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  225.677929][ T5227] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  225.721635][T11546] netlink: 'syz.0.2721': attribute type 1 has an invalid length.
[  225.836379][   T25] usb 3-1: Using ep0 maxpacket: 16
[  225.843856][ T5227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.856502][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.873396][ T5227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  225.884756][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.903630][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  225.930097][ T5227] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  225.942282][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  225.954055][   T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  225.965839][ T5227] usb 4-1: SerialNumber: syz
[  225.974469][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.001131][   T25] usb 3-1: config 0 descriptor??
[  226.232210][ T5227] usb 4-1: 0:2 : does not exist
[  226.271727][ T5227] usb 4-1: USB disconnect, device number 33
[  226.429992][   T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  226.446492][   T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  226.467788][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.492587][   T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  226.500113][   T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  226.507707][   T29] audit: type=1326 audit(1728902953.234:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.2725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa49397dff9 code=0x0
[  226.544943][   T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  226.565190][   T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  226.578127][   T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  226.585666][   T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  226.597426][   T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0
[  226.618757][   T25] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0048/input/input51
[  226.637783][   T25] microsoft 0003:045E:07DA.0048: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  226.661269][   T25] usb 3-1: USB disconnect, device number 31
[  227.606640][   T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  227.797082][   T25] usb 4-1: Using ep0 maxpacket: 8
[  227.838945][   T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  227.869689][   T25] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  227.884872][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.909679][   T25] usb 4-1: Product: syz
[  227.921048][   T25] usb 4-1: Manufacturer: syz
[  227.925821][   T25] usb 4-1: SerialNumber: syz
[  227.953030][   T25] usb 4-1: config 0 descriptor??
[  227.979854][   T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  228.585693][   T25] gspca_zc3xx: reg_w_i err -71
[  228.728769][T11616] input: syz1 as /devices/virtual/input/input52
[  229.004860][T11634] @: renamed from vlan0 (while UP)
[  229.068745][T11640] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2760'.
[  229.176961][   T25] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  229.183345][   T25] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  229.216681][   T25] usb 4-1: USB disconnect, device number 34
[  229.238439][T11649] netlink: 'syz.2.2764': attribute type 14 has an invalid length.
[  229.259362][T11649] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2764'.
[  229.325403][T11653] input: syz1 as /devices/virtual/input/input53
[  229.728411][   T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  229.826445][ T5324] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  229.897222][   T25] usb 4-1: Using ep0 maxpacket: 8
[  229.909710][   T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  229.926212][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.934246][   T25] usb 4-1: Product: syz
[  229.938581][   T25] usb 4-1: Manufacturer: syz
[  229.943200][   T25] usb 4-1: SerialNumber: syz
[  229.972778][   T25] usb 4-1: config 0 descriptor??
[  229.994738][ T5324] usb 5-1: Using ep0 maxpacket: 16
[  230.013711][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.031055][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.043406][ T5324] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  230.060057][ T5324] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  230.071457][ T5324] usb 5-1: Product: syz
[  230.083260][ T5324] usb 5-1: Manufacturer: syz
[  230.110430][ T5324] usb 5-1: config 0 descriptor??
[  230.224686][   T25] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  230.375118][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'.
[  230.391307][T11695] (unnamed net_device) (uninitialized): peer notification delay (48896) is not a multiple of miimon (129), value rounded to 48891 ms
[  230.419852][T11695] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511)
[  230.446936][T11695] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  230.487657][T11697] @: renamed from vlan0 (while UP)
[  230.532135][ T5324] kovaplus 0003:1E7D:2D50.0049: unknown main item tag 0x0
[  230.548060][ T5324] kovaplus 0003:1E7D:2D50.0049: unknown main item tag 0x0
[  230.568148][ T5324] kovaplus 0003:1E7D:2D50.0049: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0
[  230.709342][T11704] netlink: 'syz.0.2789': attribute type 1 has an invalid length.
[  230.724867][T11704] netlink: 'syz.0.2789': attribute type 2 has an invalid length.
[  230.730659][ T5324] kovaplus 0003:1E7D:2D50.0049: couldn't init struct kovaplus_device
[  230.741345][T11704] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.2789'.
[  230.786299][ T5324] kovaplus 0003:1E7D:2D50.0049: couldn't install mouse
[  230.812749][ T5324] kovaplus 0003:1E7D:2D50.0049: probe with driver kovaplus failed with error -71
[  230.846387][   T25] usb write operation failed. (-71)
[  230.853451][   T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  230.883250][ T5324] usb 5-1: USB disconnect, device number 23
[  230.896720][   T25] dvbdev: DVB: registering new adapter (Terratec H7)
[  230.903567][   T25] usb 4-1: media controller created
[  230.926807][   T25] usb read operation failed. (-71)
[  230.936485][   T25] usb write operation failed. (-71)
[  230.980877][   T25] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  231.021942][   T25] usb 4-1: USB disconnect, device number 35
[  231.252221][T11721] netlink: 'syz.2.2797': attribute type 2 has an invalid length.
[  231.690824][T11740] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2806'.
[  231.767246][T11747] netlink: 'syz.0.2809': attribute type 2 has an invalid length.
[  232.146284][   T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  232.316205][   T25] usb 3-1: Using ep0 maxpacket: 16
[  232.323135][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.351300][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.372998][   T25] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  232.392723][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.413013][   T25] usb 3-1: config 0 descriptor??
[  232.843674][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.932941][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.207150][   T25] hid (null): bogus close delimiter
[  233.240736][T11790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2829'.
[  233.317586][T11794] netlink: 'syz.4.2831': attribute type 1 has an invalid length.
[  233.325614][   T25] usb 3-1: string descriptor 0 read error: -71
[  233.341824][T11794] netlink: 'syz.4.2831': attribute type 4 has an invalid length.
[  233.349963][T11794] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2831'.
[  233.366520][   T25] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  233.374456][   T25] letsketch 0003:6161:4D15.004A: probe with driver letsketch failed with error -32
[  233.430423][   T25] usb 3-1: USB disconnect, device number 32
[  233.517991][T11798] netlink: 'syz.3.2833': attribute type 11 has an invalid length.
[  233.542856][T11798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2833'.
[  234.040740][   T29] audit: type=1326 audit(1728902960.864:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11816 comm="syz.1.2841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0107f7dff9 code=0x0
[  234.466298][ T5227] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  234.628155][ T5227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.639622][ T5227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  234.660922][ T5227] usb 5-1: config 1 has no interface number 0
[  234.672192][ T5227] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.698621][ T5227] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  234.730553][ T5227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  234.740222][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.759076][ T5227] usb 5-1: Product: syz
[  234.763464][ T5227] usb 5-1: Manufacturer: syz
[  234.773611][ T5227] usb 5-1: SerialNumber: syz
[  235.036312][   T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  235.216368][   T25] usb 4-1: Using ep0 maxpacket: 32
[  235.224921][   T25] usb 4-1: config 0 has an invalid interface number: 126 but max is 0
[  235.237526][   T25] usb 4-1: config 0 has no interface number 0
[  235.272250][   T25] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  235.292925][   T25] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  235.313346][   T25] usb 4-1: config 0 interface 126 has no altsetting 0
[  235.669854][ T5227] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS
[  235.676157][ T5227] cdc_ncm 5-1:1.1: bind() failure
[  235.685304][   T25] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  235.694514][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.703091][   T25] usb 4-1: Product: syz
[  235.707527][   T25] usb 4-1: Manufacturer: syz
[  235.712153][   T25] usb 4-1: SerialNumber: syz
[  235.720720][ T5227] usb 5-1: USB disconnect, device number 24
[  236.054436][   T25] usb 4-1: config 0 descriptor??
[  236.099532][T11844] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  236.119793][T11844] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  236.399406][T11878] sch_fq: defrate 0 ignored.
[  236.575045][   T25] ir_usb 4-1:0.126: IR Dongle converter detected
[  236.801569][   T25] usb 4-1: IR Dongle converter now attached to ttyUSB0
[  236.986030][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2876'.
[  237.004269][   T25] usb 4-1: USB disconnect, device number 36
[  237.024137][   T25] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  237.046875][   T25] ir_usb 4-1:0.126: device disconnected
[  237.340644][T11914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2884'.
[  238.581376][T11978] bridge0: port 3(vlan0) entered blocking state
[  238.610106][T11978] bridge0: port 3(vlan0) entered disabled state
[  238.646502][T11978] vlan0: entered allmulticast mode
[  238.660833][T11978] vlan0: left allmulticast mode
[  239.076751][ T5379] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  239.146634][   T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  239.177389][   T29] audit: type=1326 audit(1728902965.994:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000
[  239.236615][   T29] audit: type=1326 audit(1728902965.994:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000
[  239.236691][ T5379] usb 5-1: Using ep0 maxpacket: 32
[  239.292447][   T29] audit: type=1326 audit(1728902965.994:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000
[  239.300772][ T5379] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  239.314216][    C1] vkms_vblank_simulate: vblank timer overrun
[  239.335987][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.357803][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.365180][ T5379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.373487][   T29] audit: type=1326 audit(1728902965.994:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000
[  239.396662][ T5379] usb 5-1: Product: syz
[  239.397710][    C1] vkms_vblank_simulate: vblank timer overrun
[  239.409364][ T5379] usb 5-1: Manufacturer: syz
[  239.414333][ T5379] usb 5-1: SerialNumber: syz
[  239.426181][   T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  239.435300][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.450200][ T5379] usb 5-1: config 0 descriptor??
[  239.479308][ T5379] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  239.486830][   T25] usb 2-1: config 0 descriptor??
[  239.492078][   T29] audit: type=1326 audit(1728902965.994:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000
[  239.566298][   T29] audit: type=1326 audit(1728902965.994:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000
[  239.622944][   T29] audit: type=1326 audit(1728902966.034:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000
[  239.967189][   T25] pyra 0003:1E7D:2CF6.004B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0
[  240.288540][ T5379] gspca_ov534_9: reg_w failed -71
[  240.328509][   T25] pyra 0003:1E7D:2CF6.004B: couldn't init struct pyra_device
[  240.336187][   T25] pyra 0003:1E7D:2CF6.004B: couldn't install mouse
[  240.359894][   T25] pyra 0003:1E7D:2CF6.004B: probe with driver pyra failed with error -71
[  240.386886][   T25] usb 2-1: USB disconnect, device number 29
[  240.596735][ T5379] gspca_ov534_9: Unknown sensor 0000
[  240.596810][ T5379] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  240.645478][ T5379] usb 5-1: USB disconnect, device number 25
[  240.696452][T12057] netlink: 'syz.3.2948': attribute type 1 has an invalid length.
[  240.704736][T12057] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2948'.
[  240.715875][T12057] openvswitch: netlink: Actions may not be safe on all matching packets
[  240.862911][T12064] Bluetooth: MGMT ver 1.23
[  241.012108][T12074] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  241.611169][T12095] program syz.1.2964 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.416435][   T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  242.588778][   T25] usb 2-1: Using ep0 maxpacket: 32
[  242.607971][   T25] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  242.626148][   T25] usb 2-1: config 0 has no interface number 0
[  242.633142][   T25] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  242.655125][   T25] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  242.677179][   T25] usb 2-1: config 0 interface 126 has no altsetting 0
[  242.700819][   T25] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  242.710339][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.722696][   T25] usb 2-1: Product: syz
[  242.727670][   T25] usb 2-1: Manufacturer: syz
[  242.732556][   T25] usb 2-1: SerialNumber: syz
[  242.739298][   T25] usb 2-1: config 0 descriptor??
[  242.749991][T12117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  242.758439][T12117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  243.208557][T12138] Falling back ldisc for ttyS3.
[  243.217155][   T25] ir_usb 2-1:0.126: IR Dongle converter detected
[  243.303081][ T5379] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  243.428509][   T25] usb 2-1: IR Dongle converter now attached to ttyUSB0
[  243.567868][ T5379] usb 4-1: Using ep0 maxpacket: 8
[  243.584504][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  243.605745][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024
[  243.617865][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  243.628379][ T5379] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  243.639203][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  243.650513][ T5379] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  243.659058][   T25] usb 2-1: USB disconnect, device number 30
[  243.661066][ T5379] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58
[  243.676255][ T5379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.683728][   T25] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  243.703956][ T5379] usb 4-1: config 0 descriptor??
[  243.712170][T12134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  243.734617][   T25] ir_usb 2-1:0.126: device disconnected
[  243.799473][ T5232] Bluetooth: hci5: urb ffff88802e219400 submission failed (90)
[  243.940929][T12175] netlink: 'syz.2.2994': attribute type 3 has an invalid length.
[  243.949946][T12175] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2994'.
[  243.984800][ T5324] usb 4-1: USB disconnect, device number 37
[  244.105179][T12183] ip6gretap0: entered promiscuous mode
[  244.152528][T12183] ip6gretap0: left promiscuous mode
[  244.407567][T12193] netlink: 'syz.0.3000': attribute type 3 has an invalid length.
[  244.786799][ T5223] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  244.939156][ T5223] usb 3-1: config 246 has an invalid interface number: 166 but max is 0
[  244.948876][ T5223] usb 3-1: config 246 has no interface number 0
[  244.955182][ T5223] usb 3-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A
[  244.969466][ T5223] usb 3-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0
[  244.980836][ T5223] usb 3-1: config 246 interface 166 has no altsetting 0
[  244.990798][ T5223] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63
[  245.003644][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.012647][ T5223] usb 3-1: Product: syz
[  245.017446][ T5223] usb 3-1: Manufacturer: syz
[  245.022073][ T5223] usb 3-1: SerialNumber: syz
[  245.056356][   T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  245.146732][ T5324] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  245.228572][   T25] usb 1-1: Using ep0 maxpacket: 32
[  245.240506][   T25] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  245.249553][   T25] usb 1-1: config 0 has no interface number 0
[  245.255689][   T25] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  245.267109][   T25] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  245.279566][   T25] usb 1-1: config 0 interface 126 has no altsetting 0
[  245.289259][   T25] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  245.298718][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.307232][   T25] usb 1-1: Product: syz
[  245.316164][   T25] usb 1-1: Manufacturer: syz
[  245.320804][   T25] usb 1-1: SerialNumber: syz
[  245.328961][ T5324] usb 2-1: Using ep0 maxpacket: 8
[  245.337274][   T25] usb 1-1: config 0 descriptor??
[  245.342907][T12219] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  245.353790][T12219] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  245.361974][T12235] xt_CT: You must specify a L4 protocol and not use inversions on it
[  245.362233][ T5324] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  245.380581][ T5324] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  245.390017][ T5324] usb 2-1: config 0 has no interface number 0
[  245.397323][ T5324] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  245.409772][ T5324] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  245.421667][ T5324] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  245.445701][ T5324] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  245.464246][ T5324] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  245.484841][ T5324] usb 2-1: Product: syz
[  245.504032][ T5324] usb 2-1: config 0 descriptor??
[  245.657133][ T5223] usb 3-1: Limiting number of CPorts to U8_MAX
[  245.669132][ T5223] usb 3-1: Unknown endpoint type found, address 0x0b
[  245.675874][ T5223] usb 3-1: Not enough endpoints found in device, aborting!
[  245.795690][   T25] ir_usb 1-1:0.126: IR Dongle converter detected
[  245.864787][ T5227] usb 3-1: USB disconnect, device number 33
[  246.010974][   T25] usb 1-1: IR Dongle converter now attached to ttyUSB0
[  246.129083][ T5324] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input54
[  246.148564][ T5324] input: failed to attach handler kbd to device input54, error: -5
[  246.234462][ T5324] usb 1-1: USB disconnect, device number 32
[  246.257496][ T5324] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  246.274139][ T5324] ir_usb 1-1:0.126: device disconnected
[  246.333750][ T5223] usb 2-1: USB disconnect, device number 31
[  246.585760][T12273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3036'.
[  246.753386][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'.
[  246.763488][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3040'.
[  247.052318][T12301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3048'.
[  247.182144][ T5223] kernel write not supported for file /uhid (pid: 5223 comm: kworker/0:3)
[  247.242998][T12310] dvmrp1: entered allmulticast mode
[  247.275752][T12310] dvmrp5: entered allmulticast mode
[  247.282478][T12310] dvmrp1: left allmulticast mode
[  247.289383][T12310] dvmrp5: left allmulticast mode
[  247.476953][ T5223] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  247.499783][T12325] netlink: 'syz.2.3062': attribute type 3 has an invalid length.
[  247.642588][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.670851][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.696775][ T5223] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  247.705874][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.747082][ T5223] usb 4-1: config 0 descriptor??
[  248.202522][ T5223] hid-thrustmaster 0003:044F:B65D.004C: unknown main item tag 0x0
[  248.242211][ T5223] hid-thrustmaster 0003:044F:B65D.004C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[  248.279212][ T5223] hid-thrustmaster 0003:044F:B65D.004C: Wrong number of endpoints?
[  248.366524][ T5230] Bluetooth: hci3: command 0x0406 tx timeout
[  248.398142][    C0] hid-thrustmaster 0003:044F:B65D.004C: Unknown packet type 0x0, unable to proceed further with wheel init
[  248.473524][T12363] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3078'.
[  248.570543][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'.
[  248.612047][ T5227] usb 4-1: USB disconnect, device number 38
[  248.762519][T12378] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  249.107874][ T5227] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  249.282679][ T5227] usb 2-1: Using ep0 maxpacket: 32
[  249.290123][ T5227] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  249.300732][ T5227] usb 2-1: config 0 has no interface number 0
[  249.316923][ T5227] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  249.333074][ T5227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.350658][ T5227] usb 2-1: Product: syz
[  249.355174][ T5227] usb 2-1: Manufacturer: syz
[  249.360534][ T5227] usb 2-1: SerialNumber: syz
[  249.371560][ T5227] usb 2-1: config 0 descriptor??
[  249.606630][ T5227] radio-si470x 2-1:0.35: this is not a si470x device.
[  249.648263][ T5227] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  249.816276][ T5324] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  249.854445][ T5227] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71)
[  249.884960][ T5227] radio-raremono 2-1:0.35: V4L2 device registered as radio32
[  249.913198][ T5227] usb 2-1: USB disconnect, device number 32
[  249.942269][ T5227] radio-raremono 2-1:0.35: Thanko's Raremono disconnected
[  249.998444][ T5324] usb 3-1: Using ep0 maxpacket: 8
[  250.037750][ T5324] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  250.066263][ T5324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.074309][ T5324] usb 3-1: Product: syz
[  250.083233][ T5324] usb 3-1: Manufacturer: syz
[  250.088462][ T5324] usb 3-1: SerialNumber: syz
[  250.097270][ T5324] usb 3-1: config 0 descriptor??
[  250.261468][T12413] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3102'.
[  250.321118][ T5324] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  250.730926][ T5324] usb write operation failed. (-71)
[  250.738751][ T5324] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  250.767022][ T5324] dvbdev: DVB: registering new adapter (Terratec H7)
[  250.773782][ T5324] usb 3-1: media controller created
[  250.793438][ T5324] usb read operation failed. (-71)
[  250.810474][ T5324] usb write operation failed. (-71)
[  250.830926][ T5324] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  250.855134][ T5324] usb 3-1: USB disconnect, device number 34
[  251.293120][T12442] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3116'.
[  251.334685][T12442] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes.
[  251.475562][T12446] lo speed is unknown, defaulting to 1000
[  251.678015][T12446] wg1 speed is unknown, defaulting to 1000
[  251.756694][ T5227] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  251.909347][T12459] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  251.958721][T12459] batman_adv: batadv0: Adding interface: gretap1
[  251.979459][ T5227] usb 2-1: config 0 has no interfaces?
[  251.984979][ T5227] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  251.997085][T12459] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  252.023111][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.034755][ T5227] usb 2-1: config 0 descriptor??
[  252.086297][T12459] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  252.213047][T12463] tap0: tun_chr_ioctl cmd 1074025672
[  252.225566][T12463] tap0: ignored: set checksum enabled
[  252.271023][ T5324] usb 2-1: USB disconnect, device number 33
[  254.633561][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  254.645125][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  254.653291][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  254.661508][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  254.670199][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  254.678850][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  254.754750][T12511] lo speed is unknown, defaulting to 1000
[  254.853725][T12511] wg1 speed is unknown, defaulting to 1000
[  255.700099][T12511] chnl_net:caif_netlink_parms(): no params data found
[  255.967755][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  255.974434][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  255.993565][T12511] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.023093][T12511] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.073818][T12511] bridge_slave_0: entered allmulticast mode
[  256.097485][T12511] bridge_slave_0: entered promiscuous mode
[  256.129329][T12511] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.154762][T12511] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.181062][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'.
[  256.203920][T12511] bridge_slave_1: entered allmulticast mode
[  256.231847][T12511] bridge_slave_1: entered promiscuous mode
[  256.316674][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3161'.
[  256.364095][T12511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  256.409155][T12511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  256.618070][T12511] team0: Port device team_slave_0 added
[  256.665499][T12511] team0: Port device team_slave_1 added
[  256.707985][T12552] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3164'.
[  256.763301][T12552] netlink: 'syz.0.3164': attribute type 6 has an invalid length.
[  256.771961][ T5230] Bluetooth: hci5: command tx timeout
[  256.799431][T12511] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.829643][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.925347][T12511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.980956][T12511] batman_adv: batadv0: Adding interface: batadv_slave_1
[  257.037230][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  257.154294][T12511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  257.322390][T12511] hsr_slave_0: entered promiscuous mode
[  257.387253][T12511] hsr_slave_1: entered promiscuous mode
[  257.411286][T12511] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.446340][T12511] Cannot create hsr debugfs directory
[  258.259263][T12511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.310805][T12575] sctp: [Deprecated]: syz.0.3174 (pid 12575) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.310805][T12575] Use struct sctp_sack_info instead
[  258.530824][T12511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.695602][T12511] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.851175][ T5230] Bluetooth: hci5: command tx timeout
[  258.991761][T12511] bond0: (slave netdevsim0): Releasing backup interface
[  259.011179][T12511] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.027583][T12597] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3184'.
[  259.041978][T12597] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  259.280130][T12511] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  259.326621][T12511] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  259.368668][T12511] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  259.398900][T12511] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  259.755099][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  259.765583][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  259.774383][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  259.783375][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  259.791615][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  259.799438][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  259.998993][T12603] lo speed is unknown, defaulting to 1000
[  260.027989][T12511] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.118128][T12511] 8021q: adding VLAN 0 to HW filter on device team0
[  260.175410][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.182594][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.374166][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.605439][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.612628][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.751805][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.777075][ T5232] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  260.785736][ T5232] Bluetooth: hci0: Injecting HCI hardware error event
[  260.795300][ T5230] Bluetooth: hci0: hardware error 0x00
[  260.926396][ T5232] Bluetooth: hci5: command tx timeout
[  260.968797][T12603] wg1 speed is unknown, defaulting to 1000
[  261.538952][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.681727][   T12] bond0: (slave netdevsim0): Releasing backup interface
[  261.737354][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.774686][T12511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.785757][T12511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.898009][ T5232] Bluetooth: hci1: command tx timeout
[  262.097653][   T12] bridge_slave_1: left allmulticast mode
[  262.132928][   T12] bridge_slave_1: left promiscuous mode
[  262.161600][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.180303][   T12] bridge_slave_0: left allmulticast mode
[  262.224302][   T12] bridge_slave_0: left promiscuous mode
[  262.244693][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.937664][ T5230] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  263.008559][ T5232] Bluetooth: hci5: command tx timeout
[  263.076041][T12655] netlink: 'syz.1.3204': attribute type 1 has an invalid length.
[  263.084241][T12655] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.3204'.
[  263.126535][T12655] netlink: 'syz.1.3204': attribute type 1 has an invalid length.
[  263.134314][T12655] netlink: 'syz.1.3204': attribute type 2 has an invalid length.
[  263.157349][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  263.169288][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  263.177728][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  263.185577][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  263.193267][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  263.201497][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  263.412808][   T12] batman_adv: batadv0: Removing interface: gretap1
[  263.977592][ T5232] Bluetooth: hci1: command tx timeout
[  264.169120][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.213214][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.255812][   T12] bond0 (unregistering): Released all slaves
[  264.448022][T12633] lo speed is unknown, defaulting to 1000
[  264.456636][   T12] tipc: Left network mode
[  265.266721][ T5232] Bluetooth: hci6: command tx timeout
[  265.533679][T12511] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.593994][T12633] wg1 speed is unknown, defaulting to 1000
[  265.764584][T12603] chnl_net:caif_netlink_parms(): no params data found
[  266.047651][ T5232] Bluetooth: hci1: command tx timeout
[  266.233248][T12603] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.282650][T12603] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.346381][T12603] bridge_slave_0: entered allmulticast mode
[  266.385078][T12603] bridge_slave_0: entered promiscuous mode
[  266.452501][T12603] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.519352][T12603] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.566797][T12603] bridge_slave_1: entered allmulticast mode
[  266.648809][T12603] bridge_slave_1: entered promiscuous mode
[  267.179877][T12603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.326675][ T5230] Bluetooth: hci6: command tx timeout
[  267.410545][   T12] hsr_slave_0: left promiscuous mode
[  267.423595][   T12] hsr_slave_1: left promiscuous mode
[  267.457143][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.464628][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.481586][T12737] netlink: 4056 bytes leftover after parsing attributes in process `syz.0.3225'.
[  267.520885][T12737] openvswitch: netlink: Actions may not be safe on all matching packets
[  267.537648][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.545081][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.659491][   T12] veth1_macvtap: left promiscuous mode
[  267.686004][   T12] veth0_macvtap: left promiscuous mode
[  267.700630][   T12] veth1_vlan: left promiscuous mode
[  267.705959][   T12] veth0_vlan: left promiscuous mode
[  268.100744][   T12] infiniband syz0: set down
[  268.134481][ T5230] Bluetooth: hci1: command tx timeout
[  268.159807][   T12] pimreg3 (unregistering): left allmulticast mode
[  268.286990][ T5230] Bluetooth: hci4: command 0x0405 tx timeout
[  269.407674][ T5232] Bluetooth: hci6: command tx timeout
[  269.694882][   T12] team0 (unregistering): Port device team_slave_1 removed
[  269.785559][   T12] team0 (unregistering): Port device team_slave_0 removed
[  270.702097][  T963] smc: removing ib device syz0
[  270.710283][T12603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.791560][ T5269] lo speed is unknown, defaulting to 1000
[  271.295988][T12511] veth0_vlan: entered promiscuous mode
[  271.493402][ T5232] Bluetooth: hci6: command tx timeout
[  271.548690][T12603] team0: Port device team_slave_0 added
[  271.616022][T12511] veth1_vlan: entered promiscuous mode
[  271.710585][T12603] team0: Port device team_slave_1 added
[  271.861815][T12603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.916944][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.036180][T12603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.137484][T12603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.156583][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.256675][T12603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.532191][T12603] hsr_slave_0: entered promiscuous mode
[  272.547971][T12603] hsr_slave_1: entered promiscuous mode
[  272.558159][T12603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  272.569107][T12603] Cannot create hsr debugfs directory
[  272.726221][ T5227] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  272.783727][   T12] IPVS: stop unused estimator thread 0...
[  272.806805][T12511] veth0_macvtap: entered promiscuous mode
[  272.821889][T12511] veth1_macvtap: entered promiscuous mode
[  272.863923][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.876658][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.890104][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.901010][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.911374][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.922835][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.933943][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.945253][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.956596][ T5227] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  272.965990][ T5227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.975007][ T5227] usb 1-1: Product: syz
[  272.980064][ T5227] usb 1-1: Manufacturer: syz
[  272.986248][T12511] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.995243][ T5227] usb 1-1: SerialNumber: syz
[  273.008926][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.021530][ T5227] usb 1-1: config 0 descriptor??
[  273.041695][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.066624][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.080602][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.107954][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.149421][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.196896][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.260226][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.287506][ T5227] usb 1-1: USB disconnect, device number 33
[  273.352559][T12511] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.423753][T12633] chnl_net:caif_netlink_parms(): no params data found
[  273.470086][T12511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.509957][T12511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.543736][T12511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.585986][T12511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.274129][T12633] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.282541][T12633] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.290078][T12633] bridge_slave_0: entered allmulticast mode
[  274.297817][T12633] bridge_slave_0: entered promiscuous mode
[  274.305916][T12633] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.314464][T12633] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.322078][T12633] bridge_slave_1: entered allmulticast mode
[  274.329341][T12633] bridge_slave_1: entered promiscuous mode
[  274.365122][T12633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.403709][T12633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.426475][ T5324] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  274.561905][T12633] team0: Port device team_slave_0 added
[  274.626851][ T5324] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  274.647152][ T5324] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  274.692032][ T5324] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  274.778475][ T5324] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  274.801531][T12603] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.817639][ T5324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.853526][ T5324] usb 1-1: Product: syz
[  274.864684][ T5324] usb 1-1: Manufacturer: syz
[  274.880374][ T5324] usb 1-1: SerialNumber: syz
[  274.907514][T12633] team0: Port device team_slave_1 added
[  275.009354][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.018713][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.047006][ T5269] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  275.089100][T12633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.107143][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.226690][T12633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.238044][ T5269] usb 2-1: Using ep0 maxpacket: 8
[  275.258490][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.286344][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.312225][T12633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.329734][ T5269] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00
[  275.350256][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.405812][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.444983][ T5269] usb 2-1: config 0 descriptor??
[  275.488175][T12633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.585316][T12603] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.608803][ T5324] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  275.624733][ T5324] usb 1-1: 2:1 : sample bitwidth 64 in over sample bytes 2
[  275.634407][ T5324] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  275.653342][ T5324] usb 1-1: 2:1 : invalid channels 0
[  275.769964][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.827763][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.853470][T12603] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.880135][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0
[  275.935558][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0
[  275.955238][ T5324] usb 1-1: USB disconnect, device number 34
[  275.963842][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0
[  276.017898][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0
[  276.049638][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0
[  276.060732][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0
[  276.068363][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0
[  276.116450][ T5269] playstation 0003:054C:0CE6.004D: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0
[  276.117299][T12632] udevd[12632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  276.187272][ T5269] playstation 0003:054C:0CE6.004D: Invalid byte count transferred, expected 20 got 0
[  276.208568][ T5269] playstation 0003:054C:0CE6.004D: Failed to retrieve DualSense pairing info: -22
[  276.235236][ T5269] playstation 0003:054C:0CE6.004D: Failed to get MAC address from DualSense
[  276.244596][ T5269] playstation 0003:054C:0CE6.004D: Failed to create dualsense.
[  276.272190][T12633] hsr_slave_0: entered promiscuous mode
[  276.285331][T12633] hsr_slave_1: entered promiscuous mode
[  276.292034][ T5269] playstation 0003:054C:0CE6.004D: probe with driver playstation failed with error -22
[  276.312523][T12633] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.341946][T12633] Cannot create hsr debugfs directory
[  276.371457][T12603] tipc: Resetting bearer <eth:netdevsim0>
[  276.442874][ T5269] usb 2-1: USB disconnect, device number 34
[  276.479583][T12603] bond0: (slave netdevsim0): Releasing backup interface
[  276.545435][T12603] tipc: Resetting bearer <eth:netdevsim0>
[  276.555069][T12603] tipc: Disabling bearer <eth:netdevsim0>
[  276.563328][T12603] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.235927][T12603] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  277.288345][T12603] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  277.320359][T12603] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  277.337220][ T5379] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  277.475370][T12603] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  277.488388][ T5379] usb 1-1: Using ep0 maxpacket: 8
[  277.503113][ T5379] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  277.523972][ T5379] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  277.543814][ T5379] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  277.590971][ T5379] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  277.622480][ T5379] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  277.633112][ T5379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.863381][ T5379] usb 1-1: GET_CAPABILITIES returned 0
[  277.882243][ T5379] usbtmc 1-1:16.0: can't read capabilities
[  278.053332][T12603] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.102198][ T5379] usb 1-1: USB disconnect, device number 35
[  278.177265][T12603] 8021q: adding VLAN 0 to HW filter on device team0
[  278.238092][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.245231][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.299077][  T963] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.306284][  T963] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.563238][T12633] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  278.595320][T12633] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  278.659763][T12633] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  278.708199][T12633] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  279.013006][T12603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.097880][T12633] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.215493][T12633] 8021q: adding VLAN 0 to HW filter on device team0
[  279.255350][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.262500][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.332789][T12603] veth0_vlan: entered promiscuous mode
[  279.441100][T12603] veth1_vlan: entered promiscuous mode
[  279.489576][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.496768][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.558182][T12633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  279.569502][T12633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  279.651079][T12603] veth0_macvtap: entered promiscuous mode
[  279.671646][T12603] veth1_macvtap: entered promiscuous mode
[  279.880090][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.897004][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.906937][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.917460][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.927696][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.938310][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.948208][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.958940][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.969782][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  279.980319][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  279.992712][T12603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.032024][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.057147][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.076423][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.096149][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.128531][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.176160][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.186007][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.208098][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.226478][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.237034][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.260635][T12603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.271074][T12603] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.286813][T12603] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.296399][T12603] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.305119][T12603] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.371784][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.407689][ T5379] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  280.536375][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.544205][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.578195][ T5379] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b
[  280.613426][ T5379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.678070][ T5379] usb 5-1: config 0 descriptor??
[  280.718769][ T5379] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input55
[  280.933714][    T9] usb 5-1: USB disconnect, device number 26
[  281.089062][T12963] vxcan1: tx address claim with dest, not broadcast
[  281.352347][T12633] veth0_vlan: entered promiscuous mode
[  281.431501][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.510105][T12633] veth1_vlan: entered promiscuous mode
[  281.535996][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.823052][T12633] veth0_macvtap: entered promiscuous mode
[  281.912490][T12633] veth1_macvtap: entered promiscuous mode
[  281.998122][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.008817][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.018715][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.029457][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.040435][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.066179][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.076040][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.145828][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.193076][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.230607][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.266147][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  282.290779][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.319686][T12633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  282.349881][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.366409][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.410067][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.444899][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.486429][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.516205][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.551010][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.586490][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.618344][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.647127][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.681809][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  282.704499][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  282.729439][T12633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  282.788101][T12633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  282.840616][T12633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  282.879211][T12633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  282.917682][T12633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  283.186791][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.194646][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.310354][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  283.361073][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  283.583973][T13053] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  283.678847][T13061] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  283.957183][T13071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3318'.
[  284.007245][ T5269] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  284.166562][ T5269] usb 2-1: Using ep0 maxpacket: 32
[  284.188635][ T5269] usb 2-1: unable to get BOS descriptor or descriptor too short
[  284.196689][ T5379] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  284.207139][ T5269] usb 2-1: config 3 has an invalid interface number: 238 but max is 0
[  284.226940][ T5269] usb 2-1: config 3 has no interface number 0
[  284.235609][ T5269] usb 2-1: config 3 interface 238 altsetting 6 has a duplicate endpoint with address 0x86, skipping
[  284.247035][ T5269] usb 2-1: config 3 interface 238 has no altsetting 0
[  284.332373][ T5269] usb 2-1: New USB device found, idVendor=2040, idProduct=2010, bcdDevice=40.8b
[  284.341651][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.349733][ T5269] usb 2-1: Product: syz
[  284.353928][ T5269] usb 2-1: Manufacturer: syz
[  284.358917][ T5269] usb 2-1: SerialNumber: syz
[  284.380743][ T5379] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  284.413151][ T5379] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  284.462582][T13064] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  284.468690][ T5379] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  284.541742][ T5379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.582254][T13066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  284.603146][ T5379] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  284.694279][    C1] raw-gadget.1 gadget.1: ignoring, device is not running
[  284.703572][    C1] raw-gadget.1 gadget.1: ignoring, device is not running
[  284.711063][    C1] raw-gadget.1 gadget.1: ignoring, device is not running
[  284.728719][    C1] raw-gadget.1 gadget.1: ignoring, device is not running
[  284.736124][    C1] raw-gadget.1 gadget.1: ignoring, device is not running
[  284.777529][    C1] raw-gadget.1 gadget.1: ignoring, device is not running
[  284.787385][ T5269] smsusb:smsusb_probe: board id=9, interface number 238
[  284.807678][ T5269] usb 2-1: USB disconnect, device number 35
[  284.856564][ T5324] usb 5-1: USB disconnect, device number 27
[  285.118027][T13117] netlink: 'syz.2.3331': attribute type 4 has an invalid length.
[  286.265747][T13168] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  286.527667][T13184] netlink: 'syz.3.3349': attribute type 9 has an invalid length.
[  286.560548][T13184] bond_slave_0: entered promiscuous mode
[  286.566832][T13184] bond_slave_1: entered promiscuous mode
[  286.649628][T13184] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  286.883887][T13200] netlink: 'syz.4.3359': attribute type 1 has an invalid length.
[  286.916553][T13200] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3359'.
[  287.150571][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3361'.
[  287.411901][T13219] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3367'.
[  287.546243][ T5324] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  287.650891][T13232] tun0: tun_chr_ioctl cmd 1074025677
[  287.675842][T13232] tun0: linktype set to 823
[  287.719525][ T5324] usb 4-1: config 0 interface 0 has no altsetting 0
[  287.740000][ T5324] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  287.772909][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.788255][ T5324] usb 4-1: config 0 descriptor??
[  287.836718][    T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  288.006656][    T8] usb 5-1: Using ep0 maxpacket: 16
[  288.013543][    T8] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  288.025110][    T8] usb 5-1: config 0 has no interface number 0
[  288.047119][    T8] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  288.088234][    T8] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  288.112588][    T8] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  288.133918][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.156624][    T8] usb 5-1: Product: syz
[  288.160838][    T8] usb 5-1: Manufacturer: syz
[  288.185842][    T8] usb 5-1: SerialNumber: syz
[  288.212728][    T8] usb 5-1: config 0 descriptor??
[  288.230796][T13228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  288.239099][T13228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  288.477920][T13228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  288.495498][T13228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  288.676658][ T5324] video4linux radio32: keene_cmd_main failed (-71)
[  288.683743][ T5324] radio-keene 4-1:0.0: V4L2 device registered as radio32
[  288.755462][ T5324] usb 4-1: USB disconnect, device number 39
[  288.906291][ T5391] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  289.077030][ T5391] usb 3-1: Using ep0 maxpacket: 16
[  289.084095][ T5391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  289.119796][ T5391] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  289.130407][    T8] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  289.153574][    T8] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  289.167174][ T5391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.177322][    T8] asix 5-1:0.251: probe with driver asix failed with error -71
[  289.187643][ T5391] usb 3-1: Product: syz
[  289.191842][ T5391] usb 3-1: Manufacturer: syz
[  289.221078][ T5391] usb 3-1: SerialNumber: syz
[  289.226476][    T8] usb 5-1: USB disconnect, device number 28
[  289.254148][ T5391] usb 3-1: config 0 descriptor??
[  289.282218][ T5391] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  289.298718][ T5391] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  289.544117][T13263] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3385'.
[  289.555534][T13263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3385'.
[  289.944841][ T5391] em28xx 3-1:0.0: chip ID is em2710/2820
[  289.951508][T13280] ALSA: mixer_oss: invalid OSS volume ''
[  290.200979][ T5391] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  290.250747][ T5391] em28xx 3-1:0.0: board has no eeprom
[  290.346636][ T5391] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  290.354510][ T5391] em28xx 3-1:0.0: dvb set to bulk mode.
[  290.399503][ T5379] em28xx 3-1:0.0: Binding DVB extension
[  290.444526][ T5391] usb 3-1: USB disconnect, device number 35
[  290.477739][ T5391] em28xx 3-1:0.0: Disconnecting em28xx
[  290.601425][ T5379] em28xx 3-1:0.0: Registering input extension
[  290.646942][ T5391] em28xx 3-1:0.0: Closing input extension
[  290.703725][ T5391] em28xx 3-1:0.0: Freeing device
[  291.538502][ T5379] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  291.554723][T13335] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  291.688087][ T5269] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  291.696273][ T5379] usb 4-1: Using ep0 maxpacket: 8
[  291.719344][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.743515][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.771274][ T5379] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  291.801671][ T5379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.862984][ T5269] usb 2-1: Using ep0 maxpacket: 8
[  291.864869][ T5269] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  291.864895][ T5269] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  291.864915][ T5269] usb 2-1: config 0 has no interface number 0
[  291.864947][ T5269] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  291.864972][ T5269] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  291.864997][ T5269] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  291.865386][ T5379] usb 4-1: config 0 descriptor??
[  291.867233][ T5269] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  291.867261][ T5269] usb 2-1: New USB device strings: Mfr=31, Product=0, SerialNumber=0
[  291.867282][ T5269] usb 2-1: Manufacturer: syz
[  291.869172][ T5269] usb 2-1: config 0 descriptor??
[  292.150164][ T5232] Bluetooth: hci3: unknown advertising packet type: 0x72
[  292.150309][ T5232] Bluetooth: hci3: unknown advertising packet type: 0x09
[  292.150328][ T5232] Bluetooth: hci3: unknown advertising packet type: 0x05
[  292.150363][ T5232] Bluetooth: hci3: Malformed LE Event: 0x02
[  292.320052][ T5379] saitek 0003:06A3:0CCD.004E: unknown main item tag 0x0
[  292.320091][ T5379] saitek 0003:06A3:0CCD.004E: unknown main item tag 0x0
[  292.320122][ T5379] saitek 0003:06A3:0CCD.004E: item fetching failed at offset 2/11
[  292.320588][ T5379] saitek 0003:06A3:0CCD.004E: parse failed
[  292.350243][ T5379] saitek 0003:06A3:0CCD.004E: probe with driver saitek failed with error -22
[  292.493018][ T5269] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input57
[  292.502587][ T5269] input: failed to attach handler kbd to device input57, error: -5
[  292.627643][ T5391] usb 4-1: USB disconnect, device number 40
[  292.716762][ T5269] usb 2-1: USB disconnect, device number 36
[  293.059829][   T29] audit: type=1400 audit(1728903019.614:52): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=13357 comm="syz.0.3429" key_serial=83044596 key_desc="_uid_ses.0"
[  293.789205][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3442'.
[  293.888520][T13398] GUP no longer grows the stack in syz.2.3445 (13398): 20004000-20005000 (20001000)
[  293.899374][T13398] CPU: 0 UID: 0 PID: 13398 Comm: syz.2.3445 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0
[  293.910175][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  293.920273][T13398] Call Trace:
[  293.923592][T13398]  <TASK>
[  293.926547][T13398]  dump_stack_lvl+0x241/0x360
[  293.931264][T13398]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.936492][T13398]  ? __pfx__printk+0x10/0x10
[  293.941103][T13398]  ? find_vma+0xf9/0x170
[  293.945381][T13398]  __get_user_pages+0x4260/0x48d0
[  293.950431][T13398]  ? __pfx_lock_acquire+0x10/0x10
[  293.955525][T13398]  ? __pfx___get_user_pages+0x10/0x10
[  293.960929][T13398]  ? __gup_longterm_locked+0x2d3/0x17d0
[  293.966519][T13398]  ? __pfx_down_read_killable+0x10/0x10
[  293.972106][T13398]  ? __pfx_lock_acquire+0x10/0x10
[  293.977182][T13398]  __gup_longterm_locked+0x3ba/0x17d0
[  293.982584][T13398]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  293.988600][T13398]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.994975][T13398]  gup_fast_fallback+0x2748/0x2b60
[  294.000153][T13398]  ? __pfx_gup_fast_fallback+0x10/0x10
[  294.005649][T13398]  ? __pfx_lock_acquire+0x10/0x10
[  294.010707][T13398]  ? mark_lock+0x9a/0x360
[  294.015049][T13398]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  294.021037][T13398]  ? __lock_acquire+0x1384/0x2050
[  294.026081][T13398]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  294.032422][T13398]  ? __lruvec_stat_mod_folio+0x7d/0x300
[  294.037969][T13398]  ? __lruvec_stat_mod_folio+0x7d/0x300
[  294.043518][T13398]  ? __phys_addr+0xba/0x170
[  294.048023][T13398]  ? is_valid_gup_args+0x124/0x200
[  294.053140][T13398]  pin_user_pages_fast+0xcc/0x160
[  294.058181][T13398]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  294.063818][T13398]  ? __kmalloc_node_noprof+0x247/0x440
[  294.069277][T13398]  ? __kvmalloc_node_noprof+0x72/0x190
[  294.074743][T13398]  io_pin_pages+0x7e/0x170
[  294.079164][T13398]  io_sqe_buffer_register+0x18a/0x2a30
[  294.084659][T13398]  ? __pfx_io_sqe_buffer_register+0x10/0x10
[  294.090552][T13398]  ? io_sqe_buffers_register+0x209/0x750
[  294.096311][T13398]  ? io_sqe_buffers_register+0x209/0x750
[  294.101943][T13398]  ? io_sqe_buffers_register+0x209/0x750
[  294.107578][T13398]  ? io_sqe_buffers_register+0x209/0x750
[  294.113209][T13398]  ? __kmalloc_noprof+0x21a/0x400
[  294.118231][T13398]  ? iovec_from_user+0x1b0/0x240
[  294.123571][T13398]  io_sqe_buffers_register+0x589/0x750
[  294.129128][T13398]  ? __pfx_io_sqe_buffers_register+0x10/0x10
[  294.135125][T13398]  ? do_futex+0x392/0x560
[  294.139481][T13398]  ? __fget_files+0x29/0x470
[  294.144103][T13398]  __se_sys_io_uring_register+0x97d/0x1780
[  294.149929][T13398]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  294.156178][T13398]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  294.162627][T13398]  ? do_syscall_64+0x100/0x230
[  294.167400][T13398]  ? do_syscall_64+0xb6/0x230
[  294.172077][T13398]  do_syscall_64+0xf3/0x230
[  294.176589][T13398]  ? clear_bhb_loop+0x35/0x90
[  294.181266][T13398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.187162][T13398] RIP: 0033:0x7f2859b7dff9
[  294.191574][T13398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.211197][T13398] RSP: 002b:00007f285a8d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  294.219618][T13398] RAX: ffffffffffffffda RBX: 00007f2859d35f80 RCX: 00007f2859b7dff9
[  294.227599][T13398] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003
[  294.235580][T13398] RBP: 00007f2859bf0296 R08: 0000000000000000 R09: 0000000000000000
[  294.243551][T13398] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000
[  294.251525][T13398] R13: 0000000000000000 R14: 00007f2859d35f80 R15: 00007ffc4ce495d8
[  294.259520][T13398]  </TASK>
[  294.358005][ T5391] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  294.410092][T13403] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  294.426240][T13403] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  294.446819][T13403] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  294.455999][T13403] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  294.469835][T13411] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  294.495846][T13411] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  294.537069][ T5324] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  294.552691][T13411] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  294.579682][T13411] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  294.595771][ T5391] usb 1-1: Using ep0 maxpacket: 16
[  294.626702][ T5391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.638771][ T5391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.649101][ T5391] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  294.659131][ T5391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.671734][ T5391] usb 1-1: config 0 descriptor??
[  294.708679][ T5324] usb 2-1: Using ep0 maxpacket: 8
[  294.726322][ T5324] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  294.727233][T13415] netlink: 'syz.2.3452': attribute type 9 has an invalid length.
[  294.745965][ T5324] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  294.751783][T13415] bond_slave_0: entered promiscuous mode
[  294.761469][T13415] bond_slave_1: entered promiscuous mode
[  294.769064][T13415] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  294.781626][ T5324] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  294.815797][ T5324] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  294.852721][ T5324] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  294.870780][ T5379] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  294.878557][ T5324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.123863][ T5324] usb 2-1: GET_CAPABILITIES returned 0
[  295.150194][ T5324] usbtmc 2-1:16.0: can't read capabilities
[  295.350244][ T5324] usb 2-1: USB disconnect, device number 37
[  296.335902][T13438] netlink: 'syz.2.3464': attribute type 25 has an invalid length.
[  296.375071][T13438] netlink: 'syz.2.3464': attribute type 8 has an invalid length.
[  296.944130][T13449] bond0: entered promiscuous mode
[  296.978768][T13449] bond_slave_0: entered promiscuous mode
[  297.018079][T13449] bond_slave_1: entered promiscuous mode
[  298.687880][T13473] xt_bpf: check failed: parse error
[  299.322094][T13485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3484'.
[  301.086110][    C0] sched: DL replenish lagged too much
[  302.289238][T13512] dvmrp2: entered allmulticast mode
[  307.818491][ T5324] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  307.850719][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  307.864411][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  307.873258][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  307.881530][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  307.896284][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  307.913655][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  308.000837][T13582] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3526'.
[  308.072162][T13579] wg1 speed is unknown, defaulting to 1000
[  308.115452][ T5324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.186411][ T5324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.266259][ T5324] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  308.346634][ T5324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.419184][ T5324] usb 2-1: config 0 descriptor??
[  308.815093][T13588] netlink: 'syz.4.3529': attribute type 14 has an invalid length.
[  308.921750][ T5324] arvo 0003:1E7D:30D4.004F: unbalanced collection at end of report description
[  309.002665][ T5324] arvo 0003:1E7D:30D4.004F: parse failed
[  309.036280][ T5324] arvo 0003:1E7D:30D4.004F: probe with driver arvo failed with error -22
[  309.136318][ T5324] usb 2-1: USB disconnect, device number 38
[  309.709452][ T5232] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  309.723785][ T5232] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  309.742988][ T5232] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  309.752735][ T5232] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  309.760433][ T5232] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  309.768092][ T5232] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  309.944777][T13594] wg1 speed is unknown, defaulting to 1000
[  309.976221][ T5232] Bluetooth: hci7: command tx timeout
[  310.078161][T13579] chnl_net:caif_netlink_parms(): no params data found
[  310.915789][T13579] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.965443][T13579] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.035607][T13579] bridge_slave_0: entered allmulticast mode
[  311.077623][T13579] bridge_slave_0: entered promiscuous mode
[  311.128859][T13579] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.186316][T13579] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.216769][T13579] bridge_slave_1: entered allmulticast mode
[  311.265868][T13579] bridge_slave_1: entered promiscuous mode
[  311.514702][T13579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.585862][T13579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.806726][ T5232] Bluetooth: hci8: command tx timeout
[  311.917739][T13579] team0: Port device team_slave_0 added
[  312.054927][ T5232] Bluetooth: hci7: command tx timeout
[  312.093954][T13579] team0: Port device team_slave_1 added
[  312.403617][T13579] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.458543][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.624177][T13579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.692706][T13579] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.737606][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.893203][T13579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  313.417870][T13579] hsr_slave_0: entered promiscuous mode
[  313.476608][T13579] hsr_slave_1: entered promiscuous mode
[  313.532121][T13579] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  313.571869][T13579] Cannot create hsr debugfs directory
[  313.603272][T13594] chnl_net:caif_netlink_parms(): no params data found
[  313.887341][ T5232] Bluetooth: hci8: command tx timeout
[  314.126422][ T5232] Bluetooth: hci7: command tx timeout
[  314.557366][T13645] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3546'.
[  314.683586][T13594] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.728102][T13594] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.771684][T13594] bridge_slave_0: entered allmulticast mode
[  314.800467][T13594] bridge_slave_0: entered promiscuous mode
[  314.860960][T13594] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.907956][T13594] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.915241][T13594] bridge_slave_1: entered allmulticast mode
[  314.975451][T13594] bridge_slave_1: entered promiscuous mode
[  315.373221][T13594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.966815][ T5232] Bluetooth: hci8: command tx timeout
[  316.216879][ T5232] Bluetooth: hci7: command tx timeout
[  317.418315][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  318.057480][ T5232] Bluetooth: hci8: command tx timeout
[  326.121725][ T5230] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  326.135395][ T5230] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  326.144999][ T5230] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  326.153289][ T5230] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  326.161018][ T5230] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  326.168608][ T5230] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  327.267226][ T5232] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  327.278375][ T5232] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  327.290242][ T5232] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  327.300489][ T5232] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  327.308297][ T5232] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  327.317329][ T5232] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  328.288604][ T5230] Bluetooth: hci9: command tx timeout
[  329.406669][ T5230] Bluetooth: hci10: command tx timeout
[  330.366452][ T5230] Bluetooth: hci9: command tx timeout
[  331.486801][ T5230] Bluetooth: hci10: command tx timeout
[  332.450271][ T5232] Bluetooth: hci9: command tx timeout
[  333.566667][ T5232] Bluetooth: hci10: command tx timeout
[  334.526331][ T5232] Bluetooth: hci9: command tx timeout
[  335.081086][ T5230] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  335.092375][ T5230] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  335.101270][ T5230] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  335.109828][ T5230] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  335.118173][ T5230] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  335.134419][ T5230] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  335.654904][ T5230] Bluetooth: hci10: command tx timeout
[  337.166565][ T5230] Bluetooth: hci11: command tx timeout
[  339.252371][ T5230] Bluetooth: hci11: command tx timeout
[  341.326333][ T5230] Bluetooth: hci11: command tx timeout
[  343.406270][ T5232] Bluetooth: hci11: command tx timeout
[  345.098497][ T5232] Bluetooth: hci3: command 0x0406 tx timeout
[  367.626606][ T5232] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  367.644539][ T5232] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  367.653561][ T5232] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  367.661768][ T5232] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  367.670904][ T5232] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  367.680965][ T5232] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  369.644906][ T5230] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  369.655369][ T5230] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  369.664945][ T5230] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  369.674282][ T5230] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  369.682038][ T5230] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  369.702709][ T5230] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  369.806393][ T5232] Bluetooth: hci12: command tx timeout
[  371.806915][ T5232] Bluetooth: hci13: command tx timeout
[  371.887897][ T5232] Bluetooth: hci12: command tx timeout
[  373.886351][ T5232] Bluetooth: hci13: command tx timeout
[  373.977461][ T5232] Bluetooth: hci12: command tx timeout
[  375.967714][ T5232] Bluetooth: hci13: command tx timeout
[  376.046385][ T5232] Bluetooth: hci12: command tx timeout
[  378.046564][ T5232] Bluetooth: hci13: command tx timeout
[  378.860638][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  380.934053][ T5230] Bluetooth: hci5: command 0x0406 tx timeout
[  386.051877][ T5232] Bluetooth: hci1: command 0x0406 tx timeout
[  386.058337][ T5219] Bluetooth: hci6: command 0x0406 tx timeout
[  386.740839][ T4618] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  386.751153][ T4618] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  386.759922][ T4618] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  386.769597][ T4618] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  386.777485][ T4618] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  386.809202][ T4618] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  387.767969][ T5230] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  387.779503][ T5230] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  387.790697][ T5230] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  387.802021][ T5230] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  387.813458][ T5230] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  387.824681][ T5230] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  388.846644][ T5230] Bluetooth: hci14: command tx timeout
[  389.886423][ T5230] Bluetooth: hci15: command tx timeout
[  390.926310][ T5230] Bluetooth: hci14: command tx timeout
[  391.966428][ T5230] Bluetooth: hci15: command tx timeout
[  393.006711][ T5230] Bluetooth: hci14: command tx timeout
[  394.046555][ T5230] Bluetooth: hci15: command tx timeout
[  395.087130][ T5230] Bluetooth: hci14: command tx timeout
[  395.808393][ T4618] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  395.830581][ T4618] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  395.839235][ T4618] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  395.850073][ T4618] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  395.858190][ T4618] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  395.865647][ T4618] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  396.128868][ T4618] Bluetooth: hci15: command tx timeout
[  397.966581][ T5230] Bluetooth: hci16: command tx timeout
[  400.046756][ T5230] Bluetooth: hci16: command tx timeout
[  402.126771][ T5230] Bluetooth: hci16: command tx timeout
[  404.207122][ T5230] Bluetooth: hci16: command tx timeout
[  427.734024][ T4618] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  427.745144][ T4618] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  427.763722][ T4618] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  427.773121][ T4618] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  427.781989][ T4618] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  427.796877][ T4618] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  429.769430][ T5230] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  429.782750][ T5230] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  429.791639][ T5230] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  429.806930][ T5230] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  429.815760][ T5230] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  429.823489][ T5230] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  429.889040][ T4618] Bluetooth: hci17: command tx timeout
[  431.208434][ T5391] corsair 0003:1B1C:1B02.0050: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[  431.301353][ T5391] corsair 0003:1B1C:1B02.0050: Failed to get K90 initial state (error -71).
[  431.889118][ T5219] Bluetooth: hci18: command tx timeout
[  431.966913][ T5219] Bluetooth: hci17: command tx timeout
[  432.133973][ T5219] Bluetooth: hci7: command 0x0406 tx timeout
[  432.140380][ T5232] Bluetooth: hci8: command 0x0406 tx timeout
[  433.966759][ T5219] Bluetooth: hci18: command tx timeout
[  434.046424][ T5219] Bluetooth: hci17: command tx timeout
[  435.184855][T13579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  435.348221][T13594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  436.066584][ T5230] Bluetooth: hci18: command tx timeout
[  436.136220][ T5230] Bluetooth: hci17: command tx timeout
[  436.296178][T13718] wg1 speed is unknown, defaulting to 1000
[  438.133283][ T5230] Bluetooth: hci18: command tx timeout
[  440.299218][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  447.268193][ T4618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  447.280922][ T4618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  447.289984][ T4618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  447.306953][ T4618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  447.319703][ T4618] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  447.328622][ T4618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  448.310913][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  448.320469][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  448.328666][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  448.338039][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  448.345641][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  448.353048][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  449.406633][ T4618] Bluetooth: hci0: command tx timeout
[  450.459538][ T4618] Bluetooth: hci1: command tx timeout
[  451.486373][ T4618] Bluetooth: hci0: command tx timeout
[  452.526389][ T4618] Bluetooth: hci1: command tx timeout
[  453.566594][ T4618] Bluetooth: hci0: command tx timeout
[  454.606432][ T4618] Bluetooth: hci1: command tx timeout
[  455.647574][ T4618] Bluetooth: hci0: command tx timeout
[  456.213996][ T4618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  456.225764][ T4618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  456.234718][ T4618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  456.245948][ T4618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  456.254792][ T4618] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  456.262359][ T4618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  456.686321][ T4618] Bluetooth: hci1: command tx timeout
[  458.286273][ T4618] Bluetooth: hci5: command tx timeout
[  460.366262][ T4618] Bluetooth: hci5: command tx timeout
[  462.456245][ T4618] Bluetooth: hci5: command tx timeout
[  464.528936][ T4618] Bluetooth: hci5: command tx timeout
[  477.848975][ T5379] usb 5-1: device not accepting address 29, error -71
[  477.938609][ T5391] usb 1-1: USB disconnect, device number 36
[  478.586239][T13735] wg1 speed is unknown, defaulting to 1000
[  479.264818][T13579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.910013][   T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  488.304502][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  488.316705][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  488.331448][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  488.339558][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  488.349348][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  488.359186][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  490.307046][ T4618] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  490.316789][ T4618] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  490.326464][ T4618] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  490.338069][ T4618] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  490.345637][ T4618] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  490.355005][ T4618] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  490.456570][ T4618] Bluetooth: hci3: command tx timeout
[  492.446448][ T4618] Bluetooth: hci8: command tx timeout
[  492.535650][ T4618] Bluetooth: hci3: command tx timeout
[  494.528860][ T4618] Bluetooth: hci8: command tx timeout
[  494.606880][ T4618] Bluetooth: hci3: command tx timeout
[  496.615031][ T4618] Bluetooth: hci8: command tx timeout
[  496.686758][ T5230] Bluetooth: hci3: command tx timeout
[  498.686357][ T5230] Bluetooth: hci8: command tx timeout
[  501.738815][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  507.782896][ T5219] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  507.793913][ T5219] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  507.802408][ T5219] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  507.812371][ T5219] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  507.820199][ T5219] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  507.832694][ T5219] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  508.805366][ T5230] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  508.817568][ T5230] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  508.828053][ T5230] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  508.839056][ T5230] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  508.848393][ T5230] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  508.857691][ T5230] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  508.929870][ T5230] Bluetooth: hci14: command 0x0406 tx timeout
[  509.886247][ T4618] Bluetooth: hci9: command tx timeout
[  510.935787][ T4618] Bluetooth: hci10: command tx timeout
[  511.969587][ T4618] Bluetooth: hci9: command tx timeout
[  513.006574][ T5219] Bluetooth: hci10: command tx timeout
[  514.050894][ T5219] Bluetooth: hci15: command 0x0406 tx timeout
[  514.059424][ T5230] Bluetooth: hci9: command tx timeout
[  515.086387][ T4618] Bluetooth: hci10: command tx timeout
[  516.126711][ T4618] Bluetooth: hci9: command tx timeout
[  516.807537][ T5219] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  516.818153][ T5219] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  516.827054][ T5219] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  516.836369][ T5219] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  516.850546][ T5219] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  516.859066][ T5219] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  517.176255][ T5219] Bluetooth: hci10: command tx timeout
[  518.926664][ T5219] Bluetooth: hci11: command tx timeout
[  519.176926][ T5219] Bluetooth: hci16: command 0x0406 tx timeout
[  521.007730][ T4618] Bluetooth: hci11: command tx timeout
[  523.088761][ T4618] Bluetooth: hci11: command tx timeout
[  525.166377][ T4618] Bluetooth: hci11: command tx timeout
[  533.407856][T13579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.230772][ T5219] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  549.243008][ T5219] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  549.254248][ T5219] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  549.263366][ T5219] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  549.271212][ T5219] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  549.279108][ T5219] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  551.248452][ T4618] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  551.260405][ T4618] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  551.271796][ T4618] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  551.281214][ T4618] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  551.289030][ T4618] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  551.324683][ T4618] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  551.332535][ T4618] Bluetooth: hci12: command tx timeout
[  553.406691][ T4618] Bluetooth: hci13: command tx timeout
[  553.413415][ T4618] Bluetooth: hci12: command tx timeout
[  555.013506][T13792] Bluetooth: hci18: command 0x0406 tx timeout
[  555.019846][ T5232] Bluetooth: hci17: command 0x0406 tx timeout
[  555.489312][T13792] Bluetooth: hci12: command tx timeout
[  555.494855][T13792] Bluetooth: hci13: command tx timeout
[  557.577901][T13792] Bluetooth: hci13: command tx timeout
[  557.583445][T13792] Bluetooth: hci12: command tx timeout
[  559.646434][T13792] Bluetooth: hci13: command tx timeout
[  563.170298][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  568.271114][ T5232] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  568.292898][ T4618] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  568.302332][ T4618] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  568.312456][ T4618] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  568.320266][ T4618] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3
[  568.329482][ T4618] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  569.746018][T13801] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  569.757133][T13801] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  569.766535][T13801] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  569.774657][T13801] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  569.787629][T13801] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3
[  569.795205][T13801] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  570.366626][T13801] Bluetooth: hci0: command 0x0406 tx timeout
[  575.486607][T13803] Bluetooth: hci1: command 0x0406 tx timeout
[  577.836472][T13808] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  577.870808][T13808] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  577.879890][T13808] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  577.889196][T13808] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  577.898237][T13808] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3
[  577.908590][T13808] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  580.622145][T13810] Bluetooth: hci5: command 0x0406 tx timeout
[  581.086896][   T30] INFO: task syz-executor:13724 blocked for more than 143 seconds.
[  581.094855][   T30]       Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  581.148762][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  581.215585][   T30] task:syz-executor    state:D stack:24128 pid:13724 tgid:13724 ppid:1      flags:0x00004006
[  581.306372][   T30] Call Trace:
[  581.309709][   T30]  <TASK>
[  581.312671][   T30]  __schedule+0x1843/0x4ae0
[  581.386569][   T30]  ? __pfx___schedule+0x10/0x10
[  581.392084][   T30]  ? __pfx_lock_release+0x10/0x10
[  581.426507][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  581.432045][   T30]  ? schedule+0x90/0x320
[  581.459688][   T30]  schedule+0x14b/0x320
[  581.463908][   T30]  schedule_preempt_disabled+0x13/0x30
[  581.506565][   T30]  __mutex_lock+0x6a7/0xd70
[  581.511130][   T30]  ? xas_find_marked+0xf80/0x10e0
[  581.546383][   T30]  ? __mutex_lock+0x52a/0xd70
[  581.551125][   T30]  ? add_one_compat_dev+0x10d/0x710
[  581.591554][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  581.616049][   T30]  ? xa_find+0x36c/0x420
[  581.620438][   T30]  ? __pfx_down_read+0x10/0x10
[  581.625243][   T30]  add_one_compat_dev+0x10d/0x710
[  581.667484][   T30]  ? fs_reclaim_acquire+0x93/0x130
[  581.672736][   T30]  rdma_dev_init_net+0x1f1/0x280
[  581.726512][   T30]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  581.732062][   T30]  ops_init+0x31e/0x590
[  581.761277][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  581.786250][   T30]  setup_net+0x287/0x9e0
[  581.790558][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  581.826435][   T30]  ? __pfx_setup_net+0x10/0x10
[  581.831285][   T30]  copy_net_ns+0x33f/0x570
[  581.835743][   T30]  create_new_namespaces+0x425/0x7b0
[  581.906320][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  581.912124][   T30]  ksys_unshare+0x57d/0xa70
[  581.945780][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  581.976281][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  582.006304][   T30]  ? do_syscall_64+0x100/0x230
[  582.011137][   T30]  __x64_sys_unshare+0x38/0x40
[  582.015924][   T30]  do_syscall_64+0xf3/0x230
[  582.056143][   T30]  ? clear_bhb_loop+0x35/0x90
[  582.060894][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.105845][   T30] RIP: 0033:0x7f02cdb7f7f7
[  582.126435][   T30] RSP: 002b:00007fffb3a07678 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  582.134920][   T30] RAX: ffffffffffffffda RBX: 00007f02cdd35f40 RCX: 00007f02cdb7f7f7
[  582.206280][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  582.214311][   T30] RBP: 00007f02cdd36a38 R08: 0000000000000000 R09: 0000000000000000
[  582.266562][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  582.306292][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  582.336284][   T30]  </TASK>
[  582.348695][   T30] INFO: task syz-executor:13730 blocked for more than 144 seconds.
[  582.392936][   T30]       Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0
[  582.429159][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  582.476351][   T30] task:syz-executor    state:D stack:24128 pid:13730 tgid:13730 ppid:1      flags:0x00004006
[  582.526716][   T30] Call Trace:
[  582.530057][   T30]  <TASK>
[  582.533018][   T30]  __schedule+0x1843/0x4ae0
[  582.566314][   T30]  ? __pfx___schedule+0x10/0x10
[  582.571229][   T30]  ? __pfx_lock_release+0x10/0x10
[  582.616598][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  582.622130][   T30]  ? schedule+0x90/0x320
[  582.657379][   T30]  schedule+0x14b/0x320
[  582.661608][   T30]  schedule_preempt_disabled+0x13/0x30
[  582.695147][   T30]  __mutex_lock+0x6a7/0xd70
[  582.726833][   T30]  ? xas_find_marked+0xf80/0x10e0
[  582.731921][   T30]  ? __mutex_lock+0x52a/0xd70
[  582.767682][   T30]  ? add_one_compat_dev+0x10d/0x710
[  582.772955][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  582.816205][   T30]  ? xa_find+0x36c/0x420
[  582.820519][   T30]  ? __pfx_down_read+0x10/0x10
[  582.825323][   T30]  add_one_compat_dev+0x10d/0x710
[  582.866153][   T30]  ? fs_reclaim_acquire+0x93/0x130
[  582.871336][   T30]  rdma_dev_init_net+0x1f1/0x280
[  582.906144][   T30]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  582.911683][   T30]  ops_init+0x31e/0x590
[  582.915867][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  582.985708][   T30]  setup_net+0x287/0x9e0
[  582.992502][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  583.026321][   T30]  ? __pfx_setup_net+0x10/0x10
[  583.031648][   T30]  copy_net_ns+0x33f/0x570
[  583.066761][   T30]  create_new_namespaces+0x425/0x7b0
[  583.072132][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  583.097693][   T30]  ksys_unshare+0x57d/0xa70
[  583.102273][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  583.136187][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  583.142597][   T30]  ? do_syscall_64+0x100/0x230
[  583.195558][   T30]  __x64_sys_unshare+0x38/0x40
[  583.207472][   T30]  do_syscall_64+0xf3/0x230
[  583.212026][   T30]  ? clear_bhb_loop+0x35/0x90
[  583.246736][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.252707][   T30] RIP: 0033:0x7f3826b7f7f7
[  583.297943][   T30] RSP: 002b:00007ffd029d9888 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  583.326504][   T30] RAX: ffffffffffffffda RBX: 00007f3826d35f40 RCX: 00007f3826b7f7f7
[  583.334542][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  583.400397][   T30] RBP: 00007f3826d36a38 R08: 0000000000000000 R09: 0000000000000000
[  583.436165][   T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c
[  583.476124][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  583.484173][   T30]  </TASK>
[  583.516463][   T30] 
[  583.516463][   T30] Showing all locks held in the system:
[  583.524228][   T30] 3 locks held by kworker/0:0/8:
[  583.576619][   T30]  #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  583.616484][   T30]  #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  583.676350][   T30]  #2: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  583.716279][   T30] 4 locks held by kworker/0:1/9:
[  583.721272][   T30] 3 locks held by ksoftirqd/0/16:
[  583.774530][   T30] 1 lock held by khungtaskd/30:
[  583.795136][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  583.836355][   T30] 3 locks held by kworker/u8:3/52:
[  583.841520][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  583.926381][   T30]  #1: ffffc90000bd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  583.977504][   T30]  #2: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  584.016350][   T30] 6 locks held by kworker/u8:4/63:
[  584.021516][   T30]  #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  584.096241][   T30]  #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  584.136438][   T30]  #2: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  584.176547][   T30]  #3: ffff8880602900e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440
[  584.216306][   T30]  #4: ffff888060293250 (&devlink->lock_key#8){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440
[  584.251661][   T30]  #5: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0
[  584.296648][   T30] 3 locks held by kworker/u8:5/963:
[  584.301896][   T30]  #0: ffff88814bac2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  584.386810][   T30]  #1: ffffc90003937d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  584.434090][   T30]  #2: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  584.476510][   T30] 2 locks held by kworker/u8:6/1596:
[  584.481866][   T30] 4 locks held by kworker/u9:1/4618:
[  584.528153][   T30]  #0: ffff8880512f0148 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  584.566573][   T30]  #1: ffffc9000d98fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  584.616771][   T30]  #2: ffff8880488c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0
[  584.663504][   T30]  #3: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0
[  584.706149][   T30] 2 locks held by getty/4974:
[  584.710873][   T30]  #0: ffff88814c0650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  584.766445][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  584.816526][   T30] 5 locks held by kworker/u9:2/5219:
[  584.821858][   T30]  #0: ffff88802333c948 ((wq_completion)hci18){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  584.886199][   T30]  #1: ffffc90002d1fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  584.956886][   T30]  #2: ffff888045228d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  584.986448][   T30]  #3: ffff888045228078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  585.026197][   T30]  #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  585.036042][   T30] 6 locks held by kworker/u9:6/5230:
[  585.106436][   T30]  #0: ffff88803676b148 ((wq_completion)hci17){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  585.141081][   T30]  #1: ffffc90004087d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  585.205346][   T30]  #2: ffff88803012cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  585.246482][   T30]  #3: ffff88803012c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  585.286517][   T30]  #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  585.326430][   T30]  #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  585.376610][   T30] 5 locks held by kworker/u9:7/5232:
[  585.381944][   T30]  #0: ffff88807dbfe148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  585.446295][   T30]  #1: ffffc900040a7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  585.491538][   T30]  #2: ffff8880337d4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  585.536692][   T30]  #3: ffff8880337d4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  585.592986][   T30]  #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  585.637586][   T30] 7 locks held by kworker/0:6/5379:
[  585.642831][   T30] 3 locks held by kworker/0:7/5391:
[  585.686599][   T30] 2 locks held by syz.4.2990/12157:
[  585.691852][   T30]  #0: ffffffff8fd25d30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  585.755701][   T30]  #1: ffffffff8ec176c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90
[  585.796310][   T30] 1 lock held by syz.3.3094/12395:
[  585.826599][   T30] 1 lock held by syz.2.3466/13444:
[  585.831760][   T30] 2 locks held by iou-sqp-13467/13468:
[  585.876134][   T30] 7 locks held by syz-executor/13579:
[  585.881562][   T30]  #0: ffff88802e560420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90
[  585.926677][   T30]  #1: ffff88807d968c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500
[  585.967894][   T30]  #2: ffff888144b58698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500
[  586.025964][   T30]  #3: ffffffff8f55e0a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480
[  586.066158][   T30]  #4: ffff888144a970e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0
[  586.106412][   T30]  #5: ffff888144a95250 (&devlink->lock_key#10){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160
[  586.156538][   T30]  #6: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0
[  586.187538][   T30] 2 locks held by syz-executor/13718:
[  586.192962][   T30]  #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  586.256686][   T30]  #1: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720
[  586.306162][   T30] 6 locks held by syz-executor/13721:
[  586.311586][   T30]  #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  586.356300][   T30]  #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  586.407740][   T30]  #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  586.456698][   T30]  #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  586.517419][   T30]  #4: ffff888027f6d230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260
[  586.555668][   T30]  #5: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800
[  586.606240][   T30] 4 locks held by syz-executor/13724:
[  586.611655][   T30]  #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  586.656436][   T30]  #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  586.696794][   T30]  #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  586.737850][   T30]  #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  586.788766][   T30] 4 locks held by syz-executor/13730:
[  586.794187][   T30]  #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  586.859827][   T30]  #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  586.896173][   T30]  #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  586.956820][   T30]  #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  587.016642][   T30] 2 locks held by syz-executor/13735:
[  587.022066][   T30]  #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  587.066476][   T30]  #1: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720
[  587.106674][   T30] 4 locks held by syz-executor/13740:
[  587.112101][   T30]  #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  587.176343][   T30]  #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  587.226652][   T30]  #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  587.266626][   T30]  #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  587.316402][   T30] 2 locks held by syz-executor/13745:
[  587.321837][   T30]  #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  587.366530][   T30]  #1: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  587.416143][   T30] 2 locks held by syz-executor/13748:
[  587.421573][   T30]  #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  587.488546][   T30]  #1: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290
[  587.536508][   T30] 4 locks held by syz-executor/13762:
[  587.541941][   T30]  #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  587.596540][   T30]  #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  587.646306][   T30]  #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  587.686622][   T30]  #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  587.730819][   T30] 1 lock held by syz-executor/13767:
[  587.756260][   T30]  #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  587.765754][   T30] 1 lock held by syz-executor/13771:
[  587.802970][   T30]  #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  587.866340][   T30] 1 lock held by syz-executor/13776:
[  587.871676][   T30]  #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  587.934028][   T30] 1 lock held by syz-executor/13781:
[  587.966785][   T30]  #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  588.007693][   T30] 1 lock held by syz-executor/13786:
[  588.013026][   T30]  #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  588.076327][   T30] 1 lock held by syz-executor/13790:
[  588.081665][   T30]  #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  588.136297][   T30] 4 locks held by kworker/u9:0/13792:
[  588.141719][   T30]  #0: ffff888046dd2148 ((wq_completion)hci20#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  588.220277][   T30]  #1: ffffc9000304fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  588.266493][   T30]  #2: ffff888079e28078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0
[  588.306656][   T30]  #3: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0
[  588.354211][   T30] 1 lock held by syz-executor/13794:
[  588.376704][   T30]  #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  588.419984][   T30] 1 lock held by syz-executor/13800:
[  588.425318][   T30]  #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  588.486323][   T30] 5 locks held by kworker/u9:4/13801:
[  588.491755][   T30]  #0: ffff88804e26e148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  588.556513][   T30]  #1: ffffc90002e9fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  588.606417][   T30]  #2: ffff888079b48d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  588.666000][   T30]  #3: ffff888079b48078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  588.716328][   T30]  #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  588.757976][   T30] 4 locks held by kworker/u9:5/13803:
[  588.763397][   T30]  #0: ffff88804c214948 ((wq_completion)hci21#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  588.837144][   T30]  #1: ffffc90002e2fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  588.896380][   T30]  #2: ffff88804c208078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0
[  588.926383][   T30]  #3: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0
[  588.977836][   T30] 1 lock held by syz-executor/13805:
[  588.983168][   T30]  #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  589.046242][   T30] 5 locks held by kworker/u9:8/13808:
[  589.051663][   T30]  #0: ffff888039c12148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  589.126345][   T30]  #1: ffffc90002defd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  589.176522][   T30]  #2: ffff88803b67cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  589.237668][   T30]  #3: ffff88803b67c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  589.286485][   T30]  #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300
[  589.326864][   T30] 
[  589.329235][   T30] =============================================
[  589.329235][   T30] 
[  589.378842][   T30] NMI backtrace for cpu 1
[  589.383221][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0
[  589.393743][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  589.403821][   T30] Call Trace:
[  589.407150][   T30]  <TASK>
[  589.410099][   T30]  dump_stack_lvl+0x241/0x360
[  589.414804][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  589.420024][   T30]  ? __pfx__printk+0x10/0x10
[  589.424648][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  589.429610][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  589.435085][   T30]  ? _printk+0xd5/0x120
[  589.439268][   T30]  ? __pfx__printk+0x10/0x10
[  589.443875][   T30]  ? __wake_up_klogd+0xcc/0x110
[  589.448746][   T30]  ? __pfx__printk+0x10/0x10
[  589.453356][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  589.458404][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  589.464402][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  589.470407][   T30]  watchdog+0xff4/0x1040
[  589.474674][   T30]  ? watchdog+0x1ea/0x1040
[  589.479165][   T30]  ? __pfx_watchdog+0x10/0x10
[  589.483866][   T30]  kthread+0x2f0/0x390
[  589.487954][   T30]  ? __pfx_watchdog+0x10/0x10
[  589.492651][   T30]  ? __pfx_kthread+0x10/0x10
[  589.497261][   T30]  ret_from_fork+0x4b/0x80
[  589.501702][   T30]  ? __pfx_kthread+0x10/0x10
[  589.506311][   T30]  ret_from_fork_asm+0x1a/0x30
[  589.511181][   T30]  </TASK>
[  589.515849][   T30] Sending NMI from CPU 1 to CPUs 0:
[  589.521909][    C0] NMI backtrace for cpu 0
[  589.521922][    C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0
[  589.521940][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  589.521951][    C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker
[  589.521978][    C0] RIP: 0010:mark_lock+0xa2/0x360
[  589.521997][    C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 28 29 94 be 08 00 00 00 e8 66 a8 8a 00 48 0f a3 1d de 59 b8 12 <73> 10 48 69 c3 c8 00 00 00 48 8d 98 c0 a6 c0 93 eb 68 48 c7 c0 40
[  589.522011][    C0] RSP: 0018:ffffc90000006ef8 EFLAGS: 00000057
[  589.522024][    C0] RAX: 0000000000000001 RBX: 0000000000000787 RCX: ffffffff8170ce1a
[  589.522036][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942928f0
[  589.522046][    C0] RBP: 0000000000000002 R08: ffffffff942928f7 R09: 1ffffffff285251e
[  589.522058][    C0] R10: dffffc0000000000 R11: fffffbfff285251f R12: ffff88801bee0b00
[  589.522071][    C0] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff88801bee0ae0
[  589.522082][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  589.522096][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  589.522108][    C0] CR2: 0000000000000000 CR3: 000000000e734000 CR4: 00000000003526f0
[  589.522121][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  589.522131][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  589.522141][    C0] Call Trace:
[  589.522147][    C0]  <NMI>
[  589.522154][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  589.522174][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  589.522198][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  589.522222][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  589.522243][    C0]  ? nmi_handle+0x14f/0x5a0
[  589.522259][    C0]  ? nmi_handle+0x2a/0x5a0
[  589.522276][    C0]  ? mark_lock+0xa2/0x360
[  589.522290][    C0]  ? default_do_nmi+0x63/0x160
[  589.522310][    C0]  ? exc_nmi+0x123/0x1f0
[  589.522329][    C0]  ? end_repeat_nmi+0xf/0x53
[  589.522352][    C0]  ? mark_lock+0x9a/0x360
[  589.522367][    C0]  ? mark_lock+0xa2/0x360
[  589.522382][    C0]  ? mark_lock+0xa2/0x360
[  589.522397][    C0]  ? mark_lock+0xa2/0x360
[  589.522412][    C0]  </NMI>
[  589.522417][    C0]  <IRQ>
[  589.522425][    C0]  lockdep_hardirqs_on_prepare+0x282/0x780
[  589.522449][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  589.522473][    C0]  ? rcu_is_watching+0x15/0xb0
[  589.522491][    C0]  trace_hardirqs_on+0x28/0x40
[  589.522510][    C0]  call_rcu+0x731/0xa70
[  589.522530][    C0]  ? __pfx_call_rcu+0x10/0x10
[  589.522547][    C0]  ? percpu_counter_add_batch+0xff/0x1f0
[  589.522574][    C0]  skb_release_head_state+0x73/0x250
[  589.522592][    C0]  consume_skb+0x60/0xf0
[  589.522607][    C0]  nft_synproxy_eval_v4+0x3d2/0x610
[  589.522632][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  589.522655][    C0]  ? NF_HOOK+0x29e/0x450
[  589.522673][    C0]  ? nf_ip_checksum+0x13a/0x500
[  589.522689][    C0]  nft_synproxy_do_eval+0x362/0xa60
[  589.522714][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  589.522737][    C0]  ? __lock_acquire+0x1384/0x2050
[  589.522761][    C0]  ? __pfx_validate_chain+0x10/0x10
[  589.522781][    C0]  nft_do_chain+0x4ad/0x1da0
[  589.522800][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  589.522814][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  589.522847][    C0]  nft_do_chain_inet+0x418/0x6b0
[  589.522871][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  589.522893][    C0]  ? ipt_do_table+0x312/0x1860
[  589.522922][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  589.522944][    C0]  nf_hook_slow+0xc3/0x220
[  589.522964][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  589.522983][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  589.523001][    C0]  NF_HOOK+0x29e/0x450
[  589.523019][    C0]  ? NF_HOOK+0x9a/0x450
[  589.523036][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  589.523054][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  589.523074][    C0]  ? ip_rcv_finish+0x406/0x560
[  589.523092][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  589.523110][    C0]  NF_HOOK+0x3a4/0x450
[  589.523128][    C0]  ? NF_HOOK+0x9a/0x450
[  589.523144][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  589.523160][    C0]  ? ip_rcv_core+0x801/0xd10
[  589.523178][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  589.523199][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  589.523216][    C0]  __netif_receive_skb+0x2bf/0x650
[  589.523237][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  589.523259][    C0]  ? __pfx___netif_receive_skb+0x10/0x10
[  589.523278][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  589.523301][    C0]  ? __pfx_lock_release+0x10/0x10
[  589.523323][    C0]  ? _raw_spin_lock_irq+0xdf/0x120
[  589.523352][    C0]  process_backlog+0x662/0x15b0
[  589.523374][    C0]  ? process_backlog+0x33b/0x15b0
[  589.523397][    C0]  ? __pfx_process_backlog+0x10/0x10
[  589.523417][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  589.523440][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  589.523464][    C0]  __napi_poll+0xcb/0x490
[  589.523484][    C0]  net_rx_action+0x89b/0x1240
[  589.523512][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  589.523532][    C0]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  589.523566][    C0]  handle_softirqs+0x2c5/0x980
[  589.523587][    C0]  ? do_softirq+0x11b/0x1e0
[  589.523607][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  589.523631][    C0]  do_softirq+0x11b/0x1e0
[  589.523649][    C0]  </IRQ>
[  589.523655][    C0]  <TASK>
[  589.523660][    C0]  ? __pfx_do_softirq+0x10/0x10
[  589.523680][    C0]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  589.523702][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  589.523725][    C0]  ? rcu_is_watching+0x15/0xb0
[  589.523742][    C0]  __local_bh_enable_ip+0x1bb/0x200
[  589.523762][    C0]  ? wg_packet_decrypt_worker+0xcde/0xd80
[  589.523783][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  589.523805][    C0]  ? wg_packet_decrypt_worker+0x8b3/0xd80
[  589.523827][    C0]  wg_packet_decrypt_worker+0xcde/0xd80
[  589.523855][    C0]  ? __pfx_wg_packet_decrypt_worker+0x10/0x10
[  589.523903][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  589.523926][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  589.523952][    C0]  ? process_scheduled_works+0x976/0x1850
[  589.523974][    C0]  process_scheduled_works+0xa63/0x1850
[  589.524004][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  589.524028][    C0]  ? assign_work+0x364/0x3d0
[  589.524049][    C0]  worker_thread+0x870/0xd30
[  589.524075][    C0]  ? __kthread_parkme+0x169/0x1d0
[  589.524099][    C0]  ? __pfx_worker_thread+0x10/0x10
[  589.524120][    C0]  kthread+0x2f0/0x390
[  589.524134][    C0]  ? __pfx_worker_thread+0x10/0x10
[  589.524155][    C0]  ? __pfx_kthread+0x10/0x10
[  589.524170][    C0]  ret_from_fork+0x4b/0x80
[  589.524192][    C0]  ? __pfx_kthread+0x10/0x10
[  589.524206][    C0]  ret_from_fork_asm+0x1a/0x30
[  589.524241][    C0]  </TASK>
[  590.977066][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  590.983965][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0
[  590.994493][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  591.004563][   T30] Call Trace:
[  591.007858][   T30]  <TASK>
[  591.010802][   T30]  dump_stack_lvl+0x241/0x360
[  591.015503][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  591.020731][   T30]  ? __pfx__printk+0x10/0x10
[  591.025335][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  591.031350][   T30]  ? vscnprintf+0x5d/0x90
[  591.035702][   T30]  panic+0x349/0x880
[  591.039615][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  591.045793][   T30]  ? __pfx_panic+0x10/0x10
[  591.050228][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  591.055616][   T30]  ? __irq_work_queue_local+0x137/0x410
[  591.061184][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  591.066578][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  591.072754][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  591.078930][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  591.085110][   T30]  watchdog+0x1033/0x1040
[  591.089463][   T30]  ? watchdog+0x1ea/0x1040
[  591.093907][   T30]  ? __pfx_watchdog+0x10/0x10
[  591.098608][   T30]  kthread+0x2f0/0x390
[  591.102702][   T30]  ? __pfx_watchdog+0x10/0x10
[  591.107404][   T30]  ? __pfx_kthread+0x10/0x10
[  591.112010][   T30]  ret_from_fork+0x4b/0x80
[  591.116446][   T30]  ? __pfx_kthread+0x10/0x10
[  591.121052][   T30]  ret_from_fork_asm+0x1a/0x30