last executing test programs:

48.357659898s ago: executing program 1 (id=349):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800000000008, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000200)={0xf, 0x1, 0x4, "9f76fe92f6d87e3a99080debac1874d57ee2318d4526f2148e84c532d56b46f0", 0x3234564e})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000100)={0x20, 0xd, 0xfffffffffffffedc, "000900006bc9c9b51ff668e36ccc91f83ad9ef97c35f9fa37b297007288f135ee17a543d0a4a751105e7962c9206dfb8f00ea92d4bc5e77ac909d53673d5f7fe161087550ffcdeba3030e940c845506f152ede2a8f5a7b5c2f47a10c9f4d7461ac69f904d510e8c90daee4fb333478dd224405b8afaca10b8a602cec5ebb6747d3428ebb66b81e3a98504cd77253c2c52f83d6c10c4ebb00"/166}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0xffffffffffffffff, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x0, 0x9, 0x4, "598623e5"}, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="600e05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000540)={0x40, 0x3, 0x4, "0d5e8a0c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

47.999397515s ago: executing program 3 (id=352):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000040)={'bond0\x00', 0x1000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f00001ae000/0x2000)=nil}) (async)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

45.402230707s ago: executing program 2 (id=355):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102094e7340a306d2bacf7a543acbb6d72d1b0002030870030904c60300ff5d81090904a601042d042206"], &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0})

43.416003888s ago: executing program 3 (id=356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f00000000c0), 0xc, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
file_setattr(r2, 0x0, &(0x7f0000000040)={0x88, 0xd9, 0x3, 0xc, 0x57519bea}, 0x18, 0x1000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x14, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x10, 0x1, "4841763d979b32261fbabdae"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0)

43.415590276s ago: executing program 0 (id=357):
removexattr(0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34524742}})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040044)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9})
ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f0000", 0x2f}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
write(r4, &(0x7f0000000200)="cfd846e11cca6d2d3548edf9b0013312d3e6df5d24f827f2d9efa635edd4b932bfcf2fb89c2c8a3ff827b9518b2e099d02ac16", 0x33)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001d80)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="040022800800c500", @ANYRES32, @ANYBLOB="000c100980", @ANYRES32, @ANYBLOB="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"], 0x2a88}, 0x1, 0x0, 0x0, 0x1000}, 0x8410)
r7 = creat(&(0x7f0000000100)='./file0\x00', 0x59)
quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000900, 0x0, 0x0)
r8 = openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000440)=0x8)
sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x880)

41.770886726s ago: executing program 1 (id=358):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14})
syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYRES64=0x0, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000440)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

39.756148849s ago: executing program 3 (id=359):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x9, 0x6, 0xfffffff9, 0x5, '\x00', 0x6})
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00098006000600843b00000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x2, [{}, {}]}, 0x48)
getsockname(r2, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000240)=0x80)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2b00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000000380))
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x0, 0x5, 0xffffffffffff258f, 0x7, 0xe0a}}]})
syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f0100000000000000020007241400000000042413"], 0x0)

39.755588151s ago: executing program 0 (id=360):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
fcntl$setlease(r1, 0x400, 0x2) (async)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x0, 0x2}, 0xc) (async)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000300)={{{0x9}}, 0xf0, 0x0, &(0x7f0000000200)="c5b57e590debea4f1c2598393598747668d64a4b89563016b177ab8c31bd9f084d536507f607595de6ff062f465b5dbe309b788adacc0536ad64c4976da7dfc48b0808bfc6aef6e0ec320494ae4c75db1e4f3d369ee52cf739ac8587557cf19328622fd8bb42a495ce80c78805db46aa8ca8d77506622504521197d18e05311581d43ed980a9e51bb52ab24d73a7e975dea3aaba143db57071be10f2c1817a2b5ae170eea4b5539131f29a5a40e66ed48a9a3b19f250e455c12d88e71c9427510e202655a8dc2e9d6b858ed84971684a2f0a3ec339d5bf56784c8cd13ed7bb3554e8040f73aff1e747762cf911a59c3b"}) (async)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async)
syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) (async)
recvmsg$kcm(r6, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000d40)=""/189, 0xbd}, {&(0x7f0000000b80)=""/195, 0xc3}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4080, 0xff0}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000003100)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000001000)=""/222, 0xde}, {&(0x7f00000007c0)=""/107, 0x6b}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000940)=""/102, 0x66}], 0x10}, 0x0)
fsetxattr$security_ima(r5, &(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYRES32=r5], 0xb, 0x3)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x4}, 0x2, 0x1, 0xe, 0x8, 0xc, 'syz0\x00', "45dca5df69afefa8298f1894c3c0a2e5909d6baee4daaa024260dc99aadd97c0", "fd886bd45c1f1a6e68fa14b8ee28c360043415876bc4750620649e951800dffe", [{0x3, 0x0, {0x3, 0x8}}, {0x9, 0x7, {0x2, 0x80}}, {0x6, 0x5f8, {0x1, 0x7ff}}, {0xb, 0x2, {0x3, 0x9d2e}}, {0x8, 0x8001, {0x1, 0x6}}, {0x401, 0xc, {0x1, 0x8}}, {0x2, 0x7, {0x0, 0x7}}, {0x3, 0xeec, {0x2, 0x4}}, {0x8, 0xbbe, {0x3, 0x539}}, {0x7, 0x2, {0x1, 0x7}}, {0xc1ca, 0xff81, {0x0, 0x2}}, {0x2, 0x1, {0x3, 0x9}}, {0x0, 0x0, {0x0, 0xf70}}, {0x6, 0x0, {0x3, 0x6}}, {0x101, 0x8001, {0x0, 0x2}}, {0xc0, 0x1, {0x0, 0x6223}}, {0x7, 0x6, {0x2, 0x6}}, {0x6, 0x9, {0x0, 0x57a5}}, {0x5, 0xa740, {0x3, 0x7}}, {0x4, 0xf1, {0x1, 0x8000}}, {0x7, 0x400, {0x2, 0x8}}, {0x81, 0x1, {0x1, 0x9}}, {0x0, 0x81, {0x1, 0x2}}, {0x4d2, 0xc, {0x1, 0x4}}, {0xe, 0xbd, {0x0, 0x40}}, {0x8, 0x3, {0x2, 0x3ff}}, {0x6, 0x5, {0x0, 0x7}}, {0x0, 0x8000, {0x0, 0xfffeffff}}, {0x200, 0x2, {0x1, 0xfffffff7}}, {0x400, 0x2, {0x1, 0x2}}, {0x10, 0x7, {0x3, 0x8}}, {0xa, 0x101, {0x2, 0x5}}, {0x5, 0x9a6e, {0x3, 0x8}}, {0x4, 0x4, {0x1, 0x3}}, {0x7, 0x1000, {0x2, 0x9}}, {0x8, 0x1, {0x6, 0x1}}, {0x7fff, 0x8, {0x6fc1e235210b32e5, 0x101}}, {0x1, 0x200, {0x2, 0x3}}, {0xd, 0x800}, {0x0, 0x9e7a, {0x2, 0x1}}]}}}]}, 0x268}}, 0x4048800) (async)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="a00000002100050000000000000000000a010102000000000000000000000000ac1414aa0000000004000000000000004e2000004e2400000a0000802c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bd6b6e000000000050001100fe8000000000000000000000000000aaac1414aa0000000000000000000000000000000000000000000000000000000064010102000000000000000000000000ff040000063500000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x24024810) (async)
r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
fsetxattr$security_ima(r2, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x3, 0x0, 0x8, 0x0, 0x66, "41ef3297eed33c8de0f3dbfcd9b5986bb8821a5c2d2083d2229b0c2fecda5e8aa5b630e1a5714d322acd3b563f4a9362e9a88cf48f319a1d752669b818e6852bbb60bafd795a4664939a6b4a1d288855f9d7afe77a42000dbb77908bb718c8bcfb5a12d1d17a"}, 0x6f, 0x1) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000019462a21886c176b064d9875743ccd1cd7827ed2a4227dab", @ANYRES16=r10, @ANYBLOB="010000000000000000000c0000001800018014000200776731000000000000000000000000000c000380080002000e000000"], 0x38}}, 0x40) (async)
syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bfe000/0x400000)=nil)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r8, 0x4020aed2, &(0x7f0000000000)={0x82af000, 0x219000, 0x8})

39.755018599s ago: executing program 2 (id=361):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "e3be"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0)
ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000040))

38.553013179s ago: executing program 0 (id=362):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
r0 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000000))
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000062abd2c66cca55628f6251f2fda24669060202020202020100"], 0x2e)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18, 0x48d5}, 0x20008050)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="42de0551a788d5f6f1dc60fe4a95d24447778b79348ebb22c7b4d9c91bccae9142cfc2f44ccb3717901185c999ef51852f2738ba22739d1dd22d180f15d8de15f1ee0e31225a85c386b0569ba56611742a6a876bd6dd6c4200086dc2ecd5345859c1bb450499bcd8323b80940da5dcea7ec3c7e353e3f3cb70e307a96f0ece20fe0526587477d41297836e0ea305d6d1bb87c6082292a88971802883580e", 0x9e)
r2 = open(&(0x7f00000002c0)='./file0\x00', 0x1e1540, 0x57)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000003c0)={0xd8, 0x0, 0x200})
connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x1, @empty, 'erspan0\x00'}}, 0x1e)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x10802, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@rand_addr=0x64010101, 0x1, 0x0, 0x20, 0x0, [{@remote}, {@multicast2}]}})
ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000040)=0x7)

35.976618593s ago: executing program 2 (id=363):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40120510}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x60000, 0x53}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40881) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xc0, 0xe}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000) (async)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x18) (async)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
cachestat(r2, &(0x7f0000000380)={0x2, 0x1}, &(0x7f00000003c0), 0x0) (async)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi5\x00', 0x40, 0x0)
ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f0000000540)={0x4, 0x20000, 0x0, 0x7, 0xffffffff, 0x23, 0x10, 0xfffffffe, 0x10, 0x2, 0x0, 0x7fc, &(0x7f0000000440)=[0x7, 0x3, 0x7fff, 0x4, 0x3, 0x2, 0x3, 0x9], 0x8, &(0x7f0000000480)="3445550bd3ab86a88becd691b5babe5eb8d788e33e4038aecdaf77428ac24abc4d258a43fe753ce0ff6df9ce71205674f164d476c0ae04e01b1231d5565ca7b79c93d868cfe9b1d827e53040358468b7671395c071a357648239091b2bd278e7c844d07fe8b684998a93138ffab21d851a978e6282f985d7eb37350668b791988f48aa9148ab24a5f1eb7a698ea4bb0cea603ab8e5db386840582b5fcc5c", 0x9e}) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'tunl0\x00', <r6=>0x0, 0x10, 0x20, 0x800, 0x2, {{0xf, 0x4, 0x3, 0xa, 0x3c, 0x65, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, {[@end, @lsrr={0x83, 0x7, 0x66, [@dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_prespec={0x44, 0x14, 0x8f, 0x3, 0x8, [{@multicast2, 0x8}, {@private=0xa010102, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0xdd, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3}, 0xfffffff9}]}]}}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x54}}, 0x4008010) (async)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000800), 0x10000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000840)={0x8, 0x9, 0x3ff, 0x0, <r8=>0x0}, &(0x7f0000000880)=0x10)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000008c0)={r8, 0x9}, &(0x7f0000000900)=0x8) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r9, 0x100, 0x70bd2a, 0x7ff8, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x80, 0x67}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f2671728ac064d94d0c0d74e5b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x805}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_usb_connect$uac3(0x1, 0x14b, &(0x7f0000000ac0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139, 0x3, 0x1, 0x2, 0x40, 0x7f, {0x8, 0xb, 0x2, 0x1, 0x1, 0x1, 0x30, 0x80}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x57, 0x1}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x400, 0x6, 0x2, 0x5, 0xa1, 0x401, 0x0, 0x8}, @output_terminal={0x13, 0x24, 0x3, 0x4, 0x402, 0x3, 0x6, 0x1, 0x4, 0xb, 0x6, 0x6}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x305, 0x2, 0x5, 0x6, 0x9, 0x9, 0x1ff, 0x7}, @multiply_unit={0xb, 0x24, 0xd, 0x2, 0x8, 0x1, 0x5}, @extension_unit={0x9, 0x24, 0xa, 0x2, 0x5, [0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x2, 0x2, 0x7, 0x5}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xb, 0x4, 0xe8, 0x7f, "7d8895", "b5e0b7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x9, 0xcc, 0xc0}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x6, 0xa780, 0xfd}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0xba, 0x9a, 0x7, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6f, 0x80, 0x8, {0xa, 0x25, 0x25, 0x8, 0xd0, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xe, 0x0, 0x80, 0x40}, @as_header={0x17, 0x24, 0x1, 0x4, 0x9, 0x6, 0x1, 0xf, 0x7, 0xf001, 0x5}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xa, 0x2, 0xea, 0x6d, "64b565", "efefd4"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x3}, @as_header={0x17, 0x24, 0x1, 0xb6, 0xfffffff2, 0x2, 0x2, 0xa, 0x4e, 0x400, 0xd}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x0, 0x92, {0xa, 0x25, 0x25, 0xa4, 0x0, 0x24b3}}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x310, 0xb, 0x7, 0xfc, 0x40}, 0x8, &(0x7f0000000c80)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0xa, &(0x7f0000000d00)=@string={0xa, 0x3, "1fc727098fc4ecf7"}}, {0x2, &(0x7f0000000d40)=@string={0x2}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0xc1a}}]})
syz_usb_control_io(r10, &(0x7f0000001100)={0x2c, &(0x7f0000000e40)={0x20, 0x22, 0xf9, {0xf9, 0x8, "6aabd3c6245bced2e8e97dd08daee90f4214fa07450e921c88259c1a8ee03988f284ede583af8e9e0fd3ad001477660ef41e9ffe59b7d5e038b7ed3f715be680e055e395494507ea73c098c19f94b931808bf1d8bfd5dace86fc6e269d2636ea773667807e750977004130c0f7a63c8d009d659e8156acd13c35b58cfee7a7c064909dd6d402197fb02363f49c38f7245305137c3e5979f2723651338bc43777d0702aa0ad618266402b70c7e7fdea39574a51d0c05f1e28c01a336b4a39291aaa6dcf6fdc94255e327aa4587cc6b4811746ea6dfd9cffdd8c460f96acdbf546fd24fa5e6e3c24b249171a4f9bba2575e271693c8b4f50"}}, &(0x7f0000000f40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000f80)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x77, 0x2, 0x81, 0xff08, 0x6, [0x7f4030, 0xf]}, @generic={0xd5, 0x10, 0xb, "e56698756ad9a43815d730ab191f1bb83dc83c4692d1943104c304577ea9c253f9bd243f4cb1e6e551e751f39e48c3039cb6adc240c05adf3905d818a502b8e89dddd294630f80690ba46a7990b2cfb1ede889bf6cb12b319729a07784bbada7e0f3bf432f3a264108ee1ea26b366615fad027b1b6a0393df0098ad30b7aa6e771d65a75b5ba2c48c5e143e2ba91da5130041400cbd2e5348686538174f031c446161be2463b87349205a044d826714b2e90347cf88b1461077c5dc1e241e39b88f493e23a55192551f5578ceeef27e724fb"}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x2, 0x0, 0x40, "11466be7", "d40a23d2"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x0, 0x4, 0xc, 0x10, 0x7, 0x6}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x40, 0xe, 0x40, "2f0fa222dfedd2476c78b108618cdaad64e9cc74c68a7043788b2d47b32a55bc96edc16e579f14cd37440012a073be0b4c514ef1c5f1244acf744818f7f5d3fc"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000001280)={0x20, 0x0, 0x8, {0x20, 0x1, [0x1e0f0]}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x1cdf}, &(0x7f0000001300)={0x40, 0x9, 0x1, 0xc3}, &(0x7f0000001340)={0x40, 0xb, 0x2, "1fad"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000013c0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000001400)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001440)={0x40, 0x19, 0x2, "fba6"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0xf5}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x7f}}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000001680)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001640)={<r11=>0xffffffffffffffff}, 0x106, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000016c0)={0x15, 0x110, 0xfa00, {r11, 0x9, 0x0, 0x0, 0x0, @ib={0x1b, 0x662, 0x0, {"d373eae781ec1890a39152b0b069fc00"}, 0x6, 0xc, 0x7d}, @in={0x2, 0x4e20, @multicast2}}}, 0x118) (async)
r12 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f0000001800)={0xc, 0x0, <r13=>0x0})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000001840)={0x18, 0x1, 0x1, 0x0, r13, 0x5})
syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r12) (async)
ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f00000018c0))

35.976332115s ago: executing program 1 (id=364):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9c", 0x3}], 0x1}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) (async)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

32.51610386s ago: executing program 3 (id=365):
r0 = userfaultfd(0x801)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x3, 0x26000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x3})
r2 = syz_open_procfs(0x0, 0x0)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff20000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x8, '\x00', @b})
r4 = socket(0x11, 0x3, 0xd)
accept4$unix(r4, 0x0, 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r5, 0x40046210, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000480)='\x00\x1ah\xd3\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xb9\xbe\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85\x00\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90')

31.533565532s ago: executing program 0 (id=366):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockname(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000140)=0x80)
sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e78c216cd7f9f10bf4b35158e3b36df0c4e9e74b585fc66f7b1fe5305f073f6de409973543e731424ab0605f2f4dfd7efe495ea426a69b13b27b7497895984a1502bac0855ad2bb86e88efdd6c976bbd1cc04dc6b4e8d579f1aecdf38461db91d3661703dec17b9a22d66299cacd23fb463dbb3fd7d59674fa4c5ec8b36422965f55ae455ef5051d029fe657b3f6c79a2bbfe60b0d64870d4ca793ebf5054a40157f0c78c3337cb131700670bc7dfa1cfddb8eb2d85b97c56339f45c4ee490d259121cdccf7be5bbc0ab7a375d931c0365c9809756d4491c866161833663e49a310df546ed841572ca40e40faea56bb05216b3390d807f756db218749a1c9a1ee817b9e5e6a00ca98e185cd6f690cc9e9d1567788e572378f11f688d8133c58b727ae51f95787f7f9952b32ed1494ea7e55f21baea3c9edb8b4523bbef158c8c239d4a54faa5996eb1f3f1c06acf8cd273e298e44b5642b8a50369b152a67932f48bed55c1c01d9a0ad6b2a3540e753c16e3054d483baad028fe42b4e5ebe562b6350c3a093f7456dde046258b8bfe19494d19a66809b612ba8deefea6b7007460ad826313420ac8e3f889da3c9b01a3d1f76acbdafb990fbe8479ded245d750a534e61b6b5fe9914f3760cbe0434f0b1593579f9d124e7c90ef5a50b21aad14ecd0cd712164782cfd329175225d99f90df6d123dde263d9329317f501199ba87458c0ead4baddeef35da92fea8ac878fa84bebfce075cbf56fad7fe823198ef50ce9e24d6c888337cfecb65e6dc7a3bce8f7b2cf734a1bf52cc24b77045e94c39756cb4287777e6f7bdfa19c387565dcb5258c3758a6d8cf94fa2adde5454735f944f6fde3c61376bf65c4c65bf973e1bdcd646b5883098b9f00712ab947b5a45ae1949357a7ef580895e7201e36ae4ab14da32e0a55327d25278d07e102c4e45f6566f5394c2259baa6b5b9511751c35ad74364be8bcfb77b0eb0d3c182dd50ae9fa498d5595bce5201d43acf6411e8e6074bdf001d4e4ddae00133002d9af61c3d9b594a230511c77460e477ab5d9d3d2dbdad6a971c4d4911d877a6d9eae79196e95565994954a3904d473fb369983020b99466c804127e8baf8147b5d228a17608d3ab4c31c6ad03135929e35feb8d166f5f820e40f94dd8102c9ca76ac48c3d668b00ca76cff37dcd35ddbf63b62ecaf7934a8ede4980f3294365ea63f7584373f638134fba55526983dabf2f189c70ddec701b55256d383dd802b4b09b801fb6cbe3408c9eb6d1fd85bf93b60b966680485d4550a3aa3454d888d6f8e81f669d4d87914041ac313e39f0ae29f31dedba1c5964c6729045cbd010e4469a7220335f76983c7d22a53401cb25444b9103643843726bdbb28d4032f9258f8539b9a7dfd6558b2c524d38c9e2e1c23fd7a6a42bf4bb5ebdf0b75ecc547ef15865536ee1de07155bc5e6b5a227c1170a6e4e44991f0685219c417d7194a4cdbce6a1e76f830fdd07887b49a3b648772b6e1b6fda08931540cc521e44f3fb221ce86438759704ce2422653a35f62c483a21ae6b34b14e6d900172dddecf8846a9423d784341296e141423f1c1efed6a0c334430647c0408af67c54a8cad69a43bf28ebe4a650343151223969bafa661999342df2a160f45b950f258f1e444575d6251a917bfcbb4dc834bd08d4deeb3be0dabade5f46060e54bc71f137f47e4233804eb9de", 0x589}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRESHEX=r0, @ANYBLOB="ac14140f7f095795dc1d000001000000003800000000000000f80600fe0600000001821066581ddb34253c05566ba6e69c3444146773ac14143000002cb56401010200006c96d48ac9caa0657d5d33295e7f3a08ca5083755c119fe0d2188dbf011a3c00f232b8dda3"], 0x58}, 0x4)

31.406312448s ago: executing program 2 (id=367):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18)
sendmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c000)
syz_usb_connect$uac2(0x2, 0x98, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x80, 0x0, 0xe, {0x8, 0xb, 0x1, 0x1, 0x1, 0x1, 0x20, 0x76}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x8, 0x26, 0xde}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x42, [0x2, 0x0, 0x0, 0x2, 0x1, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x101, 0xa8, 0x4, 0x6, 0xfff9, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x80, 0x0, {0x8, 0x25, 0x1, 0x1, 0x0, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x640, 0x9, 0x4, 0x8, {0x8, 0x25, 0x1, 0x2, 0x3c, 0xa, 0x2}}}}}}}}]}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
getsockopt$sock_int(r3, 0x1, 0x2a, 0x0, &(0x7f0000000100))
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0xd9c5, 0x7, 0x7, 0x1, 0x8, 0x2})

31.404382045s ago: executing program 0 (id=368):
mlockall(0x2)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r1=>0x0, 0x3}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x3}, 0x8)
r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100))
r3 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r3, &(0x7f0000000240)="328f", 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)

28.964929712s ago: executing program 1 (id=369):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601010700000000000000000000000c00078008001200000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6d616b00000000fe477dba3eac3bc39620485e8fe7454a"], 0x54}, 0x1, 0x0, 0x0, 0x54}, 0x8404)

26.635076413s ago: executing program 3 (id=370):
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x14})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f0000000440)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'veth0_virt_wifi\x00', @random="e578e2b99a64"})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
mlockall(0x2)

26.634554959s ago: executing program 2 (id=371):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="2011190000003e1826eb54114e251100"/31], 0x0, 0x0, 0x0, 0x0}, 0x0)

26.355765292s ago: executing program 0 (id=372):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
setresuid(0xee01, 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = geteuid()
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r2, &(0x7f0000000000)='./file0\x00')
waitid(0x0, r1, 0x0, 0x1000008, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setreuid(0xee01, 0x0)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioprio_set$pid(0x2, r1, 0x2004)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1)
read$FUSE(r3, &(0x7f0000004f00)={0x2020}, 0x2020)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io(r5, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x41, 0xe5, 0x0, 0x0, 0x4}}}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1c00, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x4800, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0)

26.067529522s ago: executing program 1 (id=373):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x404041)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000003ac0)={0xa, 0x4e23, 0xd, @dev={0xfe, 0x80, '\x00', 0x44}, 0x1}, 0x1c, 0x0}}], 0x1, 0x24040004)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='sched\x00')
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/189, 0xffffffc9}], 0x1, 0x4, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x77, &(0x7f0000000000)="3a916a0000220200", 0x8)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0x0, 0x0)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000140)={@empty}, 0x14)

20.823792681s ago: executing program 2 (id=374):
r0 = socket$kcm(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'team_slave_1\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x0, 0xa, "aca6f62276d1"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1a040, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'veth1_to_bridge\x00', @random="e6e1239d9eb1"})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000})
r3 = userfaultfd(0x801)
timer_create(0x8, 0x0, &(0x7f0000000000))
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3})
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = gettid()
r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3f2}}, 0x30)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000))
socket$kcm(0xa, 0x1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'team_slave_1\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x0, 0xa, "aca6f62276d1"}}) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1a040, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'veth1_to_bridge\x00', @random="e6e1239d9eb1"}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) (async)
userfaultfd(0x801) (async)
timer_create(0x8, 0x0, &(0x7f0000000000)) (async)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) (async)
fchdir(r1) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
gettid() (async)
syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') (async)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3f2}}, 0x30) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) (async)

20.823180533s ago: executing program 1 (id=375):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{}, 0x3, 0xf, 0xf})
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x8000)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000180)={0xf9, 0x2})
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f00000001c0)=[@wr_drn={0x68, 0x20, {0x3, 0xfffffffffffffffb}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x9d, 0x2}}, @rdmsr={0x66, 0x18, {0xa80}}, @wr_crn={0x67, 0x20, {0x8, 0x1}}, @uexit={0x0, 0x18, 0x78}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xfe05, 0xac3d}}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20, {0x8, 0x3ff}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x8b, 0x1, 0x33d2ff64, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xa4, 0x4, 0x19, 0x6}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x65, 0x0, 0x803}}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c00, 0x10000, 0x7f, 0x3}}, @nested_load_syzos={0x136, 0x90, {0x3, 0x0, [@wr_crn={0x67, 0x20}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x1, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x1}]}}], 0x2d0})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000500)={"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"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000900)={{r3}, "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"})
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000001900), &(0x7f0000001940)=0xc)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2d, &(0x7f0000001980)=0x2, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x90, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x68a}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x1)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0xa02007}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
fsopen(&(0x7f0000001c80)='aufs\x00', 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000001d80)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x814)
close_range(r2, r1, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001dc0)=0x30, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x800, 0x100, 0xa}, 0x18)
openat(r7, &(0x7f0000001e80)='./file0\x00', 0x40, 0x18)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001f00)={0x1, &(0x7f0000001ec0)=[{}]})
sendmsg$inet(r6, &(0x7f0000002700)={&(0x7f0000001f40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002540)=[{&(0x7f0000001f80)="069f5f620e23500a8e0e5fabd6f8f26d5c0a0d407bb5b90d5eb286ddd628bda6206da6464595c20b6d46053c7cb4ed0683e36f27058e610987db6853f07bbb33f5dbca7f80ddda746d9288607faa39eb5357078a9e3071325b02ff243b6802861684b39c5578ac94a19c79b5401b8d3eb201387865c929e8dcd1cd71327a98f12d000f46d49304b0617715d6a1ed73e81343c6861c480ad660d924defc9e759bf68d4ebbd8c25051268e006dd8718e07d6c5940e79116bc571031723b9fa5fa975bb1b7ac401c9dd700fe54c7199b66a", 0xd0}, {&(0x7f0000002080)="10702b8e8ba062e475eddb89b4121a2cce198233ecef4ea7bc2d54c4fbbfbf558d63b49a651e58028f300d543c3b9e90e4148eb14b1ee111086ca4c75173378c448889308f85e0574857425efee89a0bfd0b8f35e8b2eea74ca7d17bae8cd9bbba4c", 0x62}, {&(0x7f0000002100)="b15873519d2d4609e5639d9df980d0980fafd07f6e734ca26112bb303fbdc4891b7fb91f2af62e294bc0e112a73843c70fefa099bcd674e61cbde246d7cdc343a22e25ed8481c74dbc872123a5388edd750f1e4a827de163dafdc224ffb66621216177cac309c97b692f73377d009b0244279bc470fb52ef19e3b6d5f12020283f18e211e65186899fb65a9186ec65b6f65d1256352b182ac0cc0a12b2c3cf0bc50b8eac6120c05eebbd1c8ab80c2ece6912ba709da3e794b9", 0xb9}, {&(0x7f00000021c0)="62ec1d4266572b308618b468a8c0dac06c6d259a16d0f9fe3448931847d6944f6747f66c7860249c9e87d2bf39af3448aa7fb2f2196926f3f3abe978c5616afe27ddbbb13c30527642cf911bfd3441d4be367a8a16102144c7760af552c1e9773b26d6761705b3c5a753435341c174c9538fc753977b2b8f171c648a3459015cc86146a17a96cc77c27a7d9453c20428db", 0x91}, {&(0x7f0000002280)="8aa76ba2a271874b302caf26b1074115b8dd630fc63eb0d73fa47d4202da2ad4b4a9c1f774fcf51dd271ba1167ef33f605", 0x31}, {&(0x7f00000022c0)="2c72826974cc800c4e9eb4c2c5b9ce222d7390388bd72ebf5aafd54188c3cf45d0ce1c462bcf12dfa6b7743082dbe12f99d509d4a2b14439d2c3e38fa88ef0b60f123ede2208e9de53b33e44d066c403a2141f8a2e3dce53d1d732979d2df3b3f893f109d3635159503024677c5dad963654f146709bc0a574380a5354fdde14cf7d5ffb93f22f84805acaaa00e4ed7fca07cb50da53c1a589589b99e319a052511cb34694e2a6fe06ec71f457290e1f6a6fa4b78acd05fc53841f4d33efc383d2761b4c243f560cecfd49f89021e374493d29096e0f7c", 0xd7}, {&(0x7f00000023c0)="538a89fdf908cfe97b6caecdc9a9a7829f51c5895dd18212e012e9fad4bcffc76346546dc8eceda32640deb4846149abb743e5a5de08ada1599e26571257da11e257f0eba753a3f4", 0x48}, {&(0x7f0000002440)="acfbd4f8e98d4a51a60e52c2b232f644edf412950dd99591faa5a5396350730315e8c13a6ec628b6445261b2620258c2d8dedafe74dc7d5db378aa55289dbe4088cf543f368e29f4b08429de11beb1d5de75031d1f3cea720a0a0eb7f7b2dc048d2679b1a20774650e6e7cb8b7111929998492709e9d30022b1473987f6f7410b4132e12aff2b169dd17d49ae534fb1d28320d45fc58ea557cc5aca63c2ede67be16b07c057639b65ae2b72ebbefe1ae8f3d7deaa7af8529e2972644da59263d", 0xc0}, {&(0x7f0000002500)="86d2d3699aab42c07fd9decd2e974504d07df8b656784f0525c66521d35dc4284cc71afac180fde009522d5a9adf114cc2904d31dab21ca0822a", 0x3a}], 0x9, &(0x7f0000002600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x2c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}, @generic={0x83, 0x6, "2e8122e4"}, @noop, @noop, @timestamp={0x44, 0x20, 0x41, 0x0, 0x1, [0x0, 0x5, 0xa, 0xc01, 0x0, 0x3, 0xfffffff7]}, @rr={0x7, 0xb, 0x97, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1f, 0xf7, [@multicast2, @local, @empty, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3f}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0xd0}, 0x48000)
r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002a80)={0x0, &(0x7f0000002740)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x8293, 0x2, 0x5}}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x5d, {"0f42529a260f06c7442400f8000000c744240200000000ff1c2448b800000080000000000f23d00f21f835200000090f23f8c4a225475d0065f247ad66ba4300ed0f320f01c23ba700880000"}}, @out_dx={0x6a, 0x28, {0x3e91, 0x5, 0x800}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @uexit={0x0, 0x18, 0x194c}, @nested_amd_vmload={0x182, 0x18, 0x1}, @uexit={0x0, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x2ce}}, @wrmsr={0x65, 0x20, {0xab6, 0x9}}, @out_dx={0x6a, 0x28, {0x1e18, 0x3, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x8, 0x80}}, @set_irq_handler={0xc8, 0x20, {0x78, 0x1}}, @code={0xa, 0x6b, {"48b8dac60000000000000f23c80f21f8350000b0000f23f866b830010f00d02e3e460f789104000000d9f6c4817e5bb4d208000000c4422946b20d00000066ba6100ec6e460f01788766baf80cb854ba3f81ef66bafc0cb009ee"}}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0x40000083}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0x7, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x2c, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xda0, 0x3}}], 0x320})
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000002ac0)={0x1, 0x0, [{0x4b564d02, 0x0, 0xe}]})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000002b00)=0x2)
shmdt(0x0)

16.772288609s ago: executing program 3 (id=376):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "99e3f675", {0x3, 0x104, 0x0, 0x8, 0xde, 0x7, 0x40}})

7.519791811s ago: executing program 32 (id=372):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
setresuid(0xee01, 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = geteuid()
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, r2, &(0x7f0000000000)='./file0\x00')
waitid(0x0, r1, 0x0, 0x1000008, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setreuid(0xee01, 0x0)
getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioprio_set$pid(0x2, r1, 0x2004)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1)
read$FUSE(r3, &(0x7f0000004f00)={0x2020}, 0x2020)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io(r5, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x41, 0xe5, 0x0, 0x0, 0x4}}}, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x1c00, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x4800, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0)

401.750924ms ago: executing program 33 (id=375):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{}, 0x3, 0xf, 0xf})
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x8000)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000180)={0xf9, 0x2})
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f00000001c0)=[@wr_drn={0x68, 0x20, {0x3, 0xfffffffffffffffb}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x9d, 0x2}}, @rdmsr={0x66, 0x18, {0xa80}}, @wr_crn={0x67, 0x20, {0x8, 0x1}}, @uexit={0x0, 0x18, 0x78}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xfe05, 0xac3d}}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20, {0x8, 0x3ff}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_vmresume={0x130, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x8b, 0x1, 0x33d2ff64, 0x3}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0xa4, 0x4, 0x19, 0x6}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x65, 0x0, 0x803}}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host64=0x2c00, 0x10000, 0x7f, 0x3}}, @nested_load_syzos={0x136, 0x90, {0x3, 0x0, [@wr_crn={0x67, 0x20}, @enable_nested={0x12c, 0x18}, @wr_drn={0x68, 0x20, {0x1, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x1}]}}], 0x2d0})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000500)={"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"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000900)={{r3}, "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"})
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000001900), &(0x7f0000001940)=0xc)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2d, &(0x7f0000001980)=0x2, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x90, r5, 0x8, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x16, 0x68a}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40010}, 0x1)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0xa02007}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
fsopen(&(0x7f0000001c80)='aufs\x00', 0x0)
sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000001d80)={&(0x7f0000001cc0), 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x814)
close_range(r2, r1, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001dc0)=0x30, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x800, 0x100, 0xa}, 0x18)
openat(r7, &(0x7f0000001e80)='./file0\x00', 0x40, 0x18)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001f00)={0x1, &(0x7f0000001ec0)=[{}]})
sendmsg$inet(r6, &(0x7f0000002700)={&(0x7f0000001f40)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000002540)=[{&(0x7f0000001f80)="069f5f620e23500a8e0e5fabd6f8f26d5c0a0d407bb5b90d5eb286ddd628bda6206da6464595c20b6d46053c7cb4ed0683e36f27058e610987db6853f07bbb33f5dbca7f80ddda746d9288607faa39eb5357078a9e3071325b02ff243b6802861684b39c5578ac94a19c79b5401b8d3eb201387865c929e8dcd1cd71327a98f12d000f46d49304b0617715d6a1ed73e81343c6861c480ad660d924defc9e759bf68d4ebbd8c25051268e006dd8718e07d6c5940e79116bc571031723b9fa5fa975bb1b7ac401c9dd700fe54c7199b66a", 0xd0}, {&(0x7f0000002080)="10702b8e8ba062e475eddb89b4121a2cce198233ecef4ea7bc2d54c4fbbfbf558d63b49a651e58028f300d543c3b9e90e4148eb14b1ee111086ca4c75173378c448889308f85e0574857425efee89a0bfd0b8f35e8b2eea74ca7d17bae8cd9bbba4c", 0x62}, {&(0x7f0000002100)="b15873519d2d4609e5639d9df980d0980fafd07f6e734ca26112bb303fbdc4891b7fb91f2af62e294bc0e112a73843c70fefa099bcd674e61cbde246d7cdc343a22e25ed8481c74dbc872123a5388edd750f1e4a827de163dafdc224ffb66621216177cac309c97b692f73377d009b0244279bc470fb52ef19e3b6d5f12020283f18e211e65186899fb65a9186ec65b6f65d1256352b182ac0cc0a12b2c3cf0bc50b8eac6120c05eebbd1c8ab80c2ece6912ba709da3e794b9", 0xb9}, {&(0x7f00000021c0)="62ec1d4266572b308618b468a8c0dac06c6d259a16d0f9fe3448931847d6944f6747f66c7860249c9e87d2bf39af3448aa7fb2f2196926f3f3abe978c5616afe27ddbbb13c30527642cf911bfd3441d4be367a8a16102144c7760af552c1e9773b26d6761705b3c5a753435341c174c9538fc753977b2b8f171c648a3459015cc86146a17a96cc77c27a7d9453c20428db", 0x91}, {&(0x7f0000002280)="8aa76ba2a271874b302caf26b1074115b8dd630fc63eb0d73fa47d4202da2ad4b4a9c1f774fcf51dd271ba1167ef33f605", 0x31}, {&(0x7f00000022c0)="2c72826974cc800c4e9eb4c2c5b9ce222d7390388bd72ebf5aafd54188c3cf45d0ce1c462bcf12dfa6b7743082dbe12f99d509d4a2b14439d2c3e38fa88ef0b60f123ede2208e9de53b33e44d066c403a2141f8a2e3dce53d1d732979d2df3b3f893f109d3635159503024677c5dad963654f146709bc0a574380a5354fdde14cf7d5ffb93f22f84805acaaa00e4ed7fca07cb50da53c1a589589b99e319a052511cb34694e2a6fe06ec71f457290e1f6a6fa4b78acd05fc53841f4d33efc383d2761b4c243f560cecfd49f89021e374493d29096e0f7c", 0xd7}, {&(0x7f00000023c0)="538a89fdf908cfe97b6caecdc9a9a7829f51c5895dd18212e012e9fad4bcffc76346546dc8eceda32640deb4846149abb743e5a5de08ada1599e26571257da11e257f0eba753a3f4", 0x48}, {&(0x7f0000002440)="acfbd4f8e98d4a51a60e52c2b232f644edf412950dd99591faa5a5396350730315e8c13a6ec628b6445261b2620258c2d8dedafe74dc7d5db378aa55289dbe4088cf543f368e29f4b08429de11beb1d5de75031d1f3cea720a0a0eb7f7b2dc048d2679b1a20774650e6e7cb8b7111929998492709e9d30022b1473987f6f7410b4132e12aff2b169dd17d49ae534fb1d28320d45fc58ea557cc5aca63c2ede67be16b07c057639b65ae2b72ebbefe1ae8f3d7deaa7af8529e2972644da59263d", 0xc0}, {&(0x7f0000002500)="86d2d3699aab42c07fd9decd2e974504d07df8b656784f0525c66521d35dc4284cc71afac180fde009522d5a9adf114cc2904d31dab21ca0822a", 0x3a}], 0x9, &(0x7f0000002600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x2c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}, @generic={0x83, 0x6, "2e8122e4"}, @noop, @noop, @timestamp={0x44, 0x20, 0x41, 0x0, 0x1, [0x0, 0x5, 0xa, 0xc01, 0x0, 0x3, 0xfffffff7]}, @rr={0x7, 0xb, 0x97, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x15}]}]}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1f, 0xf7, [@multicast2, @local, @empty, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x3f}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0xd0}, 0x48000)
r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002a80)={0x0, &(0x7f0000002740)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @out_dx={0x6a, 0x28, {0x8293, 0x2, 0x5}}, @nested_vmlaunch={0x12f, 0x18}, @code={0xa, 0x5d, {"0f42529a260f06c7442400f8000000c744240200000000ff1c2448b800000080000000000f23d00f21f835200000090f23f8c4a225475d0065f247ad66ba4300ed0f320f01c23ba700880000"}}, @out_dx={0x6a, 0x28, {0x3e91, 0x5, 0x800}}, @uexit={0x0, 0x18, 0xffffffffffffffff}, @uexit={0x0, 0x18, 0x194c}, @nested_amd_vmload={0x182, 0x18, 0x1}, @uexit={0x0, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x2ce}}, @wrmsr={0x65, 0x20, {0xab6, 0x9}}, @out_dx={0x6a, 0x28, {0x1e18, 0x3, 0x1}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x8, 0x80}}, @set_irq_handler={0xc8, 0x20, {0x78, 0x1}}, @code={0xa, 0x6b, {"48b8dac60000000000000f23c80f21f8350000b0000f23f866b830010f00d02e3e460f789104000000d9f6c4817e5bb4d208000000c4422946b20d00000066ba6100ec6e460f01788766baf80cb854ba3f81ef66bafc0cb009ee"}}, @nested_vmresume={0x130, 0x18}, @rdmsr={0x66, 0x18, {0x40000083}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0x7, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x2c, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @wrmsr={0x65, 0x20, {0xda0, 0x3}}], 0x320})
ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000002ac0)={0x1, 0x0, [{0x4b564d02, 0x0, 0xe}]})
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000002b00)=0x2)
shmdt(0x0)

158.98838ms ago: executing program 34 (id=374):
r0 = socket$kcm(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'team_slave_1\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x0, 0xa, "aca6f62276d1"}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1a040, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'veth1_to_bridge\x00', @random="e6e1239d9eb1"})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000})
r3 = userfaultfd(0x801)
timer_create(0x8, 0x0, &(0x7f0000000000))
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3})
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = gettid()
r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00')
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3f2}}, 0x30)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000))
socket$kcm(0xa, 0x1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'team_slave_1\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x0, 0xa, "aca6f62276d1"}}) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1a040, 0x0) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000001c0)={'veth1_to_bridge\x00', @random="e6e1239d9eb1"}) (async)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) (async)
userfaultfd(0x801) (async)
timer_create(0x8, 0x0, &(0x7f0000000000)) (async)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) (async)
fchdir(r1) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
gettid() (async)
syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') (async)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3f2}}, 0x30) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) (async)

0s ago: executing program 35 (id=376):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x12, &(0x7f0000000080)=@conn_svc_rsp={0x0, 0x0, 0xa, "99e3f675", {0x3, 0x104, 0x0, 0x8, 0xde, 0x7, 0x40}})

kernel console output (not intermixed with test programs):


[  130.975187][    T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  130.975211][    T9] usb 3-1: config 0 has no interface number 0
[  130.975319][    T9] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  130.975342][    T9] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  130.977652][    T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  130.977687][    T9] usb 3-1: config 0 has no interface number 0
[  130.978122][    T9] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  130.978145][    T9] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  131.030902][    T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  131.030932][    T9] usb 3-1: config 0 has no interface number 0
[  131.031040][    T9] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  131.031061][    T9] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  131.049435][    T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  131.049464][    T9] usb 3-1: config 0 has no interface number 0
[  131.049567][    T9] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  131.049590][    T9] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  131.064534][    T9] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  131.064620][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.064640][    T9] usb 3-1: Product: syz
[  131.064654][    T9] usb 3-1: Manufacturer: syz
[  131.064668][    T9] usb 3-1: SerialNumber: syz
[  131.188832][ T1249] hso 2-1:0.0: Failed to find BULK eps
[  131.213711][    T9] usb 3-1: config 0 descriptor??
[  131.237485][    T9] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz)
[  131.511344][ T1249] usb 2-1: USB disconnect, device number 15
[  131.601254][ T5780] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  131.629599][    T9] etas_es58x 3-1:0.2: could not retrieve the product info string
[  131.698915][ T6167] nbd: must specify at least one socket
[  131.747264][ T5780] usb 1-1: Using ep0 maxpacket: 8
[  131.750163][ T5780] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  131.750201][ T5780] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  131.750229][ T5780] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  131.750254][ T5780] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.750284][ T5780] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  131.750298][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.764897][  T823] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  131.813243][    T9] usb 3-1: USB disconnect, device number 9
[  131.822338][    T9] etas_es58x 3-1:0.2: Disconnecting syz syz
[  132.003788][ T5780] usb 1-1: GET_CAPABILITIES returned 0
[  132.003847][ T5780] usbtmc 1-1:16.0: can't read capabilities
[  132.020281][  T823] usb 4-1: Using ep0 maxpacket: 32
[  132.032724][  T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  132.032758][  T823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  132.032798][  T823] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  132.032821][  T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.114366][  T823] usb 4-1: config 0 descriptor??
[  132.231655][ T5780] usb 1-1: USB disconnect, device number 14
[  132.352527][ T6176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.353606][ T6176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.549421][  T823] usbhid 4-1:0.0: can't add hid device: -71
[  132.549543][  T823] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  132.628662][ T5778] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  132.648170][  T823] usb 4-1: USB disconnect, device number 16
[  132.705853][ T6186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  132.706538][ T6186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  132.757315][ T5778] usb 2-1: device descriptor read/64, error -71
[  133.027533][ T5778] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  133.154529][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  133.154612][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  133.163787][ T5778] usb 2-1: device descriptor read/64, error -71
[  133.247534][ T5780] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  133.267751][ T5778] usb usb2-port1: attempt power cycle
[  133.302799][ T6199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.127'.
[  133.369637][ T6201] tipc: Can't bind to reserved service type 0
[  133.397596][ T5780] usb 3-1: Using ep0 maxpacket: 32
[  133.399746][ T5780] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  133.399769][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  133.399786][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  133.399800][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  133.399815][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  133.402029][ T5780] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  133.402049][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.402061][ T5780] usb 3-1: Product: syz
[  133.402070][ T5780] usb 3-1: Manufacturer: syz
[  133.402079][ T5780] usb 3-1: SerialNumber: syz
[  133.406490][ T5780] usb 3-1: config 0 descriptor??
[  133.503911][  T823] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  133.607230][ T5778] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  133.628364][ T5778] usb 2-1: device descriptor read/8, error -71
[  133.638759][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  133.660241][  T823] usb 4-1: unable to get BOS descriptor or descriptor too short
[  133.661819][  T823] usb 4-1: config 0 has no interfaces?
[  133.664852][  T823] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.664884][  T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.665125][  T823] usb 4-1: Product: syz
[  133.665140][  T823] usb 4-1: Manufacturer: syz
[  133.665153][  T823] usb 4-1: SerialNumber: syz
[  133.726580][  T823] usb 4-1: config 0 descriptor??
[  133.791176][    T9] usb 1-1: Using ep0 maxpacket: 32
[  133.803345][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.803449][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  133.803468][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.803484][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.805840][    T9] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  133.805866][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.805922][    T9] usb 1-1: Product: syz
[  133.805932][    T9] usb 1-1: Manufacturer: syz
[  133.805941][    T9] usb 1-1: SerialNumber: syz
[  133.830203][    T9] usb 1-1: config 0 descriptor??
[  133.871131][    T9] usb 1-1: no audio or video endpoints found
[  133.878511][ T5778] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  133.903676][ T5778] usb 2-1: device descriptor read/8, error -71
[  133.944989][ T6197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.945679][ T6197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.985927][ T5726] usb 4-1: USB disconnect, device number 17
[  134.008629][ T5778] usb usb2-port1: unable to enumerate USB device
[  134.040467][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.046803][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.089818][ T5778] usb 1-1: USB disconnect, device number 15
[  134.189844][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.192146][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.192660][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.193129][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.193604][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.194901][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.195415][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.195901][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.199644][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.203290][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.204123][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.204560][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.205025][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.206172][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.207735][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.209530][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.209981][ T5780] iforce 3-1:0.0: usb_submit_urb failed: -71
[  134.210024][ T5780] input input7: Timeout waiting for response from device.
[  134.240589][ T5780] usb 3-1: USB disconnect, device number 10
[  134.477273][ T5346] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  134.627215][ T5346] usb 4-1: Using ep0 maxpacket: 8
[  134.633250][ T5346] usb 4-1: config 0 has an invalid interface number: 6 but max is 0
[  134.633281][ T5346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.633300][ T5346] usb 4-1: config 0 has no interface number 0
[  134.633345][ T5346] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  134.633368][ T5346] usb 4-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  134.651687][ T5346] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=b7.12
[  134.651725][ T5346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.651745][ T5346] usb 4-1: Product: syz
[  134.651759][ T5346] usb 4-1: Manufacturer: syz
[  134.651773][ T5346] usb 4-1: SerialNumber: syz
[  134.669832][ T5346] usb 4-1: config 0 descriptor??
[  134.910839][ T5778] usb 4-1: USB disconnect, device number 18
[  135.299306][ T5726] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  135.590817][ T5726] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  135.590850][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.590871][ T5726] usb 1-1: Product: syz
[  135.590885][ T5726] usb 1-1: Manufacturer: syz
[  135.590899][ T5726] usb 1-1: SerialNumber: syz
[  135.817728][  T823] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  135.936833][ T6221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.134'.
[  135.973308][ T6221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.134'.
[  136.030663][  T823] usb 3-1: Using ep0 maxpacket: 16
[  136.200831][ T5726] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  136.200913][ T5726] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  136.229608][  T823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.229636][  T823] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  136.283029][  T823] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40
[  136.283129][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.283152][  T823] usb 3-1: Product: syz
[  136.283167][  T823] usb 3-1: Manufacturer: syz
[  136.283184][  T823] usb 3-1: SerialNumber: syz
[  137.023165][ T6227] netlink: 'syz.3.135': attribute type 24 has an invalid length.
[  137.023189][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.135'.
[  137.364184][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.364912][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.398246][ T6219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.399285][ T6219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.906731][  T823] usb 3-1: 0:1 : does not exist
[  137.906868][  T823] usb 3-1: BAAD MICROPHONE c_chmask mismatch
[  138.231575][ T6239] gfs2: error -5 reading superblock
[  138.238026][ T5726] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  138.446811][ T5726] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  138.450247][ T5726] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  138.450304][ T5726] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  138.451228][ T5726] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  138.511893][ T5726] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  138.561109][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[  138.561580][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[  138.562039][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[  138.567982][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[  138.568415][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[  138.568837][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[  138.569238][ T6246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.140'.
[  138.661276][ T5726] usb 1-1: USB disconnect, device number 16
[  138.666017][ T6249] capability: warning: `syz.3.142' uses deprecated v2 capabilities in a way that may be insecure
[  138.944825][  T823] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  138.960606][  T823] usb 3-1: USB disconnect, device number 11
[  138.991856][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.317317][  T823] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  139.477262][  T823] usb 3-1: Using ep0 maxpacket: 8
[  139.484758][  T823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.484819][  T823] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  139.535543][ T5725] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  139.539675][  T823] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  139.539706][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.539726][  T823] usb 3-1: Product: syz
[  139.539739][  T823] usb 3-1: Manufacturer: syz
[  139.539753][  T823] usb 3-1: SerialNumber: syz
[  139.576390][  T823] usb 3-1: config 0 descriptor??
[  139.589361][  T823] radioshark 3-1:0.0: Invalid radioSHARK device
[  139.589401][  T823] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[  139.589995][  T823] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  139.730370][ T5725] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  139.730407][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.771865][ T5725] usb 4-1: config 0 descriptor??
[  139.789991][ T5725] cp210x 4-1:0.0: cp210x converter detected
[  139.823686][ T6243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.824276][ T6243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.907250][  T823] usb 3-1: USB disconnect, device number 12
[  139.922939][ T5726] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  140.113639][ T5726] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  140.113661][ T5726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.113672][ T5726] usb 2-1: config 0 has no interface number 0
[  140.113702][ T5726] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  140.116414][ T5726] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  140.116437][ T5726] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  140.231013][ T5726] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  140.231146][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.231169][ T5726] usb 2-1: Product: syz
[  140.231185][ T5726] usb 2-1: Manufacturer: syz
[  140.231200][ T5726] usb 2-1: SerialNumber: syz
[  140.263546][ T5726] usb 2-1: config 0 descriptor??
[  140.501122][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.501857][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.506832][ T5726] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71
[  140.572344][ T5725] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71
[  140.572378][ T5725] cp210x 4-1:0.0: querying part number failed
[  140.581680][ T5726] usb 2-1: USB disconnect, device number 20
[  140.658321][ T5780] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  140.810065][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.810103][ T5780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.810144][ T5780] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  140.810169][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.820890][ T5725] usb 4-1: cp210x converter now attached to ttyUSB0
[  140.873010][ T5780] usb 1-1: config 0 descriptor??
[  140.896614][ T5725] usb 4-1: USB disconnect, device number 19
[  140.947232][ T5778] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  141.129924][ T5778] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  141.129960][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.130037][ T5778] usb 3-1: Product: syz
[  141.130052][ T5778] usb 3-1: Manufacturer: syz
[  141.130067][ T5778] usb 3-1: SerialNumber: syz
[  141.157187][ T5725] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  141.195945][ T5725] cp210x 4-1:0.0: device disconnected
[  141.458243][ T5780] playstation 0003:054C:0DF2.0001: collection stack underflow
[  141.458280][ T5780] playstation 0003:054C:0DF2.0001: item 0 4 0 12 parsing failed
[  141.462351][ T5780] playstation 0003:054C:0DF2.0001: Parse failed
[  141.462406][ T5780] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -22
[  141.625807][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  141.625876][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  142.421931][ T6306] netlink: 'syz.3.158': attribute type 16 has an invalid length.
[  142.421957][ T6306] netlink: 'syz.3.158': attribute type 3 has an invalid length.
[  142.421970][ T6306] __nla_validate_parse: 59 callbacks suppressed
[  142.421981][ T6306] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.158'.
[  142.448456][ T6306] netlink: 320 bytes leftover after parsing attributes in process `syz.3.158'.
[  142.656352][ T6311] binder: BC_ATTEMPT_ACQUIRE not supported
[  142.656370][ T6311] binder: 6310:6311 ioctl c0306201 200000000ac0 returned -22
[  142.710570][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'.
[  143.427331][ T5619] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  143.531849][ T5726] usb 1-1: USB disconnect, device number 17
[  143.601594][ T5619] usb 2-1: Using ep0 maxpacket: 32
[  143.613958][ T5619] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  143.613990][ T5619] usb 2-1: config 0 has no interface number 0
[  143.619544][ T5619] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  143.619574][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.619594][ T5619] usb 2-1: Product: syz
[  143.619607][ T5619] usb 2-1: Manufacturer: syz
[  143.619620][ T5619] usb 2-1: SerialNumber: syz
[  143.693922][ T5619] usb 2-1: config 0 descriptor??
[  144.143811][ T5619] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  144.143845][ T5619] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  144.199096][ T6338] netlink: 160 bytes leftover after parsing attributes in process `syz.3.169'.
[  144.274099][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  144.274165][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  144.337267][ T5778] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  144.424915][ T5778] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  144.518629][ T5778] usb 3-1: USB disconnect, device number 13
[  144.857237][ T5778] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  145.009289][ T5778] usb 3-1: Using ep0 maxpacket: 8
[  145.017675][ T5778] usb 3-1: unable to get BOS descriptor or descriptor too short
[  145.032861][ T5778] usb 3-1: config 0 interface 0 has no altsetting 0
[  145.044421][ T5778] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=22.d5
[  145.044456][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.044477][ T5778] usb 3-1: Product: syz
[  145.044493][ T5778] usb 3-1: Manufacturer: syz
[  145.044508][ T5778] usb 3-1: SerialNumber: syz
[  145.086238][ T5778] usb 3-1: config 0 descriptor??
[  145.392990][ T5778] pwc: Logitech ViewPort AV 100 webcam detected.
[  145.412129][ T5778] pwc: Failed to set LED on/off time (-71)
[  145.412590][ T5778] pwc: send_video_command error -71
[  145.412602][ T5778] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  145.412726][ T5778] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  145.450734][ T5778] usb 3-1: USB disconnect, device number 14
[  145.643446][ T6366] sctp: [Deprecated]: syz.3.175 (pid 6366) Use of int in max_burst socket option.
[  145.643446][ T6366] Use struct sctp_assoc_value instead
[  146.507283][ T5725] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  146.629138][ T5778] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  146.673702][ T5725] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  146.673963][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.673986][ T5725] usb 4-1: Product: syz
[  146.674002][ T5725] usb 4-1: Manufacturer: syz
[  146.674016][ T5725] usb 4-1: SerialNumber: syz
[  146.788546][ T5778] usb 3-1: Using ep0 maxpacket: 8
[  146.796411][ T5778] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  146.796446][ T5778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.796467][ T5778] usb 3-1: Product: syz
[  146.796483][ T5778] usb 3-1: Manufacturer: syz
[  146.796498][ T5778] usb 3-1: SerialNumber: syz
[  146.802542][ T5619] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  146.802853][ T5619] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  146.860360][ T5619] usb 2-1: USB disconnect, device number 21
[  146.881672][ T5778] usb 3-1: config 0 descriptor??
[  147.092565][ T5778] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  147.334661][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  147.334725][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  147.393400][ T5778] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  147.410952][ T5778] usb 3-1: USB disconnect, device number 15
[  147.545526][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.577608][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.857769][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'.
[  147.878890][ T5617] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  148.057326][ T5617] usb 3-1: Using ep0 maxpacket: 16
[  148.063527][ T5617] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.063663][ T5617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  148.063694][ T5617] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  148.066803][ T5617] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  148.066900][ T5617] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  148.066923][ T5617] usb 3-1: Manufacturer: syz
[  148.090986][ T5617] usb 3-1: config 0 descriptor??
[  148.793617][ T6414] nftables ruleset with unbound chain
[  148.820808][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  148.821511][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  148.824528][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  148.824590][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  148.861638][ T5725] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  148.923118][ T5725] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  148.964091][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.974525][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.034874][ T5725] usb 4-1: USB disconnect, device number 20
[  149.392786][ T6430] fuse: Unknown parameter 'fR'
[  149.517239][ T5346] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  149.566864][ T6434] netlink: 160 bytes leftover after parsing attributes in process `syz.3.191'.
[  149.604615][ T6435] netlink: 'syz.0.189': attribute type 75 has an invalid length.
[  149.667761][ T5346] usb 2-1: Using ep0 maxpacket: 8
[  149.670318][ T5346] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 132, changing to 11
[  149.670355][ T5346] usb 2-1: config 0 interface 0 has no altsetting 0
[  149.670389][ T5346] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[  149.670414][ T5346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.717874][ T5346] usb 2-1: config 0 descriptor??
[  150.347233][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  150.570041][ T6437] netlink: 52 bytes leftover after parsing attributes in process `syz.3.192'.
[  150.623757][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  150.623875][    T9] usb 4-1: no configurations
[  150.623884][    T9] usb 4-1: can't read configurations, error -22
[  150.654120][ T5725] usb 3-1: USB disconnect, device number 16
[  151.670083][ T6454] pim6reg: entered allmulticast mode
[  151.828704][ T6458] team0: entered allmulticast mode
[  151.828728][ T6458] team_slave_0: entered allmulticast mode
[  151.828755][ T6458] team_slave_1: entered allmulticast mode
[  152.269171][ T5778] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  152.312481][ T5346] usbhid 2-1:0.0: can't add hid device: -71
[  152.312624][ T5346] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  152.325065][ T5346] usb 2-1: USB disconnect, device number 22
[  152.441305][ T5778] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  152.441334][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.441347][ T5778] usb 4-1: Product: syz
[  152.441356][ T5778] usb 4-1: Manufacturer: syz
[  152.441364][ T5778] usb 4-1: SerialNumber: syz
[  152.641433][    T9] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  152.725749][ T5778] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  152.795771][ T5778] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  152.842132][    T9] usb 1-1: device descriptor read/64, error -71
[  152.842217][ T5346] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  152.959293][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'.
[  153.054278][ T5346] usb 2-1: Using ep0 maxpacket: 8
[  153.065879][ T5346] usb 2-1: unable to get BOS descriptor or descriptor too short
[  153.081351][ T5346] usb 2-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40
[  153.081382][ T5346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.081394][ T5346] usb 2-1: Product: syz
[  153.081403][ T5346] usb 2-1: Manufacturer: syz
[  153.081413][ T5346] usb 2-1: SerialNumber: syz
[  153.112467][    T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  153.181791][ T5778] usb 4-1: USB disconnect, device number 23
[  153.258206][    T9] usb 1-1: device descriptor read/64, error -71
[  153.370749][    T9] usb usb1-port1: attempt power cycle
[  153.405994][ T6463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'.
[  153.768699][    T9] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  153.774363][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.792117][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.792981][    T9] usb 1-1: device descriptor read/8, error -71
[  153.814380][ T6463] netlink: 'syz.1.199': attribute type 2 has an invalid length.
[  153.814472][ T6463] netlink: 'syz.1.199': attribute type 8 has an invalid length.
[  153.814487][ T6463] netlink: 132 bytes leftover after parsing attributes in process `syz.1.199'.
[  153.943894][ T5346] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  154.041348][    T9] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  154.061498][    T9] usb 1-1: device descriptor read/8, error -71
[  154.178157][    T9] usb usb1-port1: unable to enumerate USB device
[  154.252613][ T5346] usb 2-1: USB disconnect, device number 23
[  154.732317][ T5695] udevd[5695]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.823421][ T6484] binder: 6483:6484 ioctl c018620c 200000000280 returned -1
[  155.169164][ T5346] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  155.320976][ T5346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.321016][ T5346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.321058][ T5346] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  155.321085][ T5346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.377451][ T5346] usb 2-1: config 0 descriptor??
[  155.537286][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  155.687238][    T9] usb 4-1: Using ep0 maxpacket: 8
[  155.703045][    T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  155.703172][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.703195][    T9] usb 4-1: Product: syz
[  155.703210][    T9] usb 4-1: Manufacturer: syz
[  155.703226][    T9] usb 4-1: SerialNumber: syz
[  155.740019][ T5780] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  155.896878][ T5346] hid-led 0003:27B8:01ED.0002: unbalanced collection at end of report description
[  155.900939][ T5780] usb 1-1: Using ep0 maxpacket: 32
[  155.912773][ T5780] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  155.915796][ T5780] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  155.915823][ T5780] usb 1-1: config 0 has no interface number 0
[  155.920287][ T5780] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  155.920397][ T5780] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  155.935317][ T5780] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  155.935347][ T5780] usb 1-1: config 0 has no interface number 0
[  155.937601][ T5780] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  155.937630][ T5780] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  155.993689][ T5780] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  155.993721][ T5780] usb 1-1: config 0 has no interface number 0
[  155.996202][ T5780] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  155.996230][ T5780] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  156.032168][ T5780] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  156.032201][ T5780] usb 1-1: config 0 has no interface number 0
[  156.043934][ T5780] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  156.043966][ T5780] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  156.072159][ T5780] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  156.072191][ T5780] usb 1-1: config 0 has no interface number 0
[  156.072480][ T5780] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  156.072508][ T5780] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  156.072846][ T5346] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -22
[  156.074348][ T5780] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  156.074373][ T5780] usb 1-1: config 0 has no interface number 0
[  156.077903][ T5780] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  156.077935][ T5780] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  156.104262][ T5780] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  156.104294][ T5780] usb 1-1: config 0 has no interface number 0
[  156.112182][ T5780] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  156.112213][ T5780] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  156.146340][ T5780] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  156.146368][ T5780] usb 1-1: config 0 has no interface number 0
[  156.153779][ T5780] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  156.153814][ T5780] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  156.244857][ T5780] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  156.244891][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.244911][ T5780] usb 1-1: Product: syz
[  156.244926][ T5780] usb 1-1: Manufacturer: syz
[  156.244940][ T5780] usb 1-1: SerialNumber: syz
[  156.307744][    T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  156.309525][    T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  156.367000][ T5346] usb 2-1: USB disconnect, device number 24
[  156.380865][ T5780] usb 1-1: config 0 descriptor??
[  156.441818][ T5780] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz)
[  156.592322][ T5780] etas_es58x 1-1:0.2: could not retrieve the product info string
[  156.785380][    T9] usb 4-1: USB disconnect, device number 24
[  156.959351][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.984347][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.033007][ T5780] usb 1-1: USB disconnect, device number 22
[  157.052120][ T5780] etas_es58x 1-1:0.2: Disconnecting syz syz
[  157.076783][ T6521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.215'.
[  157.076810][ T6521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.215'.
[  157.407239][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  157.519671][ T5767] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  157.587871][    T9] usb 4-1: Using ep0 maxpacket: 32
[  157.595167][    T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  157.595199][    T9] usb 4-1: config 0 has no interface number 0
[  157.595260][    T9] usb 4-1: config 0 interface 184 has no altsetting 0
[  157.620347][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  157.620377][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.620398][    T9] usb 4-1: Product: syz
[  157.620413][    T9] usb 4-1: Manufacturer: syz
[  157.620428][    T9] usb 4-1: SerialNumber: syz
[  157.671492][    T9] usb 4-1: config 0 descriptor??
[  157.708060][ T5767] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  157.708094][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.788333][ T5767] usb 2-1: config 0 descriptor??
[  157.947313][ T5780] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  158.040323][ T5767] usb 2-1: string descriptor 0 read error: -71
[  158.078245][ T5767] usb 2-1: USB disconnect, device number 25
[  158.112665][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  158.112701][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  158.112721][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  158.114950][    T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -61
[  158.117236][ T5780] usb 1-1: Using ep0 maxpacket: 32
[  158.119672][ T5780] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  158.119700][ T5780] usb 1-1: config 0 has no interface number 0
[  158.119749][ T5780] usb 1-1: config 0 interface 12 has no altsetting 0
[  158.162997][ T5780] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  158.163019][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.163032][ T5780] usb 1-1: Product: syz
[  158.163040][ T5780] usb 1-1: Manufacturer: syz
[  158.163049][ T5780] usb 1-1: SerialNumber: syz
[  158.262415][ T6538] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.301743][ T5780] usb 1-1: config 0 descriptor??
[  158.846385][ T6552] random: crng reseeded on system resumption
[  158.966131][ T5780] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  158.966197][ T5780] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  158.966216][ T5780] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  158.966318][ T5780] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  159.040948][ T5780] usb 1-1: USB disconnect, device number 23
[  159.121670][ T5725] usb 4-1: USB disconnect, device number 25
[  159.251596][ T6557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.224'.
[  159.256174][ T6557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.224'.
[  159.454917][ T6563] comedi comedi2: board detection failed
[  159.456069][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'.
[  159.785416][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'.
[  159.828562][ T5780] hid (null): unknown global tag 0xe
[  159.829016][ T5780] hid (null): unknown global tag 0xc
[  159.916718][ T5780] hid-generic 004A:0008:0009.0003: unexpected long global item
[  159.943971][ T5780] hid-generic 004A:0008:0009.0003: probe with driver hid-generic failed with error -22
[  160.037229][ T5767] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  160.206218][ T5767] usb 4-1: Using ep0 maxpacket: 16
[  160.216472][ T5767] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  160.216515][ T5767] usb 4-1: config 0 has no interface number 0
[  160.216638][ T5767] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  160.216666][ T5767] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  160.259891][ T5767] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  160.259924][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.259946][ T5767] usb 4-1: Product: syz
[  160.259961][ T5767] usb 4-1: Manufacturer: syz
[  160.259976][ T5767] usb 4-1: SerialNumber: syz
[  160.300585][ T5767] usb 4-1: config 0 descriptor??
[  160.301460][ T6570] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  160.301586][ T6570] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  160.319185][ T5780] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  160.467208][ T5780] usb 1-1: Using ep0 maxpacket: 32
[  160.489491][ T5780] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  160.489586][ T5780] usb 1-1: config 0 has no interface number 0
[  160.489636][ T5780] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  160.489659][ T5780] usb 1-1: config 0 interface 1 has no altsetting 0
[  160.494476][ T5780] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  160.494574][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.494597][ T5780] usb 1-1: Product: syz
[  160.494612][ T5780] usb 1-1: Manufacturer: syz
[  160.494627][ T5780] usb 1-1: SerialNumber: syz
[  160.506312][ T6570] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  160.506445][ T6570] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  160.516774][ T5780] usb 1-1: config 0 descriptor??
[  160.756807][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.761349][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.839257][ T5780] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  160.839293][ T5780] cx231xx 1-1:0.1: Not found matching IAD interface
[  160.889624][ T5780] usb 1-1: USB disconnect, device number 24
[  160.944492][ T5767] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  160.944527][ T5767] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61
[  160.944866][ T5767] asix 4-1:0.251: probe with driver asix failed with error -61
[  161.146520][    T9] usb 4-1: USB disconnect, device number 26
[  161.207338][ T5767] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  161.362997][ T5767] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  161.363029][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.363041][ T5767] usb 3-1: Product: syz
[  161.363050][ T5767] usb 3-1: Manufacturer: syz
[  161.363059][ T5767] usb 3-1: SerialNumber: syz
[  162.448953][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  162.449018][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  163.087803][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  163.087866][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  163.104155][ T5767] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  163.158148][ T5767] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  163.195701][ T5767] usb 3-1: USB disconnect, device number 17
[  163.267235][ T5619] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  163.332952][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.248'.
[  163.430379][ T5619] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  163.430412][ T5619] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.430433][ T5619] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  163.430495][ T5619] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  163.432409][ T5619] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  163.432440][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  163.432462][ T5619] usb 4-1: Product: syz
[  163.432478][ T5619] usb 4-1: Manufacturer: syz
[  163.523509][ T5619] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  163.549775][ T5780] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  163.749306][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.750012][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.752286][ T5780] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  163.752322][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.752341][ T5780] usb 2-1: config 0 has no interface number 0
[  163.752384][ T5780] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  163.752415][ T5780] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[  163.752438][ T5780] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.819741][ T5780] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  163.819772][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.819792][ T5780] usb 2-1: Product: syz
[  163.819805][ T5780] usb 2-1: Manufacturer: syz
[  163.819820][ T5780] usb 2-1: SerialNumber: syz
[  163.847414][ T5619] usb 4-1: USB disconnect, device number 27
[  163.914192][ T5780] usb 2-1: config 0 descriptor??
[  163.916522][ T6630] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  163.958725][ T5780] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  163.965478][ T5780] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  163.986729][ T5780] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  164.172420][ T5780] usb 2-1: USB disconnect, device number 26
[  164.282602][ T5780] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  164.291901][ T5780] cyberjack 2-1:0.69: device disconnected
[  164.397268][ T5619] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  164.568594][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  164.568630][ T5619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.568669][ T5619] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  164.568693][ T5619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.574300][ T5619] usb 3-1: config 0 descriptor??
[  164.772698][ T5346] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  164.806290][ T6635] netlink: 'syz.2.251': attribute type 11 has an invalid length.
[  164.920064][ T5346] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  164.920102][ T5346] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  164.920131][ T5346] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  164.924331][ T5346] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  164.924364][ T5346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.924386][ T5346] usb 4-1: Product: syz
[  164.924401][ T5346] usb 4-1: Manufacturer: syz
[  164.924416][ T5346] usb 4-1: SerialNumber: syz
[  165.070664][ T5346] usb 4-1: config 0 descriptor??
[  165.076179][ T6643] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  165.076358][ T6643] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  165.081628][ T5346] usb 4-1: ucan: probing device on interface #0
[  165.246663][ T5619] usbhid 3-1:0.0: can't add hid device: -71
[  165.246855][ T5619] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  165.266927][ T5619] usb 3-1: USB disconnect, device number 18
[  165.849543][ T6653] ªªªªªª: renamed from vlan0 (while UP)
[  166.014386][   T38] audit: type=1326 audit(1780235831.211:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6641 comm="syz.3.254" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01234ece59 code=0x0
[  166.018203][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  166.019481][ T5346] usb 4-1: ucan: device reported invalid tx-fifo size
[  166.019500][ T5346] usb 4-1: ucan: probe failed; try to update the device firmware
[  166.168139][    T9] usb 1-1: Using ep0 maxpacket: 8
[  166.170086][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.210524][    T9] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  166.210556][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.210568][    T9] usb 1-1: Product: syz
[  166.210577][    T9] usb 1-1: Manufacturer: syz
[  166.210586][    T9] usb 1-1: SerialNumber: syz
[  166.220751][    T9] usb 1-1: config 0 descriptor??
[  166.265600][    T9] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  166.464491][ T5619] usb 1-1: USB disconnect, device number 25
[  166.537222][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  166.557247][ T5346] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  166.690583][    T9] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  166.690616][    T9] usb 3-1: config 0 has no interface number 0
[  166.690666][    T9] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  166.690695][    T9] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  166.692988][    T9] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  166.693018][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.693039][    T9] usb 3-1: Product: syz
[  166.693054][    T9] usb 3-1: Manufacturer: syz
[  166.693070][    T9] usb 3-1: SerialNumber: syz
[  166.704390][    T9] usb 3-1: config 0 descriptor??
[  166.706414][ T6665] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  166.720754][    T9] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  166.753056][ T5346] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  166.753087][ T5346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.753106][ T5346] usb 2-1: Product: syz
[  166.753120][ T5346] usb 2-1: Manufacturer: syz
[  166.753134][ T5346] usb 2-1: SerialNumber: syz
[  167.112008][    T9] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  167.285370][ T5346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  167.285444][ T5346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  167.472743][ T6668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.480596][ T6668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.497235][ T5619] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  167.623826][ T6668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.261'.
[  167.661353][    T9] usb 4-1: USB disconnect, device number 28
[  167.682225][ T5619] usb 1-1: unable to get BOS descriptor or descriptor too short
[  167.683786][ T5619] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  167.683813][ T5619] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  167.683877][ T5619] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  167.734281][ T5619] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  167.734317][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.734337][ T5619] usb 1-1: Product: syz
[  167.734353][ T5619] usb 1-1: Manufacturer: syz
[  167.734368][ T5619] usb 1-1: SerialNumber: syz
[  168.072901][ T5619] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1
[  168.212089][    T9] usb 3-1: USB disconnect, device number 19
[  168.378411][ T5619] usb 1-1: USB disconnect, device number 26
[  168.498584][    T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  168.514877][    T9] cyberjack 3-1:0.69: device disconnected
[  168.725944][ T5346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE
[  168.786570][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  168.933701][ T5346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  168.938106][ T5346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  168.938174][ T5346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  168.951711][ T5346] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  169.005623][ T5346] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  169.053324][ T5346] usb 2-1: USB disconnect, device number 27
[  169.257324][ T1249] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  169.407180][ T1249] usb 3-1: Using ep0 maxpacket: 32
[  169.431247][ T1249] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  169.431278][ T1249] usb 3-1: config 0 has no interface number 0
[  169.435580][ T1249] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  169.435609][ T1249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.435622][ T1249] usb 3-1: Product: syz
[  169.435631][ T1249] usb 3-1: Manufacturer: syz
[  169.435640][ T1249] usb 3-1: SerialNumber: syz
[  169.451551][ T1249] usb 3-1: config 0 descriptor??
[  169.538600][ T5619] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  169.695141][ T5619] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  169.695177][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.696083][ T5619] usb 4-1: Product: syz
[  169.696116][ T5619] usb 4-1: Manufacturer: syz
[  169.696130][ T5619] usb 4-1: SerialNumber: syz
[  169.873542][ T1249] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  169.873567][ T1249] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  170.127338][ T5346] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[  170.172219][ T5619] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  170.172292][ T5619] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  170.284003][ T5346] usb 2-1: Invalid ep0 maxpacket: 64
[  170.417390][ T5346] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  170.587364][ T5346] usb 2-1: Invalid ep0 maxpacket: 64
[  170.588680][ T5346] usb usb2-port1: attempt power cycle
[  170.937314][ T5617] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  171.011947][ T5346] usb 2-1: new low-speed USB device number 30 using dummy_hcd
[  171.028370][ T5346] usb 2-1: Invalid ep0 maxpacket: 64
[  171.087236][ T5617] usb 1-1: Using ep0 maxpacket: 16
[  171.090342][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.090454][ T5617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.090479][ T5617] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  171.090519][ T5617] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  171.090541][ T5617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.157584][ T5346] usb 2-1: new low-speed USB device number 31 using dummy_hcd
[  171.176594][ T5617] usb 1-1: config 0 descriptor??
[  171.180072][ T5346] usb 2-1: Invalid ep0 maxpacket: 64
[  171.181841][ T5346] usb usb2-port1: unable to enumerate USB device
[  171.629585][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.629628][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.629654][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.629680][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.629760][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.629787][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.629812][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.629838][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.629927][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.629954][ T5617] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  171.815931][ T5617] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  171.815970][ T5617] microsoft 0003:045E:07DA.0004: no inputs found
[  171.815985][ T5617] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway
[  171.863023][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.864270][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.926484][    T9] usb 1-1: USB disconnect, device number 27
[  172.068703][ T6695] fido_id[6695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  172.075542][ T5619] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  172.277243][ T5619] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  172.279094][ T5619] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  172.279185][ T5619] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  172.283940][ T5619] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  172.340550][ T5619] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  172.370182][ T5619] usb 4-1: USB disconnect, device number 29
[  172.758957][ T6700] cgroup: Bad value for 'name'
[  173.152312][ T6681] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.266'.
[  173.155964][ T1249] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000024: -71
[  173.156275][ T1249] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  173.218248][ T1249] usb 3-1: USB disconnect, device number 20
[  173.247249][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  173.397210][    T9] usb 2-1: Using ep0 maxpacket: 16
[  173.399228][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.399273][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  173.399298][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.447381][    T9] usb 2-1: config 0 descriptor??
[  173.466799][    T9] xbox_remote_probe: Unexpected endpoint_in
[  173.479896][    T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  173.662625][   T37] usb 2-1: USB disconnect, device number 32
[  174.579650][ T6739] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  174.579683][ T6739] CIFS mount error: No usable UNC path provided in device string!
[  174.579683][ T6739] 
[  174.579877][ T6739] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  174.767794][ T1249] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  174.919917][ T1249] usb 2-1: Using ep0 maxpacket: 8
[  174.922917][ T1249] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  174.922949][ T1249] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.922970][ T1249] usb 2-1: config 0 has no interface number 0
[  174.923006][ T1249] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  174.923021][ T1249] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[  174.923037][ T1249] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  174.923061][ T1249] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  174.923076][ T1249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.077339][ T5619] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  175.140392][ T1249] usb 2-1: config 0 descriptor??
[  175.155187][ T1249] ldusb 2-1:0.55: Interrupt in endpoint not found
[  175.217308][ T5619] usb 1-1: device descriptor read/64, error -71
[  175.260236][ T5767] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  175.370248][ T6737] ieee802154 phy0 wpan0: encryption failed: -22
[  175.373407][   T37] usb 2-1: USB disconnect, device number 33
[  175.456556][ T5767] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  175.456613][ T5767] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  175.457640][ T5619] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  175.498993][ T5767] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  175.499028][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.499050][ T5767] usb 3-1: Product: syz
[  175.499066][ T5767] usb 3-1: Manufacturer: syz
[  175.499080][ T5767] usb 3-1: SerialNumber: syz
[  175.599206][ T5619] usb 1-1: device descriptor read/64, error -71
[  175.708963][ T5619] usb usb1-port1: attempt power cycle
[  175.950359][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.950987][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.180550][ T5619] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  176.202237][ T5619] usb 1-1: device descriptor read/8, error -71
[  176.277901][ T6762] netlink: 68 bytes leftover after parsing attributes in process `syz.3.292'.
[  176.447513][ T5619] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  176.484526][ T5619] usb 1-1: device descriptor read/8, error -71
[  176.590532][ T5619] usb usb1-port1: unable to enumerate USB device
[  176.613560][ T5767] usb 3-1: USB disconnect, device number 21
[  176.758336][   T37] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  176.898626][   T37] usb 4-1: device descriptor read/64, error -71
[  177.046041][ T5767] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  177.153454][   T37] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  177.198208][ T5767] usb 3-1: Using ep0 maxpacket: 8
[  177.220365][ T5767] usb 3-1: config 253 has an invalid interface number: 1 but max is 0
[  177.220398][ T5767] usb 3-1: config 253 has no interface number 0
[  177.220449][ T5767] usb 3-1: config 253 interface 1 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1023
[  177.265765][ T5767] usb 3-1: New USB device found, idVendor=0e41, idProduct=4650, bcdDevice=98.ef
[  177.265809][ T5767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.265832][ T5767] usb 3-1: Product: syz
[  177.265887][ T5767] usb 3-1: Manufacturer: syz
[  177.265946][ T5767] usb 3-1: SerialNumber: syz
[  177.277975][   T37] usb 4-1: device descriptor read/64, error -71
[  177.341944][ T6764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  177.395752][   T37] usb usb4-port1: attempt power cycle
[  177.581034][ T5767] snd_usb_variax 3-1:253.1: Line 6 PODxt Live found
[  177.581054][ T5767] usb 3-1: selecting invalid altsetting 1
[  177.581087][ T5767] snd_usb_variax 3-1:253.1: set_interface failed
[  177.581534][ T5767] snd_usb_variax 3-1:253.1: Line 6 PODxt Live now disconnected
[  177.581662][ T5767] snd_usb_variax 3-1:253.1: probe with driver snd_usb_variax failed with error -22
[  177.604574][ T5767] usb 3-1: USB disconnect, device number 22
[  177.737316][   T37] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  177.762226][   T37] usb 4-1: device descriptor read/8, error -71
[  178.007301][   T37] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  178.032329][   T37] usb 4-1: device descriptor read/8, error -71
[  178.077258][ T5767] usb 2-1: new low-speed USB device number 34 using dummy_hcd
[  178.140250][   T37] usb usb4-port1: unable to enumerate USB device
[  178.158091][ T6780] tipc: Started in network mode
[  178.158109][ T6780] tipc: Node identity , cluster identity 4711
[  178.158123][ T6780] tipc: Failed to set node id, please configure manually
[  178.158170][ T6780] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  178.187689][    T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  178.230329][ T5767] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  178.230364][ T5767] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  178.230387][ T5767] usb 2-1: config 0 has no interface number 0
[  178.230420][ T5767] usb 2-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  178.230445][ T5767] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  178.230459][ T5767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.243409][ T5767] usb 2-1: config 0 descriptor??
[  178.319791][    T9] usb 1-1: device descriptor read/64, error -71
[  178.397494][ T6784] futex_wake_op: syz.2.297 tries to shift op by 144; fix this program
[  178.487521][ T6776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.488191][ T6776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.491969][ T5619] usb 2-1: USB disconnect, device number 34
[  178.577284][    T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  178.637242][   T37] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  178.707229][    T9] usb 1-1: device descriptor read/64, error -71
[  178.789206][   T37] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  178.789229][   T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.789242][   T37] usb 3-1: config 0 has no interface number 0
[  178.789270][   T37] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  178.789287][   T37] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  178.789301][   T37] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  178.791105][   T37] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  178.791123][   T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.791135][   T37] usb 3-1: Product: syz
[  178.791144][   T37] usb 3-1: Manufacturer: syz
[  178.791160][   T37] usb 3-1: SerialNumber: syz
[  178.796646][   T37] usb 3-1: config 0 descriptor??
[  178.896361][    T9] usb usb1-port1: attempt power cycle
[  179.237326][    T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  179.260685][    T9] usb 1-1: device descriptor read/8, error -71
[  179.298502][ T5619] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  179.420721][   T37] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.117/input/input10
[  179.437630][ T5619] usb 2-1: device descriptor read/64, error -71
[  179.500972][    T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  179.518258][    T9] usb 1-1: device descriptor read/8, error -71
[  179.627581][    T9] usb usb1-port1: unable to enumerate USB device
[  179.677254][ T5619] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  179.817268][ T5619] usb 2-1: device descriptor read/64, error -71
[  179.817271][ T1249] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  179.937758][ T5619] usb usb2-port1: attempt power cycle
[  179.969213][ T1249] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  179.969245][ T1249] usb 4-1: config 0 has no interface number 0
[  179.969294][ T1249] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  179.969324][ T1249] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.969349][ T1249] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  179.969378][ T1249] usb 4-1: config 0 interface 1 has no altsetting 0
[  179.969504][ T1249] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  179.969529][ T1249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.972833][ T1249] usb 4-1: config 0 descriptor??
[  180.287313][ T5619] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  180.308095][ T5619] usb 2-1: device descriptor read/8, error -71
[  180.547269][ T5619] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  180.567977][ T5619] usb 2-1: device descriptor read/8, error -71
[  180.603639][ T6790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.299'.
[  180.604062][ T1249] uclogic 0003:145F:0212.0005: pen parameters not found
[  180.604086][ T1249] uclogic 0003:145F:0212.0005: interface is invalid, ignoring
[  180.637732][ T1249] usb 4-1: USB disconnect, device number 34
[  180.679450][ T5619] usb usb2-port1: unable to enumerate USB device
[  181.270962][ T6796] batadv_slave_0: entered promiscuous mode
[  181.297667][ T6795] batadv_slave_0: left promiscuous mode
[  181.348253][ T5619] usb 3-1: USB disconnect, device number 23
[  181.488201][ T5617] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  181.621408][ T5617] usb 1-1: device descriptor read/64, error -71
[  181.857444][ T5617] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  182.057398][ T5617] usb 1-1: device descriptor read/64, error -71
[  182.074153][ T1249] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  182.168014][ T5617] usb usb1-port1: attempt power cycle
[  182.217241][ T1249] usb 4-1: Using ep0 maxpacket: 16
[  182.221556][ T1249] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  182.221587][ T1249] usb 4-1: config 0 has no interface number 0
[  182.221636][ T1249] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  182.221665][ T1249] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  182.283936][ T1249] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  182.283972][ T1249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.283995][ T1249] usb 4-1: Product: syz
[  182.284011][ T1249] usb 4-1: Manufacturer: syz
[  182.284026][ T1249] usb 4-1: SerialNumber: syz
[  182.323780][ T1249] usb 4-1: config 0 descriptor??
[  182.324982][ T6807] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  182.325168][ T6807] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  182.517275][ T5617] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  182.536230][ T6807] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  182.536500][ T6807] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  182.540255][ T5617] usb 1-1: device descriptor read/8, error -71
[  182.643563][ T6815] random: crng reseeded on system resumption
[  182.757028][ T1249] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  182.781862][ T5617] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  182.814933][ T5617] usb 1-1: device descriptor read/8, error -71
[  182.918455][ T5617] usb usb1-port1: unable to enumerate USB device
[  182.951331][ T1249] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  182.951397][ T1249] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  182.951680][ T1249] asix 4-1:0.34: probe with driver asix failed with error -61
[  183.771223][ T6831] syzkaller1: entered promiscuous mode
[  183.771252][ T6831] syzkaller1: entered allmulticast mode
[  184.087457][ T1249] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  184.237309][ T1249] usb 3-1: Using ep0 maxpacket: 8
[  184.256359][ T1249] usb 3-1: unable to get BOS descriptor or descriptor too short
[  184.281170][ T1249] usb 3-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40
[  184.281205][ T1249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.281227][ T1249] usb 3-1: Product: syz
[  184.281242][ T1249] usb 3-1: Manufacturer: syz
[  184.281258][ T1249] usb 3-1: SerialNumber: syz
[  184.608499][ T1249] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  184.629556][ T1249] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  184.670124][ T1249] usb 3-1: USB disconnect, device number 24
[  184.852007][ T5780] usb 4-1: USB disconnect, device number 35
[  185.205596][ T6858] Invalid source name
[  185.205619][ T6858] UBIFS error (pid: 6858): cannot open "./file0", error -22
[  185.391086][ T6862] netlink: 196 bytes leftover after parsing attributes in process `syz.1.321'.
[  185.472987][ T6864] overlayfs: workdir and upperdir must be separate subtrees
[  185.667597][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'.
[  185.979788][ T1249] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  186.139694][ T1249] usb 4-1: config 1 interface 0 has no altsetting 0
[  186.167897][ T1249] usb 4-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.40
[  186.167932][ T1249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.167952][ T1249] usb 4-1: Product: syz
[  186.167967][ T1249] usb 4-1: SerialNumber: syz
[  186.260354][ T5619] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  186.338082][ T6891] netlink: 72 bytes leftover after parsing attributes in process `syz.0.328'.
[  186.416494][ T1249] usbhid 4-1:1.0: can't add hid device: -71
[  186.416632][ T1249] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  186.435496][ T5619] usb 3-1: config 2 has an invalid interface number: 12 but max is 0
[  186.435531][ T5619] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  186.435553][ T5619] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  186.435573][ T5619] usb 3-1: config 2 has no interface number 0
[  186.435638][ T5619] usb 3-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  186.435665][ T5619] usb 3-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  186.435694][ T5619] usb 3-1: config 2 interface 12 altsetting 7 endpoint 0x8A has invalid wMaxPacketSize 0
[  186.435717][ T5619] usb 3-1: config 2 interface 12 has no altsetting 0
[  186.438759][ T5619] usb 3-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3
[  186.438790][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.438809][ T5619] usb 3-1: Product: syz
[  186.438823][ T5619] usb 3-1: Manufacturer: syz
[  186.438836][ T5619] usb 3-1: SerialNumber: syz
[  186.546455][ T1249] usb 4-1: USB disconnect, device number 36
[  186.583130][ T5825] udevd[5825]: setting mode of /dev/bus/usb/004/036 to 020664 failed: No such file or directory
[  186.594437][ T5825] udevd[5825]: setting owner of /dev/bus/usb/004/036 to uid=0, gid=0 failed: No such file or directory
[  186.830949][ T6901] binder: 6900:6901 ioctl c4089434 2000000001c0 returned -22
[  186.831336][ T6901] binder: 6900:6901 ioctl c4089434 200000000600 returned -22
[  186.919805][    T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  187.014643][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[  187.068600][    T9] usb 2-1: Using ep0 maxpacket: 32
[  187.072659][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.072695][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.072738][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  187.073897][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.184148][    T9] usb 2-1: config 0 descriptor??
[  187.210881][    T9] hub 2-1:0.0: USB hub found
[  187.439521][    T9] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  187.660308][  T823] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  187.767944][ T5619] em28xx 3-1:2.12: New device syz syz @ 12 Mbps (2040:8265, interface 12, class 12)
[  187.767986][ T5619] em28xx 3-1:2.12: Device initialization failed.
[  187.768001][ T5619] em28xx 3-1:2.12: Device must be connected to a high-speed USB 2.0 port.
[  187.783574][ T5619] usb 3-1: USB disconnect, device number 25
[  187.837354][  T823] usb 4-1: Using ep0 maxpacket: 16
[  187.842122][  T823] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.842162][  T823] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.842203][  T823] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  187.842229][  T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.848277][    T9] hid-generic 0003:046D:C31C.0006: unknown main item tag 0x0
[  188.036250][    T9] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[  188.206278][    T9] usb 2-1: USB disconnect, device number 39
[  188.230414][  T823] usbhid 4-1:128.0: can't add hid device: -71
[  188.230545][  T823] usbhid 4-1:128.0: probe with driver usbhid failed with error -71
[  188.244117][  T823] usb 4-1: USB disconnect, device number 37
[  188.628564][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'.
[  188.795121][  T823] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  188.927287][  T823] usb 1-1: device descriptor read/64, error -71
[  188.958237][    T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  189.119333][    T9] usb 2-1: Using ep0 maxpacket: 32
[  189.123482][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.123505][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.123530][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  189.123545][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.172929][    T9] usb 2-1: config 0 descriptor??
[  189.201006][  T823] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  189.254268][    T9] hub 2-1:0.0: USB hub found
[  189.337414][  T823] usb 1-1: device descriptor read/64, error -71
[  189.378582][    T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  189.404661][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  189.448115][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  189.460176][  T823] usb usb1-port1: attempt power cycle
[  189.520224][    T9] usb 2-1: USB disconnect, device number 40
[  189.680419][ T6899] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  189.821411][  T823] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  189.837973][  T823] usb 1-1: device descriptor read/8, error -71
[  189.885923][ T6899] syzkaller1: entered promiscuous mode
[  189.885942][ T6899] syzkaller1: entered allmulticast mode
[  189.900964][ T6934] FAT-fs (nullb0): bogus number of reserved sectors
[  189.900987][ T6934] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  190.115409][  T823] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  190.169013][  T823] usb 1-1: device descriptor read/8, error -71
[  190.237317][   T37] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  190.291351][  T823] usb usb1-port1: unable to enumerate USB device
[  190.378417][   T37] usb 2-1: device descriptor read/64, error -71
[  190.617316][   T37] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  190.749097][   T37] usb 2-1: device descriptor read/64, error -71
[  190.862856][   T37] usb usb2-port1: attempt power cycle
[  191.402610][ T6946] veth0_vlan: entered allmulticast mode
[  191.406567][ T6947] syzkaller1: entered promiscuous mode
[  191.406597][ T6947] syzkaller1: entered allmulticast mode
[  191.555405][ T6953] netlink: 'syz.3.344': attribute type 29 has an invalid length.
[  191.555430][ T6953] netlink: 'syz.3.344': attribute type 3 has an invalid length.
[  191.555444][ T6953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.344'.
[  191.760512][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.346'.
[  192.261367][   T37] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  192.418897][   T37] usb 2-1: Using ep0 maxpacket: 32
[  192.420885][   T37] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  192.420915][   T37] usb 2-1: config 0 has no interface number 0
[  192.423007][   T37] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  192.423028][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.423059][   T37] usb 2-1: Product: syz
[  192.423075][   T37] usb 2-1: Manufacturer: syz
[  192.423092][   T37] usb 2-1: SerialNumber: syz
[  192.591877][   T37] usb 2-1: config 0 descriptor??
[  192.647785][  T823] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  192.840825][  T823] usb 3-1: Using ep0 maxpacket: 16
[  192.846042][  T823] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  192.846064][  T823] usb 3-1: config 0 has no interface number 0
[  192.846092][  T823] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  192.846109][  T823] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  192.884512][  T823] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  192.884544][  T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.884622][  T823] usb 3-1: Product: syz
[  192.884637][  T823] usb 3-1: Manufacturer: syz
[  192.884651][  T823] usb 3-1: SerialNumber: syz
[  192.969756][  T823] usb 3-1: config 0 descriptor??
[  192.970441][ T6975] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  192.970530][ T6975] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  193.167748][   T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  193.167815][   T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  193.172356][ T6975] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  193.172517][ T6975] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  193.399677][  T823] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  193.399970][  T823] asix 3-1:0.34: probe with driver asix failed with error -71
[  193.435111][  T823] usb 3-1: USB disconnect, device number 26
[  194.641925][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  194.642370][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  196.190929][   T37] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  196.191137][   T37] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[  196.239463][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.259421][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.378643][ T5619] usb 2-1: USB disconnect, device number 44
[  198.496954][ T6994] netlink: 6468 bytes leftover after parsing attributes in process `syz.0.357'.
[  198.496972][ T6994] openvswitch: netlink: ufid size 4104 bytes exceeds the range (1, 16)
[  198.515087][ T1249] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  198.684593][ T1249] usb 3-1: unable to get BOS descriptor or descriptor too short
[  198.684692][ T1249] usb 3-1: too many configurations: 182, using maximum allowed: 8
[  198.711547][ T1249] usb 3-1: unable to read config index 0 descriptor/start: -61
[  198.711591][ T1249] usb 3-1: can't read configurations, error -61
[  198.837351][ T1249] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  200.339515][ T5619] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  200.366527][ T1249] usb 3-1: device descriptor read/all, error -71
[  200.384247][ T1249] usb usb3-port1: attempt power cycle
[  200.650829][ T5619] usb 2-1: unable to get BOS descriptor or descriptor too short
[  200.655997][ T5619] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.656036][ T5619] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  200.664596][ T5619] usb 2-1: string descriptor 0 read error: -22
[  200.664756][ T5619] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  200.664779][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.795221][ T5619] usb 2-1: selecting invalid altsetting 1
[  200.795726][ T5619] usb 2-1: unit 6 not found!
[  201.347107][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  203.921931][ T5619] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[  204.857097][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  204.957102][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  205.057099][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  205.157100][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  206.415996][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.423579][ T5619] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  206.677085][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  206.857989][ T5619] usb 2-1: USB disconnect, device number 45
[  206.919486][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.247098][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  208.007253][ T5725] usb 3-1: new low-speed USB device number 30 using dummy_hcd
[  208.712384][ T5725] usb 3-1: device descriptor read/all, error -71
[  210.357100][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  210.627094][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  210.767104][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  211.477705][ T7024] binder: 7022:7024 ioctl 40046210 0 returned -14
[  212.192599][ T5629] Bluetooth: hci2: command 0x0406 tx timeout
[  213.317079][ T5629] Bluetooth: hci1: command 0x0406 tx timeout
[  213.317162][ T5618] Bluetooth: hci0: command 0x0406 tx timeout
[  213.338355][ T5725] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  213.772665][ T7035] Can't find ip_set type hash:mak
[  215.196413][ T5725] usb usb3-port1: attempt power cycle
[  215.314283][ T5617] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  216.824861][ T5725] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  216.930532][ T5617] usb 4-1: unable to get BOS descriptor or descriptor too short
[  216.940431][ T5617] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.940459][ T5617] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  216.973965][ T5617] usb 4-1: string descriptor 0 read error: -22
[  216.976211][ T5617] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  216.976242][ T5617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.311538][ T5725] usb 3-1: device descriptor read/8, error -71
[  222.320176][ T5617] usb 4-1: can't set config #1, error -71
[  223.351915][ T5617] usb 4-1: USB disconnect, device number 38
[  246.004150][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  247.083809][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  247.118394][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  247.120935][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  247.144963][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  250.189722][ T5623] Bluetooth: hci4: command tx timeout
[  252.347327][ T5623] Bluetooth: hci4: command tx timeout
[  252.542025][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  252.841816][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  252.878991][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  252.916242][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  253.029382][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  253.036749][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  253.535109][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  253.536092][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  253.576161][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  253.583374][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  254.427230][ T5618] Bluetooth: hci4: command tx timeout
[  255.800143][ T5618] Bluetooth: hci5: command tx timeout
[  255.875165][ T5618] Bluetooth: hci6: command tx timeout
[  256.508037][ T5618] Bluetooth: hci4: command tx timeout
[  256.844167][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  256.844339][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  257.867239][ T5618] Bluetooth: hci5: command tx timeout
[  257.947375][ T5618] Bluetooth: hci6: command tx timeout
[  259.026901][ T5620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  259.084306][ T5620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  259.106211][ T5620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  259.168881][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  259.182371][ T5620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  259.947222][ T5618] Bluetooth: hci5: command tx timeout
[  260.027276][ T5618] Bluetooth: hci6: command tx timeout
[  262.027197][ T5618] Bluetooth: hci5: command tx timeout
[  262.378856][ T5618] Bluetooth: hci6: command tx timeout
[  262.378934][ T5618] Bluetooth: hci7: command tx timeout
[  264.427172][ T5618] Bluetooth: hci7: command tx timeout
[  266.507217][ T5618] Bluetooth: hci7: command tx timeout
[  268.587526][ T5618] Bluetooth: hci7: command tx timeout
[  312.081567][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  312.161352][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  312.164434][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  312.165801][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  312.166629][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  312.589009][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  312.683914][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  312.695742][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  312.760637][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  312.762110][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  312.804245][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  312.929177][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  312.931080][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  312.967446][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  313.033754][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  313.034717][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  313.069259][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  313.080593][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  313.082863][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  313.189562][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  314.348742][ T5623] Bluetooth: hci0: command tx timeout
[  315.147634][ T5623] Bluetooth: hci2: command tx timeout
[  315.307390][ T5623] Bluetooth: hci3: command tx timeout
[  315.389163][ T5623] Bluetooth: hci1: command tx timeout
[  316.431178][ T5623] Bluetooth: hci0: command tx timeout
[  317.227664][ T5623] Bluetooth: hci2: command tx timeout
[  317.387254][ T5623] Bluetooth: hci3: command tx timeout
[  317.478049][ T5623] Bluetooth: hci1: command tx timeout
[  317.514373][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  317.514482][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  318.507201][ T5623] Bluetooth: hci0: command tx timeout
[  319.307766][ T5623] Bluetooth: hci2: command tx timeout
[  319.467301][ T5623] Bluetooth: hci3: command tx timeout
[  319.557147][ T5623] Bluetooth: hci1: command tx timeout
[  320.587311][ T5623] Bluetooth: hci0: command tx timeout
[  321.387660][ T5623] Bluetooth: hci2: command tx timeout
[  321.547202][ T5623] Bluetooth: hci3: command tx timeout
[  321.627483][ T5623] Bluetooth: hci1: command tx timeout
[  340.788214][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.789330][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.789653][ T7090] bridge_slave_0: entered allmulticast mode
[  340.796883][ T7090] bridge_slave_0: entered promiscuous mode
[  340.889951][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.890321][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.890704][ T7091] bridge_slave_0: entered allmulticast mode
[  340.925201][ T7091] bridge_slave_0: entered promiscuous mode
[  341.010893][ T7090] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.011273][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.011593][ T7090] bridge_slave_1: entered allmulticast mode
[  341.016884][ T7090] bridge_slave_1: entered promiscuous mode
[  341.072771][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.073186][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.073519][ T7091] bridge_slave_1: entered allmulticast mode
[  341.099499][ T7091] bridge_slave_1: entered promiscuous mode
[  341.102462][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.102837][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.103185][ T7094] bridge_slave_0: entered allmulticast mode
[  341.133992][ T7094] bridge_slave_0: entered promiscuous mode
[  341.196504][ T7093] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.196898][ T7093] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.212931][ T7093] bridge_slave_0: entered allmulticast mode
[  341.224777][ T7093] bridge_slave_0: entered promiscuous mode
[  341.267723][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.268104][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.268469][ T7094] bridge_slave_1: entered allmulticast mode
[  341.272337][ T7094] bridge_slave_1: entered promiscuous mode
[  341.344411][ T7093] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.346160][ T7093] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.346505][ T7093] bridge_slave_1: entered allmulticast mode
[  341.372003][ T7093] bridge_slave_1: entered promiscuous mode
[  341.503321][ T7090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.571341][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.632521][ T7090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.699290][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.729022][ T7094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.813397][ T7093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.861335][ T7094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.935854][ T7093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  342.053110][ T7090] team0: Port device team_slave_0 added
[  342.099662][ T7091] team0: Port device team_slave_0 added
[  343.111169][ T7090] team0: Port device team_slave_1 added
[  343.162173][ T7091] team0: Port device team_slave_1 added
[  349.141764][ T7094] team0: Port device team_slave_0 added
[  349.180742][ T7093] team0: Port device team_slave_0 added
[  349.229417][ T7094] team0: Port device team_slave_1 added
[  349.269248][ T7093] team0: Port device team_slave_1 added
[  349.361263][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.361283][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.361313][ T7090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.451594][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.451617][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.451649][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.550832][ T7090] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.550851][ T7090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.550881][ T7090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.636866][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.636885][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.636916][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.687189][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.687210][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.687240][ T7094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.794861][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.794879][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.794910][ T7093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.903424][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.903458][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.903490][ T7094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.015720][ T7093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.015741][ T7093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  350.015772][ T7093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.588152][ T7090] hsr_slave_0: entered promiscuous mode
[  350.591036][ T7090] hsr_slave_1: entered promiscuous mode
[  350.593598][ T7090] debugfs: 'hsr0' already exists in 'hsr'
[  350.593627][ T7090] Cannot create hsr debugfs directory
[  350.634440][ T7091] hsr_slave_0: entered promiscuous mode
[  350.643888][ T7091] hsr_slave_1: entered promiscuous mode
[  350.646876][ T7091] debugfs: 'hsr0' already exists in 'hsr'
[  350.646904][ T7091] Cannot create hsr debugfs directory
[  350.759546][ T7094] hsr_slave_0: entered promiscuous mode
[  350.762393][ T7094] hsr_slave_1: entered promiscuous mode
[  350.764719][ T7094] debugfs: 'hsr0' already exists in 'hsr'
[  350.764748][ T7094] Cannot create hsr debugfs directory
[  350.813887][ T7093] hsr_slave_0: entered promiscuous mode
[  350.816625][ T7093] hsr_slave_1: entered promiscuous mode
[  350.831452][ T7093] debugfs: 'hsr0' already exists in 'hsr'
[  350.831484][ T7093] Cannot create hsr debugfs directory
[  357.228171][ T7090] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  357.952286][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  358.015166][ T7090] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  358.472572][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  358.494076][ T7090] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  359.200534][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  359.297544][ T7090] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  359.599533][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  360.164259][ T7091] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  360.889988][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  360.995036][ T7091] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  361.165534][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  361.213368][ T7091] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  361.388784][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  361.465008][ T7091] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  362.243784][ T7091] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  363.002150][ T7094] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  363.718277][ T5618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  363.787629][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  363.789743][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  363.792524][ T5618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  363.793824][ T5618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  364.671850][ T7094] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  364.823962][ T7094] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  365.752328][ T7094] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  365.921643][ T7094] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  366.030836][ T5623] Bluetooth: hci4: command tx timeout
[  366.155008][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  366.223330][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  366.336749][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  366.348270][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  366.353828][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  368.107190][ T5623] Bluetooth: hci4: command tx timeout
[  368.442649][ T7094] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  369.475908][ T5623] Bluetooth: hci5: command tx timeout
[  369.524378][ T7094] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  369.733019][ T7094] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  370.429963][ T5623] Bluetooth: hci4: command tx timeout
[  371.549622][ T5623] Bluetooth: hci5: command tx timeout
[  372.320400][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  372.369538][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  372.377478][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  372.421201][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  372.445753][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  372.513805][ T5623] Bluetooth: hci4: command tx timeout
[  373.632717][ T5618] Bluetooth: hci5: command tx timeout
[  374.415513][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  374.515323][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  374.556482][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  374.568782][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  374.569794][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  374.673741][ T5618] Bluetooth: hci6: command tx timeout
[  375.708048][ T5623] Bluetooth: hci5: command tx timeout
[  376.749610][ T5618] Bluetooth: hci6: command tx timeout
[  378.445223][ T5618] Bluetooth: hci7: command tx timeout
[  378.827406][ T5618] Bluetooth: hci6: command tx timeout
[  379.299056][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  379.299173][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  380.546694][ T5618] Bluetooth: hci7: command tx timeout
[  380.937634][ T5618] Bluetooth: hci6: command tx timeout
[  382.588119][ T5618] Bluetooth: hci7: command tx timeout
[  384.667591][ T5618] Bluetooth: hci7: command tx timeout
[  395.572322][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.572702][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.573051][ T7185] bridge_slave_0: entered allmulticast mode
[  395.644055][ T7185] bridge_slave_0: entered promiscuous mode
[  395.749963][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state
[  395.750501][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.750912][ T7192] bridge_slave_0: entered allmulticast mode
[  395.781686][ T7192] bridge_slave_0: entered promiscuous mode
[  395.803716][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.804190][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.804570][ T7185] bridge_slave_1: entered allmulticast mode
[  395.836269][ T7185] bridge_slave_1: entered promiscuous mode
[  395.875421][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state
[  395.876291][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.876783][ T7192] bridge_slave_1: entered allmulticast mode
[  395.902458][ T7192] bridge_slave_1: entered promiscuous mode
[  396.192542][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.265852][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.313564][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.337648][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.361648][ T7185] team0: Port device team_slave_0 added
[  403.375162][ T7192] team0: Port device team_slave_0 added
[  403.413459][ T7185] team0: Port device team_slave_1 added
[  403.462787][ T7192] team0: Port device team_slave_1 added
[  403.846699][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.846742][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.846774][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.962836][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_0
[  403.962856][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.962886][ T7192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.987514][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.987546][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.987577][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.153771][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.153792][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  404.153822][ T7192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.590141][ T7185] hsr_slave_0: entered promiscuous mode
[  404.593140][ T7185] hsr_slave_1: entered promiscuous mode
[  404.595476][ T7185] debugfs: 'hsr0' already exists in 'hsr'
[  404.595505][ T7185] Cannot create hsr debugfs directory
[  404.759983][ T7192] hsr_slave_0: entered promiscuous mode
[  404.762770][ T7192] hsr_slave_1: entered promiscuous mode
[  404.764988][ T7192] debugfs: 'hsr0' already exists in 'hsr'
[  404.765016][ T7192] Cannot create hsr debugfs directory
[  406.565854][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.566420][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.583444][ T7215] bridge_slave_0: entered allmulticast mode
[  406.598043][ T7215] bridge_slave_0: entered promiscuous mode
[  406.725959][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.726352][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.726788][ T7215] bridge_slave_1: entered allmulticast mode
[  406.795381][ T7215] bridge_slave_1: entered promiscuous mode
[  407.085010][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.085378][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.085868][ T7222] bridge_slave_0: entered allmulticast mode
[  407.126562][ T7222] bridge_slave_0: entered promiscuous mode
[  407.176249][ T7215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.189497][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.189909][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.190374][ T7222] bridge_slave_1: entered allmulticast mode
[  407.231140][ T7222] bridge_slave_1: entered promiscuous mode
[  407.273022][ T7215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.491676][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  407.525997][ T7215] team0: Port device team_slave_0 added
[  407.549051][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  407.576047][ T7215] team0: Port device team_slave_1 added
[  407.767402][ T7222] team0: Port device team_slave_0 added
[  407.771982][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.772000][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.772031][ T7215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.852129][ T7222] team0: Port device team_slave_1 added
[  407.855581][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.855598][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  407.855629][ T7215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.989166][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.989187][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.989217][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  416.219698][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  416.219719][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  416.219751][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  416.426648][ T7215] hsr_slave_0: entered promiscuous mode
[  416.445072][ T7215] hsr_slave_1: entered promiscuous mode
[  416.453631][ T7215] debugfs: 'hsr0' already exists in 'hsr'
[  416.453663][ T7215] Cannot create hsr debugfs directory
[  416.603781][ T7222] hsr_slave_0: entered promiscuous mode
[  416.606779][ T7222] hsr_slave_1: entered promiscuous mode
[  416.635902][ T7222] debugfs: 'hsr0' already exists in 'hsr'
[  416.635935][ T7222] Cannot create hsr debugfs directory
[  424.254586][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  424.311712][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  424.354417][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  424.368742][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  424.373240][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  426.282884][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.283415][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.283884][ T7272] bridge_slave_0: entered allmulticast mode
[  426.323152][ T7272] bridge_slave_0: entered promiscuous mode
[  426.345487][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.348013][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.366169][ T7272] bridge_slave_1: entered allmulticast mode
[  426.382294][ T7272] bridge_slave_1: entered promiscuous mode
[  426.507426][ T5623] Bluetooth: hci0: command tx timeout
[  426.933516][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  426.988013][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  426.996700][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  427.047779][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  427.058441][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  427.635366][ T7272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.666171][ T7272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.754082][ T7272] team0: Port device team_slave_0 added
[  427.779792][ T7272] team0: Port device team_slave_1 added
[  427.854685][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.854706][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.854736][ T7272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.920657][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.920677][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.920708][ T7272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.133198][ T7272] hsr_slave_0: entered promiscuous mode
[  428.136161][ T7272] hsr_slave_1: entered promiscuous mode
[  428.156492][ T7272] debugfs: 'hsr0' already exists in 'hsr'
[  428.156525][ T7272] Cannot create hsr debugfs directory
[  428.591029][ T5618] Bluetooth: hci0: command tx timeout
[  429.547725][ T5618] Bluetooth: hci1: command tx timeout
[  430.667528][ T5618] Bluetooth: hci0: command tx timeout
[  431.627663][ T5618] Bluetooth: hci1: command tx timeout
[  432.654461][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  432.750350][ T5620] Bluetooth: hci0: command tx timeout
[  432.764045][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  432.779765][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  432.794065][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  432.796810][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  433.707596][ T5618] Bluetooth: hci1: command tx timeout
[  434.171707][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  434.265922][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  434.289097][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  434.311604][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  434.314581][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  434.907262][ T5623] Bluetooth: hci2: command tx timeout
[  435.787525][ T5623] Bluetooth: hci1: command tx timeout
[  436.436012][ T5623] Bluetooth: hci3: command tx timeout
[  436.987219][ T5623] Bluetooth: hci2: command tx timeout
[  437.542771][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.544346][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.544795][ T7299] bridge_slave_0: entered allmulticast mode
[  437.573323][ T7299] bridge_slave_0: entered promiscuous mode
[  437.585765][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.586160][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.586575][ T7299] bridge_slave_1: entered allmulticast mode
[  437.623352][ T7299] bridge_slave_1: entered promiscuous mode
[  437.874466][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  437.923211][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  438.206381][ T7299] team0: Port device team_slave_0 added
[  438.281778][ T7299] team0: Port device team_slave_1 added
[  438.507991][ T5623] Bluetooth: hci3: command tx timeout
[  439.067679][ T5623] Bluetooth: hci2: command tx timeout
[  440.587293][ T5623] Bluetooth: hci3: command tx timeout
[  440.811618][ T1341] ieee802154 phy0 wpan0: encryption failed: -22
[  440.811734][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  440.945719][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.945740][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.945771][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.103040][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.103061][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.103092][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.147239][ T5623] Bluetooth: hci2: command tx timeout
[  441.348524][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.348936][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.349358][ T7306] bridge_slave_0: entered allmulticast mode
[  441.417567][ T7306] bridge_slave_0: entered promiscuous mode
[  441.464528][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.465040][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state
[  441.465472][ T7306] bridge_slave_1: entered allmulticast mode
[  441.497792][ T7306] bridge_slave_1: entered promiscuous mode
[  441.715372][ T7299] hsr_slave_0: entered promiscuous mode
[  441.725013][ T7299] hsr_slave_1: entered promiscuous mode
[  441.735449][ T7299] debugfs: 'hsr0' already exists in 'hsr'
[  441.735478][ T7299] Cannot create hsr debugfs directory
[  441.817750][ T7306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  441.887799][ T7306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  441.890620][ T7293] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.926554][ T7293] bridge0: port 1(bridge_slave_0) entered disabled state
[  441.936293][ T7293] bridge_slave_0: entered allmulticast mode
[  441.953082][ T7293] bridge_slave_0: entered promiscuous mode
[  442.047359][ T7293] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.047800][ T7293] bridge0: port 2(bridge_slave_1) entered disabled state
[  442.048223][ T7293] bridge_slave_1: entered allmulticast mode
[  442.052257][ T7293] bridge_slave_1: entered promiscuous mode
[  442.667213][ T5623] Bluetooth: hci3: command tx timeout
[  445.396055][ T7306] team0: Port device team_slave_0 added
[  445.503731][ T7306] team0: Port device team_slave_1 added
[  445.572548][ T7293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  445.653462][ T7293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  445.804471][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.804491][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.804522][ T7306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.917692][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.917711][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.917741][ T7306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  446.017641][ T7293] team0: Port device team_slave_0 added
[  446.081718][ T7293] team0: Port device team_slave_1 added
[  446.360876][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_0
[  446.360897][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  446.360927][ T7293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  447.399185][ T7293] batman_adv: batadv0: Adding interface: batadv_slave_1
[  447.399206][ T7293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  447.399238][ T7293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.824828][ T7306] hsr_slave_0: entered promiscuous mode
[  448.834167][ T7306] hsr_slave_1: entered promiscuous mode
[  448.836722][ T7306] debugfs: 'hsr0' already exists in 'hsr'
[  448.836751][ T7306] Cannot create hsr debugfs directory
[  449.054355][ T7293] hsr_slave_0: entered promiscuous mode
[  449.063768][ T7293] hsr_slave_1: entered promiscuous mode
[  449.066502][ T7293] debugfs: 'hsr0' already exists in 'hsr'
[  449.066536][ T7293] Cannot create hsr debugfs directory
[  476.827704][   T39] INFO: task syz-executor:5611 blocked for more than 143 seconds.
[  476.827736][   T39]       Not tainted syzkaller #0
[  476.827748][   T39]       Blocked by coredump.
[  476.827755][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  476.827765][   T39] task:syz-executor    state:D stack:20976 pid:5611  tgid:5611  ppid:1      task_flags:0x40054c flags:0x00080003
[  476.827831][   T39] Call Trace:
[  476.827839][   T39]  <TASK>
[  476.827889][   T39]  __schedule+0x16f9/0x5500
[  476.827926][   T39]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  476.827989][   T39]  ? __pfx___schedule+0x10/0x10
[  476.828036][   T39]  rt_mutex_schedule+0x76/0xf0
[  476.828079][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  476.828125][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  476.828153][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  476.828179][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  476.828218][   T39]  ? rcu_barrier+0x4c/0x580
[  476.828292][   T39]  ? rcu_barrier+0x4c/0x580
[  476.828365][   T39]  ? rcu_barrier+0x4c/0x580
[  476.828395][   T39]  mutex_lock_nested+0x168/0x1d0
[  476.828420][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  476.828453][   T39]  rcu_barrier+0x4c/0x580
[  476.828496][   T39]  netdev_run_todo+0x2fc/0x12b0
[  476.828523][   T39]  ? rtnl_is_locked+0x9/0x20
[  476.828548][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  476.828572][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  476.828597][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  476.828637][   T39]  ? netdev_state_change+0x1ca/0x220
[  476.828669][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  476.828741][   T39]  tun_chr_close+0x13f/0x1c0
[  476.828812][   T39]  __fput+0x461/0xa70
[  476.828849][   T39]  task_work_run+0x1d9/0x270
[  476.828881][   T39]  ? __pfx_task_work_run+0x10/0x10
[  476.828909][   T39]  ? do_exit+0x70a/0x22c0
[  476.828932][   T39]  ? kmem_cache_free+0x187/0x6c0
[  476.828960][   T39]  ? put_net+0x191/0x260
[  476.829028][   T39]  ? do_exit+0x70a/0x22c0
[  476.829064][   T39]  do_exit+0x70f/0x22c0
[  476.829092][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  476.829128][   T39]  ? __pfx_do_exit+0x10/0x10
[  476.829151][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  476.829214][   T39]  ? reacquire_held_locks+0x104/0x190
[  476.829274][   T39]  ? rt_spin_lock+0x1e0/0x400
[  476.829312][   T39]  do_group_exit+0x21b/0x2d0
[  476.829338][   T39]  ? rt_spin_unlock+0x160/0x200
[  476.829370][   T39]  get_signal+0x1284/0x1330
[  476.829425][   T39]  arch_do_signal_or_restart+0xbc/0x840
[  476.829448][   T39]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  476.829472][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  476.829503][   T39]  ? __se_sys_clock_nanosleep+0x35b/0x3b0
[  476.829548][   T39]  exit_to_user_mode_loop+0xa9/0x680
[  476.829573][   T39]  ? rcu_is_watching+0x15/0xb0
[  476.829604][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.829666][   T39]  do_syscall_64+0x353/0x580
[  476.829698][   T39]  ? trace_irq_disable+0x3b/0x140
[  476.829751][   T39]  ? clear_bhb_loop+0x40/0x90
[  476.829780][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.829804][   T39] RIP: 0033:0x7fc55595d68e
[  476.829826][   T39] RSP: 002b:00007ffc25add0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  476.829850][   T39] RAX: 0000000000000000 RBX: 0000555558ef9500 RCX: 00007fc55595d68e
[  476.829866][   T39] RDX: 00007ffc25add150 RSI: 0000000000000000 RDI: 0000000000000000
[  476.829881][   T39] RBP: 00007ffc25add1bc R08: 0000000000000000 R09: 0000000000000000
[  476.829895][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005c
[  476.829908][   T39] R13: 0000000000000030 R14: 0000000000034d5f R15: 00007ffc25add210
[  476.829941][   T39]  </TASK>
[  476.829950][   T39] INFO: task syz-executor:5612 blocked for more than 143 seconds.
[  476.829966][   T39]       Not tainted syzkaller #0
[  476.829977][   T39]       Blocked by coredump.
[  476.829983][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  476.829994][   T39] task:syz-executor    state:D stack:20976 pid:5612  tgid:5612  ppid:1      task_flags:0x40054c flags:0x00080003
[  476.830064][   T39] Call Trace:
[  476.830073][   T39]  <TASK>
[  476.830123][   T39]  __schedule+0x16f9/0x5500
[  476.830224][   T39]  ? __pfx___schedule+0x10/0x10
[  476.830251][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x680
[  476.830293][   T39]  rt_mutex_schedule+0x76/0xf0
[  476.830322][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  476.830363][   T39]  ? rt_mutex_slowlock_block+0x2e9/0x680
[  476.830392][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  476.830422][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  476.830448][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  476.830486][   T39]  ? rcu_barrier+0x4c/0x580
[  476.830523][   T39]  ? rcu_barrier+0x4c/0x580
[  476.830561][   T39]  ? rcu_barrier+0x4c/0x580
[  476.830590][   T39]  mutex_lock_nested+0x168/0x1d0
[  476.830614][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  476.830683][   T39]  rcu_barrier+0x4c/0x580
[  476.830762][   T39]  netdev_run_todo+0x2fc/0x12b0
[  476.830790][   T39]  ? rtnl_is_locked+0x9/0x20
[  476.830816][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  476.830841][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  476.830866][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  476.830906][   T39]  ? netdev_state_change+0x1ca/0x220
[  476.830938][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  476.830971][   T39]  tun_chr_close+0x13f/0x1c0
[  476.831005][   T39]  __fput+0x461/0xa70
[  476.831041][   T39]  task_work_run+0x1d9/0x270
[  476.831080][   T39]  ? __pfx_task_work_run+0x10/0x10
[  476.831145][   T39]  ? do_exit+0x70a/0x22c0
[  476.831167][   T39]  ? kmem_cache_free+0x187/0x6c0
[  476.831227][   T39]  ? put_net+0x191/0x260
[  476.831256][   T39]  ? do_exit+0x70a/0x22c0
[  476.831285][   T39]  do_exit+0x70f/0x22c0
[  476.831313][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  476.831351][   T39]  ? __pfx_do_exit+0x10/0x10
[  476.831373][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  476.831399][   T39]  ? reacquire_held_locks+0x104/0x190
[  476.831427][   T39]  ? rt_spin_lock+0x1e0/0x400
[  476.831466][   T39]  do_group_exit+0x21b/0x2d0
[  476.831490][   T39]  ? rt_spin_unlock+0x160/0x200
[  476.831519][   T39]  get_signal+0x1284/0x1330
[  476.831573][   T39]  arch_do_signal_or_restart+0xbc/0x840
[  476.831636][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  476.831667][   T39]  ? ksys_read+0x202/0x270
[  476.831707][   T39]  exit_to_user_mode_loop+0xa9/0x680
[  476.832634][   T39]  ? rcu_is_watching+0x15/0xb0
[  476.832672][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.832695][   T39]  do_syscall_64+0x353/0x580
[  476.832724][   T39]  ? trace_irq_disable+0x3b/0x140
[  476.832749][   T39]  ? clear_bhb_loop+0x40/0x90
[  476.832776][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.832798][   T39] RIP: 0033:0x7f8f8f26d68e
[  476.832817][   T39] RSP: 002b:00007ffcd4046448 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  476.832839][   T39] RAX: fffffffffffffe00 RBX: 000055557f6ea500 RCX: 00007f8f8f26d68e
[  476.832855][   T39] RDX: 0000000000000030 RSI: 00007ffcd4046540 RDI: 00000000000000f9
[  476.832870][   T39] RBP: 00007ffcd40464ec R08: 0000000000000000 R09: 0000000000000000
[  476.832885][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000060
[  476.832899][   T39] R13: 0000000000000063 R14: 0000000000037ffa R15: 00007ffcd4046540
[  476.832935][   T39]  </TASK>
[  476.832945][   T39] INFO: task syz-executor:5613 blocked for more than 143 seconds.
[  476.832962][   T39]       Not tainted syzkaller #0
[  476.832974][   T39]       Blocked by coredump.
[  476.832981][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  476.832991][   T39] task:syz-executor    state:D stack:21144 pid:5613  tgid:5613  ppid:1      task_flags:0x40054c flags:0x00080003
[  476.833051][   T39] Call Trace:
[  476.833069][   T39]  <TASK>
[  476.833082][   T39]  __schedule+0x16f9/0x5500
[  476.833141][   T39]  ? look_up_lock_class+0x57/0x110
[  476.833176][   T39]  ? __pfx___schedule+0x10/0x10
[  476.833253][   T39]  ? schedule+0x90/0x360
[  476.833308][   T39]  schedule+0x164/0x360
[  476.833340][   T39]  schedule_timeout+0xc3/0x2c0
[  476.833374][   T39]  ? __pfx_schedule_timeout+0x10/0x10
[  476.833405][   T39]  ? do_raw_spin_lock+0x12b/0x2f0
[  476.833438][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  476.833469][   T39]  ? wait_for_completion+0x274/0x5e0
[  476.833502][   T39]  wait_for_completion+0x2cc/0x5e0
[  476.833545][   T39]  ? __pfx_wait_for_completion+0x10/0x10
[  476.833584][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  476.833621][   T39]  rcu_barrier+0x463/0x580
[  476.833665][   T39]  netdev_run_todo+0x2fc/0x12b0
[  476.833728][   T39]  ? rtnl_is_locked+0x9/0x20
[  476.833790][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  476.833815][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  476.833840][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  476.833883][   T39]  ? netdev_state_change+0x1ca/0x220
[  476.833916][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  476.833949][   T39]  tun_chr_close+0x13f/0x1c0
[  476.833983][   T39]  __fput+0x461/0xa70
[  476.834020][   T39]  task_work_run+0x1d9/0x270
[  476.834049][   T39]  ? __pfx_task_work_run+0x10/0x10
[  476.834209][   T39]  ? do_exit+0x70a/0x22c0
[  476.834233][   T39]  ? kmem_cache_free+0x187/0x6c0
[  476.834260][   T39]  ? put_net+0x191/0x260
[  476.834289][   T39]  ? do_exit+0x70a/0x22c0
[  476.834317][   T39]  do_exit+0x70f/0x22c0
[  476.834346][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  476.834383][   T39]  ? __pfx_do_exit+0x10/0x10
[  476.834406][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  476.834433][   T39]  ? reacquire_held_locks+0x104/0x190
[  476.834461][   T39]  ? rt_spin_lock+0x1e0/0x400
[  476.834499][   T39]  do_group_exit+0x21b/0x2d0
[  476.834524][   T39]  ? rt_spin_unlock+0x160/0x200
[  476.834553][   T39]  get_signal+0x1284/0x1330
[  476.834604][   T39]  arch_do_signal_or_restart+0xbc/0x840
[  476.834669][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  476.834700][   T39]  ? ksys_read+0x202/0x270
[  476.834740][   T39]  exit_to_user_mode_loop+0xa9/0x680
[  476.834764][   T39]  ? rcu_is_watching+0x15/0xb0
[  476.834797][   T39]  ? entry_SYSCALL_64_after[  476.834797][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.834821][   T39]  do_syscall_64+0x353/0x580
[  476.834854][   T39]  ? trace_irq_disable+0x3b/0x140
[  476.834877][   T39]  ? clear_bhb_loop+0x40/0x90
[  476.834905][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.834928][   T39] RIP: 0033:0x7fd0621ad68e
[  476.834948][   T39] RSP: 002b:00007ffe2411a138 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  476.834970][   T39] RAX: fffffffffffffe00 RBX: 000055555ec95500 RCX: 00007fd0621ad68e
[  476.834985][   T39] RDX: 0000000000000030 RSI: 00007ffe2411a230 RDI: 00000000000000f9
[  476.834999][   T39] RBP: 00007ffe2411a1dc R08: 0000000000000000 R09: 0000000000000000
[  476.835013][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000058
[  476.835026][   T39] R13: 0000000000000063 R14: 0000000000036ac2 R15: 00007ffe2411a230
[  476.835071][   T39]  </TASK>
[  476.835079][   T39] INFO: task syz-executor:5614 blocked for more than 143 seconds.
[  476.835095][   T39]       Not tainted syzkaller #0
[  476.835105][   T39]       Blocked by coredump.
[  476.835111][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  476.835121][   T39] task:syz-executor    state:D stack:20792 pid:5614  tgid:5614  ppid:1      task_flags:0x40054c flags:0x00080003
[  476.835178][   T39] Call Trace:
[  476.835184][   T39]  <TASK>
[  476.835234][   T39]  __schedule+0x16f9/0x5500
[  476.835324][   T39]  ? __pfx___schedule+0x10/0x10
[  476.835372][   T39]  rt_mutex_schedule+0x76/0xf0
[  476.835403][   T39]  rt_mutex_slowlock_block+0x508/0x680
[  476.835448][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  476.835477][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  476.835505][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  476.835542][   T39]  ? rcu_barrier+0x4c/0x580
[  476.835598][   T39]  ? rcu_barrier+0x4c/0x580
[  476.835700][   T39]  ? rcu_barrier+0x4c/0x580
[  476.835730][   T39]  mutex_lock_nested+0x168/0x1d0
[  476.835754][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  476.835788][   T39]  rcu_barrier+0x4c/0x580
[  476.835832][   T39]  netdev_run_todo+0x2fc/0x12b0
[  476.835860][   T39]  ? rtnl_is_locked+0x9/0x20
[  476.835887][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  476.835912][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  476.835936][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  476.835976][   T39]  ? netdev_state_change+0x1ca/0x220
[  476.836007][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  476.836040][   T39]  tun_chr_close+0x13f/0x1c0
[  476.836083][   T39]  __fput+0x461/0xa70
[  476.836121][   T39]  task_work_run+0x1d9/0x270
[  476.836188][   T39]  ? __pfx_task_work_run+0x10/0x10
[  476.836214][   T39]  ? do_exit+0x70a/0x22c0
[  476.836236][   T39]  ? kmem_cache_free+0x187/0x6c0
[  476.836262][   T39]  ? put_net+0x191/0x260
[  476.836291][   T39]  ? do_exit+0x70a/0x22c0
[  476.836319][   T39]  do_exit+0x70f/0x22c0
[  476.836348][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  476.836384][   T39]  ? __pfx_do_exit+0x10/0x10
[  476.836407][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  476.836433][   T39]  ? reacquire_held_locks+0x104/0x190
[  476.836460][   T39]  ? rt_spin_lock+0x1e0/0x400
[  476.836496][   T39]  do_group_exit+0x21b/0x2d0
[  476.836520][   T39]  ? rt_spin_unlock+0x160/0x200
[  476.836547][   T39]  get_signal+0x1284/0x1330
[  476.836598][   T39]  arch_do_signal_or_restart+0xbc/0x840
[  476.836621][   T39]  ? __pfx___x64_sys_clone+0x10/0x10
[  476.836642][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  476.836685][   T39]  exit_to_user_mode_loop+0xa9/0x680
[  476.836709][   T39]  ? rcu_is_watching+0x15/0xb0
[  476.836739][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.836783][   T39]  do_syscall_64+0x353/0x580
[  476.836813][   T39]  ? trace_irq_disable+0x3b/0x140
[  476.836836][   T39]  ? clear_bhb_loop+0x40/0x90
[  476.836862][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.836883][   T39] RIP: 0033:0x7f01235158d2
[  476.836900][   T39] RSP: 002b:00007fff56a48da0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  477.146402][   T39] RAX: fffffffffffffffc RBX: 00007fff56a48da0 RCX: 00007f01235158d2
[  477.146428][   T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  477.146443][   T39] RBP: 00007fff56a48f2c R08: 0000000000000000 R09: 0000000000000001
[  477.146457][   T39] R10: 000055557320f7d0 R11: 0000000000000246 R12: 0000000000000001
[  477.146473][   T39] R13: 0000000000000006 R14: 0000000000034225 R15: 00007fff56a48f80
[  477.407447][ T1246] kworker/u8:12 (1246) used greatest stack depth: 18800 bytes left
[  477.437227][   T39]  </TASK>
[  477.437320][   T39] 
[  477.437320][   T39] Showing all locks held in the system:
[  477.437330][   T39] 3 locks held by kworker/u8:0/12:
[  477.437344][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  477.437415][   T39]  #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  477.437478][   T39]  #2: ffff88805c2c08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460
[  477.437538][   T39] 4 locks held by pr/legacy/17:
[  477.437549][   T39]  #0: ffffffff8e1bccc0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250
[  477.437601][   T39]  #1: ffffffff8e0a45b8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90
[  477.437651][   T39]  #2: ffffffff99e10018 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x178/0x1b50
[  477.437710][   T39]  #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  477.437785][   T39] 1 lock held by rcub/0/19:
[  477.437796][   T39]  #0: ffffffff8e1d0808 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x2fb/0x4b0
[  477.437860][   T39] 3 locks held by rcuc/1/29:
[  477.437872][   T39]  #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  477.437934][   T39]  #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  477.437999][   T39]  #2: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  477.438046][   T39] 3 locks held by ksoftirqd/1/31:
[  477.438057][   T39]  #0: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  477.438115][   T39]  #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  477.438172][   T39]  #2: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: sched_balance_domains+0xf9/0x900
[  477.438227][   T39] 1 lock held by khungtaskd/39:
[  477.438238][   T39]  #0: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  477.438313][   T39] 2 locks held by kworker/u8:13/1464:
[  477.438325][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  477.438383][   T39]  #1: ffffc9000630fc40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  477.438458][   T39] 5 locks held by kworker/u8:19/3392:
[  477.438471][   T39]  #0: ffff888032693938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  477.438530][   T39]  #1: ffffc9000db2fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  477.438588][   T39]  #2: ffffffff8e0613c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  477.438681][   T39]  #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  477.438741][   T39]  #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  477.438794][   T39] 1 lock held by klogd/4969:
[  477.438805][   T39]  #0: ffffffff8e311470 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  477.438856][   T39] 2 locks held by getty/5368:
[  477.438868][   T39]  #0: ffff888035f680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  477.438921][   T39]  #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0
[  477.438993][   T39] 3 locks held by sshd-session/5599:
[  477.439005][   T39]  #0: ffff88802c62d218 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50
[  477.439062][   T39]  #1: ffffffff8e311470 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  477.439110][   T39]  #2: ffff88813feaad58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0
[  477.439164][   T39] 5 locks held by syz-executor/5600:
[  477.439175][   T39]  #0: ffff88803fb191b0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0
[  477.439228][   T39]  #1: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200
[  477.439278][   T39]  #2: ffff888037aab658 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210
[  477.439333][   T39]  #3: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400
[  477.439385][   T39]  #4: ffffffff8e1cac60 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x4f0
[  477.439439][   T39] 1 lock held by syz-executor/5611:
[  477.439452][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  477.439514][   T39] 1 lock held by syz-executor/5612:
[  477.439527][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  477.439586][   T39] 1 lock held by syz-executor/5613:
[  477.439598][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  477.439656][   T39] 1 lock held by syz-executor/5614:
[  477.439668][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  477.439730][   T39] 2 locks held by kworker/0:5/5767:
[  477.439742][   T39]  #0: ffff88813fe16538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  477.439801][   T39]  #1: ffffc90004e77c40 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  477.439858][   T39] 2 locks held by kworker/u8:25/6726:
[  477.439870][   T39]  #0: ffff88813fe54138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  477.439928][   T39]  #1: ffffc90005967c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  477.440016][   T39] 1 lock held by syz-executor/7090:
[  477.440029][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  477.440089][   T39] 1 lock held by syz-executor/7091:
[  477.440100][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  477.440158][   T39] 1 lock held by syz-executor/7093:
[  477.440170][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  477.440228][   T39] 1 lock held by syz-executor/7094:
[  477.440240][   T39]  #0: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  477.440303][   T39] 7 locks held by syz-executor/7185:
[  477.440315][   T39]  #0: ffff8880354c2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  477.440375][   T39]  #1: ffff888060b53878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  477.440433][   T39]  #2: ffff8880296eb4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  477.440499][   T39]  #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  477.440563][   T39]  #4: ffff88803731d160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[  477.440619][   T39]  #5: ffff88803916c310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[  477.440674][   T39]  #6: ffffffff8e1d0e30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  477.440732][   T39] 4 locks held by syz-executor/7192:
[  477.440744][   T39]  #0: ffff8880354c2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  477.440804][   T39]  #1: ffff88805b907078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  477.440862][   T39]  #2: ffff8880296eb4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  477.440923][   T39]  #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  477.440993][   T39] 4 locks held by syz-executor/7215:
[  477.441005][   T39]  #0: ffff8880354c2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  477.441067][   T39]  #1: ffff88803d508c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  477.441126][   T39]  #2: ffff8880296eb4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  477.441189][   T39]  #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  477.441247][   T39] 4 locks held by syz-executor/7222:
[  477.441258][   T39]  #0: ffff8880354c2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  477.441319][   T39]  #1: ffff88803d509878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  477.441376][   T39]  #2: ffff8880296eb4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  477.441438][   T39]  #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  477.441502][   T39] 4 locks held by syz-executor/7272:
[  477.441514][   T39]  #0: ffff8880354c2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  477.441576][   T39]  #1: ffff8880671db078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  477.441635][   T39]  #2: ffff8880296eb4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  477.441697][   T39]  #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  477.441757][   T39] 4 locks held by syz-executor/7293:
[  477.441768][   T39]  #0: ffff8880354c2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  477.441831][   T39]  #1: ffff88805e72b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  477.441889][   T39]  #2: ffff8880296eb4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  477.441951][   T39]  #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  477.442020][   T39] 4 locks held by syz-executor/7299:
[  477.442032][   T39]  #0: ffff8880354c2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  477.442095][   T39]  #1: ffff88806070f878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  477.442153][   T39]  #2: ffff8880296eb4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  477.442215][   T39]  #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  477.442275][   T39] 4 locks held by syz-executor/7306:
[  477.442286][   T39]  #0: ffff8880354c2480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  477.442347][   T39]  #1: ffff888025ce9478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  477.442405][   T39]  #2: ffff8880296eb4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  477.442467][   T39]  #3: ffffffff8ee21ab8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  477.442532][   T39] 
[  477.442537][   T39] =============================================
[  477.442537][   T39] 
[  477.442548][   T39] NMI backtrace for cpu 0
[  477.442566][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  477.442591][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  477.442604][   T39] Call Trace:
[  477.442612][   T39]  <TASK>
[  477.442622][   T39]  dump_stack_lvl+0xe8/0x150
[  477.442649][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  477.442675][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  477.442702][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  477.442732][   T39]  sys_info+0x135/0x170
[  477.442753][   T39]  watchdog+0xfd3/0x1030
[  477.442784][   T39]  ? watchdog+0x1c9/0x1030
[  477.442814][   T39]  kthread+0x388/0x470
[  477.442837][   T39]  ? __pfx_watchdog+0x10/0x10
[  477.442857][   T39]  ? __pfx_kthread+0x10/0x10
[  477.442919][   T39]  ret_from_fork+0x514/0xb70
[  477.442960][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  477.442996][   T39]  ? __switch_to+0xc79/0x1410
[  477.443021][   T39]  ? __pfx_kthread+0x10/0x10
[  477.443047][   T39]  ret_from_fork_asm+0x1a/0x30
[  477.443091][   T39]  </TASK>
[  477.443098][   T39] Sending NMI from CPU 0 to CPUs 1:
[  477.443128][    C1] NMI backtrace for cpu 1
[  477.443145][    C1] CPU: 1 UID: 0 PID: 29 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  477.443165][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  477.443175][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x10/0x80
[  477.443196][    C1] Code: de 5b e9 83 47 5f 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 58 85 d4 10 <65> 8b 35 79 85 d4 10 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 ec 0b
[  477.443212][    C1] RSP: 0018:ffffc90000a3e8f8 EFLAGS: 00000287
[  477.443235][    C1] RAX: ffffffff8914b6f0 RBX: 0000000000051c00 RCX: ffff88801e2dbe00
[  477.443249][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100
[  477.443260][    C1] RBP: ffffc90000a3ea90 R08: 0000000000000000 R09: 0000000000000100
[  477.443271][    C1] R10: ffffc90000a3e860 R11: fffff52000147d10 R12: e00000000cb3649b
[  477.443284][    C1] R13: e00000000cb3649a R14: 1ffffffff34c9b64 R15: e00000000cb3649a
[  477.443298][    C1] FS:  0000000000000000(0000) GS:ffff888125d7e000(0000) knlGS:0000000000000000
[  477.443313][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  477.443325][    C1] CR2: 00007f16435aae9c CR3: 000000003d362000 CR4: 00000000003526f0
[  477.443342][    C1] Call Trace:
[  477.443349][    C1]  <TASK>
[  477.443355][    C1]  save_dst_trace_buffer+0x1e0/0x5b0
[  477.443377][    C1]  ? __pfx_save_dst_trace_buffer+0x10/0x10
[  477.443395][    C1]  ? ip_route_output_key_hash_rcu+0x1d1f/0x25e0
[  477.443416][    C1]  ? ip_route_output_key_hash+0x18d/0x2a0
[  477.443436][    C1]  ? ip_route_output_flow+0x2a/0x150
[  477.443453][    C1]  ? ip_route_me_harder+0x742/0xf90
[  477.443472][    C1]  ? synproxy_send_tcp+0x34c/0x670
[  477.443490][    C1]  ? synproxy_send_client_synack+0x8c1/0xe30
[  477.443509][    C1]  ? nft_synproxy_eval_v4+0x34a/0x4e0
[  477.443529][    C1]  ? nft_synproxy_do_eval+0x305/0x580
[  477.443548][    C1]  ? nft_do_chain+0x48d/0x1ae0
[  477.443568][    C1]  ? nft_do_chain_inet+0x360/0x4b0
[  477.443587][    C1]  ? nf_hook_slow+0xc5/0x220
[  477.443604][    C1]  ? NF_HOOK+0x21f/0x3c0
[  477.443618][    C1]  ? NF_HOOK+0x336/0x3c0
[  477.443631][    C1]  ? process_backlog+0x569/0xc60
[  477.443651][    C1]  ? __napi_poll+0xab/0x550
[  477.443668][    C1]  ? net_rx_action+0x696/0xe00
[  477.443686][    C1]  ? handle_softirqs+0x1de/0x6d0
[  477.443708][    C1]  ? __local_bh_enable_ip+0x170/0x2b0
[  477.443731][    C1]  ? rcu_cpu_kthread+0x9e8/0x1470
[  477.443750][    C1]  ? smpboot_thread_fn+0x541/0xa50
[  477.443768][    C1]  ? ip_route_output_key_hash_rcu+0x1331/0x25e0
[  477.443791][    C1]  ip_route_output_key_hash_rcu+0x1d1f/0x25e0
[  477.443812][    C1]  ? ip_route_output_key_hash_rcu+0x1331/0x25e0
[  477.443836][    C1]  ? ip_route_output_key_hash+0xd8/0x2a0
[  477.443857][    C1]  ip_route_output_key_hash+0x18d/0x2a0
[  477.443878][    C1]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  477.443905][    C1]  ip_route_output_flow+0x2a/0x150
[  477.443923][    C1]  ? ip_route_me_harder+0x730/0xf90
[  477.443944][    C1]  ip_route_me_harder+0x742/0xf90
[  477.443968][    C1]  ? __pfx_ip_route_me_harder+0x10/0x10
[  477.443995][    C1]  ? __cookie_v4_init_sequence+0x25d/0x500
[  477.444023][    C1]  synproxy_send_tcp+0x34c/0x670
[  477.444045][    C1]  synproxy_send_client_synack+0x8c1/0xe30
[  477.444070][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  477.444090][    C1]  ? nft_tunnel_obj_init+0x1318/0x1960
[  477.444114][    C1]  ? synproxy_pernet+0x45/0x270
[  477.444137][    C1]  nft_synproxy_eval_v4+0x34a/0x4e0
[  477.444159][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  477.444181][    C1]  ? nf_ip_checksum+0x13c/0x510
[  477.444204][    C1]  nft_synproxy_do_eval+0x305/0x580
[  477.444233][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  477.444260][    C1]  nft_do_chain+0x48d/0x1ae0
[  477.444285][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  477.444306][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  477.444331][    C1]  ? __lock_acquire+0x6b5/0x2d10
[  477.444357][    C1]  ? __lock_acquire+0x6b5/0x2d10
[  477.444379][    C1]  nft_do_chain_inet+0x360/0x4b0
[  477.444400][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  477.444424][    C1]  ? NF_HOOK+0x9e/0x3c0
[  477.444440][    C1]  ? NF_HOOK+0x9e/0x3c0
[  477.444455][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  477.444476][    C1]  nf_hook_slow+0xc5/0x220
[  477.444495][    C1]  NF_HOOK+0x21f/0x3c0
[  477.444511][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  477.444527][    C1]  ? NF_HOOK+0x9e/0x3c0
[  477.444542][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  477.444556][    C1]  ? ip_rcv_finish_core+0xda3/0x1c00
[  477.444573][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  477.444592][    C1]  ? ip_local_deliver+0x12a/0x1b0
[  477.444610][    C1]  NF_HOOK+0x336/0x3c0
[  477.444624][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  477.444648][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  477.444664][    C1]  ? NF_HOOK+0x9e/0x3c0
[  477.444678][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  477.444694][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  477.444712][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  477.444727][    C1]  ? process_backlog+0x271/0xc60
[  477.444746][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  477.444761][    C1]  process_backlog+0x569/0xc60
[  477.444782][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  477.444804][    C1]  __napi_poll+0xab/0x550
[  477.444825][    C1]  net_rx_action+0x696/0xe00
[  477.444851][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  477.444870][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  477.444897][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  477.444924][    C1]  handle_softirqs+0x1de/0x6d0
[  477.444951][    C1]  __local_bh_enable_ip+0x170/0x2b0
[  477.444975][    C1]  ? rcu_cpu_kthread+0x205/0x1470
[  477.444995][    C1]  rcu_cpu_kthread+0x9e8/0x1470
[  477.445018][    C1]  ? rcu_cpu_kthread+0x205/0x1470
[  477.445042][    C1]  ? __pfx_rcu_cpu_kthread+0x10/0x10
[  477.445061][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  477.445081][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  477.445096][    C1]  smpboot_thread_fn+0x541/0xa50
[  477.445112][    C1]  ? smpboot_thread_fn+0x4d/0xa50
[  477.445132][    C1]  kthread+0x388/0x470
[  477.445149][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  477.445164][    C1]  ? __pfx_kthread+0x10/0x10
[  477.445181][    C1]  ret_from_fork+0x514/0xb70
[  477.445201][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  477.445220][    C1]  ? __switch_to+0xc79/0x1410
[  477.445243][    C1]  ? __pfx_kthread+0x10/0x10
[  477.445262][    C1]  ret_from_fork_asm+0x1a/0x30
[  477.445288][    C1]  </TASK>
[  477.877153][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  477.877173][   T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  477.877200][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  477.877213][   T39] Call Trace:
[  477.877223][   T39]  <TASK>
[  477.877232][   T39]  vpanic+0x56c/0xa60
[  477.877270][   T39]  ? __pfx___schedule+0x10/0x10
[  477.877303][   T39]  ? __pfx_vpanic+0x10/0x10
[  477.877346][   T39]  panic+0xc5/0xd0
[  477.877377][   T39]  ? __pfx_panic+0x10/0x10
[  477.877408][   T39]  ? preempt_schedule_thunk+0x16/0x40
[  477.877445][   T39]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  477.877476][   T39]  watchdog+0x102c/0x1030
[  477.877507][   T39]  ? watchdog+0x1c9/0x1030
[  477.877534][   T39]  kthread+0x388/0x470
[  477.877557][   T39]  ? __pfx_watchdog+0x10/0x10
[  477.877578][   T39]  ? __pfx_kthread+0x10/0x10
[  477.877605][   T39]  ret_from_fork+0x514/0xb70
[  477.877670][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  477.877732][   T39]  ? __switch_to+0xc79/0x1410
[  477.877756][   T39]  ? __pfx_kthread+0x10/0x10
[  477.877782][   T39]  ret_from_fork_asm+0x1a/0x30
[  477.877827][   T39]  </TASK>
[  477.878001][   T39] Kernel Offset: disabled