last executing test programs:

16m40.71985085s ago: executing program 3 (id=4):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x3})
r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000000)="716f88cabc9b050a4c2efb7448850c573ebdb4d52efd8e8e", 0x0, 0x18)
r3 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x440, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000003000000250000", @ANYRES32, @ANYBLOB="0000000000000000b2010000000000000000000065fe2c43547a510e14087ff708659361c01de853b44f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fcffffff0000000800"/23, @ANYRES32=r3, @ANYBLOB], 0x50)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x1e0a4000)
r4 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x200, 0x2, 0x15})
io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000d40)="01", 0x1)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000240)={0x13, 0x1, 0x1, "8eb8a83fe93b07f1dd06da7a41bfeac48048beb159fbba17425ced8f098c68d9"})
add_key$keyring(&(0x7f0000000840), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
syz_clone3(&(0x7f00000002c0)={0x40000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58)
close(r4)
keyctl$clear(0x3, 0xfffffffffffffffd)
ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000080)={0x23abadfe31dbac71, @capture={0x0, 0x1, {0x4, 0x6}, 0x100, 0xfff}})
r6 = syz_open_dev$midi(&(0x7f00000012c0), 0x2, 0x2)
r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r7, 0x4ffff)
fcntl$addseals(r7, 0x409, 0x7)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, &(0x7f0000000080))
rseq(0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58)

16m38.774319349s ago: executing program 3 (id=7):
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000700)={<r2=>0x0, 0xfc0, "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"}, &(0x7f00000002c0)=0xfc8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000300)={r2, 0x400}, 0x8)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}}, 0x0)

16m38.385776744s ago: executing program 3 (id=8):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000007880))
syz_emit_ethernet(0x41, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022"}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
getgid()
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
writev(0xffffffffffffffff, &(0x7f0000000080), 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x0, 0x0, 0x1c0, 0x1c0, 0x298, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'ipvlan1\x00', {0xff}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, 0x4e21}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x89}}, @common=@inet=@set4={{0x50}, {{0x2, 0x4, 0x2}, {{0x2}, 0x4}, {{0x2}, 0xfc}, 0x6}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffff7, 0x800000e, @ipv4=@loopback, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

16m32.997107713s ago: executing program 3 (id=16):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000007880))
syz_emit_ethernet(0x41, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022"}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
getgid()
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
writev(0xffffffffffffffff, &(0x7f0000000080), 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0)
modify_ldt$write2(0x11, 0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x0, 0x0, 0x1c0, 0x1c0, 0x298, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'ipvlan1\x00', {0xff}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, 0x4e21}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x89}}, @common=@inet=@set4={{0x50}, {{0x2, 0x4, 0x2}, {{0x2}, 0x4}, {{0x2}, 0xfc}, 0x6}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffff7, 0x800000e, @ipv4=@loopback, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

16m27.543187184s ago: executing program 3 (id=26):
r0 = socket(0x40000000015, 0x5, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, 0x0, 0x20000000)
socket(0x10, 0x80002, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = gettid()
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

16m11.717054026s ago: executing program 32 (id=26):
r0 = socket(0x40000000015, 0x5, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, 0x0, 0x20000000)
socket(0x10, 0x80002, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = gettid()
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

1m6.002772808s ago: executing program 4 (id=2945):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}})
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac14"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m4.43491495s ago: executing program 4 (id=2948):
r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
syz_genetlink_get_family_id$ethtool(0x0, r0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x8, 0x8d3a)

1m4.166653874s ago: executing program 4 (id=2949):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000a00)='wsync', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00')

1m2.99751834s ago: executing program 4 (id=2952):
gettid()
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)

1m1.929348225s ago: executing program 4 (id=2954):
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x51, 0x4d58, 0x5, {0x3, 0x401}, {0x6c83, 0x1}, @const={0x7, {0x249d, 0x1437, 0xf, 0x93a4}}})

1m0.992806539s ago: executing program 4 (id=2958):
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa250300000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218000000"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1m0.249864139s ago: executing program 33 (id=2958):
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa250300000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218000000"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

43.477401296s ago: executing program 6 (id=2959):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0})

43.024888303s ago: executing program 1 (id=2993):
syz_usb_connect$cdc_ncm(0x0, 0x7a, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x20201)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f0000000016000000f9000900"})
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x5e, 0x0, 0x0)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x51, 0x4d58, 0x5, {0x3, 0x401}, {0x6c83, 0x1}, @const={0x7, {0x249d, 0x1437, 0xf, 0x93a4}}})
syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0)

40.220315912s ago: executing program 6 (id=2998):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x21, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xc)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x2, {0x0, 0x0, 0x2}}, 0x18)
connect$can_j1939(r6, &(0x7f0000000480)={0x1d, r7, 0x7, {0x0, 0x0, 0x4}, 0x1}, 0x18)
sendfile(r6, r5, 0x0, 0x1000000000000a)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)

39.558868322s ago: executing program 1 (id=3001):
r0 = syz_open_dev$evdev(0x0, 0x2, 0x20201)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x51, 0x4d58, 0x5, {0x3, 0x401}, {0x6c83, 0x1}, @const={0x7, {0x249d, 0x1437, 0xf, 0x93a4}}})

35.662179377s ago: executing program 6 (id=3007):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x104})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x171, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x4, 0x1000, 0x7fe})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
dup(r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

33.93079182s ago: executing program 6 (id=3010):
gettid()
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)

32.690439969s ago: executing program 6 (id=3012):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x8, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0x7, 0x800, 0x100, 0x0, 0x5700000000000000, 0x401, 0x6, 0xfffffffffffffff7, 0x0, 0x13f, 0x100000001, 0xba25, 0xfff, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x1c0080})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg(r1, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
syz_clone(0x6102400, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip_tables_names\x00')

31.831967621s ago: executing program 6 (id=3013):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}})
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac14"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

31.193644749s ago: executing program 34 (id=3013):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}})
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac14"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda9880000000018"], 0x40}}, 0x0)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9.842829391s ago: executing program 2 (id=3047):
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xdf2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x6, 0x2, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001380)={0x20, 0x1, 0xe, "ab583830c67cc0f26129fa8a9ce6"}, 0x0})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

9.478891486s ago: executing program 1 (id=3003):
r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="85"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x48, 0x1, 0x2, 0x7}}}}}]}}]}}, 0x0)

7.983887577s ago: executing program 2 (id=3051):
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000500)={0xa, 0xffff, 0x0, @mcast1, 0x9}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0)

6.637943126s ago: executing program 7 (id=3014):
r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="85"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x10, 0x2, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x48, 0x1, 0x2, 0x7}}}}}]}}]}}, 0x0)

6.503394658s ago: executing program 5 (id=3052):
gettid()
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)

5.774506058s ago: executing program 1 (id=3053):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000001040)=ANY=[@ANYBLOB="080001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

5.012583619s ago: executing program 5 (id=3055):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000001040)=ANY=[@ANYBLOB="080001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

4.924699951s ago: executing program 2 (id=3056):
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x3, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="5d11bc", 0x0, 0x0, 0x12, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000e00000000020000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmsg(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x4008004)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xbb8)

4.646768864s ago: executing program 0 (id=3057):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x121000, 0x109)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@getqdisc={0x24, 0x26, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff3, 0x2}, {0xd, 0x4}}}, 0x24}}, 0x4810)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4.436672297s ago: executing program 7 (id=3058):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000640)={0x20, 0xe, 0x2, "40cb"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0})

4.325785799s ago: executing program 2 (id=3059):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
lstat(0x0, 0x0)
r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)="00d0", 0x2, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x100000000000f7)
read$watch_queue(r3, &(0x7f0000000000)=""/1, 0x1)
keyctl$revoke(0x3, r2)

4.098454192s ago: executing program 5 (id=3060):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x121000, 0x109)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@getqdisc={0x24, 0x26, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff3, 0x2}, {0xd, 0x4}}}, 0x24}}, 0x4810)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.806199616s ago: executing program 5 (id=3061):
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x3, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="5d11bc", 0x0, 0x0, 0x12, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000e00000000020000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmsg(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x4008004)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xbb8)

3.435419912s ago: executing program 0 (id=3062):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x104})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x171, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x4, 0x1000, 0x7fe})
dup(r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

3.237787194s ago: executing program 5 (id=3063):
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(&(0x7f0000000000)=@nullb, 0x0, 0x0, 0x207b00, 0x0)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000a40), 0x0, 0x1000)
epoll_create1(0x80000)
epoll_create1(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000019000100000000000000000080200000001100050000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x498, &(0x7f00000002c0)='\x00\x00\xfd\xff\xff\xff\x00-6(\x03\xb2\xcc\x03\xb0\v\xad\xb2*\xb8\xff\x8f)f\xa7p<\x953\x84\a_+\xf14\x9aEl\x8aq\b&:\xf5\xb5\xa7\xe7\xdcU\x1c\xa4\r\x1b\x89\xf6\x93A\x8e]Q\x92\x818\xb7X\xfd\xa3\v\xc2/,\x1e(\x13=\x92!\x97\xf4\x19\xceX\x1b.\xc5\x90I\x95g\x15\">{>\xb0\x18\"\xbb\x921\x1cBl\x04')

2.599252583s ago: executing program 0 (id=3064):
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100), 0x0, 0x0, 0x12, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000e00000000020000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmsg(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x4008004)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0xbb8)

2.486474285s ago: executing program 1 (id=3065):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="05"], 0x1c}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

2.263990568s ago: executing program 0 (id=3066):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x10, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x171, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

2.246168068s ago: executing program 5 (id=3067):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.12442082s ago: executing program 1 (id=3068):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)
write$char_usb(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f00000003c0)=ANY=[])

1.943615523s ago: executing program 0 (id=3069):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1dd)
write$binfmt_elf64(r1, 0x0, 0x0)
close(r1)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0xbc, 0x8000e, 0x2, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x0, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0)
close_range(r2, r2, 0x0)
syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x28}}, 0x0)

646.433791ms ago: executing program 2 (id=3070):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002840)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

563.092162ms ago: executing program 7 (id=3071):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x121000, 0x109)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@getqdisc={0x24, 0x26, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff3, 0x2}, {0xd, 0x4}}}, 0x24}}, 0x4810)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280), 0x0, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

469.276084ms ago: executing program 0 (id=3072):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_usb_connect$cdc_ncm(0x4, 0x72, &(0x7f0000000040)=ANY=[], 0x0)
semop(0x0, &(0x7f00000000c0)=[{0x0, 0xfffd}], 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
fsopen(&(0x7f0000000200)='iso9660\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000010c0)={0x8, "99bdb1b0c7251b0894d3f0230a74bd856e3c10db57c3f7484d9ed4190dbc00f3"})
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020)
semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000340)=""/191)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

19.68784ms ago: executing program 2 (id=3073):
r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0)

0s ago: executing program 7 (id=3074):
gettid()
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c)

kernel console output (not intermixed with test programs):

3820][T15053] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  976.252865][T15053] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  976.261180][T15053] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  976.268422][T15053] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  976.295947][ T4258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  976.306434][ T4258] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  976.314954][ T4258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  976.324962][ T4258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  976.333320][ T4258] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  976.340733][ T4258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  976.566900][   T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.765263][   T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  976.959364][   T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  977.021145][T13580] usb 5-1: new full-speed USB device number 65 using dummy_hcd
[  977.244627][T13580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  977.256572][T13580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  977.267195][T13580] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  977.276664][T13580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  977.301842][T13580] usb 5-1: config 0 descriptor??
[  977.335770][T13580] hub 5-1:0.0: USB hub found
[  977.543083][T13580] hub 5-1:0.0: 1 port detected
[  977.597134][T15059] loop0: detected capacity change from 0 to 32768
[  977.642089][T15059] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2802 (15059)
[  977.717195][T15059] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  977.756159][T15052] chnl_net:caif_netlink_parms(): no params data found
[  977.770235][T15059] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  977.802290][T15059] BTRFS info (device loop0): use zlib compression, level 3
[  977.858374][T15063] loop5: detected capacity change from 0 to 32768
[  977.865034][T15059] BTRFS info (device loop0): doing ref verification
[  977.891028][T15059] BTRFS info (device loop0): force clearing of disk cache
[  977.898270][T15059] BTRFS info (device loop0): setting nodatacow, compression disabled
[  977.922094][T15063] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2804 (15063)
[  977.972894][T15059] BTRFS info (device loop0): doing ref verification
[  978.003687][T15063] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  978.008105][T15059] BTRFS info (device loop0): using free space tree
[  978.034431][T15063] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  978.095577][T15063] BTRFS info (device loop5): metadata ratio 4
[  978.130723][T15063] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  978.180959][T15063] BTRFS info (device loop5): force lzo compression, level 0
[  978.191674][T13580] hub 5-1:0.0: activate --> -90
[  978.206461][T15063] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  978.223199][T15063] BTRFS info (device loop5): trying to use backup root at mount time
[  978.231804][T15063] BTRFS info (device loop5): doing ref verification
[  978.238550][T15063] BTRFS info (device loop5): disabling tree log
[  978.245911][T15063] BTRFS info (device loop5): using free space tree
[  978.378472][T15059] BTRFS info (device loop0): enabling ssd optimizations
[  978.389531][T15052] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.401944][ T4258] Bluetooth: hci1: command 0x0409 tx timeout
[  978.431447][T15052] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.439816][T15052] device bridge_slave_0 entered promiscuous mode
[  978.452582][T15059] BTRFS info (device loop0): rebuilding free space tree
[  978.509819][ T9503] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  978.556174][T15052] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.564626][T15052] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.592291][T15052] device bridge_slave_1 entered promiscuous mode
[  978.598155][T15063] BTRFS warning (device loop5): couldn't read tree root
[  978.638464][T15063] BTRFS warning (device loop5): try to load backup roots slot 1
[  978.657852][ T4562] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  978.701235][T15063] BTRFS warning (device loop5): couldn't read tree root
[  978.741263][T15063] BTRFS warning (device loop5): try to load backup roots slot 2
[  978.752456][T15063] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  978.802857][T15052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.814147][T13580] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[  978.827307][ T4297] usb 5-1: USB disconnect, device number 65
[  978.835189][T13580] usb 5-1-port1: attempt power cycle
[  978.893565][T15063] BTRFS warning (device loop5): couldn't read tree root
[  978.906830][ T4256] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  978.921736][T15063] BTRFS warning (device loop5): try to load backup roots slot 3
[  979.012041][T15063] BTRFS info (device loop5): enabling ssd optimizations
[  979.053715][T15063] BTRFS info (device loop5): rebuilding free space tree
[  979.158092][T15063] BTRFS info (device loop5): checking UUID tree
[  979.498349][T15052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  979.773946][ T5285] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  980.221359][T15052] team0: Port device team_slave_0 added
[  980.302837][T15052] team0: Port device team_slave_1 added
[  980.464919][T15120] loop0: detected capacity change from 0 to 32768
[  980.481101][ T4258] Bluetooth: hci1: command 0x041b tx timeout
[  980.578318][T15052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  980.590750][T15052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  980.616712][    C0] vkms_vblank_simulate: vblank timer overrun
[  980.635841][T15052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  980.669357][T15052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  980.680218][T15052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  980.721119][T13580] usb 6-1: new full-speed USB device number 54 using dummy_hcd
[  980.738341][T15052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  980.927289][T13580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  980.970628][T13580] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  981.046938][T13580] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  981.081785][T13580] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.121900][T13580] usb 6-1: config 0 descriptor??
[  981.196593][T13580] hub 6-1:0.0: USB hub found
[  981.263836][   T57] device bridge0 left promiscuous mode
[  981.283579][   T57] device batadv_slave_1 left promiscuous mode
[  981.363613][   T57] device hsr_slave_0 left promiscuous mode
[  981.374331][T13580] hub 6-1:0.0: 1 port detected
[  981.430396][   T57] device hsr_slave_1 left promiscuous mode
[  981.481197][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  981.518331][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[  981.562942][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  981.625761][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[  981.711913][   T57] device bridge_slave_1 left promiscuous mode
[  981.719506][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[  981.748331][   T57] device bridge_slave_0 left promiscuous mode
[  981.812601][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[  981.953986][   T57] device veth0_macvtap left promiscuous mode
[  982.013226][   T57] device veth1_vlan left promiscuous mode
[  982.025415][T13580] hub 6-1:0.0: activate --> -90
[  982.059917][   T57] device veth0_vlan left promiscuous mode
[  982.561014][ T4258] Bluetooth: hci1: command 0x040f tx timeout
[  982.635603][T13580] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[  982.661522][ T4297] usb 6-1: USB disconnect, device number 54
[  982.667531][T13580] usb 6-1-port1: cannot reset (err = -71)
[  982.690840][T13580] usb 6-1-port1: Cannot enable. Maybe the USB cable is bad?
[  982.721401][T13580] usb 6-1-port1: attempt power cycle
[  984.406158][T15170] loop5: detected capacity change from 0 to 32768
[  984.429397][T15170] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2815 (15170)
[  984.516283][T15170] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  984.554374][T15170] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  984.627626][T15170] BTRFS info (device loop5): metadata ratio 2
[  984.641197][ T4258] Bluetooth: hci1: command 0x0419 tx timeout
[  984.647471][T15170] BTRFS info (device loop5): allowing degraded mounts
[  984.664765][T15170] BTRFS info (device loop5): force zlib compression, level 3
[  984.717283][T15170] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  984.747801][T15170] BTRFS info (device loop5): use zstd compression, level 3
[  984.761204][T15170] BTRFS info (device loop5): force clearing of disk cache
[  984.809763][T15170] BTRFS info (device loop5): max_inline at 0
[  984.856391][T15170] BTRFS info (device loop5): using free space tree
[  985.202002][T15170] BTRFS info (device loop5): enabling ssd optimizations
[  985.215096][T15170] BTRFS info (device loop5): rebuilding free space tree
[  985.297614][   T26] audit: type=1800 audit(1747515742.634:9): pid=15170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2815" name="file1" dev="loop5" ino=260 res=0 errno=0
[  985.341838][   T57] device team_slave_1 left promiscuous mode
[  985.405805][   T57] team0 (unregistering): Port device team_slave_1 removed
[  985.600408][ T5285] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  985.765932][   T57] device team_slave_0 left promiscuous mode
[  985.843465][ T4596] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop5 scanned by udevd (4596)
[  985.868193][   T57] team0 (unregistering): Port device team_slave_0 removed
[  986.162338][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  986.175842][T15211] loop4: detected capacity change from 0 to 32768
[  986.183219][   T57] device bond_slave_1 left promiscuous mode
[  986.226014][T15211] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[  986.382651][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  986.419164][   T57] device bond_slave_0 left promiscuous mode
[  986.593594][ T4243] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[  987.302393][T15221] loop0: detected capacity change from 0 to 32768
[  987.472910][T15221] XFS (loop0): Mounting V5 Filesystem
[  987.659556][T15221] XFS (loop0): Ending clean mount
[  987.698616][T15221] XFS (loop0): Quotacheck needed: Please wait.
[  987.758899][   T57] bond0 (unregistering): Released all slaves
[  987.803932][T15221] XFS (loop0): Quotacheck: Done.
[  987.944605][T15052] device hsr_slave_0 entered promiscuous mode
[  987.970305][T15052] device hsr_slave_1 entered promiscuous mode
[  988.038050][T15052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  988.054293][T15052] Cannot create hsr debugfs directory
[  988.060753][ T4256] XFS (loop0): Unmounting Filesystem
[  988.758880][T15232] loop4: detected capacity change from 0 to 32768
[  988.774955][T15243] kvm [15239]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3
[  988.956374][T15243] kvm [15239]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3
[  988.970492][T15232] XFS (loop4): Mounting V5 Filesystem
[  988.996785][T15243] kvm [15239]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3
[  989.212228][T15243] kvm [15239]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop
[  989.290475][T15232] XFS (loop4): Ending clean mount
[  989.340640][T15232] XFS (loop4): Quotacheck needed: Please wait.
[  989.441364][T15232] XFS (loop4): Quotacheck: Done.
[  989.667270][T15052] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  989.823696][ T4249] XFS (loop4): Unmounting Filesystem
[  989.829189][T15052] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  989.889348][T15052] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  989.983185][T15052] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  990.398111][T15052] 8021q: adding VLAN 0 to HW filter on device bond0
[  990.487055][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  990.497313][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  990.528899][T15052] 8021q: adding VLAN 0 to HW filter on device team0
[  990.604210][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  990.639970][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  990.704458][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state
[  990.711729][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state
[  990.776925][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  990.817682][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  990.860143][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  990.895788][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state
[  990.903061][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state
[  990.987136][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  991.047923][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  991.225036][T15285] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2831'.
[  991.273118][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  991.301629][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  991.345660][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  991.490048][T15052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  991.549835][T15052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  991.602540][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  991.629777][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  991.668712][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  991.742835][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  991.760375][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  991.789883][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  991.828165][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  992.610790][T15288] loop0: detected capacity change from 0 to 32768
[  993.367940][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  993.391316][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  993.431830][T15052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  993.606566][T13887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  993.646411][T13887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  993.700223][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  993.778907][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  993.861470][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  993.900490][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  993.935090][T15052] device veth0_vlan entered promiscuous mode
[  993.983992][T15052] device veth1_vlan entered promiscuous mode
[  994.062023][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  994.070504][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  994.085716][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  994.098670][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  994.129920][T15052] device veth0_macvtap entered promiscuous mode
[  994.172859][T15052] device veth1_macvtap entered promiscuous mode
[  994.216070][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  994.243905][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.255057][T13580] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  994.276898][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  994.297837][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.320693][T15052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  994.347724][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  994.376695][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  994.393563][   T14] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  994.441035][T13580] usb 2-1: Using ep0 maxpacket: 8
[  994.468615][T13580] usb 2-1: config 0 has an invalid interface number: 33 but max is 1
[  994.487071][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  994.531244][T13580] usb 2-1: config 0 has no interface number 1
[  994.558892][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  994.567482][T13580] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  994.603667][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.607569][   T14] usb 1-1: Using ep0 maxpacket: 8
[  994.614313][T13580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  994.633059][   T14] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  994.642508][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.671032][T13580] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  994.680835][T15052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  994.681116][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.730844][T15052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  994.742607][T13580] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  994.750116][   T14] usb 1-1: config 0 descriptor??
[  994.766975][T13580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.792073][T15052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  994.817827][T13580] usb 2-1: Product: syz
[  994.823164][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  994.848351][T13580] usb 2-1: Manufacturer: syz
[  994.854373][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  994.868649][T13580] usb 2-1: SerialNumber: syz
[  994.878828][T15052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  994.916042][T13580] usb 2-1: config 0 descriptor??
[  994.994929][T15052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  995.024551][T13580] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  995.034819][T15344] fuse: Unknown parameter '0x0000000000000003'
[  995.042145][T15052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  995.053262][T15052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  995.230252][T15326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  995.251374][T15326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  995.336995][T13580] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  995.345967][ T2309] pvrusb2: Failed to submit write-control URB status=-90
[  995.425330][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  995.447503][ T2309] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  995.474285][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  995.483617][T13580] usb 2-1: USB disconnect, device number 76
[  995.518453][ T2309] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  995.546676][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  995.563870][ T4562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  995.597906][ T4562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  995.631562][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  995.861678][T15354] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2843'.
[  995.979955][   T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  996.007140][   T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  996.061161][   T14] asix: probe of 1-1:0.0 failed with error -71
[  996.126306][   T14] usb 1-1: USB disconnect, device number 54
[  997.379540][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2849'.
[  997.614064][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2849'.
[  998.201035][ T4336] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  998.239661][T15405] fuse: Unknown parameter '0x0000000000000003'
[  998.396502][ T4336] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  998.468244][ T4336] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  998.487460][T15400] kvm [15395]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3
[  998.517883][ T4336] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  998.564988][T15400] kvm [15395]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3
[  998.585613][ T4336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.615463][ T4336] usb 1-1: Product: syz
[  998.626380][ T4336] usb 1-1: Manufacturer: syz
[  998.644121][ T4336] usb 1-1: SerialNumber: syz
[  998.724869][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  998.743580][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  998.784576][T15400] kvm [15395]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3
[  998.865897][T15400] kvm [15395]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop
[  998.878880][T15398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  998.931944][T15398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  998.958863][ T4336] cdc_ether: probe of 1-1:1.0 failed with error -22
[  999.031623][ T4336] usb 1-1: USB disconnect, device number 55
[  999.601472][ T4336] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  999.791119][ T4336] usb 1-1: Using ep0 maxpacket: 8
[  999.801557][ T4336] usb 1-1: config index 0 descriptor too short (expected 301, got 72)
[  999.881929][ T4336] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  999.956266][ T4336] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  999.992796][ T4336] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1000.036269][ T4336] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1000.082324][ T4336] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1000.106445][ T4336] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1000.133804][ T4336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.350973][   T14] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1000.370441][ T4336] usb 1-1: usb_control_msg returned -32
[ 1000.379767][ T4336] usbtmc 1-1:16.0: can't read capabilities
[ 1000.541001][   T14] usb 3-1: Using ep0 maxpacket: 8
[ 1000.547962][   T14] usb 3-1: config 0 has an invalid interface number: 33 but max is 1
[ 1000.572196][ T4336] usb 1-1: USB disconnect, device number 56
[ 1000.617107][   T14] usb 3-1: config 0 has no interface number 1
[ 1000.656669][T15453] loop1: detected capacity change from 0 to 1024
[ 1000.663726][   T14] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1000.705274][T15453] EXT4-fs: Ignoring removed orlov option
[ 1000.731086][   T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1000.773384][   T14] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1000.795561][   T14] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[ 1000.838475][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.864493][T15453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1000.875140][   T14] usb 3-1: Product: syz
[ 1000.879345][   T14] usb 3-1: Manufacturer: syz
[ 1000.894149][   T14] usb 3-1: SerialNumber: syz
[ 1000.900863][   T14] usb 3-1: config 0 descriptor??
[ 1000.923366][   T14] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[ 1001.106668][ T4257] EXT4-fs (loop1): unmounting filesystem.
[ 1001.130610][T15448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1001.156823][T15448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1001.181639][   T14] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[ 1001.339701][   T14] usb 3-1: USB disconnect, device number 70
[ 1001.431999][   T14] pvrusb2: Device being rendered inoperable
[ 1001.496649][   T14] pvrusb2: Device being rendered inoperable
[ 1001.841119][ T4336] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[ 1002.042669][ T4336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1002.105464][ T4336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1002.143452][T15475] kvm [15472]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3
[ 1002.171278][ T4336] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1002.189391][T15475] kvm [15472]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3
[ 1002.199721][T15475] kvm [15472]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3
[ 1002.234849][ T4336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.276604][ T4336] usb 1-1: config 0 descriptor??
[ 1002.309414][ T4336] hub 1-1:0.0: USB hub found
[ 1002.348246][T15475] kvm [15472]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop
[ 1002.493408][ T4336] hub 1-1:0.0: 1 port detected
[ 1002.931080][   T22] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1003.098846][ T4336] hub 1-1:0.0: activate --> -90
[ 1003.121033][   T22] usb 5-1: Using ep0 maxpacket: 8
[ 1003.135047][   T22] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1003.181551][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.269897][   T22] usb 5-1: Product: syz
[ 1003.295219][   T22] usb 5-1: Manufacturer: syz
[ 1003.300215][ T4336] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 1003.300542][   T14] usb 1-1: USB disconnect, device number 57
[ 1003.353255][   T22] usb 5-1: SerialNumber: syz
[ 1003.415234][   T22] usb 5-1: config 0 descriptor??
[ 1003.628558][   T22] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1005.056855][   T22] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[ 1005.094401][   T22] usb 5-1: USB disconnect, device number 70
[ 1005.311072][ T4344] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1005.533175][ T4344] usb 1-1: config 0 has no interfaces?
[ 1005.614017][ T4344] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1005.620262][T15531] loop5: detected capacity change from 0 to 32768
[ 1005.682780][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1005.740205][ T4344] usb 1-1: Product: syz
[ 1005.775726][ T4344] usb 1-1: Manufacturer: syz
[ 1005.780389][ T4344] usb 1-1: SerialNumber: syz
[ 1005.836750][T15533] loop2: detected capacity change from 0 to 32768
[ 1005.842298][ T4344] usb 1-1: config 0 descriptor??
[ 1005.926816][T15533] XFS (loop2): Mounting V5 Filesystem
[ 1006.003833][T15533] XFS (loop2): Ending clean mount
[ 1006.069219][T15533] XFS (loop2): Quotacheck needed: Please wait.
[ 1006.486119][T15533] XFS (loop2): Quotacheck: Done.
[ 1006.527351][   T26] audit: type=1800 audit(1747515763.864:10): pid=15533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2876" name="file1" dev="loop2" ino=9286 res=0 errno=0
[ 1006.715826][T15535] loop5: detected capacity change from 0 to 32768
[ 1006.727450][T15052] XFS (loop2): Unmounting Filesystem
[ 1006.859326][T15535] XFS (loop5): Mounting V5 Filesystem
[ 1006.904559][T15547] loop4: detected capacity change from 0 to 32768
[ 1006.922227][T15547] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[ 1007.069711][T15535] XFS (loop5): Ending clean mount
[ 1007.080335][T15535] XFS (loop5): Quotacheck needed: Please wait.
[ 1007.234905][T15535] XFS (loop5): Quotacheck: Done.
[ 1007.451904][ T5285] XFS (loop5): Unmounting Filesystem
[ 1007.663285][ T4243] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 11
[ 1008.292720][    T7] usb 1-1: USB disconnect, device number 58
[ 1009.654366][T15577] loop5: detected capacity change from 0 to 32768
[ 1009.708824][T15577] XFS (loop5): Mounting V5 Filesystem
[ 1009.875877][T15577] XFS (loop5): Ending clean mount
[ 1009.914505][T15577] XFS (loop5): Quotacheck needed: Please wait.
[ 1010.058039][T15577] XFS (loop5): Quotacheck: Done.
[ 1010.296025][ T5285] XFS (loop5): Unmounting Filesystem
[ 1010.428509][T15583] loop4: detected capacity change from 0 to 32768
[ 1010.521030][   T22] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[ 1010.712879][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1010.734389][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1010.764855][   T22] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1010.805195][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.830116][   T22] usb 1-1: config 0 descriptor??
[ 1010.853372][   T22] hub 1-1:0.0: USB hub found
[ 1010.961250][T15121] usb 5-1: new full-speed USB device number 71 using dummy_hcd
[ 1011.060380][   T22] hub 1-1:0.0: 1 port detected
[ 1011.157509][T15121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1011.168617][    T7] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1011.191030][T15121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1011.200854][T15121] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1011.220090][T15121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1011.233874][T15599] loop2: detected capacity change from 0 to 32768
[ 1011.246687][T15121] usb 5-1: config 0 descriptor??
[ 1011.268793][T15121] hub 5-1:0.0: USB hub found
[ 1011.289129][T15599] XFS (loop2): Mounting V5 Filesystem
[ 1011.364156][    T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1011.382182][    T7] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1011.411486][T15599] XFS (loop2): Ending clean mount
[ 1011.432633][    T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1011.433411][T15599] XFS (loop2): Quotacheck needed: Please wait.
[ 1011.462260][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1011.471590][    T7] usb 6-1: Product: syz
[ 1011.475846][    T7] usb 6-1: Manufacturer: syz
[ 1011.518813][T15121] hub 5-1:0.0: 1 port detected
[ 1011.531174][    T7] usb 6-1: SerialNumber: syz
[ 1011.540153][T15599] XFS (loop2): Quotacheck: Done.
[ 1011.697997][   T22] hub 1-1:0.0: activate --> -90
[ 1011.737527][T15052] XFS (loop2): Unmounting Filesystem
[ 1011.758325][T15601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1011.797366][T15601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1011.844964][    T7] cdc_ether: probe of 6-1:1.0 failed with error -22
[ 1011.855929][    T7] usb 6-1: USB disconnect, device number 59
[ 1012.121769][   T22] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 1012.131337][  T128] usb 1-1: USB disconnect, device number 59
[ 1012.140177][T15121] hub 5-1:0.0: activate --> -90
[ 1012.145156][   T22] usb 1-1-port1: connect-debounce failed
[ 1012.301052][   T22] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1012.461141][    T7] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1012.481333][   T22] usb 3-1: Using ep0 maxpacket: 8
[ 1012.489031][   T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1012.499062][   T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1012.509897][   T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1012.520506][   T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1012.534473][   T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1012.544848][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.562689][T15121] hub 5-1:0.0: hub_ext_port_status failed (err = -71)
[ 1012.571525][T14615] usb 5-1: USB disconnect, device number 71
[ 1012.641080][    T7] usb 6-1: Using ep0 maxpacket: 8
[ 1012.647991][    T7] usb 6-1: config index 0 descriptor too short (expected 301, got 72)
[ 1012.679712][    T7] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1012.693786][    T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1012.706183][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1012.720613][    T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1012.738198][    T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1012.749748][    T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1012.759108][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.774141][   T22] usb 3-1: GET_CAPABILITIES returned 0
[ 1012.779789][   T22] usbtmc 3-1:16.0: can't read capabilities
[ 1012.981123][ T4260] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1012.981892][    T7] usb 6-1: usb_control_msg returned -32
[ 1012.995938][    T7] usbtmc 6-1:16.0: can't read capabilities
[ 1013.004692][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1013.030047][T14615] usb 3-1: USB disconnect, device number 71
[ 1013.192784][ T4260] usb 1-1: config 0 has no interfaces?
[ 1013.198334][ T4260] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1013.229442][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1013.240407][   T22] usb 6-1: USB disconnect, device number 60
[ 1013.257019][ T4260] usb 1-1: config 0 descriptor??
[ 1013.407156][T15618] loop4: detected capacity change from 0 to 32768
[ 1013.507771][   T22] usb 1-1: USB disconnect, device number 60
[ 1013.787659][T15624] kvm [15619]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3
[ 1013.820355][T15624] kvm [15619]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3
[ 1013.845951][T15624] kvm [15619]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3
[ 1013.880589][T15624] kvm [15619]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop
[ 1013.936469][ T4260] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1014.130994][ T4260] usb 3-1: Using ep0 maxpacket: 8
[ 1014.144829][ T4260] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1014.193112][ T4260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1014.270228][T15635] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2900'.
[ 1014.279462][ T4260] usb 3-1: Product: syz
[ 1014.315047][ T4260] usb 3-1: Manufacturer: syz
[ 1014.331224][ T4260] usb 3-1: SerialNumber: syz
[ 1014.366668][ T4260] usb 3-1: config 0 descriptor??
[ 1014.589839][ T4260] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1016.218430][T15639] loop1: detected capacity change from 0 to 32768
[ 1016.254280][ T4260] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[ 1016.298334][ T4260] usb 3-1: USB disconnect, device number 72
[ 1016.888573][T15644] loop0: detected capacity change from 0 to 32768
[ 1017.017330][T15644] XFS (loop0): Mounting V5 Filesystem
[ 1017.244950][T15644] XFS (loop0): Ending clean mount
[ 1017.259502][T15644] XFS (loop0): Quotacheck needed: Please wait.
[ 1017.447720][T15644] XFS (loop0): Quotacheck: Done.
[ 1017.637349][ T4256] XFS (loop0): Unmounting Filesystem
[ 1017.865535][T15663] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2906'.
[ 1019.334848][T15673] kvm [15666]: vcpu0, guest rIP: 0x28e ignored wrmsr: 0x11e data 0x3
[ 1019.432772][T15673] kvm [15666]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x186 data 0x3
[ 1019.475501][T15673] kvm [15666]: vcpu0, guest rIP: 0x28e disabled perfctr wrmsr: 0x187 data 0x3
[ 1019.511268][T15673] kvm [15666]: vcpu0, guest rIP: 0x28e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x3, nop
[ 1020.001406][   T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1020.161986][T15053] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1020.172102][T15053] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1020.180358][T15053] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1020.194110][T15053] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1020.201851][T15053] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1020.209404][T15053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1020.333208][   T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1020.556783][   T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1020.846876][T15682] loop1: detected capacity change from 0 to 32768
[ 1021.073574][   T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1022.349363][T15053] Bluetooth: hci2: command 0x0409 tx timeout
[ 1022.476933][T15688] loop5: detected capacity change from 0 to 32768
[ 1022.555829][T15685] chnl_net:caif_netlink_parms(): no params data found
[ 1022.648935][T15688] XFS (loop5): Mounting V5 Filesystem
[ 1022.969181][T15688] XFS (loop5): Ending clean mount
[ 1022.977650][T15688] XFS (loop5): Quotacheck needed: Please wait.
[ 1023.112672][T15688] XFS (loop5): Quotacheck: Done.
[ 1023.297288][T15685] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.311851][T15685] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1023.348937][T15685] device bridge_slave_0 entered promiscuous mode
[ 1023.477442][ T5285] XFS (loop5): Unmounting Filesystem
[ 1023.484366][T15685] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1023.499592][T15685] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1023.521452][T15685] device bridge_slave_1 entered promiscuous mode
[ 1023.688824][T15685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1023.845743][T15685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1024.411065][T15053] Bluetooth: hci2: command 0x041b tx timeout
[ 1024.927526][T15685] team0: Port device team_slave_0 added
[ 1025.074333][T15685] team0: Port device team_slave_1 added
[ 1025.417620][T15685] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1025.450985][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1025.570986][T15685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1026.166182][T15685] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1026.173435][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1026.223817][T15685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1026.481119][T15053] Bluetooth: hci2: command 0x040f tx timeout
[ 1027.000604][T15685] device hsr_slave_0 entered promiscuous mode
[ 1027.023437][T15685] device hsr_slave_1 entered promiscuous mode
[ 1027.042506][T15685] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1027.050531][T15685] Cannot create hsr debugfs directory
[ 1027.182842][T15735] loop5: detected capacity change from 0 to 32768
[ 1027.254091][T15735] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1027.274399][T15735] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1027.311681][T15735] BTRFS info (device loop5): metadata ratio 4
[ 1027.354812][T15735] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[ 1027.500993][T15735] BTRFS info (device loop5): force lzo compression, level 0
[ 1027.623223][T15747] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1027.834922][T15735] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1028.000868][T15735] BTRFS info (device loop5): trying to use backup root at mount time
[ 1028.031044][T15735] BTRFS info (device loop5): doing ref verification
[ 1028.078576][T15735] BTRFS info (device loop5): disabling tree log
[ 1028.108246][   T57] device hsr_slave_0 left promiscuous mode
[ 1028.118528][   T57] device hsr_slave_1 left promiscuous mode
[ 1028.121040][T15735] BTRFS info (device loop5): using free space tree
[ 1028.125683][T15739] loop2: detected capacity change from 0 to 32768
[ 1028.152528][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1028.175506][   T57] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1028.209200][   T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1028.227222][   T57] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1028.239094][T15739] XFS (loop2): Mounting V5 Filesystem
[ 1028.269868][   T57] device bridge_slave_1 left promiscuous mode
[ 1028.281847][   T57] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1028.310111][   T57] device bridge_slave_0 left promiscuous mode
[ 1028.327466][   T57] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1028.353512][ T9503] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[ 1028.368913][T15735] BTRFS warning (device loop5): couldn't read tree root
[ 1028.403562][T15735] BTRFS warning (device loop5): try to load backup roots slot 1
[ 1028.421778][T15739] XFS (loop2): Ending clean mount
[ 1028.430097][ T5643] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[ 1028.534459][   T26] audit: type=1800 audit(1747515785.874:11): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2923" name="file1" dev="loop2" ino=6150 res=0 errno=0
[ 1028.549688][T15739] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[ 1028.556047][T15735] BTRFS warning (device loop5): couldn't read tree root
[ 1028.567828][T15053] Bluetooth: hci2: command 0x0419 tx timeout
[ 1028.602033][   T57] device veth1_macvtap left promiscuous mode
[ 1028.608408][   T57] device veth0_macvtap left promiscuous mode
[ 1028.648716][   T57] device veth1_vlan left promiscuous mode
[ 1028.664104][T15735] BTRFS warning (device loop5): try to load backup roots slot 2
[ 1028.675622][   T57] device veth0_vlan left promiscuous mode
[ 1028.703761][T15735] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[ 1028.778324][T15735] BTRFS warning (device loop5): couldn't read tree root
[ 1028.799456][T15735] BTRFS warning (device loop5): try to load backup roots slot 3
[ 1029.040275][T15735] BTRFS error (device loop5): open_ctree failed: -22
[ 1029.131631][ T4596] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4596)
[ 1029.433172][T15052] XFS (loop2): Unmounting Filesystem
[ 1030.141241][   T22] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1030.361039][   T22] usb 6-1: Using ep0 maxpacket: 8
[ 1030.368205][   T22] usb 6-1: config 0 has an invalid interface number: 33 but max is 1
[ 1030.382983][   T22] usb 6-1: config 0 has no interface number 1
[ 1030.389346][   T22] usb 6-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1030.407670][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1030.421720][   T22] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1030.438006][   T22] usb 6-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[ 1030.441251][T15122] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1030.447806][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1030.468499][   T22] usb 6-1: Product: syz
[ 1030.473170][   T22] usb 6-1: Manufacturer: syz
[ 1030.477918][   T22] usb 6-1: SerialNumber: syz
[ 1030.499268][   T22] usb 6-1: config 0 descriptor??
[ 1030.508308][   T22] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[ 1030.670978][T15122] usb 3-1: Using ep0 maxpacket: 16
[ 1030.678417][T15122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1030.700988][T15122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1030.710805][T15122] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1030.718115][T15801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1030.735309][T15122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1030.738332][T15801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1030.766849][T15122] usb 3-1: config 0 descriptor??
[ 1030.774405][   T22] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[ 1030.878853][   T22] usb 6-1: USB disconnect, device number 61
[ 1030.960160][   T22] pvrusb2: Device being rendered inoperable
[ 1030.995622][   T22] pvrusb2: Device being rendered inoperable
[ 1031.416574][T15122] usbhid 3-1:0.0: can't add hid device: -71
[ 1031.429602][T15122] usbhid: probe of 3-1:0.0 failed with error -71
[ 1031.460694][T15122] usb 3-1: USB disconnect, device number 73
[ 1031.515991][   T57] device team_slave_1 left promiscuous mode
[ 1031.528787][   T57] team0 (unregistering): Port device team_slave_1 removed
[ 1031.587755][   T57] device team_slave_0 left promiscuous mode
[ 1031.596008][   T57] team0 (unregistering): Port device team_slave_0 removed
[ 1031.655764][   T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1031.666111][   T57] device bond_slave_1 left promiscuous mode
[ 1031.719934][   T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1031.729902][   T57] device bond_slave_0 left promiscuous mode
[ 1032.840338][   T57] bond0 (unregistering): Released all slaves
[ 1033.691164][T15122] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1033.892628][T15122] usb 6-1: Using ep0 maxpacket: 32
[ 1033.900194][T15122] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[ 1033.925759][T15122] usb 6-1: config 0 has an invalid interface number: 164 but max is 0
[ 1033.936673][T15122] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 1033.949400][T15122] usb 6-1: config 0 has no interface number 0
[ 1033.957562][T15122] usb 6-1: config 0 has no interface number 1
[ 1033.969828][T15122] usb 6-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30
[ 1033.985299][T15122] usb 6-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110
[ 1033.999218][T15122] usb 6-1: config 0 interface 50 has no altsetting 0
[ 1034.018665][T15122] usb 6-1: config 0 interface 164 has no altsetting 0
[ 1034.035528][T15122] usb 6-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a
[ 1034.071426][T15122] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.109325][T15122] usb 6-1: Product: syz
[ 1034.126435][T15122] usb 6-1: Manufacturer: syz
[ 1034.146016][T15122] usb 6-1: SerialNumber: syz
[ 1034.196318][T15122] usb 6-1: config 0 descriptor??
[ 1034.238339][T15122] usb 6-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I
[ 1034.454362][T15122] usb 6-1: reset high-speed USB device number 62 using dummy_hcd
[ 1035.027883][T15685] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1035.083024][T15685] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1035.090850][T15851] loop2: detected capacity change from 0 to 32768
[ 1035.161075][T15122] usb 6-1: device descriptor read/64, error -71
[ 1035.162543][T15685] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1035.180627][T15851] XFS (loop2): Mounting V5 Filesystem
[ 1035.216583][T15685] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1035.268622][T15851] XFS (loop2): Ending clean mount
[ 1035.327635][   T26] audit: type=1800 audit(1747515792.664:12): pid=15851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2943" name="file1" dev="loop2" ino=6150 res=0 errno=0
[ 1035.352320][T15851] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[ 1035.431021][T15122] usb 6-1: reset high-speed USB device number 62 using dummy_hcd
[ 1035.459644][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'.
[ 1035.564364][T15685] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1035.614960][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1035.635961][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1035.708980][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'.
[ 1035.744007][T15685] 8021q: adding VLAN 0 to HW filter on device team0
[ 1035.851330][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1035.865103][T15052] XFS (loop2): Unmounting Filesystem
[ 1035.936347][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1036.019608][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1036.026882][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1036.035506][T15122] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1036.071937][T15122] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 1036.112295][   T14] usb 6-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2
[ 1036.140338][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1036.151159][   T14] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw
[ 1036.186927][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1036.210642][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1036.230771][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1036.237985][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1036.250210][T15122] usb 6-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I
[ 1036.270078][T15122] usb 6-1: selecting invalid altsetting 0
[ 1036.368273][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1036.378114][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1036.404373][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1036.460849][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1036.565798][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1036.623385][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1036.682272][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1036.769366][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1036.786695][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1036.821161][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1036.860293][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1036.904822][T15685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1036.941083][T15122] usb 6-1: reset high-speed USB device number 62 using dummy_hcd
[ 1037.549472][T15122] usb 6-1: selecting invalid altsetting 0
[ 1037.570246][T15122] usbtest: probe of 6-1:0.50 failed with error -22
[ 1037.624601][T15122] usb 6-1: selecting invalid altsetting 0
[ 1037.630504][T15122] ueagle-atm: probe of 6-1:0.50 failed with error -22
[ 1037.672490][T15122] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1037.708684][T15122] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 1037.809443][T15845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1037.846705][T15845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1038.560911][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1038.568498][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1038.639160][T15685] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1038.685062][T14615] usb 6-1: USB disconnect, device number 62
[ 1038.793602][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1038.838363][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1039.514073][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1039.645994][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1039.804129][T15685] device veth0_vlan entered promiscuous mode
[ 1039.856590][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1039.872956][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1040.113000][ T5643] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.200959][T15685] device veth1_vlan entered promiscuous mode
[ 1040.308361][ T5643] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.340701][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1040.374866][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1040.420271][T15685] device veth0_macvtap entered promiscuous mode
[ 1040.451571][T15685] device veth1_macvtap entered promiscuous mode
[ 1040.514913][ T5643] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.565825][T15685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1040.616065][T15685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1040.648606][T15685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1040.700993][    T7] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1040.730543][T15685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1040.811558][T15685] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1040.834702][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1040.852577][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1040.866866][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1040.896740][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1040.930999][    T7] usb 3-1: Using ep0 maxpacket: 8
[ 1040.933114][ T5643] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.940655][    T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1040.958752][T15685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1040.990352][T15685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1041.003814][T15685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1041.018619][T15685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1041.039310][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.053757][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2961'.
[ 1041.068958][T15685] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1041.071329][    T7] usb 3-1: Product: syz
[ 1041.084416][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1041.102420][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2961'.
[ 1041.122965][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1041.132043][    T7] usb 3-1: Manufacturer: syz
[ 1041.172618][T15685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.188416][    T7] usb 3-1: SerialNumber: syz
[ 1041.218990][    T7] usb 3-1: config 0 descriptor??
[ 1041.231154][T15685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.259974][T15685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.295969][T15685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.447736][    T7] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1041.532647][ T4258] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1041.545310][ T4258] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1041.563224][ T4258] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1041.573139][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1041.583438][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1041.592598][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1041.939337][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1041.960081][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1042.058874][T15749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1042.245389][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1042.281197][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1042.434194][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1042.708018][T15950] chnl_net:caif_netlink_parms(): no params data found
[ 1042.867951][    T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[ 1042.883118][    T7] usb 3-1: USB disconnect, device number 74
[ 1043.061085][   T22] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1043.259476][   T22] usb 1-1: config 0 has no interfaces?
[ 1043.272044][   T22] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1043.289627][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.308624][   T22] usb 1-1: Product: syz
[ 1043.315197][   T22] usb 1-1: Manufacturer: syz
[ 1043.319860][   T22] usb 1-1: SerialNumber: syz
[ 1043.346833][   T22] usb 1-1: config 0 descriptor??
[ 1043.471731][T15950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1043.478893][T15950] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1043.497625][T15950] device bridge_slave_0 entered promiscuous mode
[ 1043.681235][ T4258] Bluetooth: hci0: command 0x0409 tx timeout
[ 1043.783667][T15979] loop5: detected capacity change from 0 to 32768
[ 1043.828819][T15950] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1043.829124][T15979] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1043.852191][T15950] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1043.901255][T15979] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[ 1043.910048][T15979] BTRFS info (device loop5): metadata ratio 2
[ 1043.936386][T15950] device bridge_slave_1 entered promiscuous mode
[ 1043.945668][T15979] BTRFS info (device loop5): allowing degraded mounts
[ 1043.967347][T15979] BTRFS info (device loop5): force zlib compression, level 3
[ 1044.007212][T15979] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1044.025779][T15950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1044.042375][T15979] BTRFS info (device loop5): use zstd compression, level 3
[ 1044.062370][T15950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1044.071758][T15979] BTRFS info (device loop5): force clearing of disk cache
[ 1044.104388][T15979] BTRFS info (device loop5): max_inline at 0
[ 1044.141096][T15979] BTRFS info (device loop5): using free space tree
[ 1044.309499][T15950] team0: Port device team_slave_0 added
[ 1044.368094][T15950] team0: Port device team_slave_1 added
[ 1044.445894][T15979] BTRFS info (device loop5): enabling ssd optimizations
[ 1044.474188][T15979] BTRFS info (device loop5): rebuilding free space tree
[ 1044.770726][T15950] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1044.797715][   T26] audit: type=1800 audit(1747515802.134:13): pid=15979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2964" name="file1" dev="loop5" ino=260 res=0 errno=0
[ 1044.831159][T15950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1044.929640][T15950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1045.069809][ T5285] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1045.097393][T15950] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1045.108354][T15950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1045.180016][T15950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1045.641578][ T5643] device hsr_slave_0 left promiscuous mode
[ 1045.717167][ T5643] device hsr_slave_1 left promiscuous mode
[ 1045.762037][ T4258] Bluetooth: hci0: command 0x041b tx timeout
[ 1046.012573][ T5643] device veth1_macvtap left promiscuous mode
[ 1046.153783][ T5643] device veth0_macvtap left promiscuous mode
[ 1046.195197][ T5643] device veth1_vlan left promiscuous mode
[ 1046.353798][ T5643] device veth0_vlan left promiscuous mode
[ 1046.633208][T15121] usb 1-1: USB disconnect, device number 61
[ 1047.165249][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2972'.
[ 1047.210668][T16050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2972'.
[ 1047.848433][ T4258] Bluetooth: hci0: command 0x040f tx timeout
[ 1049.561224][   T22] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1049.841364][   T22] usb 1-1: Using ep0 maxpacket: 32
[ 1049.908700][   T22] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[ 1049.917114][   T22] usb 1-1: config 0 has an invalid interface number: 164 but max is 0
[ 1049.926421][ T4258] Bluetooth: hci0: command 0x0419 tx timeout
[ 1049.938823][   T22] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[ 1049.992012][   T22] usb 1-1: config 0 has no interface number 0
[ 1050.003112][   T22] usb 1-1: config 0 has no interface number 1
[ 1050.012743][   T22] usb 1-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30
[ 1050.026704][   T22] usb 1-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110
[ 1050.043979][   T22] usb 1-1: config 0 interface 50 has no altsetting 0
[ 1050.052795][   T22] usb 1-1: config 0 interface 164 has no altsetting 0
[ 1050.084217][   T22] usb 1-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a
[ 1050.102060][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.110441][   T22] usb 1-1: Product: syz
[ 1050.122343][   T22] usb 1-1: Manufacturer: syz
[ 1050.132672][   T22] usb 1-1: SerialNumber: syz
[ 1050.183533][   T22] usb 1-1: config 0 descriptor??
[ 1050.326159][   T22] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I
[ 1050.491335][   T22] usb 1-1: reset high-speed USB device number 62 using dummy_hcd
[ 1050.765910][ T5643] bond0 (unregistering): Released all slaves
[ 1051.059858][T15950] device hsr_slave_0 entered promiscuous mode
[ 1051.130759][T15950] device hsr_slave_1 entered promiscuous mode
[ 1051.221118][   T22] usb 1-1: device descriptor read/64, error -71
[ 1051.514652][   T22] usb 1-1: reset high-speed USB device number 62 using dummy_hcd
[ 1051.584977][T15950] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1051.608188][T15950] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1051.619022][T15950] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1051.629828][T15950] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1051.661114][    T7] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[ 1051.711161][ T7106] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1051.814774][T15950] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1051.837796][T15950] 8021q: adding VLAN 0 to HW filter on device team0
[ 1051.850286][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1051.863363][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1051.875555][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1051.883004][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1051.905300][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1051.914091][    T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1051.924849][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1051.934954][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.944553][T16042] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1051.945238][ T7106] usb 6-1: config 0 has no interfaces?
[ 1051.952649][T16042] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1051.971220][ T7106] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1051.986096][    T7] usb 3-1: config 0 descriptor??
[ 1051.990948][ T7106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.999551][    T7] hub 3-1:0.0: USB hub found
[ 1052.010613][ T7106] usb 6-1: config 0 descriptor??
[ 1052.010654][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1052.034517][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1052.044486][T16042] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1052.051766][T16042] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1052.072133][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1052.081865][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1052.093450][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1052.122781][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1052.127069][   T22] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1052.134502][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1052.150779][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1052.159236][   T22] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 1052.165083][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1052.191484][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1052.204684][    T7] hub 3-1:0.0: 1 port detected
[ 1052.213174][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1052.222981][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1052.241987][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1052.265244][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1052.283347][T15950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1052.322177][T12575] usb 6-1: USB disconnect, device number 63
[ 1052.330754][   T22] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I
[ 1052.361986][   T22] usb 1-1: selecting invalid altsetting 0
[ 1052.727754][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1052.736419][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1052.750350][T15950] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1052.808744][    T7] hub 3-1:0.0: activate --> -90
[ 1052.841112][   T22] usb 1-1: reset high-speed USB device number 62 using dummy_hcd
[ 1053.222293][    T7] hub 3-1:0.0: hub_ext_port_status failed (err = -71)
[ 1053.229726][T12575] usb 3-1: USB disconnect, device number 75
[ 1053.438299][   T22] usb 1-1: selecting invalid altsetting 0
[ 1053.451268][   T22] usbtest: probe of 1-1:0.50 failed with error -22
[ 1053.478716][   T22] usb 1-1: selecting invalid altsetting 0
[ 1053.495569][   T22] ueagle-atm: probe of 1-1:0.50 failed with error -22
[ 1053.514793][   T22] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1053.539307][   T22] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw
[ 1053.719669][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1053.778358][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1053.834750][T16062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1053.862746][T16062] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1053.888448][T12575] usb 1-1: USB disconnect, device number 62
[ 1054.017898][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1054.054920][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1054.142594][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1054.304296][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1054.344213][T15950] device veth0_vlan entered promiscuous mode
[ 1054.432874][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1054.452696][ T5643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1054.490729][T15950] device veth1_vlan entered promiscuous mode
[ 1054.937212][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1054.967548][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1054.986420][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1055.016712][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1055.032540][T15950] device veth0_macvtap entered promiscuous mode
[ 1055.047398][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1055.059759][T15950] device veth1_macvtap entered promiscuous mode
[ 1055.071274][T12575] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1055.119592][T15950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1055.219240][T15950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.245766][T15950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1055.270963][T12575] usb 6-1: Using ep0 maxpacket: 8
[ 1055.287905][T12575] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1055.316385][T15950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.341186][T12575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1055.349576][T12575] usb 6-1: Product: syz
[ 1055.376432][T15950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1055.416757][T12575] usb 6-1: Manufacturer: syz
[ 1055.440228][T12575] usb 6-1: SerialNumber: syz
[ 1055.446479][T15950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.477873][T12575] usb 6-1: config 0 descriptor??
[ 1055.486716][T15950] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1055.577987][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1055.627094][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1055.684430][T15950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.703972][T12575] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1055.752321][T15950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.810558][T15950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.859463][T15950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1055.912800][T15950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1055.967073][T15950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1056.017275][T15950] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1056.069520][T15950] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.101011][T15950] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.109953][T15950] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.158895][T15950] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1056.248549][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1056.261804][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1056.433300][T16143] loop0: detected capacity change from 0 to 32768
[ 1056.492654][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1056.546171][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1056.728344][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1056.775336][T16042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1056.809071][T16042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1056.913064][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1056.934552][T12575] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[ 1056.991028][T12575] usb 6-1: USB disconnect, device number 64
[ 1057.651168][   T27] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[ 1057.658865][ T4297] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1057.851364][   T27] usb 7-1: Using ep0 maxpacket: 8
[ 1057.857325][ T4297] usb 1-1: Using ep0 maxpacket: 8
[ 1057.868997][ T4297] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1057.887514][   T27] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1057.907933][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.930673][   T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.967578][ T4297] usb 1-1: Product: syz
[ 1057.983888][   T27] usb 7-1: Product: syz
[ 1057.988202][   T27] usb 7-1: Manufacturer: syz
[ 1058.008458][ T4297] usb 1-1: Manufacturer: syz
[ 1058.022737][ T4297] usb 1-1: SerialNumber: syz
[ 1058.035543][   T27] usb 7-1: SerialNumber: syz
[ 1058.054704][ T4297] usb 1-1: config 0 descriptor??
[ 1058.071039][   T27] usb 7-1: config 0 descriptor??
[ 1058.299802][   T27] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1058.310946][ T4297] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1059.201040][ T6659] usb 3-1: new full-speed USB device number 76 using dummy_hcd
[ 1059.403126][ T6659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1059.422859][ T6659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1059.465386][ T6659] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1059.495591][ T6659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.536281][ T6659] usb 3-1: config 0 descriptor??
[ 1059.572958][ T6659] hub 3-1:0.0: USB hub found
[ 1059.729308][   T27] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71
[ 1059.753414][   T27] usb 7-1: USB disconnect, device number 2
[ 1059.775900][ T6659] hub 3-1:0.0: 1 port detected
[ 1059.946684][ T4297] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[ 1059.972442][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'.
[ 1059.996674][ T4297] usb 1-1: USB disconnect, device number 63
[ 1060.103810][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2997'.
[ 1060.174146][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[ 1060.176298][ T2309] pvrusb2: request_firmware fatal error with code=-110
[ 1060.190507][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[ 1060.192694][ T2309] pvrusb2: Failure uploading firmware1
[ 1060.227840][ T2309] pvrusb2: Device initialization was not successful.
[ 1060.257181][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1060.294790][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1060.328640][ T2309] pvrusb2: Failed to submit write-control URB status=-19
[ 1060.328781][T13580] pvrusb2: Device being rendered inoperable
[ 1060.363040][ T2309] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[ 1060.395406][ T2309] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[ 1060.631008][    T7] usb 3-1: USB disconnect, device number 76
[ 1060.742506][T16218] vcan0: tx drop: invalid sa for name 0x0000000000000002
[ 1061.471002][   T27] usb 1-1: new full-speed USB device number 64 using dummy_hcd
[ 1061.712467][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1061.744387][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1061.790208][   T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1061.849680][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.907437][   T27] usb 1-1: config 0 descriptor??
[ 1061.946037][   T27] hub 1-1:0.0: USB hub found
[ 1062.150109][   T27] hub 1-1:0.0: 1 port detected
[ 1062.629250][T16042] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1062.712744][T15053] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1062.725829][T15053] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1062.734654][T15053] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1062.748386][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1062.761435][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1062.771556][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1063.000491][T16042] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.063221][   T22] usb 1-1: USB disconnect, device number 64
[ 1063.242048][T16042] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1063.261178][   T27] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1063.431763][T16254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3006'.
[ 1064.146286][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1064.801087][ T4258] Bluetooth: hci3: command 0x0409 tx timeout
[ 1065.159170][T16042] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1066.309058][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1066.318985][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1066.761116][T12575] usb 1-1: new full-speed USB device number 65 using dummy_hcd
[ 1066.807318][   T27] usb 3-1: string descriptor 0 read error: -71
[ 1066.814033][   T27] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1066.847296][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.892183][ T4258] Bluetooth: hci3: command 0x041b tx timeout
[ 1066.943183][   T27] usb 3-1: config 0 descriptor??
[ 1066.951657][   T27] usb 3-1: can't set config #0, error -71
[ 1066.968119][   T27] usb 3-1: USB disconnect, device number 77
[ 1066.991417][T12575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1067.075386][T12575] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1067.076309][ T6659] usb 6-1: new low-speed USB device number 65 using dummy_hcd
[ 1067.094378][T12575] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1067.388179][ T6659] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1067.396496][T12575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.405415][ T6659] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1067.416760][ T6659] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 1067.428683][ T6659] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1067.467455][ T6659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.545943][T16265] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1067.564786][ T6659] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1067.566521][T12575] usb 1-1: config 0 descriptor??
[ 1067.571033][ T6659] hub: probe of 6-1:1.0 failed with error -5
[ 1067.571743][ T6659] cdc_wdm 6-1:1.0: skipping garbage
[ 1067.588351][ T6659] cdc_wdm 6-1:1.0: skipping garbage
[ 1067.605742][ T6659] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1067.612009][ T6659] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1067.623281][T12575] hub 1-1:0.0: USB hub found
[ 1067.671066][  T128] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1067.701529][T16239] chnl_net:caif_netlink_parms(): no params data found
[ 1067.813249][T12575] hub 1-1:0.0: 1 port detected
[ 1067.870356][  T128] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[ 1067.894817][  T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.916053][  T128] usb 3-1: config 0 descriptor??
[ 1067.998954][T16239] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1068.027550][T16239] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.056326][T16239] device bridge_slave_0 entered promiscuous mode
[ 1068.369480][  T128] usbhid 3-1:0.0: can't add hid device: -71
[ 1068.376209][  T128] usbhid: probe of 3-1:0.0 failed with error -71
[ 1068.488225][  T128] usb 3-1: USB disconnect, device number 78
[ 1068.587421][T16239] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1068.598687][T16239] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1068.602893][    C0] wdm_int_callback: 8038 callbacks suppressed
[ 1068.602919][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.618428][    C0] wdm_int_callback: 8038 callbacks suppressed
[ 1068.618444][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.631984][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.638624][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.645202][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.651818][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.658655][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.665301][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.681074][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.687742][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.696166][T16239] device bridge_slave_1 entered promiscuous mode
[ 1068.712731][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.719400][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.731030][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.737871][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.744857][T12575] usb 1-1: USB disconnect, device number 65
[ 1068.751354][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.751384][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.765117][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.765146][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.779249][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[ 1068.785990][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[ 1068.954653][T16239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1068.971417][ T4258] Bluetooth: hci3: command 0x040f tx timeout
[ 1069.019442][T16239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1069.572467][T16239] team0: Port device team_slave_0 added
[ 1069.597206][T16239] team0: Port device team_slave_1 added
[ 1069.777828][T16239] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1069.796450][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1069.832586][T16239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1069.901025][    T7] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1070.100998][    T7] usb 1-1: Using ep0 maxpacket: 8
[ 1070.109163][    T7] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1070.217180][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.267992][    T7] usb 1-1: config 0 descriptor??
[ 1070.342059][T16239] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1070.349068][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1070.469704][T16239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1070.505643][    T7] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1070.527574][    T7] asix: probe of 1-1:0.0 failed with error -32
[ 1070.844789][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1070.856309][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1070.866036][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1070.883755][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1070.896129][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1070.904229][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1071.041351][ T4266] Bluetooth: hci3: command 0x0419 tx timeout
[ 1071.159087][T16042] device hsr_slave_0 left promiscuous mode
[ 1071.165847][T16042] device hsr_slave_1 left promiscuous mode
[ 1071.334544][T16042] device veth0_macvtap left promiscuous mode
[ 1071.340711][T16042] device veth1_vlan left promiscuous mode
[ 1071.398329][T16042] device veth0_vlan left promiscuous mode
[ 1071.422456][T16295] loop2: detected capacity change from 0 to 32768
[ 1071.480137][T16295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.3017 (16295)
[ 1071.576928][T16295] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1071.640245][T16295] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1071.675993][T16295] BTRFS info (device loop2): metadata ratio 2
[ 1071.722610][T16295] BTRFS info (device loop2): allowing degraded mounts
[ 1071.763324][T16295] BTRFS info (device loop2): force zlib compression, level 3
[ 1071.801404][ T4294] usb 6-1: USB disconnect, device number 65
[ 1071.831114][T16295] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1071.840657][T16295] BTRFS info (device loop2): use zstd compression, level 3
[ 1071.903503][T16295] BTRFS info (device loop2): force clearing of disk cache
[ 1071.932256][T16295] BTRFS info (device loop2): max_inline at 0
[ 1071.938328][T16295] BTRFS info (device loop2): using free space tree
[ 1072.161298][T16295] BTRFS info (device loop2): enabling ssd optimizations
[ 1072.169851][T16295] BTRFS info (device loop2): rebuilding free space tree
[ 1072.278796][   T26] audit: type=1800 audit(1747515829.614:14): pid=16295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3017" name="file1" dev="loop2" ino=260 res=0 errno=0
[ 1072.371244][ T4294] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1072.459334][T15052] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1072.570972][ T4294] usb 6-1: Using ep0 maxpacket: 8
[ 1072.578928][ T4294] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1072.592406][ T4294] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1072.602697][ T4294] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1072.623602][ T4294] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1072.655267][ T4294] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1072.667288][ T4294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.710392][    T7] usb 1-1: USB disconnect, device number 66
[ 1072.946092][ T4294] usb 6-1: GET_CAPABILITIES returned 0
[ 1072.961309][ T4266] Bluetooth: hci0: command 0x0409 tx timeout
[ 1073.025026][ T4294] usbtmc 6-1:16.0: can't read capabilities
[ 1073.526159][    C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1073.538295][T14989] usb 6-1: USB disconnect, device number 66
[ 1073.950965][T14454] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1074.162295][T14454] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1074.188244][T14454] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1074.229838][T14454] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1074.255817][T14454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.267377][T14454] usb 3-1: Product: syz
[ 1074.272429][T14454] usb 3-1: Manufacturer: syz
[ 1074.277317][T14454] usb 3-1: SerialNumber: syz
[ 1074.514909][T16338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.534814][T16338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1074.554561][T16338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1074.575540][T16338] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1074.853824][T14454] cdc_ether: probe of 3-1:1.0 failed with error -22
[ 1074.913822][T14454] usb 3-1: USB disconnect, device number 79
[ 1075.041125][ T4266] Bluetooth: hci0: command 0x041b tx timeout
[ 1075.494517][T16042] bond0 (unregistering): Released all slaves
[ 1075.598931][T16239] device hsr_slave_0 entered promiscuous mode
[ 1075.613751][T16239] device hsr_slave_1 entered promiscuous mode
[ 1075.671112][T16239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1075.680022][T16239] Cannot create hsr debugfs directory
[ 1076.069441][T16351] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3023'.
[ 1076.231015][T15121] usb 3-1: new full-speed USB device number 80 using dummy_hcd
[ 1076.422907][T15121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1076.465277][T15121] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1076.506174][T15121] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1076.531065][T15121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.581514][T16300] chnl_net:caif_netlink_parms(): no params data found
[ 1076.600076][T15121] usb 3-1: config 0 descriptor??
[ 1077.124529][ T4266] Bluetooth: hci0: command 0x040f tx timeout
[ 1077.162891][T15121] hub 3-1:0.0: USB hub found
[ 1077.231057][T15121] hub 3-1:0.0: 1 port detected
[ 1077.598526][T16300] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1077.607154][T16300] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1077.616029][T16300] device bridge_slave_0 entered promiscuous mode
[ 1077.671203][T16300] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1077.679202][T16300] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1077.715448][T16300] device bridge_slave_1 entered promiscuous mode
[ 1077.945258][T16042] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.982047][T16300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1078.009497][T16300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1078.033158][    T7] usb 3-1: USB disconnect, device number 80
[ 1078.051098][ T4294] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1078.080708][T16042] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.130246][T16239] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1078.251038][ T4294] usb 1-1: Using ep0 maxpacket: 8
[ 1078.258083][ T4294] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1078.311155][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1078.334834][T16042] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.355559][ T4294] usb 1-1: config 0 descriptor??
[ 1078.441467][T16239] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1078.638430][T16300] team0: Port device team_slave_0 added
[ 1078.646834][ T4294] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1078.695424][ T4294] asix: probe of 1-1:0.0 failed with error -32
[ 1078.758123][T16381] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3029'.
[ 1078.891685][T16239] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1079.051514][T16384] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1079.062755][T16300] team0: Port device team_slave_1 added
[ 1079.123257][T16042] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1079.159172][T16239] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1079.201078][ T4266] Bluetooth: hci0: command 0x0419 tx timeout
[ 1079.265457][T16300] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1079.273423][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1079.333686][T16300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1079.345395][ T4294] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1079.367360][T16300] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1079.396247][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1079.450052][T16300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1079.542601][ T4294] usb 3-1: Using ep0 maxpacket: 8
[ 1079.554138][ T4294] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1079.565265][ T4294] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1079.576174][ T4294] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1079.586692][ T4294] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1079.597248][ T4294] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1079.608607][ T4294] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1079.625300][ T4294] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1079.637881][ T4294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.656035][T16300] device hsr_slave_0 entered promiscuous mode
[ 1079.667141][ T4294] usbtmc: probe of 3-1:16.0 failed with error -22
[ 1079.691326][T16300] device hsr_slave_1 entered promiscuous mode
[ 1079.699201][T16300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1079.707513][T16300] Cannot create hsr debugfs directory
[ 1079.892421][T16239] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1079.999726][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1080.022123][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1080.049568][T16239] 8021q: adding VLAN 0 to HW filter on device team0
[ 1080.050995][T16392] loop5: detected capacity change from 0 to 32768
[ 1080.112815][T16387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1080.131764][T16387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1080.153324][T12130] usb 3-1: USB disconnect, device number 81
[ 1080.226215][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1080.237833][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1080.254234][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1080.261493][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1080.272147][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1080.282206][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1080.297881][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1080.305120][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1080.372109][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1080.386683][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1080.401985][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1080.413995][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1080.426942][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1080.547684][T16239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1080.580716][T16239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1080.622860][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1080.637153][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1080.679697][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1080.737987][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1080.762998][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1080.792923][T12130] usb 1-1: USB disconnect, device number 67
[ 1080.795578][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1080.857004][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1080.993108][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1081.099082][T16413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3033'.
[ 1081.451316][T12130] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1083.463825][T16411] vcan0: tx drop: invalid sa for name 0x0000000000000002
[ 1083.526254][T16300] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1083.541033][T12130] usb 1-1: Using ep0 maxpacket: 8
[ 1083.557172][T12130] usb 1-1: config 8 has an invalid interface number: 83 but max is 0
[ 1083.568839][T16300] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1083.573532][T12130] usb 1-1: config 8 has no interface number 0
[ 1083.583029][T12130] usb 1-1: config 8 interface 83 has no altsetting 0
[ 1083.599552][T12130] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=92.0e
[ 1083.609762][T12130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.618802][T12130] usb 1-1: Product: syz
[ 1083.624581][T12130] usb 1-1: Manufacturer: syz
[ 1083.629796][T12130] usb 1-1: SerialNumber: syz
[ 1083.737534][T16300] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1083.851376][T16300] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1083.865474][T12130] usbhid 1-1:8.83: couldn't find an input interrupt endpoint
[ 1083.894528][T12130] usb 1-1: USB disconnect, device number 68
[ 1083.951938][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3035'.
[ 1084.017253][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3035'.
[ 1084.681132][T12575] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1084.820728][T16042] device hsr_slave_0 left promiscuous mode
[ 1084.837891][T16042] device hsr_slave_1 left promiscuous mode
[ 1084.854422][T16042] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1084.865657][T16042] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1084.876617][T16042] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1084.887958][T12575] usb 3-1: Using ep0 maxpacket: 8
[ 1084.900546][T12575] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1084.917237][T16042] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1084.925121][T12575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1084.941955][T12575] usb 3-1: Product: syz
[ 1084.949019][T12575] usb 3-1: Manufacturer: syz
[ 1084.961713][T12575] usb 3-1: SerialNumber: syz
[ 1084.981034][T14615] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[ 1084.990081][T12575] usb 3-1: config 0 descriptor??
[ 1085.001920][T16042] device bridge_slave_1 left promiscuous mode
[ 1085.010021][T16042] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.051542][T16042] device bridge_slave_0 left promiscuous mode
[ 1085.071223][T16042] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1085.185439][T14615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1085.215761][T14615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1085.234325][T12575] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1085.244393][T16042] device veth1_macvtap left promiscuous mode
[ 1085.250512][T16042] device veth0_macvtap left promiscuous mode
[ 1085.263793][T16042] device veth1_vlan left promiscuous mode
[ 1085.269834][T16042] device veth0_vlan left promiscuous mode
[ 1085.273466][T14615] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1085.294157][T14615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.331972][T14615] usb 1-1: config 0 descriptor??
[ 1085.353688][T14615] hub 1-1:0.0: USB hub found
[ 1085.545953][  T128] usb 6-1: new full-speed USB device number 67 using dummy_hcd
[ 1085.558647][T14615] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1085.744887][  T128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1085.759335][  T128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1085.774455][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 1085.782325][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 1085.789560][T14615] usbhid 1-1:0.0: can't add hid device: -32
[ 1085.791069][  T128] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1085.816071][T14615] usbhid: probe of 1-1:0.0 failed with error -32
[ 1085.822677][  T128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.854704][  T128] usb 6-1: config 0 descriptor??
[ 1085.863261][T14615] usb 1-1: USB disconnect, device number 69
[ 1085.872433][  T128] hub 6-1:0.0: USB hub found
[ 1086.070456][  T128] hub 6-1:0.0: 1 port detected
[ 1086.509439][T16042] team0 (unregistering): Port device team_slave_1 removed
[ 1086.610919][T16042] team0 (unregistering): Port device team_slave_0 removed
[ 1086.700593][T16042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1086.791880][T16042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1086.883727][T12575] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[ 1086.903200][T12575] usb 3-1: USB disconnect, device number 82
[ 1086.918037][T14615] usb 6-1: USB disconnect, device number 67
[ 1087.660396][T16042] bond0 (unregistering): Released all slaves
[ 1087.776277][T15749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1087.786966][T15749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1087.812698][T16451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3041'.
[ 1087.848910][T12575] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1087.890305][T16239] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1087.920405][T16300] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1088.008210][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1088.033167][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1088.051124][T12575] usb 3-1: Using ep0 maxpacket: 8
[ 1088.068951][T12575] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1088.087191][T12575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1088.110132][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1088.131816][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1088.140068][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1088.165074][T12575] usb 3-1: config 0 descriptor??
[ 1088.241736][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1088.300873][T16239] device veth0_vlan entered promiscuous mode
[ 1088.308242][T14804] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1088.362168][T16300] 8021q: adding VLAN 0 to HW filter on device team0
[ 1088.416737][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1088.496192][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1088.521170][T14804] usb 6-1: Using ep0 maxpacket: 8
[ 1088.549049][T14804] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1088.614482][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1088.648446][T14804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.684702][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1088.711648][T14804] usb 6-1: Product: syz
[ 1088.739320][T14804] usb 6-1: Manufacturer: syz
[ 1088.755089][T16363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.762710][T16363] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1088.806945][T14804] usb 6-1: SerialNumber: syz
[ 1088.887600][T14804] usb 6-1: config 0 descriptor??
[ 1088.949890][T16239] device veth1_vlan entered promiscuous mode
[ 1089.020606][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1089.092580][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1089.259204][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1089.443043][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1089.456927][T14804] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1089.502927][T12575] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1089.513341][T12575] asix: probe of 3-1:0.0 failed with error -32
[ 1089.516079][T16363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1089.526800][T16363] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1089.617727][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1089.627799][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1089.654210][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1089.665031][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1089.674731][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1089.704729][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1089.739772][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1089.775300][T16239] device veth0_macvtap entered promiscuous mode
[ 1089.811844][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1089.829932][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1089.848511][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1089.875396][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1089.892481][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1089.915579][T16300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1089.937786][T16300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1089.951569][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1089.968585][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1089.981487][T16239] device veth1_macvtap entered promiscuous mode
[ 1090.034112][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1090.076660][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1090.113205][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.132888][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1090.156553][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.177804][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1090.201148][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.249980][T16239] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1090.285197][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1090.300761][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1090.316396][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1090.334084][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.349123][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1090.362668][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.377154][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1090.398495][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1090.428204][T16239] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1090.440957][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1090.458106][T16363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1090.472839][T16239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.485199][T16239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.504669][T16239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.525961][T16239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1090.687605][T12130] usb 3-1: USB disconnect, device number 83
[ 1090.761638][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1090.821755][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1090.858648][ T4562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1090.880709][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1090.912333][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1090.976366][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1091.013416][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1091.032652][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1091.053716][T16300] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1091.095892][T14804] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71
[ 1091.120158][T14804] usb 6-1: USB disconnect, device number 68
[ 1091.261104][T12130] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1091.472862][T12130] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[ 1091.497099][T12130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1091.527432][T12130] usb 3-1: config 0 descriptor??
[ 1091.836377][ T4297] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1091.943993][T16512] vcan0: tx drop: invalid sa for name 0x0000000000000002
[ 1091.959881][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1091.969663][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[ 1091.977659][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[ 1091.985769][T12130] usbhid 3-1:0.0: can't add hid device: -71
[ 1091.994004][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1092.003198][T12130] usbhid: probe of 3-1:0.0 failed with error -71
[ 1092.026608][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1092.027629][T12130] usb 3-1: USB disconnect, device number 84
[ 1092.041978][ T4297] usb 1-1: Using ep0 maxpacket: 8
[ 1092.055035][ T4297] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1092.076843][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1092.096497][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1092.121367][ T4297] usb 1-1: Product: syz
[ 1092.133129][T16300] device veth0_vlan entered promiscuous mode
[ 1092.145434][ T4297] usb 1-1: Manufacturer: syz
[ 1092.148372][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1092.167624][ T4297] usb 1-1: SerialNumber: syz
[ 1092.168922][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1092.190075][ T4297] usb 1-1: config 0 descriptor??
[ 1092.198330][T16300] device veth1_vlan entered promiscuous mode
[ 1092.269560][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1092.285673][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1092.299891][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1092.313510][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1092.333035][T16300] device veth0_macvtap entered promiscuous mode
[ 1092.347678][T16300] device veth1_macvtap entered promiscuous mode
[ 1092.422390][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.436863][ T4297] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1092.440975][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.469387][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.480433][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.492866][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.504248][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.514876][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1092.525904][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.558831][T16300] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1092.611369][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1092.626970][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1092.659494][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1092.689499][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1092.717235][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.738590][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.755907][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.773878][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.829819][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'.
[ 1092.841146][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.869213][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.890972][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1092.920726][T16523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'.
[ 1092.960740][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1092.984103][T16300] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1093.054027][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1093.075764][T16042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1093.112653][T16300] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.147931][T16300] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.181227][T16300] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.231970][T16300] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1093.584562][ T4562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1093.624786][ T4562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1093.717515][   T42] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1093.727356][ T4562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1093.750345][ T4562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1093.827535][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1094.076558][ T4297] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[ 1094.151469][ T4297] usb 1-1: USB disconnect, device number 70
[ 1094.501169][T12130] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 1094.743517][T12130] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1094.765128][T12130] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1094.826910][T12130] usb 8-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[ 1094.836536][T12130] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1094.887222][T12130] usb 8-1: Product: syz
[ 1094.897691][T12130] usb 8-1: Manufacturer: syz
[ 1094.912850][T12130] usb 8-1: SerialNumber: syz
[ 1094.952644][T12130] usb 8-1: config 0 descriptor??
[ 1095.000753][T12130] keyspan 8-1:0.0: Keyspan 2 port adapter converter detected
[ 1095.030005][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 87
[ 1095.058472][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 7
[ 1095.129911][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 81
[ 1095.137123][T16540] sctp: [Deprecated]: syz.0.3054 (pid 16540) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1095.137123][T16540] Use struct sctp_sack_info instead
[ 1095.157348][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 1
[ 1095.186054][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 2
[ 1095.218836][T12130] keyspan 8-1:0.0: unsupported endpoint type 0
[ 1095.257155][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 5
[ 1095.307556][T12130] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1095.339352][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 83
[ 1095.380658][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 3
[ 1095.399608][T16527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1095.426663][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 4
[ 1095.436962][T16527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1095.485769][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 86
[ 1095.531351][T12130] keyspan 8-1:0.0: found no endpoint descriptor for endpoint 6
[ 1095.581278][T12130] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1095.642409][T12130] usb 8-1: USB disconnect, device number 2
[ 1095.682142][T12130] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1095.727056][T12130] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1095.750258][T12130] keyspan 8-1:0.0: device disconnected
[ 1095.855850][T16550] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3056'.
[ 1096.566512][ T4299] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1096.686061][T14615] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1096.761010][ T4299] usb 8-1: Using ep0 maxpacket: 8
[ 1096.771893][ T4299] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1096.800975][ T4299] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.809125][ T4299] usb 8-1: Product: syz
[ 1096.842774][ T4299] usb 8-1: Manufacturer: syz
[ 1096.847713][ T4299] usb 8-1: SerialNumber: syz
[ 1096.872710][T14615] usb 3-1: config 0 has no interfaces?
[ 1096.882146][T14615] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1096.902459][ T4299] usb 8-1: config 0 descriptor??
[ 1096.924599][T14615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.948292][T16575] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3061'.
[ 1096.959359][T14615] usb 3-1: Product: syz
[ 1096.964527][T14615] usb 3-1: Manufacturer: syz
[ 1096.970624][T14615] usb 3-1: SerialNumber: syz
[ 1096.987111][T14615] usb 3-1: config 0 descriptor??
[ 1097.115157][ T4299] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1097.607738][T16586] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3063'.
[ 1097.693091][T16586] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1098.271006][T16595] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3065'.
[ 1098.723669][T14615] usb 6-1: new full-speed USB device number 69 using dummy_hcd
[ 1098.896721][ T4299] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71
[ 1098.927692][T14615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1099.021602][ T4299] usb 8-1: USB disconnect, device number 3
[ 1099.044220][T14615] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1099.183153][T14615] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1099.271853][T14615] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.872698][T14615] usb 6-1: config 0 descriptor??
[ 1099.903039][T14615] hub 6-1:0.0: USB hub found
[ 1099.919841][ T4299] usb 3-1: USB disconnect, device number 85
[ 1100.108220][T14615] hub 6-1:0.0: 1 port detected
[ 1100.988947][    T7] usb 6-1: USB disconnect, device number 69
[ 1101.001236][T12130] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1101.126230][T14461] usb 1-1: [UEAGLE-ATM] firmware is not available
[ 1101.126248][T15122] usb 6-1: [UEAGLE-ATM] firmware is not available
[ 1101.126281][ T7106] usb 1-1: [UEAGLE-ATM] firmware is not available
[ 1101.132930][   T14] ------------[ cut here ]------------
[ 1101.133207][   T14] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw'
[ 1101.133474][   T14] WARNING: CPU: 0 PID: 14 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x290
[ 1101.133525][   T14] Modules linked in:
[ 1101.133557][   T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 6.1.138-syzkaller #0
[ 1101.133578][   T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1101.133594][   T14] Workqueue: events request_firmware_work_func
[ 1101.133628][   T14] RIP: 0010:sysfs_remove_group+0x174/0x290
[ 1101.133660][   T14] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 6e 06 cc ff 49 8b 17 48 c7 c7 a0 8b 7c 8a 48 89 de e8 cc a3 46 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e6 92 7a ff
[ 1101.133679][   T14] RSP: 0000:ffffc90000137880 EFLAGS: 00010246
[ 1101.133701][   T14] RAX: f94f7a91d12a0f00 RBX: ffffffff8ae311e0 RCX: ffff88813feb1dc0
[ 1101.133717][   T14] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 1101.133729][   T14] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff2117051
[ 1101.133744][   T14] R10: fffffbfff2117051 R11: 1ffffffff2117050 R12: 1ffffffff15c6240
[ 1101.133759][   T14] R13: dffffc0000000000 R14: ffff88807df8c828 R15: ffff88802783f008
[ 1101.133775][   T14] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1101.133792][   T14] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1101.133806][   T14] CR2: 0000001b2e019ff8 CR3: 0000000075ff5000 CR4: 00000000003506f0
[ 1101.133824][   T14] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1101.133837][   T14] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1101.133850][   T14] Call Trace:
[ 1101.133858][   T14]  <TASK>
[ 1101.133866][   T14]  ? sysfs_unmerge_group+0x109/0x130
[ 1101.133910][   T14]  device_del+0x2ae/0xa70
[ 1101.133941][   T14]  ? kill_device+0x160/0x160
[ 1101.133962][   T14]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 1101.133991][   T14]  ? _raw_spin_unlock+0x40/0x40
[ 1101.134017][   T14]  ? complete_all+0xc5/0x1d0
[ 1101.134046][   T14]  firmware_fallback_sysfs+0x67e/0x930
[ 1101.134082][   T14]  _request_firmware+0xcad/0x1290
[ 1101.134122][   T14]  ? request_firmware+0x50/0x50
[ 1101.134148][   T14]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1101.134177][   T14]  ? read_lock_is_recursive+0x10/0x10
[ 1101.134202][   T14]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1101.134233][   T14]  request_firmware_work_func+0xac/0x1b0
[ 1101.134270][   T14]  ? process_one_work+0x7a1/0x1160
[ 1101.134292][   T14]  process_one_work+0x898/0x1160
[ 1101.134327][   T14]  ? worker_detach_from_pool+0x240/0x240
[ 1101.134354][   T14]  ? _raw_spin_lock_irq+0xab/0xe0
[ 1101.134384][   T14]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 1101.134410][   T14]  ? kthread_data+0x4b/0xc0
[ 1101.134442][   T14]  worker_thread+0xaa2/0x1250
[ 1101.134485][   T14]  kthread+0x29d/0x330
[ 1101.134511][   T14]  ? worker_clr_flags+0x1a0/0x1a0
[ 1101.134533][   T14]  ? kthread_blkcg+0xd0/0xd0
[ 1101.134562][   T14]  ret_from_fork+0x1f/0x30
[ 1101.134600][   T14]  </TASK>
[ 1101.134617][   T14] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1101.134626][   T14] CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 6.1.138-syzkaller #0
[ 1101.134644][   T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025
[ 1101.134654][   T14] Workqueue: events request_firmware_work_func
[ 1101.134679][   T14] Call Trace:
[ 1101.134686][   T14]  <TASK>
[ 1101.134692][   T14]  dump_stack_lvl+0x168/0x22e
[ 1101.134718][   T14]  ? memcpy+0x3c/0x60
[ 1101.134738][   T14]  ? show_regs_print_info+0x12/0x12
[ 1101.134763][   T14]  ? load_image+0x3b0/0x3b0
[ 1101.134793][   T14]  panic+0x2c9/0x710
[ 1101.134827][   T14]  ? bpf_jit_dump+0xd0/0xd0
[ 1101.134862][   T14]  ? ret_from_fork+0x1f/0x30
[ 1101.134893][   T14]  __warn+0x2f8/0x4f0
[ 1101.134923][   T14]  ? sysfs_remove_group+0x174/0x290
[ 1101.134953][   T14]  ? sysfs_remove_group+0x174/0x290
[ 1101.134983][   T14]  report_bug+0x2ba/0x4f0
[ 1101.135010][   T14]  ? sysfs_remove_group+0x174/0x290
[ 1101.135043][   T14]  handle_bug+0x3a/0x70
[ 1101.135070][   T14]  exc_invalid_op+0x16/0x40
[ 1101.135096][   T14]  asm_exc_invalid_op+0x16/0x20
[ 1101.135125][   T14] RIP: 0010:sysfs_remove_group+0x174/0x290
[ 1101.135156][   T14] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 6e 06 cc ff 49 8b 17 48 c7 c7 a0 8b 7c 8a 48 89 de e8 cc a3 46 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e6 92 7a ff
[ 1101.135176][   T14] RSP: 0000:ffffc90000137880 EFLAGS: 00010246
[ 1101.135194][   T14] RAX: f94f7a91d12a0f00 RBX: ffffffff8ae311e0 RCX: ffff88813feb1dc0
[ 1101.135210][   T14] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 1101.135223][   T14] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff2117051
[ 1101.135238][   T14] R10: fffffbfff2117051 R11: 1ffffffff2117050 R12: 1ffffffff15c6240
[ 1101.135253][   T14] R13: dffffc0000000000 R14: ffff88807df8c828 R15: ffff88802783f008
[ 1101.135294][   T14]  ? sysfs_unmerge_group+0x109/0x130
[ 1101.135333][   T14]  device_del+0x2ae/0xa70
[ 1101.135373][   T14]  ? kill_device+0x160/0x160
[ 1101.135398][   T14]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 1101.135432][   T14]  ? _raw_spin_unlock+0x40/0x40
[ 1101.135466][   T14]  ? complete_all+0xc5/0x1d0
[ 1101.135500][   T14]  firmware_fallback_sysfs+0x67e/0x930
[ 1101.135544][   T14]  _request_firmware+0xcad/0x1290
[ 1101.135594][   T14]  ? request_firmware+0x50/0x50
[ 1101.135623][   T14]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1101.135658][   T14]  ? read_lock_is_recursive+0x10/0x10
[ 1101.135688][   T14]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1101.135726][   T14]  request_firmware_work_func+0xac/0x1b0
[ 1101.135761][   T14]  ? process_one_work+0x7a1/0x1160
[ 1101.135786][   T14]  process_one_work+0x898/0x1160
[ 1101.135827][   T14]  ? worker_detach_from_pool+0x240/0x240
[ 1101.135857][   T14]  ? _raw_spin_lock_irq+0xab/0xe0
[ 1101.135888][   T14]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 1101.135921][   T14]  ? kthread_data+0x4b/0xc0
[ 1101.135958][   T14]  worker_thread+0xaa2/0x1250
[ 1101.136013][   T14]  kthread+0x29d/0x330
[ 1101.136059][   T14]  ? worker_clr_flags+0x1a0/0x1a0
[ 1101.136084][   T14]  ? kthread_blkcg+0xd0/0xd0
[ 1101.136119][   T14]  ret_from_fork+0x1f/0x30
[ 1101.136164][   T14]  </TASK>
[ 1101.141990][   T14] Kernel Offset: disabled
[ 1101.773654][   T14] Rebooting in 86400 seconds..