last executing test programs:

15m37.655515886s ago: executing program 3 (id=1680):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f00000004c0)=""/102392, 0x18ff8)
socket$inet6(0xa, 0x2, 0x3a)

15m34.618300837s ago: executing program 3 (id=1687):
r0 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="000000000000000463656c6c00000002000000440000000600000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
keyctl$invalidate(0x15, r0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xef)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000300)=ANY=[])
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
lstat(0x0, 0x0)
read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_STATX(r2, &(0x7f0000008340)={0x130, 0x0, r3, {0xffffffffffffffff, 0x8001, 0x0, '\x00', {0x1, 0x1, 0xffffffff8d41b822, 0xb85, 0x0, 0x0, 0xa000, '\x00', 0x5, 0x75a, 0x10001, 0x8, {0x30, 0xfffffffd}, {0x4, 0x8000}, {0x3, 0x100}, {0x100, 0x6}, 0xa0000000, 0xfffffff9, 0x6, 0x9}}}, 0x130)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @remote, 0x100000}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x0)
ioctl(0xffffffffffffffff, 0x40047438, &(0x7f0000000040))
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0xfffffff7, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000080)="91", 0x1}], 0x1}}], 0x1, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040), 0x4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x8080000, {}, 0x1}})
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r6, 0x40047438, &(0x7f0000001340))

15m26.455167277s ago: executing program 3 (id=1700):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x14)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0)
read$FUSE(r3, 0x0, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000000c0))

15m24.724204435s ago: executing program 3 (id=1701):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
userfaultfd(0x80801)
socket$kcm(0x2, 0xa, 0x2)
r3 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB='\a'], 0x0)

15m20.596291751s ago: executing program 3 (id=1712):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040), &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9223372036854779533'], 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = epoll_create1(0x80000)
r7 = fcntl$dupfd(r5, 0x0, r5)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x20000000})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x10000014})
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = getpid()
kcmp$KCMP_EPOLL_TFD(r9, r8, 0x7, r7, &(0x7f0000000100)={r6, r7})
write(r0, &(0x7f0000000200)='2\n', 0x2)
ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000040)={0x3, 0xfffffffffffffff0, 0x8001, 0x40, 0x1, 0x2})

15m18.486485255s ago: executing program 3 (id=1716):
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$TOKEN_CREATE(0x24, &(0x7f00000013c0), 0x8)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0)
write$eventfd(r1, &(0x7f0000000080)=0x759, 0x8)

15m1.581025849s ago: executing program 32 (id=1716):
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
bpf$TOKEN_CREATE(0x24, &(0x7f00000013c0), 0x8)
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0)
write$eventfd(r1, &(0x7f0000000080)=0x759, 0x8)

6m1.901226817s ago: executing program 4 (id=2537):
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x6)
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x12000, 0x84, 0x6}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8000000008, 0x400080000100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}})
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17})
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x840, 0x0)
openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
fsync(r0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m58.852036504s ago: executing program 4 (id=2538):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x2, &(0x7f0000000500)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x4}, 0x94)

5m56.191346332s ago: executing program 4 (id=2542):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002bc0)=ANY=[], 0x8)
getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000380))
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
close(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x24, 0xc1, 0x4f, 0x3, 0xbb, 0x80, 0x4, 0xfe, 0x8, 0x42, 0x4, 0x1}, {0xd, 0x3, 0x6, 0x48, 0x9, 0x3, 0x44, 0x87, 0x8, 0x13, 0x7, 0x68, 0xffffffffffffffff}, {0x1fd, 0x7, 0xd, 0xc2, 0x25, 0x1, 0x1, 0x6, 0x3, 0x15, 0x0, 0x1, 0x8000000000000000}], 0x2})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000000000000000000000000bbff0200000000000000"], 0x0)
ptrace(0x10, r3)
ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)='\x00', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="f6ae", 0x2}], 0x1}}], 0x2, 0x4404c880)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfc, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfc, 0x1, 0x4, @loopback, @loopback}}}}}}, 0x0)
sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
rmdir(&(0x7f0000000040)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f00000003c0)=""/96, 0x60, <r8=>0x0, &(0x7f0000000440)=""/241, 0xf1}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="8ff8cb87fa478ad787231466a9355d34acdcb225218c6dd31c607826401d1cdb14cf341b22fa620199f9f5ae88c0971f006cfdb88fac65917700152fd751595b3d26b3f4d7f1c90c07b20c81d782f3a297fa82f87e16d4ed3316993cb0135cc993ae7f52075d355b71494cd04f27b225befdd159b8953533cc388a011c66a6706b8c72a2dbecb90fe6fc0c3ddb6f8d5261f2368db1ed85e326daaacd744bdc7b8a37416233eb01559c164729f1a5d6db12acfd15b1bb93b12ef59defaa4eba839cb982cc661682d3dfc6", @ANYRES8=r7, @ANYRES32=r6], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m55.258906743s ago: executing program 4 (id=2543):
close(0xffffffffffffffff)
syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904"], 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000240)=0x1)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000240)=@in4={0x21, 0x9, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x24)
connect$rxrpc(r4, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24)
r5 = syz_clone3(&(0x7f0000000500)={0x20000000, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0), {0x21}, &(0x7f0000000340)=""/186, 0xba, &(0x7f0000000480)=""/50, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r1, &(0x7f0000000580)={r1, r2, 0x7})
connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @random="12349874fbc5", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e22, 0x4e20, 0x8}}}}}, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x5, 0x7, 0x6e, 0x8000, 0x9, '\a\x00', 0xc8, 0xf})
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000140)={0x1, 0x0, 0x2c99, 0x80, 0x1009})

5m52.633642416s ago: executing program 4 (id=2550):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000008000100060808004149004001040800", 0x58}], 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0xe, 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="0800000004000000040000001200000008000000", @ANYRES32, @ANYBLOB="00000000000a0000000000c9dd6c0eb5be71230000000000835100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"b6bd46c0e6ae7d646ab06185fc623085", <r7=>0x0, 0x0, {0x5, 0x5}, {0x1, 0x10001}, 0x10000, [0x80000000, 0x8000000000000001, 0x7, 0xffffffffffffffff, 0xfffffffffffffffb, 0x3ff, 0x100000001, 0x2, 0xfff, 0x7b, 0x3, 0x5, 0xbdd4, 0x7, 0x0, 0x8]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000540)={{r1}, r7, 0x1e, @inherit={0x60, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000003000000000000000100000000000000020000000000000004000000000000000700000000000000020000000000000147540000000000000400000000ff0500000000415960b8df0a59c1888142000000090000000000"]}, @subvolid=0x5})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="fb640000", @ANYRES16=r9, @ANYBLOB="01000000000000000000100000001800018014000200766c616e30000000000000000000000005000b0002000000"], 0x34}}, 0x4044890)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r11, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0x38f9, 0x0)
write(r0, &(0x7f0000000040), 0xffffff4a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000003, 0x11012, 0xffffffffffffffff, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r12)
sendmsg$NET_DM_CMD_START(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r13, 0x1, 0x0, 0x25dfdbfc}, 0x14}}, 0x0)
r14 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_QUERYCTRL(r14, 0xc0445624, &(0x7f0000000040)={0xf0f026, 0x0, "60055808889f90ac0600000500fdfd9ab67e1db9c9a431078d40f722e6002000", 0x9, 0xbd6, 0xff, 0x2, 0x28})

5m46.37615628s ago: executing program 4 (id=2564):
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, <r4=>0x0}, &(0x7f0000000380)=0xc)
mount$cgroup(0x0, &(0x7f0000000100)='./proc/file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f00000003c0)={[{}, {@clone_children}, {@noprefix}, {@favordynmods}, {@noprefix}, {@xattr}, {@release_agent={'release_agent', 0x3d, './proc'}}], [{@euid_gt={'euid>', r4}}]})
preadv(r3, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000600)=""/73, 0x49}], 0x10000047, 0x7f, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x509d884560ba1ba6, 0x10}, {}, {0xfff2, 0x6}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20028041)
capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000500)={<r7=>0x0, 0x3c, &(0x7f00000004c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x0, @empty, 0x6}]}, &(0x7f0000000540)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000580)={r7, 0x3}, &(0x7f00000005c0)=0x8)
r8 = syz_open_procfs(r0, &(0x7f0000000080)='oom_adj\x00')
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x2000}, 0x4)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='3', 0x1}], 0x1)

5m45.241045666s ago: executing program 33 (id=2564):
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, <r4=>0x0}, &(0x7f0000000380)=0xc)
mount$cgroup(0x0, &(0x7f0000000100)='./proc/file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f00000003c0)={[{}, {@clone_children}, {@noprefix}, {@favordynmods}, {@noprefix}, {@xattr}, {@release_agent={'release_agent', 0x3d, './proc'}}], [{@euid_gt={'euid>', r4}}]})
preadv(r3, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000600)=""/73, 0x49}], 0x10000047, 0x7f, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x509d884560ba1ba6, 0x10}, {}, {0xfff2, 0x6}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20028041)
capset(0x0, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000500)={<r7=>0x0, 0x3c, &(0x7f00000004c0)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x0, @empty, 0x6}]}, &(0x7f0000000540)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000580)={r7, 0x3}, &(0x7f00000005c0)=0x8)
r8 = syz_open_procfs(r0, &(0x7f0000000080)='oom_adj\x00')
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x2000}, 0x4)
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='3', 0x1}], 0x1)

1m8.358079958s ago: executing program 0 (id=3018):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x0, 0x0, 0xff}}}}}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002abd7000ffffffff00210000", @ANYRES32=0x0, @ANYBLOB="5481000000000000140003006272696467655f736c6176655f30000008000400d400000014001680100001800900020002000000a70a000007000000"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x54)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x101}}}}}}, 0x0)

1m8.148734843s ago: executing program 0 (id=3020):
r0 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r1, 0x1, &(0x7f0000000040), 0x0)
fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)

1m6.748747635s ago: executing program 0 (id=3023):
socket$key(0xf, 0x3, 0x2)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c)

1m5.211796643s ago: executing program 0 (id=3025):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$loop(0x0, 0x4, 0x901)
timer_create(0x5, 0x0, 0x0)
unshare(0x20000600)
userfaultfd(0x80001)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48)
unshare(0x20000000)

1m3.652371125s ago: executing program 0 (id=3032):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x1ff, 0x5, 0x7}, 0x3f, [0x9, 0x2, 0x18, 0x6, 0x2, 0x400, 0xc0000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x9, 0xfffffffb, 0x39, 0x747d5e13, 0x803, 0xfffffb9a, 0xfffffffe, 0x5, 0xfffffbfb, 0x12004, 0x3, 0x2, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0x1a, 0x8da8, 0x2, 0x200, 0x6, 0x5, 0x8, 0x4, 0x2, 0xffff, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x1ff, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x41, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x2, 0x8000, 0xfffffffd, 0x3, 0x1, 0x24, 0x5, 0xfffffffb, 0x8, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffa, 0x3, 0x3, 0x297, 0x8, 0x0, 0x200000a, 0x4, 0x0, 0x3ff, 0x3, 0xff, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x2000001, 0xffffffff, 0x6, 0x2000008, 0x800, 0x4fdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0xb, 0x9, 0xe, 0x1, 0x7, 0x6, 0x2, 0x800001, 0x1, 0x8, 0x4, 0x1f6, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x0, 0x0, 0x1e86, 0x5, 0x3d, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x400004, 0x5, 0x200003, 0x100, 0x5, 0x4, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x9, 0xb, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x8, 0xffff, 0x3, 0x0, 0x1000088, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0xfff, 0x1000, 0x8, 0x5, 0x3fa6, 0x4, 0x5, 0x5, 0x8000, 0x4, 0xe48, 0x4, 0x3, 0x4, 0x0, 0x7, 0x6, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0xc09, 0x6, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xfdff8a33, 0xfffffff8, 0x1, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0x3, 0x136, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x1d8, 0x1d8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xa, [0x4e23, 0x4e24, 0x4e21, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e21, 0x4e22, 0x4e22, 0x4e21, 0x4e20, 0x4e24, 0x4e21], [0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1]}}]}, @REJECT={0x28}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffffff, 'veth0_to_bridge\x00', 'vlan1\x00', {0xff}, {0xff}, 0x1, 0x2, 0x10}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {0xff}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/203, 0xcb}], 0x1)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

1m1.449670101s ago: executing program 0 (id=3037):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug}]}})

1m1.316576627s ago: executing program 5 (id=3038):
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00')
r0 = open(&(0x7f00000001c0)='./mnt\x00', 0x8000, 0x129)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

1m0.624353634s ago: executing program 5 (id=3040):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x2b)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x4000000)

55.067396955s ago: executing program 5 (id=3047):
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r3, 0x200a0204)
keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3})
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3})
fsopen(&(0x7f0000000240)='9p\x00', 0x0)

53.686598188s ago: executing program 5 (id=3049):
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

53.427132772s ago: executing program 5 (id=3051):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x7, &(0x7f0000000280)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0xfffe, r0, 0x0}])

52.9253484s ago: executing program 5 (id=3053):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r6, 0x8001, 0x0, 0x80000000, 0xd, 0x0, {0x0, 0x0, r2}})
io_uring_enter(r2, 0x1, 0x1, 0x61, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="182003010200008d7fd6db7d2ceb27"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000b}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9febefff18000000000000006c0000006c0000000c000000100000000000000203000000040000000000000c02000000090000000000e11b040000000f0002000001000000010000000c00000001800000030000000d000000af0000000000000205000000040000000000000e030000000000000000302e002045d93730005f00"/144, @ANYRESDEC=r7, @ANYRES64=r7, @ANYRESOCT=r7], &(0x7f0000000040)=""/143, 0x90, 0x8f, 0x1, 0x5}, 0x28)

39.995815725s ago: executing program 6 (id=3091):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x17, 0x2, "25b9"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0)

37.864326462s ago: executing program 34 (id=3053):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x40, 0x0, @fd=r6, 0x8001, 0x0, 0x80000000, 0xd, 0x0, {0x0, 0x0, r2}})
io_uring_enter(r2, 0x1, 0x1, 0x61, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="182003010200008d7fd6db7d2ceb27"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000b}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9febefff18000000000000006c0000006c0000000c000000100000000000000203000000040000000000000c02000000090000000000e11b040000000f0002000001000000010000000c00000001800000030000000d000000af0000000000000205000000040000000000000e030000000000000000302e002045d93730005f00"/144, @ANYRESDEC=r7, @ANYRES64=r7, @ANYRESOCT=r7], &(0x7f0000000040)=""/143, 0x90, 0x8f, 0x1, 0x5}, 0x28)

37.839417868s ago: executing program 6 (id=3095):
syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_connect(0x2, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff000000070501020800000705820308000107050302400000070584"], 0x0)

36.475045983s ago: executing program 6 (id=3100):
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./config/cluster/ocfs2\x00', 0x1ff)
mkdir(&(0x7f0000000140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='127.0.', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0)
write(r1, &(0x7f0000000240)='7', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0)
write(r2, &(0x7f00000002c0)='0', 0x1)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000000340)='1', 0x1)
mkdir(&(0x7f0000000380)='./config/cluster/ocfs2/heartbeat/hb0\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/hb0/start_block\x00', 0x1, 0x0)
write(r4, &(0x7f0000000480)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/cluster/ocfs2/heartbeat/hb0/blocks\x00', 0x1, 0x0)
write(r5, &(0x7f0000000500)='2', 0x1)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/ocfs2/heartbeat/hb0/dev\x00', 0x1, 0x0)
write(r6, &(0x7f0000000580)='3', 0x1)

35.641265651s ago: executing program 6 (id=3103):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1e3)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee00)

35.133445762s ago: executing program 6 (id=3104):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x2000c080)

34.87444257s ago: executing program 6 (id=3105):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0)
pwrite64(r0, &(0x7f0000000040)="89f06d1c47", 0x5, 0x4)

19.72718597s ago: executing program 35 (id=3105):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0)
pwrite64(r0, &(0x7f0000000040)="89f06d1c47", 0x5, 0x4)

3.399919107s ago: executing program 2 (id=3179):
personality(0x400000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

3.358958228s ago: executing program 2 (id=3180):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCSMRU1(r1, 0x40047454, 0x0)

3.313017999s ago: executing program 2 (id=3181):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28)

1.581642907s ago: executing program 1 (id=3189):
mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='f', @ANYRESHEX])
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xd6, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x10, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x5, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x2, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x2, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x0, 0x4007f, 0xffffffff, 0x8, 0x4], [0x10, 0x3, 0x6, 0x9, 0x44, 0x8000c66, 0xd5, 0x2000006f, 0x8e, 0xd50, 0x4, 0xad, 0x2, 0x809, 0x100040, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000005, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x0, 0x7fff, 0x67b2, 0x1d0, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x4, 0x2, 0x7fffffff, 0x7, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x2, 0x10, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x1, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x8, 0xd3, 0x8, 0x97f7, 0x3, 0x600000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000026, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x5, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x73d, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0xfe, 0x7fff, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x7, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000002c0)={0x0, 0x1})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.092126456s ago: executing program 2 (id=3190):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

507.152331ms ago: executing program 1 (id=3191):
mkdirat(0xffffffffffffff9c, 0x0, 0x117)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r0, &(0x7f0000000080)="656e61626c655f6576656e743a73636821643aef4f878cec9afd43b1a267ea1fcbf1cf03674d4d1791921abc91200f", 0x2f)

416.487695ms ago: executing program 1 (id=3192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

308.276382ms ago: executing program 1 (id=3193):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xe}, {0xb, 0xffff}, {0x8, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xffffff60}]}, 0x2c}}, 0x0)

102.182724ms ago: executing program 1 (id=3194):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x14, r0, 0x7ff, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000)

89.720654ms ago: executing program 2 (id=3195):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0xfffffee7)

191.198µs ago: executing program 1 (id=3196):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, @void, @void}, 0x4a)

0s ago: executing program 2 (id=3197):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28)

kernel console output (not intermixed with test programs):

812" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[ 1718.043681][   T37] audit: type=1800 audit(1790617759.296:455): pid=17902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2812" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0
[ 1718.075041][ T1000] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[ 1718.307452][ T1000] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[ 1718.308935][ T1000] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1718.308962][ T1000] usb 7-1: config 0 has no interface number 0
[ 1718.309007][ T1000] usb 7-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1718.309037][ T1000] usb 7-1: config 0 interface 1 has no altsetting 0
[ 1718.310275][ T1000] usb 7-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[ 1718.310298][ T1000] usb 7-1: Manufacturer: syz
[ 1718.379035][ T1000] usb 7-1: config 0 descriptor??
[ 1718.396870][ T1000] usbhid 7-1:0.1: couldn't find an input interrupt endpoint
[ 1720.029796][ T5610] Bluetooth: hci0: command tx timeout
[ 1720.231955][ T9905] usb 7-1: USB disconnect, device number 2
[ 1720.885074][ T9903] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[ 1720.932624][T13680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1721.036135][ T9903] usb 7-1: Using ep0 maxpacket: 32
[ 1721.037152][ T9903] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1721.041100][ T9903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1721.041126][ T9903] usb 7-1: Product: syz
[ 1721.041142][ T9903] usb 7-1: Manufacturer: syz
[ 1721.041158][ T9903] usb 7-1: SerialNumber: syz
[ 1721.089696][ T9903] usb 7-1: config 0 descriptor??
[ 1721.110187][ T9903] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1721.382608][ T9903] gspca_topro: reg_w err -71
[ 1721.405052][ T9903] gspca_topro: Sensor soi763a
[ 1721.459997][ T9903] usb 7-1: USB disconnect, device number 3
[ 1721.517886][T15180] usb 3-1: new full-speed USB device number 70 using dummy_hcd
[ 1721.528495][T17951] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[ 1721.528547][T17951] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1721.593316][T17417] udevd[17417]: setting mode of /dev/bus/usb/007/003 to 020664 failed: No such file or directory
[ 1721.593501][T17417] udevd[17417]: setting owner of /dev/bus/usb/007/003 to uid=0, gid=0 failed: No such file or directory
[ 1721.655230][T15180] usb 3-1: device descriptor read/64, error -71
[ 1721.808996][T13680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1721.917228][T15180] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[ 1722.045072][ T5610] Bluetooth: hci0: command tx timeout
[ 1722.045100][T15180] usb 3-1: device descriptor read/64, error -71
[ 1722.165431][T15180] usb usb3-port1: attempt power cycle
[ 1722.565127][T15180] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[ 1722.586164][T15180] usb 3-1: device descriptor read/8, error -71
[ 1722.886755][T15180] usb 3-1: new full-speed USB device number 73 using dummy_hcd
[ 1722.905858][T15180] usb 3-1: device descriptor read/8, error -71
[ 1722.945027][ T1000] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[ 1723.003649][T13680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1723.016710][T15180] usb usb3-port1: unable to enumerate USB device
[ 1723.105012][ T1000] usb 7-1: Using ep0 maxpacket: 16
[ 1723.106729][ T1000] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1723.107886][ T1000] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1723.107911][ T1000] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1723.110243][ T1000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1723.110267][ T1000] usb 7-1: Product: syz
[ 1723.110283][ T1000] usb 7-1: Manufacturer: syz
[ 1723.110298][ T1000] usb 7-1: SerialNumber: syz
[ 1723.209224][ T1000] usb 7-1: 0:2 : does not exist
[ 1723.452637][ T1000] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1723.599393][ T1000] usb 7-1: USB disconnect, device number 4
[ 1723.639869][T13680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1723.886851][T17417] udevd[17417]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1724.125577][ T5610] Bluetooth: hci0: command tx timeout
[ 1725.727414][T17986] Bluetooth: MGMT ver 1.23
[ 1725.775229][ T9903] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[ 1725.972879][ T9903] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[ 1726.098506][ T9903] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1726.098544][ T9903] usb 7-1: config 0 has no interface number 0
[ 1726.098674][ T9903] usb 7-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1726.098866][ T9903] usb 7-1: config 0 interface 1 has no altsetting 0
[ 1726.224968][ T9923] Bluetooth: hci0: command tx timeout
[ 1726.383842][ T9903] usb 7-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[ 1726.383915][ T9903] usb 7-1: Manufacturer: syz
[ 1726.887917][ T9903] usb 7-1: config 0 descriptor??
[ 1727.342891][ T9903] usbhid 7-1:0.1: couldn't find an input interrupt endpoint
[ 1727.888723][T15180] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1727.965117][ T5610] Bluetooth: hci0: Opcode 0x0c3a failed: -110
[ 1728.035684][T15180] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[ 1728.037351][T15180] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[ 1728.042105][T15180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1728.042132][T15180] usb 1-1: Product: syz
[ 1728.042148][T15180] usb 1-1: Manufacturer: syz
[ 1728.042164][T15180] usb 1-1: SerialNumber: syz
[ 1728.086530][ T9905] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1728.150841][T15180] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[ 1728.150894][T15180] dvb-usb: bulk message failed: -22 (3/0)
[ 1728.174611][T17905] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1728.174747][T17905] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1728.175293][T17905] bridge_slave_0: entered allmulticast mode
[ 1728.184488][T17905] bridge_slave_0: entered promiscuous mode
[ 1728.196476][T17905] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1728.196704][T17905] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1728.196872][T17905] bridge_slave_1: entered allmulticast mode
[ 1728.199632][T17905] bridge_slave_1: entered promiscuous mode
[ 1728.228292][T15180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1728.229372][T15180] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[ 1728.229475][T15180] usb 1-1: media controller created
[ 1728.245031][ T9905] usb 3-1: Using ep0 maxpacket: 32
[ 1728.245847][ T9905] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1728.273058][ T9905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1728.273086][ T9905] usb 3-1: Product: syz
[ 1728.273100][ T9905] usb 3-1: Manufacturer: syz
[ 1728.273114][ T9905] usb 3-1: SerialNumber: syz
[ 1728.285863][ T5610] Bluetooth: hci0: command 0x0c3a tx timeout
[ 1728.318435][ T9905] usb 3-1: config 0 descriptor??
[ 1728.322690][T15180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1728.345105][ T9905] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1728.784310][T15180] DVB: Unable to find symbol mt352_attach()
[ 1728.784327][T15180] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[ 1728.800743][T15180] dvb-usb: bulk message failed: -22 (3/0)
[ 1728.802936][ T9905] gspca_topro: reg_w err -71
[ 1728.815001][T15180] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[ 1728.826063][ T9905] gspca_topro: Sensor soi763a
[ 1728.848579][T13680] bridge_slave_1: left allmulticast mode
[ 1728.848614][T13680] bridge_slave_1: left promiscuous mode
[ 1728.848900][T13680] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1728.904806][ T9905] usb 3-1: USB disconnect, device number 74
[ 1728.965069][ T5816] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[ 1729.056275][T13680] bridge_slave_0: left allmulticast mode
[ 1729.056301][T13680] bridge_slave_0: left promiscuous mode
[ 1729.056492][T13680] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1729.095131][ T5816] usb 6-1: device descriptor read/64, error -71
[ 1729.293883][ T9905] usb 1-1: USB disconnect, device number 115
[ 1729.431409][ T1000] usb 7-1: USB disconnect, device number 5
[ 1729.449581][ T5816] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[ 1729.483881][ T9905] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1729.589669][ T5816] usb 6-1: device descriptor read/64, error -71
[ 1729.695455][ T5816] usb usb6-port1: attempt power cycle
[ 1729.945144][ T9905] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1730.035061][ T5816] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[ 1730.056126][ T5816] usb 6-1: device descriptor read/8, error -71
[ 1730.095077][ T9905] usb 7-1: Using ep0 maxpacket: 16
[ 1730.095912][ T9905] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1730.097452][ T9905] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1730.097477][ T9905] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1730.100078][ T9905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1730.100104][ T9905] usb 7-1: Product: syz
[ 1730.100119][ T9905] usb 7-1: Manufacturer: syz
[ 1730.100134][ T9905] usb 7-1: SerialNumber: syz
[ 1730.182228][ T9905] usb 7-1: 0:2 : does not exist
[ 1730.265591][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.265653][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.305077][ T5816] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1730.325917][ T5816] usb 6-1: device descriptor read/8, error -71
[ 1730.346297][T13680] gretap0 (unregistering): left promiscuous mode
[ 1730.395543][ T9905] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1730.435358][ T5816] usb usb6-port1: unable to enumerate USB device
[ 1730.439819][ T9905] usb 7-1: USB disconnect, device number 6
[ 1730.974656][T17417] udevd[17417]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1733.055015][T13680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1733.217210][T13680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1733.268939][T13680] bond0 (unregistering): Released all slaves
[ 1734.372782][T17905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1734.451621][T17905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1734.467430][T18018] netlink: 'syz.2.2839': attribute type 63 has an invalid length.
[ 1734.598964][T17905] team0: Port device team_slave_0 added
[ 1734.602657][T17905] team0: Port device team_slave_1 added
[ 1734.775164][T17905] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1734.775183][T17905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1734.775207][T17905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1734.778523][T17905] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1734.778539][T17905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1734.778565][T17905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1734.809633][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead
[ 1734.809662][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x2000 instead
[ 1734.809680][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x8000 instead
[ 1734.809709][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x2000 instead
[ 1734.809733][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xa000 instead
[ 1734.809749][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2000 instead
[ 1734.809767][T18054] jffs2: Empty flash at 0x00000024 ends at 0x00000028
[ 1734.809787][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0008 instead
[ 1734.809804][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000088: 0x008b instead
[ 1734.809822][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000008c: 0x0008 instead
[ 1734.809840][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000090: 0x0002 instead
[ 1734.809857][T18054] jffs2: Further such events for this erase block will not be printed
[ 1734.810463][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead
[ 1734.810485][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead
[ 1734.810504][T18054] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead
[ 1734.823480][T18054] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1734.823496][T18054] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[ 1735.085091][ T5815] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[ 1735.245943][ T5815] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[ 1735.247453][ T5815] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1735.247479][ T5815] usb 6-1: config 0 has no interface number 0
[ 1735.247524][ T5815] usb 6-1: config 0 interface 1 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1735.247553][ T5815] usb 6-1: config 0 interface 1 has no altsetting 0
[ 1735.251665][ T5815] usb 6-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[ 1735.251693][ T5815] usb 6-1: Manufacturer: syz
[ 1735.275240][ T5815] usb 6-1: config 0 descriptor??
[ 1735.288410][T17905] hsr_slave_0: entered promiscuous mode
[ 1735.305520][T17905] hsr_slave_1: entered promiscuous mode
[ 1735.314402][ T5815] usbhid 6-1:0.1: couldn't find an input interrupt endpoint
[ 1735.665096][T15180] usb 1-1: new full-speed USB device number 116 using dummy_hcd
[ 1735.714349][T18081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2853'.
[ 1735.795099][T15180] usb 1-1: device descriptor read/64, error -71
[ 1735.964843][T18081] bond1: Invalid ad_actor_system MAC address.
[ 1735.964875][T18081] bond1: option ad_actor_system: invalid value (1)
[ 1736.026863][T18081] bond1 (unregistering): Released all slaves
[ 1736.035129][T15180] usb 1-1: new full-speed USB device number 117 using dummy_hcd
[ 1736.137596][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1736.208882][T15180] usb 1-1: device descriptor read/64, error -71
[ 1736.315420][T15180] usb usb1-port1: attempt power cycle
[ 1736.347210][ T9903] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1736.495037][ T9903] usb 3-1: Using ep0 maxpacket: 32
[ 1736.495858][ T9903] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1736.499784][ T9903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1736.499811][ T9903] usb 3-1: Product: syz
[ 1736.499826][ T9903] usb 3-1: Manufacturer: syz
[ 1736.499842][ T9903] usb 3-1: SerialNumber: syz
[ 1736.550190][ T9903] usb 3-1: config 0 descriptor??
[ 1736.574356][ T9903] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1736.675138][T15180] usb 1-1: new full-speed USB device number 118 using dummy_hcd
[ 1736.696881][T15180] usb 1-1: device descriptor read/8, error -71
[ 1736.794031][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2855'.
[ 1736.858519][ T9903] gspca_topro: reg_w err -71
[ 1736.886157][ T9903] gspca_topro: Sensor soi763a
[ 1736.955052][T15180] usb 1-1: new full-speed USB device number 119 using dummy_hcd
[ 1736.960367][ T9903] usb 3-1: USB disconnect, device number 75
[ 1736.972771][ T5815] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[ 1736.976001][T15180] usb 1-1: device descriptor read/8, error -71
[ 1737.089667][T15180] usb usb1-port1: unable to enumerate USB device
[ 1737.102022][ T5815] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[ 1737.356157][ T5815] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[ 1737.691878][T18106] ceph: No mds server is up or the cluster is laggy
[ 1737.742017][T17825] usb 6-1: USB disconnect, device number 6
[ 1737.885119][ T9903] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1737.905452][T13680] veth1_to_team: left promiscuous mode
[ 1738.153656][ T9903] usb 3-1: Using ep0 maxpacket: 16
[ 1738.170834][ T9903] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1738.183865][ T9903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1738.183894][ T9903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1738.292146][ T9903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1738.292177][ T9903] usb 3-1: Product: syz
[ 1738.292192][ T9903] usb 3-1: Manufacturer: syz
[ 1738.292208][ T9903] usb 3-1: SerialNumber: syz
[ 1738.601020][T13680] hsr_slave_0: left promiscuous mode
[ 1738.638020][T13680] hsr_slave_1: left promiscuous mode
[ 1738.638333][ T9903] usb 3-1: 0:2 : does not exist
[ 1739.027420][T18136] (syz.5.2859,18136,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1739.027479][T18136] (syz.5.2859,18136,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 1739.922460][ T9903] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 1740.206766][T13680] veth1_macvtap: left promiscuous mode
[ 1740.206879][T13680] veth0_macvtap: left promiscuous mode
[ 1740.207147][T13680] veth1_vlan: left promiscuous mode
[ 1740.207335][T13680] veth0_vlan: left promiscuous mode
[ 1740.344552][ T9903] usb 3-1: USB disconnect, device number 76
[ 1740.540314][T17417] udevd[17417]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1743.105573][T13680] team0 (unregistering): Port device team_slave_1 removed
[ 1743.145497][T13680] team0 (unregistering): Port device team_slave_0 removed
[ 1745.088236][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1745.758647][ T5815] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1745.905828][ T5815] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[ 1745.906888][ T5815] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[ 1745.909864][ T5815] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1745.909886][ T5815] usb 6-1: Product: syz
[ 1745.909895][ T5815] usb 6-1: Manufacturer: syz
[ 1745.909904][ T5815] usb 6-1: SerialNumber: syz
[ 1745.925137][T17825] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[ 1746.036679][ T5815] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[ 1746.036733][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[ 1746.099236][ T5826] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1746.177006][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1746.184377][T17825] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1746.204766][ T5815] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[ 1746.204824][ T5815] usb 6-1: media controller created
[ 1746.221624][T17825] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1746.221663][T17825] usb 7-1: can't read configurations, error -61
[ 1746.257585][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1746.280773][ T5826] usb 1-1: Using ep0 maxpacket: 32
[ 1746.281614][ T5826] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1746.335301][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1746.335333][ T5826] usb 1-1: Product: syz
[ 1746.335349][ T5826] usb 1-1: Manufacturer: syz
[ 1746.335366][ T5826] usb 1-1: SerialNumber: syz
[ 1746.340983][ T5826] usb 1-1: config 0 descriptor??
[ 1746.365763][T17825] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[ 1746.367675][ T5826] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1746.458903][ T5815] DVB: Unable to find symbol mt352_attach()
[ 1746.458921][ T5815] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[ 1746.459739][ T5815] dvb-usb: bulk message failed: -22 (3/0)
[ 1746.475043][ T5815] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[ 1746.570758][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2866'.
[ 1746.579953][T17825] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1746.610131][T17825] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1746.610173][T17825] usb 7-1: can't read configurations, error -61
[ 1746.610722][T17825] usb usb7-port1: attempt power cycle
[ 1746.911445][ T5826] gspca_topro: reg_w err -71
[ 1746.945129][ T5826] gspca_topro: Sensor soi763a
[ 1746.964865][ T5826] usb 1-1: USB disconnect, device number 120
[ 1747.278200][T18188] ceph: No mds server is up or the cluster is laggy
[ 1747.295140][T17825] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[ 1747.320418][T17825] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1747.322654][T17825] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1747.322690][T17825] usb 7-1: can't read configurations, error -61
[ 1747.445020][T17825] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[ 1747.466955][T17825] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1747.468911][T17825] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1747.468948][T17825] usb 7-1: can't read configurations, error -61
[ 1747.469309][T17825] usb usb7-port1: unable to enumerate USB device
[ 1749.285788][ T5815] usb 6-1: USB disconnect, device number 7
[ 1749.356453][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2870'.
[ 1749.358643][T18206] syz_tun: Device is already in use.
[ 1749.374186][ T5815] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1750.626452][T15180] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1750.835028][T15180] usb 7-1: Using ep0 maxpacket: 16
[ 1750.835897][T15180] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1750.837418][T15180] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1750.837444][T15180] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1750.840538][T15180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1750.840565][T15180] usb 7-1: Product: syz
[ 1750.840581][T15180] usb 7-1: Manufacturer: syz
[ 1750.840596][T15180] usb 7-1: SerialNumber: syz
[ 1750.926439][T15180] usb 7-1: 0:2 : does not exist
[ 1751.060383][T15180] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1751.739083][T15180] usb 7-1: USB disconnect, device number 11
[ 1754.060987][   T37] audit: type=1800 audit(1790617794.836:456): pid=18232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.2873" name="file0" dev="overlay" ino=96 res=0 errno=0
[ 1754.518882][T17417] udevd[17417]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1757.581149][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2881'.
[ 1757.735125][T17825] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1757.865740][ T9903] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1757.895049][T17825] usb 6-1: Using ep0 maxpacket: 16
[ 1757.896000][T17825] usb 6-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[ 1757.897769][T17825] usb 6-1: config 1 has an invalid interface descriptor of length 8, skipping
[ 1757.897793][T17825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1757.897814][T17825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1757.900290][T17825] usb 6-1: New USB device strings: Mfr=1, Product=16, SerialNumber=3
[ 1757.900316][T17825] usb 6-1: Product: syz
[ 1757.900332][T17825] usb 6-1: Manufacturer: syz
[ 1757.900348][T17825] usb 6-1: SerialNumber: syz
[ 1758.035135][ T9903] usb 7-1: Using ep0 maxpacket: 32
[ 1758.036360][ T9903] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1758.043323][ T9903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1758.043350][ T9903] usb 7-1: Product: syz
[ 1758.043417][ T9903] usb 7-1: Manufacturer: syz
[ 1758.043434][ T9903] usb 7-1: SerialNumber: syz
[ 1758.155273][ T9903] usb 7-1: config 0 descriptor??
[ 1758.178524][ T9903] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1758.348826][T18250] ceph: No mds server is up or the cluster is laggy
[ 1758.407734][ T9903] gspca_topro: reg_w err -71
[ 1758.435303][ T9903] gspca_topro: Sensor soi763a
[ 1758.570366][ T9903] usb 7-1: USB disconnect, device number 12
[ 1758.932246][T17825] usb 6-1: USB disconnect, device number 8
[ 1760.723569][ T5815] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1760.901197][ T5815] usb 6-1: device descriptor read/64, error -71
[ 1761.135066][ T5815] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1761.265078][ T5815] usb 6-1: device descriptor read/64, error -71
[ 1762.105251][ T5815] usb usb6-port1: attempt power cycle
[ 1762.625101][ T5815] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1762.645740][ T5815] usb 6-1: device descriptor read/8, error -71
[ 1762.896780][ T5815] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1762.919123][ T5815] usb 6-1: device descriptor read/8, error -71
[ 1763.026929][ T5815] usb usb6-port1: unable to enumerate USB device
[ 1763.061923][T17905] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1763.104873][T17905] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1763.107688][T17905] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1763.224587][T17905] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1763.293982][T17905] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1763.464654][T17905] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1763.477118][T17905] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1763.523459][T17905] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1764.120947][T17905] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1764.240748][T17905] 8021q: adding VLAN 0 to HW filter on device team0
[ 1764.314205][T13680] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1764.314337][T13680] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1764.467105][T13680] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1764.467252][T13680] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1764.535279][T17825] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[ 1764.695872][T17825] usb 7-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[ 1764.697570][T17825] usb 7-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[ 1764.702564][T17825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1764.702594][T17825] usb 7-1: Product: syz
[ 1764.702610][T17825] usb 7-1: Manufacturer: syz
[ 1764.702624][T17825] usb 7-1: SerialNumber: syz
[ 1764.797439][T17825] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[ 1764.816003][T17825] dvb-usb: bulk message failed: -22 (3/0)
[ 1764.908137][T17825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1764.909766][T17825] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[ 1764.909825][T17825] usb 7-1: media controller created
[ 1765.089828][T17825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1766.375708][T18350] ceph: No mds server is up or the cluster is laggy
[ 1766.625071][ T5815] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 1766.836282][ T5815] usb 1-1: Using ep0 maxpacket: 16
[ 1766.836985][ T5815] usb 1-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[ 1766.838067][ T5815] usb 1-1: config 1 has an invalid interface descriptor of length 8, skipping
[ 1766.838091][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1766.838111][ T5815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1766.840501][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=16, SerialNumber=3
[ 1766.840526][ T5815] usb 1-1: Product: syz
[ 1766.840541][ T5815] usb 1-1: Manufacturer: syz
[ 1766.840557][ T5815] usb 1-1: SerialNumber: syz
[ 1767.248314][T17825] DVB: Unable to find symbol mt352_attach()
[ 1767.248333][T17825] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[ 1767.251207][T17825] dvb-usb: bulk message failed: -22 (3/0)
[ 1767.290250][T17825] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[ 1767.348097][ T5815] usb 1-1: USB disconnect, device number 121
[ 1767.531404][ T9903] usb 7-1: USB disconnect, device number 13
[ 1767.709146][ T9903] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1767.819956][T18382] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[ 1767.819986][T18382] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1767.865607][T18382] vhci_hcd vhci_hcd.0: Device attached
[ 1770.056640][T18384] vhci_hcd: connection closed
[ 1770.060500][ T1621] vhci_hcd vhci_hcd.2: stop threads
[ 1770.060527][ T1621] vhci_hcd vhci_hcd.2: release socket
[ 1770.060609][ T1621] vhci_hcd vhci_hcd.2: disconnect device
[ 1770.225125][ T5815] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 1770.385032][ T5815] usb 1-1: Using ep0 maxpacket: 32
[ 1770.386588][ T5815] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1770.416514][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1770.416543][ T5815] usb 1-1: Product: syz
[ 1770.416559][ T5815] usb 1-1: Manufacturer: syz
[ 1770.416574][ T5815] usb 1-1: SerialNumber: syz
[ 1770.482947][ T5815] usb 1-1: config 0 descriptor??
[ 1770.528679][T17905] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1770.600234][ T5815] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1770.896785][ T5815] gspca_topro: reg_w err -71
[ 1770.907242][T17825] usb 38-1: enqueue for inactive port 0
[ 1770.929928][ T5815] gspca_topro: Sensor soi763a
[ 1771.030239][ T5815] usb 1-1: USB disconnect, device number 122
[ 1771.313968][T17905] veth0_vlan: entered promiscuous mode
[ 1771.388753][T18382] nvme nvme0: failed to connect socket: -512
[ 1771.392062][T17905] veth1_vlan: entered promiscuous mode
[ 1771.518410][T17825] usb usb38-port1: attempt power cycle
[ 1771.711678][T17905] veth0_macvtap: entered promiscuous mode
[ 1771.748623][T17905] veth1_macvtap: entered promiscuous mode
[ 1771.817677][T17905] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1771.858217][T17905] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1771.886490][T18408] Bluetooth: hci0: command 0x0c3a tx timeout
[ 1771.893333][ T5610] Bluetooth: hci0: Opcode 0x0c3a failed: -110
[ 1771.925072][T15180] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1771.982640][T18388] nvme_fabrics: unknown parameter or missing value 'hybla' in ctrl creation request
[ 1772.105050][ T5815] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1772.124156][T15180] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[ 1772.136139][T15180] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[ 1772.161582][T15180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1772.161612][T15180] usb 6-1: Product: syz
[ 1772.161628][T15180] usb 6-1: Manufacturer: syz
[ 1772.161644][T15180] usb 6-1: SerialNumber: syz
[ 1772.193994][T17825] usb usb38-port1: unable to enumerate USB device
[ 1772.211496][T15180] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[ 1772.211546][T15180] dvb-usb: bulk message failed: -22 (3/0)
[ 1772.236209][T15180] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1772.237156][T15180] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0)
[ 1772.237207][T15180] usb 6-1: media controller created
[ 1772.275448][T15180] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1772.293838][  T167] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1772.296486][ T5815] usb 7-1: Using ep0 maxpacket: 16
[ 1772.305206][ T5815] usb 7-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[ 1772.323381][ T5815] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 64, changing to 10
[ 1772.323414][ T5815] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1772.323437][ T5815] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1772.323465][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1772.331373][T13680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1772.345397][ T8911] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1772.346110][ T8911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1772.404721][ T5815] usb 7-1: config 0 descriptor??
[ 1773.612156][T18408] Bluetooth: hci3: command 0x0406 tx timeout
[ 1773.992589][T15180] DVB: Unable to find symbol mt352_attach()
[ 1773.992608][T15180] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0'
[ 1774.013200][T15180] dvb-usb: bulk message failed: -22 (3/0)
[ 1774.025055][T15180] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected.
[ 1774.030396][ T5815] input: HID 05ac:0269 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:0269.002D/input/input68
[ 1774.277127][ T5816] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1774.509311][ T5816] usb 3-1: Using ep0 maxpacket: 32
[ 1774.549265][ T5816] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1774.579131][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1774.579152][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024
[ 1774.579177][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1774.601754][ T1000] usb 6-1: USB disconnect, device number 13
[ 1774.985629][ T5816] usb 3-1: config 0 descriptor??
[ 1774.986870][T18424] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1775.055516][ T5816] hub 3-1:0.0: USB hub found
[ 1775.117485][T17490] udevd[17490]: setting owner of /dev/dvb/adapter1/demux0 to uid=0, gid=28 failed: No such file or directory
[ 1775.242875][ T5816] hub 3-1:0.0: 1 port detected
[ 1775.340141][T13680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1775.340157][T13680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1776.201322][ T5815] magicmouse 0003:05AC:0269.002D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:0269] on usb-dummy_hcd.6-1/input0
[ 1776.325169][ T1000] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1776.325814][ T5826] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 1776.358721][ T5815] usb 7-1: USB disconnect, device number 14
[ 1776.483730][ T5816] usb 3-1: Failed to suspend device, error -71
[ 1776.484614][ T5816] usb 3-1: USB disconnect, device number 77
[ 1776.501685][ T5826] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1776.504282][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1776.504315][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1776.504339][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1776.504377][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1776.680016][ T5826] usb 1-1: config 0 descriptor??
[ 1776.906806][ T1624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1776.927037][ T1624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1777.107743][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1777.108347][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1777.189769][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1777.195066][ T5816] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1777.259544][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1777.285601][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1777.291969][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1777.299021][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1777.342101][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1777.355084][ T5816] usb 3-1: Using ep0 maxpacket: 32
[ 1777.355955][ T5816] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1777.360909][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1777.360940][ T5816] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024
[ 1777.360984][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1777.372616][T18431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1777.384457][T18431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1777.430021][ T5816] usb 3-1: config 0 descriptor??
[ 1777.431727][T18424] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1777.465351][ T5816] hub 3-1:0.0: USB hub found
[ 1777.485239][ T5815] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1777.628126][ T5826] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1777.657113][ T5815] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1777.659167][ T5815] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1777.659200][ T5815] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1777.659328][ T5815] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1777.659372][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1777.754988][ T5826] usb 1-1: USB disconnect, device number 123
[ 1777.796408][ T5816] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1777.831595][ T5816] usbhid 3-1:0.0: can't add hid device: -71
[ 1777.831773][ T5816] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1777.834966][T18433] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1777.906156][ T5816] usb 3-1: USB disconnect, device number 78
[ 1778.060735][T18437] fido_id[18437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1778.314737][T18408] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1778.386791][T18408] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1778.389828][T18408] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1778.408417][T18408] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1778.421929][T18408] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1778.445027][ T5816] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1778.656389][ T5816] usb 3-1: Using ep0 maxpacket: 32
[ 1778.664372][ T5816] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1778.664428][ T5816] usb 3-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=a4.0d
[ 1778.690227][ T5816] usb 3-1: config 129 has an invalid interface number: 6 but max is 0
[ 1778.690255][ T5816] usb 3-1: config 129 has no interface number 0
[ 1778.690405][ T5816] usb 3-1: config 129 interface 6 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 1778.725846][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1778.725873][ T5816] usb 3-1: Product: syz
[ 1778.725889][ T5816] usb 3-1: Manufacturer: syz
[ 1778.725904][ T5816] usb 3-1: SerialNumber: syz
[ 1778.895200][T15180] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1778.994774][ T5816] hub 3-1:129.6: bad descriptor, ignoring hub
[ 1778.994816][ T5816] hub 3-1:129.6: probe with driver hub failed with error -5
[ 1779.014711][ T5816] sierra 3-1:129.6: Sierra USB modem converter detected
[ 1779.031262][ T5816] usb 3-1: Sierra USB modem converter now attached to ttyUSB0
[ 1779.045044][T15180] usb 6-1: Using ep0 maxpacket: 8
[ 1779.045714][T15180] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11
[ 1779.085582][T15180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1779.085612][T15180] usb 6-1: Product: syz
[ 1779.085627][T15180] usb 6-1: Manufacturer: syz
[ 1779.085643][T15180] usb 6-1: SerialNumber: syz
[ 1779.089952][T18447] netlink: 'syz.0.2913': attribute type 46 has an invalid length.
[ 1779.089974][T18447] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2913'.
[ 1779.140894][ T5816] usb 3-1: Sierra USB modem converter now attached to ttyUSB1
[ 1779.163478][T15180] usb 6-1: config 0 descriptor??
[ 1779.189538][T15180] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 1779.226702][ T5816] usb 3-1: USB disconnect, device number 79
[ 1779.345474][ T5816] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1779.406626][ T5816] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1779.411669][ T5816] sierra 3-1:129.6: device disconnected
[ 1779.430763][T15180] pwc: Failed to set LED on/off time (-71)
[ 1779.431380][T15180] pwc: send_video_command error -71
[ 1779.431395][T15180] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1779.431576][T15180] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71
[ 1779.512837][T15180] usb 6-1: USB disconnect, device number 14
[ 1779.995646][T15180] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[ 1780.153583][T15180] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11
[ 1780.178905][T15180] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1780.178935][T15180] usb 6-1: Product: syz
[ 1780.178951][T15180] usb 6-1: Manufacturer: syz
[ 1780.178966][T15180] usb 6-1: SerialNumber: syz
[ 1780.212501][T15180] usb 6-1: config 0 descriptor??
[ 1780.221981][T15180] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 1780.491225][T18471] mmap: syz.2.2918 (18471): VmData 37724160 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data.
[ 1781.230435][ T9923] Bluetooth: hci1: command tx timeout
[ 1781.708222][ T5815] aiptek 7-1:17.0: Aiptek using 400 ms programming speed
[ 1781.742297][ T5815] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input70
[ 1782.163535][T18479] input: syz1 as /devices/virtual/input/input71
[ 1782.687375][ T8855] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1783.245505][ T9923] Bluetooth: hci1: command tx timeout
[ 1783.892188][T15180] pwc: recv_control_msg error -71 req 02 val 2b00
[ 1783.985077][T15180] pwc: recv_control_msg error -71 req 02 val 2700
[ 1783.991339][T15180] pwc: recv_control_msg error -71 req 04 val 1600
[ 1783.994543][T15180] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1784.001394][T15180] pwc: recv_control_msg error -71 req 04 val 1000
[ 1784.006326][T15180] pwc: recv_control_msg error -71 req 04 val 1300
[ 1784.007148][T15180] pwc: recv_control_msg error -71 req 04 val 1400
[ 1784.007948][T15180] pwc: recv_control_msg error -71 req 02 val 2000
[ 1784.015190][T15180] pwc: recv_control_msg error -71 req 02 val 2100
[ 1784.020956][T15180] pwc: recv_control_msg error -71 req 06 val 0600
[ 1784.022003][T15180] pwc: recv_control_msg error -71 req 04 val 1500
[ 1784.023287][T15180] pwc: recv_control_msg error -71 req 02 val 2500
[ 1784.024087][T15180] pwc: recv_control_msg error -71 req 02 val 2400
[ 1784.025040][T15180] pwc: recv_control_msg error -71 req 02 val 2600
[ 1784.025884][T15180] pwc: recv_control_msg error -71 req 02 val 2900
[ 1784.027478][T15180] pwc: recv_control_msg error -71 req 02 val 2800
[ 1784.215601][T15180] pwc: recv_control_msg error -71 req 04 val 1100
[ 1784.222268][T15180] pwc: recv_control_msg error -71 req 04 val 1200
[ 1784.250716][T15180] pwc: Failed to power off camera (-71)
[ 1784.268785][T15180] pwc: Registered as video103.
[ 1784.345593][ T5815] usb 7-1: USB disconnect, device number 15
[ 1784.345688][    C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1784.386498][T15180] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input72
[ 1784.432640][T15180] usb 6-1: USB disconnect, device number 15
[ 1785.433042][ T9923] Bluetooth: hci1: command tx timeout
[ 1786.165030][   T10] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 1786.316602][   T10] usb 1-1: Using ep0 maxpacket: 8
[ 1786.317535][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 1786.319302][   T10] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[ 1786.319330][   T10] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[ 1786.319351][   T10] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 1786.319374][   T10] usb 1-1: config 250 has no interface number 0
[ 1786.319421][   T10] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[ 1786.319450][   T10] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1786.319476][   T10] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1786.319500][   T10] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[ 1786.319526][   T10] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[ 1786.319563][   T10] usb 1-1: config 250 interface 228 has no altsetting 0
[ 1786.321783][   T10] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 1786.321809][   T10] usb 1-1: Product: syz
[ 1786.321825][   T10] usb 1-1: SerialNumber: syz
[ 1786.350280][   T10] hub 1-1:250.228: bad descriptor, ignoring hub
[ 1786.350320][   T10] hub 1-1:250.228: probe with driver hub failed with error -5
[ 1786.822277][   T10] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 124 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[ 1786.855066][T15180] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[ 1787.007871][   T10] usb 1-1: USB disconnect, device number 124
[ 1787.034647][   T10] usblp0: removed
[ 1787.043243][T15180] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1787.057955][T15180] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1306, setting to 64
[ 1787.058005][T15180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1787.107025][T18506] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1787.113608][T15180] mdc800 6-1:1.0: Found Mustek MDC800 on USB.
[ 1787.336731][T15180] usb 6-1: USB disconnect, device number 16
[ 1787.371886][T15180] mdc800 6-1:1.0: Mustek MDC800 disconnected from USB.
[ 1787.398598][ T8855] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1787.489059][ T9923] Bluetooth: hci1: command tx timeout
[ 1788.382246][ T8855] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1788.685034][ T9923] Bluetooth: hci6: command 0x0406 tx timeout
[ 1788.855600][ T9923] Bluetooth: hci7: command 0x0406 tx timeout
[ 1789.537513][ T8855] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1789.555097][ T1000] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1789.716838][ T1000] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[ 1789.724542][ T1000] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1789.724572][ T1000] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1789.731927][ T1000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1789.731954][ T1000] usb 7-1: Product: syz
[ 1789.731968][ T1000] usb 7-1: Manufacturer: syz
[ 1789.731984][ T1000] usb 7-1: SerialNumber: syz
[ 1789.784167][ T1000] ums-sddr09 7-1:1.0: USB Mass Storage device detected
[ 1789.791426][ T1000] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[ 1789.791426][ T1000]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 1789.856828][T18440] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1789.856950][T18440] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1789.857135][T18440] bridge_slave_0: entered allmulticast mode
[ 1789.859873][T18440] bridge_slave_0: entered promiscuous mode
[ 1789.899193][T18440] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1789.899351][T18440] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1789.899523][T18440] bridge_slave_1: entered allmulticast mode
[ 1789.901788][T18440] bridge_slave_1: entered promiscuous mode
[ 1789.905136][ T9903] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1789.937407][   T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1789.999455][T18440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1790.002825][T18440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1790.063712][T18440] team0: Port device team_slave_0 added
[ 1790.073389][T18440] team0: Port device team_slave_1 added
[ 1790.100294][ T9903] usb 6-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[ 1790.102842][ T9903] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1790.102942][ T9903] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1790.102972][ T9903] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1790.103009][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1790.115529][   T10] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1790.123627][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1790.123659][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1790.147138][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1790.147167][   T10] usb 3-1: Product: syz
[ 1790.147183][   T10] usb 3-1: Manufacturer: syz
[ 1790.147205][   T10] usb 3-1: SerialNumber: syz
[ 1790.230488][ T9903] usb 6-1: config 0 descriptor??
[ 1790.290664][   T10] usb 3-1: config 0 descriptor??
[ 1790.291620][T18555] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1790.293341][T18555] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1790.338228][T18440] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1790.338246][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1790.338272][T18440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1790.340659][T18440] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1790.340673][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1790.340694][T18440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1790.514495][T18440] hsr_slave_0: entered promiscuous mode
[ 1790.528496][T18440] hsr_slave_1: entered promiscuous mode
[ 1790.531514][T18555] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1790.531630][T18555] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1790.531841][T18440] debugfs: 'hsr0' already exists in 'hsr'
[ 1790.531865][T18440] Cannot create hsr debugfs directory
[ 1790.764283][ T9903] input: HID 04f2:1421 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:04F2:1421.002F/input/input73
[ 1790.850078][ T1000] scsi host1: usb-storage 7-1:1.0
[ 1790.937824][   T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 1791.025571][ T1000] usb 7-1: USB disconnect, device number 16
[ 1791.788725][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.810460][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.243136][ T9903] chicony 0003:04F2:1421.002F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.5-1/input0
[ 1792.948767][   T10] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 1793.189881][ T9903] usb 6-1: USB disconnect, device number 17
[ 1793.219307][T18576] usb usb9: usbfs: process 18576 (syz.2.2952) did not claim interface 23 before use
[ 1794.001016][   T10] dm9601 3-1:0.0 eth9: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 4a:1d:0e:f0:7b:89
[ 1794.019298][   T10] usb 3-1: USB disconnect, device number 80
[ 1794.172396][   T10] dm9601 3-1:0.0 eth9: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet
[ 1796.426337][ T5815] usb 1-1: new full-speed USB device number 125 using dummy_hcd
[ 1796.506453][T15180] usb 7-1: new low-speed USB device number 17 using dummy_hcd
[ 1796.575838][ T5815] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[ 1796.577025][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1796.577071][ T5815] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[ 1796.579163][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1796.579177][ T5815] usb 1-1: Product: syz
[ 1796.579185][ T5815] usb 1-1: Manufacturer: syz
[ 1796.579194][ T5815] usb 1-1: SerialNumber: syz
[ 1796.666073][T15180] usb 7-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[ 1796.669402][T17413] udevd[17413]: setting mode of /dev/bus/usb/003/080 to 020664 failed: No such file or directory
[ 1796.670541][T17413] udevd[17413]: setting owner of /dev/bus/usb/003/080 to uid=0, gid=0 failed: No such file or directory
[ 1796.671219][T15180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1796.671254][T15180] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1796.671334][T15180] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1796.671378][T15180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1796.715972][ T9903] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1796.883748][T15180] usb 7-1: config 0 descriptor??
[ 1796.885032][ T9903] usb 6-1: Using ep0 maxpacket: 32
[ 1796.885938][ T9903] usb 6-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[ 1796.887399][ T9903] usb 6-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1796.887430][ T9903] usb 6-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1796.887458][ T9903] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1796.887491][ T9903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1796.923520][ T9903] usb 6-1: config 0 descriptor??
[ 1797.418118][ T9903] itetech 0003:06CB:2968.0031: unknown main item tag 0x0
[ 1797.418158][ T9903] itetech 0003:06CB:2968.0031: unknown main item tag 0x0
[ 1797.418186][ T9903] itetech 0003:06CB:2968.0031: unknown main item tag 0x0
[ 1797.418212][ T9903] itetech 0003:06CB:2968.0031: unknown main item tag 0x0
[ 1797.418238][ T9903] itetech 0003:06CB:2968.0031: unknown main item tag 0x0
[ 1797.587048][T15180] usb 7-1: string descriptor 0 read error: -71
[ 1797.606336][T15180] uclogic 0003:5543:0047.0030: failed retrieving string descriptor #200: -71
[ 1797.606521][T15180] uclogic 0003:5543:0047.0030: failed retrieving pen parameters: -71
[ 1797.606542][T15180] uclogic 0003:5543:0047.0030: failed probing pen v2 parameters: -71
[ 1797.606597][T15180] uclogic 0003:5543:0047.0030: failed probing parameters: -71
[ 1797.606761][T15180] uclogic 0003:5543:0047.0030: probe with driver uclogic failed with error -71
[ 1797.725922][T15180] usb 7-1: USB disconnect, device number 17
[ 1797.796428][ T9903] itetech 0003:06CB:2968.0031: hiddev0,hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.5-1/input0
[ 1798.213751][ T5815] input: ఊ as /devices/platform/dummy_hcd.0/usb1/1-1/input/input74
[ 1799.685352][    C1] usb 1-1: received EP1 urb->status = -71
[ 1800.279488][T18641] input: syz0 as /devices/virtual/input/input75
[ 1800.968461][ T8855] bridge_slave_1: left allmulticast mode
[ 1800.968498][ T8855] bridge_slave_1: left promiscuous mode
[ 1800.968756][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1801.033500][ T9479] usb 6-1: USB disconnect, device number 18
[ 1801.490552][ T8855] bridge_slave_0: left allmulticast mode
[ 1801.490589][ T8855] bridge_slave_0: left promiscuous mode
[ 1801.490838][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1802.314332][ T9479] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1803.038355][ T9479] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[ 1803.043084][ T9479] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1803.043122][ T9479] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1803.050600][ T9479] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1803.050629][ T9479] usb 6-1: Product: syz
[ 1803.050646][ T9479] usb 6-1: Manufacturer: syz
[ 1803.050662][ T9479] usb 6-1: SerialNumber: syz
[ 1804.568194][ T9479] usb 6-1: can't set config #1, error -71
[ 1804.695279][ T9479] usb 6-1: USB disconnect, device number 19
[ 1805.053689][ T5815] usb 1-1: USB disconnect, device number 125
[ 1805.164663][ T8855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1805.220676][ T8855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1805.258632][ T8855] bond0 (unregistering): Released all slaves
[ 1805.709830][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1806.494526][T18677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2984'.
[ 1806.831966][T17412] udevd[17412]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1806.881030][T18685] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2985'.
[ 1808.155030][T18023] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 1808.304992][T18023] usb 1-1: Using ep0 maxpacket: 8
[ 1808.307934][T18023] usb 1-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40
[ 1808.313734][T18023] usb 1-1: config 0 has no interfaces?
[ 1808.320570][T18023] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1808.320598][T18023] usb 1-1: Product: syz
[ 1808.320615][T18023] usb 1-1: Manufacturer: syz
[ 1808.320630][T18023] usb 1-1: SerialNumber: syz
[ 1808.333268][T18023] usb 1-1: config 0 descriptor??
[ 1808.569681][T18023] usb 1-1: USB disconnect, device number 126
[ 1809.655038][   T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1809.745206][ T8855] hsr_slave_0: left promiscuous mode
[ 1809.785214][ T8855] hsr_slave_1: left promiscuous mode
[ 1809.786021][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1809.786039][ T8855] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1809.815845][   T10] usb 7-1: Using ep0 maxpacket: 32
[ 1809.829796][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1809.838026][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1809.838059][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024
[ 1809.838103][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1809.849972][ T8855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1809.850000][ T8855] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1809.858722][   T10] usb 7-1: config 0 descriptor??
[ 1809.859465][T18745] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1809.862796][   T10] hub 7-1:0.0: USB hub found
[ 1810.071645][ T8855] veth1_macvtap: left promiscuous mode
[ 1810.073020][ T8855] veth0_macvtap: left promiscuous mode
[ 1810.073222][ T8855] veth1_vlan: left promiscuous mode
[ 1810.084665][ T8855] veth0_vlan: left promiscuous mode
[ 1810.089406][   T10] hub 7-1:0.0: 1 port detected
[ 1810.904679][   T10] usb 7-1: USB disconnect, device number 18
[ 1811.125885][ T8855] team0 (unregistering): Port device team_slave_1 removed
[ 1811.188054][ T8855] team0 (unregistering): Port device team_slave_0 removed
[ 1811.366606][   T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1811.515190][   T10] usb 7-1: Using ep0 maxpacket: 32
[ 1811.517172][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1811.526630][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1811.526664][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024
[ 1811.526706][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1811.534352][   T10] usb 7-1: config 0 descriptor??
[ 1811.538068][T18745] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1811.544626][   T10] hub 7-1:0.0: USB hub found
[ 1811.920996][   T10] hub 7-1:0.0: 4 ports detected
[ 1812.115578][   T10] hub 7-1:0.0: config failed, can't get hub status (err -71)
[ 1812.119522][   T10] usbhid 7-1:0.0: can't add hid device: -71
[ 1812.119635][   T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1812.234123][   T10] usb 7-1: USB disconnect, device number 19
[ 1812.365051][ T9903] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1812.570791][ T9903] usb 1-1: Using ep0 maxpacket: 8
[ 1812.582302][ T9903] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[ 1812.594586][ T9903] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1812.594643][ T9903] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1812.594668][ T9903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 44504, setting to 1024
[ 1812.594693][ T9903] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[ 1812.594716][ T9903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64
[ 1812.594742][ T9903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1812.647333][   T37] audit: type=1326 audit(1790617853.906:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18767 comm="syz.5.3003" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f834220e159 code=0x0
[ 1812.675967][ T9903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1812.675996][ T9903] usb 1-1: Product: syz
[ 1812.676011][ T9903] usb 1-1: Manufacturer: syz
[ 1812.676026][ T9903] usb 1-1: SerialNumber: syz
[ 1812.805801][T18762] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1812.805931][T18762] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1813.068516][ T9903] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1813.068586][ T9903] usb 1-1: MIDIStreaming interface descriptor not found
[ 1813.304402][ T9903] usb 1-1: USB disconnect, device number 127
[ 1813.405110][ T9906] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[ 1813.715952][ T9906] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1813.717649][ T9906] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1813.717701][ T9906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1813.772829][ T9906] mdc800 7-1:1.0: probe fails -> Wrong Endpoints.
[ 1813.880502][T18789] overlay: filesystem on ./file0 not supported as upperdir
[ 1813.987047][T18429] udevd[18429]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1814.012819][T18023] usb 7-1: USB disconnect, device number 20
[ 1814.318969][T18440] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1814.396301][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1814.398330][T18440] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1814.517287][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1814.534281][T18440] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1814.936192][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1814.949467][T18440] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1814.985300][T18440] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1816.232302][T18440] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1816.322793][T18826] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1816.337342][T18440] 8021q: adding VLAN 0 to HW filter on device team0
[ 1816.508241][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1816.508379][ T8911] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1816.996451][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1816.996556][ T8855] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1817.835034][ T1000] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[ 1818.005916][ T1000] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1818.007693][ T1000] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1818.007737][ T1000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1818.082598][ T1000] mdc800 3-1:1.0: probe fails -> Wrong Endpoints.
[ 1818.294513][ T1000] usb 3-1: USB disconnect, device number 81
[ 1820.730856][T18862] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1822.529289][T18867] input: syz1 as /devices/virtual/input/input77
[ 1822.935173][T18880] bridge0: entered promiscuous mode
[ 1822.958604][T18427] udevd[18427]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[ 1823.346576][T15180] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[ 1823.512056][T15180] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1823.513560][T15180] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1823.513602][T15180] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1823.532903][T15180] mdc800 7-1:1.0: probe fails -> Wrong Endpoints.
[ 1823.557364][T18440] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1823.766303][T15180] usb 7-1: USB disconnect, device number 21
[ 1823.783863][T18440] veth0_vlan: entered promiscuous mode
[ 1823.814516][T18440] veth1_vlan: entered promiscuous mode
[ 1823.918845][T18440] veth0_macvtap: entered promiscuous mode
[ 1823.957013][T18440] veth1_macvtap: entered promiscuous mode
[ 1824.074167][T18440] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1824.175607][T18440] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1824.523553][  T167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1827.014991][ T9903] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1827.218972][ T9903] usb 7-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[ 1827.222045][ T9903] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[ 1827.222080][ T9903] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1827.222114][ T9903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1827.312161][ T9903] usb 7-1: config 0 descriptor??
[ 1827.562136][ T9903] usbhid 7-1:0.0: can't add hid device: -71
[ 1827.562264][ T9903] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1827.627372][ T9903] usb 7-1: USB disconnect, device number 22
[ 1828.215112][T18023] usb 7-1: new low-speed USB device number 23 using dummy_hcd
[ 1828.235258][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3040'.
[ 1828.610251][T18023] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1828.634579][T18023] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1828.634636][T18023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1828.634665][T18023] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1828.634693][T18023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1828.634721][T18023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1828.637314][T18023] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1828.637370][T18023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1828.637399][T18023] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1828.637433][T18023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1828.637462][T18023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1828.638910][T18023] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1828.638978][T18023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1828.639007][T18023] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1828.639034][T18023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1828.639061][T18023] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1828.644442][T18023] usb 7-1: string descriptor 0 read error: -22
[ 1828.644579][T18023] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1828.698725][T18023] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1828.982405][ T9903] usb 7-1: USB disconnect, device number 23
[ 1831.125910][T17989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1831.125934][T17989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1831.165870][T13678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1831.187657][T13678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1831.188062][T13678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1831.395082][   T10] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1831.472985][ T2243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1831.473008][ T2243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1831.546190][   T10] usb 3-1: Using ep0 maxpacket: 8
[ 1831.552741][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11
[ 1831.575097][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1831.575126][   T10] usb 3-1: Product: syz
[ 1831.575142][   T10] usb 3-1: Manufacturer: syz
[ 1831.575157][   T10] usb 3-1: SerialNumber: syz
[ 1831.616967][   T10] usb 3-1: config 0 descriptor??
[ 1831.645229][   T10] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 1833.566141][   T10] pwc: Failed to set LED on/off time (-71)
[ 1833.570084][   T10] pwc: send_video_command error -71
[ 1833.570104][   T10] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 1833.570208][   T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 1833.632749][   T10] usb 3-1: USB disconnect, device number 82
[ 1834.086595][T18023] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1834.194993][   T10] usb 3-1: new full-speed USB device number 83 using dummy_hcd
[ 1834.234973][T18023] usb 7-1: Using ep0 maxpacket: 32
[ 1834.235764][T18023] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1834.237442][T18023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1834.237474][T18023] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024
[ 1834.237519][T18023] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1834.250472][T18023] usb 7-1: config 0 descriptor??
[ 1834.255831][T18945] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1834.267342][T18023] hub 7-1:0.0: USB hub found
[ 1834.376307][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=3a.11
[ 1834.400170][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1834.400201][   T10] usb 3-1: Product: syz
[ 1834.400217][   T10] usb 3-1: Manufacturer: syz
[ 1834.400233][   T10] usb 3-1: SerialNumber: syz
[ 1834.441552][   T10] usb 3-1: config 0 descriptor??
[ 1834.487202][   T10] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 1834.575265][T18023] hub 7-1:0.0: 1 port detected
[ 1834.668514][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1834.795948][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1834.812689][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1834.828178][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1834.830445][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1835.353416][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1835.358207][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[ 1835.372098][   T10] pwc: recv_control_msg error -32 req 04 val 1600
[ 1835.375393][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1835.380691][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[ 1835.423865][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[ 1835.452729][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[ 1835.454094][ T9903] usb 7-1: USB disconnect, device number 24
[ 1835.456636][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[ 1835.479320][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[ 1835.487147][   T10] pwc: recv_control_msg error -32 req 06 val 0600
[ 1835.501813][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[ 1835.506003][   T10] pwc: recv_control_msg error -32 req 02 val 2500
[ 1835.507304][   T10] pwc: recv_control_msg error -32 req 02 val 2400
[ 1835.513100][   T10] pwc: recv_control_msg error -32 req 02 val 2600
[ 1835.517926][   T10] pwc: recv_control_msg error -32 req 02 val 2900
[ 1835.519928][   T10] pwc: recv_control_msg error -32 req 02 val 2800
[ 1835.536611][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[ 1835.552917][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[ 1835.561527][   T10] pwc: Failed to power off camera (-71)
[ 1835.572726][   T10] pwc: Registered as video103.
[ 1835.593205][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input78
[ 1835.620447][   T10] usb 3-1: USB disconnect, device number 83
[ 1836.128575][ T5611] bond0: (slave syz_tun): Releasing backup interface
[ 1836.155005][ T9903] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1836.315148][ T9903] usb 7-1: Using ep0 maxpacket: 32
[ 1836.336662][ T9903] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1836.341790][ T9903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1836.341872][ T9903] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024
[ 1836.341957][ T9903] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1836.451545][ T9903] usb 7-1: config 0 descriptor??
[ 1836.517364][T18945] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1836.601053][ T9903] hub 7-1:0.0: USB hub found
[ 1837.320235][T18408] Bluetooth: hci0: command tx timeout
[ 1839.406210][T18408] Bluetooth: hci0: command tx timeout
[ 1839.483973][ T9903] hub 7-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1839.559253][ T9903] usbhid 7-1:0.0: can't add hid device: -71
[ 1839.559377][ T9903] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1839.689802][ T9903] usb 7-1: USB disconnect, device number 25
[ 1839.810730][T18988] netlink: 'syz.6.3063': attribute type 8 has an invalid length.
[ 1841.499877][T18408] Bluetooth: hci0: command tx timeout
[ 1841.704270][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3069'.
[ 1841.867169][T13679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1841.962625][T19010] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[ 1843.008163][T13679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1843.565120][T18408] Bluetooth: hci0: command tx timeout
[ 1843.821701][T19044] FAULT_INJECTION: forcing a failure.
[ 1843.821701][T19044] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1843.821743][T19044] CPU: 0 UID: 0 PID: 19044 Comm: syz.1.3084 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1843.821776][T19044] Tainted: [L]=SOFTLOCKUP
[ 1843.821785][T19044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1843.821799][T19044] Call Trace:
[ 1843.821808][T19044]  <TASK>
[ 1843.821819][T19044]  dump_stack_lvl+0xe8/0x150
[ 1843.821861][T19044]  should_fail_ex+0x46b/0x600
[ 1843.821899][T19044]  get_futex_key+0x1b4/0x1580
[ 1843.821945][T19044]  ? __pfx_get_futex_key+0x10/0x10
[ 1843.821983][T19044]  ? update_se+0x90/0xf90
[ 1843.822019][T19044]  futex_wait_setup+0x4a/0x590
[ 1843.822052][T19044]  ? __futex_wait+0xe1/0x410
[ 1843.822084][T19044]  __futex_wait+0x161/0x410
[ 1843.822116][T19044]  ? __pfx___futex_wait+0x10/0x10
[ 1843.822147][T19044]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1843.822187][T19044]  ? try_to_wake_up+0x84b/0x1430
[ 1843.822226][T19044]  futex_wait+0x121/0x390
[ 1843.822256][T19044]  ? __pfx_futex_wait+0x10/0x10
[ 1843.822297][T19044]  ? file_init_path+0x3b/0x5d0
[ 1843.822324][T19044]  do_futex+0x3e7/0x4e0
[ 1843.822352][T19044]  ? __pfx_do_futex+0x10/0x10
[ 1843.822383][T19044]  __se_sys_futex+0x3a8/0x450
[ 1843.822412][T19044]  ? __pfx___se_sys_futex+0x10/0x10
[ 1843.822443][T19044]  ? __x64_sys_futex+0x21/0xf0
[ 1843.822469][T19044]  do_syscall_64+0x166/0x520
[ 1843.822495][T19044]  ? trace_irq_disable+0x3b/0x140
[ 1843.822524][T19044]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1843.822548][T19044]  ? clear_bhb_loop+0x70/0xc0
[ 1843.822574][T19044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1843.822597][T19044] RIP: 0033:0x7f5947ade159
[ 1843.822618][T19044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1843.822638][T19044] RSP: 002b:00007f5945d360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1843.822662][T19044] RAX: ffffffffffffffda RBX: 00007f5947d65fa8 RCX: 00007f5947ade159
[ 1843.822679][T19044] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5947d65fa8
[ 1843.822694][T19044] RBP: 00007f5947d65fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1843.822709][T19044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1843.822723][T19044] R13: 00007f5947d66038 R14: 00007ffe299f0bd0 R15: 00007ffe299f0cb8
[ 1843.822756][T19044]  </TASK>
[ 1844.448483][T13679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1844.460417][T19056] Bluetooth: MGMT ver 1.23
[ 1844.741320][T19062] syz_tun: entered allmulticast mode
[ 1845.175153][T17858] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1845.345829][T17858] usb 7-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[ 1845.348938][T17858] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1845.348967][T17858] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1845.351593][T17858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1845.351618][T17858] usb 7-1: Product: syz
[ 1845.351633][T17858] usb 7-1: Manufacturer: syz
[ 1845.351649][T17858] usb 7-1: SerialNumber: syz
[ 1845.430751][T17858] ums-sddr09 7-1:1.0: USB Mass Storage device detected
[ 1845.473535][T17858] ums-sddr09 7-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[ 1845.473535][T17858]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 1845.506221][T13679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1846.078103][T18964] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1846.078321][T18964] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1846.078489][T18964] bridge_slave_0: entered allmulticast mode
[ 1846.081279][T18964] bridge_slave_0: entered promiscuous mode
[ 1846.088104][T18964] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1846.088306][T18964] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1846.088487][T18964] bridge_slave_1: entered allmulticast mode
[ 1846.091079][T18964] bridge_slave_1: entered promiscuous mode
[ 1846.133154][T18964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1846.137562][T18964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1846.270986][T17858] ums-sddr09 7-1:1.0: probe with driver ums-sddr09 failed with error -32
[ 1846.348148][T17858] usb 7-1: USB disconnect, device number 26
[ 1846.445364][T18964] team0: Port device team_slave_0 added
[ 1846.451343][T18964] team0: Port device team_slave_1 added
[ 1846.523198][T18964] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1846.523217][T18964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1846.523244][T18964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1846.582240][T18964] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1846.582259][T18964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1846.582287][T18964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1846.689702][T18964] hsr_slave_0: entered promiscuous mode
[ 1846.692866][T18964] hsr_slave_1: entered promiscuous mode
[ 1847.145022][T17858] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[ 1847.148654][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1847.212033][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1847.230606][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1847.233653][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1847.234411][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1847.315836][T17858] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1847.317181][T17858] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1847.317218][T17858] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1847.396485][T17858] mdc800 7-1:1.0: probe fails -> Wrong Endpoints.
[ 1847.579028][ T1000] usb 7-1: USB disconnect, device number 27
[ 1849.125888][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead
[ 1849.125941][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x2000 instead
[ 1849.125960][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x8000 instead
[ 1849.125976][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x2000 instead
[ 1849.125995][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xa000 instead
[ 1849.126013][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2000 instead
[ 1849.126036][T19130] jffs2: Empty flash at 0x00000024 ends at 0x00000028
[ 1849.126055][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0008 instead
[ 1849.126073][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000088: 0x008b instead
[ 1849.126091][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000008c: 0x0008 instead
[ 1849.126107][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000090: 0x0002 instead
[ 1849.126128][T19130] jffs2: Further such events for this erase block will not be printed
[ 1849.126624][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead
[ 1849.126645][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead
[ 1849.126664][T19130] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead
[ 1849.151604][T18949] Set syz1 is full, maxelem 65536 reached
[ 1849.299257][T19130] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1849.299278][T19130] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[ 1849.486191][T18408] Bluetooth: hci2: command tx timeout
[ 1849.536047][T17858] usb 3-1: new full-speed USB device number 84 using dummy_hcd
[ 1849.698466][T17858] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1849.700297][T17858] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1849.700341][T17858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1849.763797][T17858] mdc800 3-1:1.0: probe fails -> Wrong Endpoints.
[ 1850.021871][T17858] usb 3-1: USB disconnect, device number 84
[ 1850.452353][T13679] gretap0: left allmulticast mode
[ 1850.452388][T13679] gretap0: left promiscuous mode
[ 1850.452617][T13679] bridge0: port 4(gretap0) entered disabled state
[ 1850.703536][T13679] dummy0: left allmulticast mode
[ 1850.709085][T13679] bridge0: port 3(dummy0) entered disabled state
[ 1850.919420][T13679] bridge_slave_1: left allmulticast mode
[ 1850.919457][T13679] bridge_slave_1: left promiscuous mode
[ 1850.919739][T13679] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1851.076703][T13679] bridge_slave_0: left allmulticast mode
[ 1851.077013][T13679] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1851.275103][T18023] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1851.435288][T18023] usb 3-1: Using ep0 maxpacket: 16
[ 1851.436223][T18023] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1851.437794][T18023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1851.437845][T18023] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1851.437871][T18023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[ 1851.437897][T18023] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1851.437919][T18023] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1851.440860][T18023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1851.440887][T18023] usb 3-1: Product: syz
[ 1851.440904][T18023] usb 3-1: Manufacturer: syz
[ 1851.440920][T18023] usb 3-1: SerialNumber: syz
[ 1851.528586][T18023] usb 3-1: config 0 descriptor??
[ 1851.552738][T18023] xbox_remote_probe: endpoint_in message size==0?
[ 1851.565096][T18408] Bluetooth: hci2: command tx timeout
[ 1851.763559][ T9479] usb 3-1: USB disconnect, device number 85
[ 1852.405967][T13679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1852.500732][T13679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1852.517685][T13679] bond0 (unregistering): Released all slaves
[ 1852.555895][T13679] bond1 (unregistering): (slave wireguard0): Releasing backup interface
[ 1852.555925][T13679] wireguard0: left promiscuous mode
[ 1852.622371][T13679] bond1 (unregistering): Released all slaves
[ 1852.690361][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1852.848868][T18408] Bluetooth: hci3: connection err: -111
[ 1852.950274][T19168] nvme_fabrics: unknown parameter or missing value 'e:m' in ctrl creation request
[ 1852.950519][T19168] nvme_fabrics: unknown parameter or missing value '�M�\��_�0� JCCs���&��� ���' in ctrl creation request
[ 1853.087599][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.087664][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.657911][T18408] Bluetooth: hci2: command tx timeout
[ 1854.269527][T19185] nbd: must specify at least one socket
[ 1854.453215][T19194] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1854.454008][T19196] 9p: Bad value for 'wfdno'
[ 1855.726671][T18408] Bluetooth: hci2: command tx timeout
[ 1855.795038][T13679] hsr_slave_0: left promiscuous mode
[ 1855.838724][T13679] hsr_slave_1: left promiscuous mode
[ 1855.839991][T13679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1855.840015][T13679] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1855.894255][T13679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1855.894285][T13679] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1855.929509][T13679] batman_adv: batadv0: Interface deactivated: ipvlan2
[ 1855.929536][T13679] batman_adv: batadv0: Removing interface: ipvlan2
[ 1856.145490][T13679] veth1_macvtap: left promiscuous mode
[ 1856.145620][T13679] veth0_macvtap: left promiscuous mode
[ 1856.145784][T13679] veth1_vlan: left allmulticast mode
[ 1856.145910][T13679] veth1_vlan: left promiscuous mode
[ 1856.146097][T13679] veth0_vlan: left promiscuous mode
[ 1857.070681][T19218] nbd: must specify at least one socket
[ 1857.459502][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead
[ 1857.459531][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x2000 instead
[ 1857.459550][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x8000 instead
[ 1857.459569][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x2000 instead
[ 1857.459588][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xa000 instead
[ 1857.459606][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0x2000 instead
[ 1857.459627][T19226] jffs2: Empty flash at 0x00000024 ends at 0x00000028
[ 1857.459647][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0008 instead
[ 1857.459665][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000088: 0x008b instead
[ 1857.459682][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000008c: 0x0008 instead
[ 1857.459700][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000090: 0x0002 instead
[ 1857.459717][T19226] jffs2: Further such events for this erase block will not be printed
[ 1857.460231][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead
[ 1857.460250][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead
[ 1857.460270][T19226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead
[ 1857.491968][T19226] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1857.491986][T19226] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[ 1857.653545][T13679] team0 (unregistering): Port device team_slave_1 removed
[ 1857.699781][T13679] team0 (unregistering): Port device team_slave_0 removed
[ 1857.875082][T18023] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[ 1858.027015][T18023] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1858.033011][T18023] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1306, setting to 64
[ 1858.033060][T18023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1858.087524][T19230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1858.091144][T18023] mdc800 2-1:1.0: Found Mustek MDC800 on USB.
[ 1858.353105][ T1000] usb 2-1: USB disconnect, device number 28
[ 1858.389041][ T1000] mdc800 2-1:1.0: Mustek MDC800 disconnected from USB.
[ 1859.178773][T19088] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1859.178971][T19088] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1859.179119][T19088] bridge_slave_0: entered allmulticast mode
[ 1859.181263][T19088] bridge_slave_0: entered promiscuous mode
[ 1859.227413][T19088] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1859.227538][T19088] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1859.227744][T19088] bridge_slave_1: entered allmulticast mode
[ 1859.230446][T19088] bridge_slave_1: entered promiscuous mode
[ 1859.271401][T19255] nbd: must specify at least one socket
[ 1859.411507][T19088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1859.438942][T19088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1859.646192][T19088] team0: Port device team_slave_0 added
[ 1859.664725][T19088] team0: Port device team_slave_1 added
[ 1859.907502][T19088] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1859.907521][T19088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1859.907549][T19088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1859.910484][T19088] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1859.910500][T19088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1859.910528][T19088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1860.426915][T19276] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1860.429972][T19088] hsr_slave_0: entered promiscuous mode
[ 1860.453834][T19088] hsr_slave_1: entered promiscuous mode
[ 1860.454750][T19088] debugfs: 'hsr0' already exists in 'hsr'
[ 1860.454774][T19088] Cannot create hsr debugfs directory
[ 1860.600848][T13679] IPVS: stop unused estimator thread 0...
[ 1860.762587][T19284] 9p: Bad value for 'wfdno'
[ 1861.779468][T13679] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1862.485943][T13679] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1863.085983][T13679] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1863.677331][T13679] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1864.347723][T19288] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1865.025438][T13679] bridge_slave_1: left allmulticast mode
[ 1865.025476][T13679] bridge_slave_1: left promiscuous mode
[ 1865.025745][T13679] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1865.238332][T13679] bridge_slave_0: left allmulticast mode
[ 1865.238365][T13679] bridge_slave_0: left promiscuous mode
[ 1865.239723][T13679] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1865.272919][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1865.345109][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1865.379733][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1865.395580][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1865.408803][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1865.424951][ T1000] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1865.611474][ T1000] usb 2-1: Using ep0 maxpacket: 8
[ 1865.612287][ T1000] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1865.614630][ T1000] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1865.614654][ T1000] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1865.614703][ T1000] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1865.614732][ T1000] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1865.614781][ T1000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1865.661280][ T1000] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1865.661334][ T1000] hub 2-1:1.0: probe with driver hub failed with error -5
[ 1865.662325][ T1000] cdc_wdm 2-1:1.0: skipping garbage
[ 1865.662342][ T1000] cdc_wdm 2-1:1.0: skipping garbage
[ 1865.815593][ T1000] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1865.815694][ T1000] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1865.898831][ T1000] usb 2-1: USB disconnect, device number 29
[ 1865.999394][T19321] IPv4: Oversized IP packet from 127.202.26.0
[ 1866.472272][ T1000] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1866.675000][ T1000] usb 2-1: Using ep0 maxpacket: 8
[ 1866.675795][ T1000] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1866.677026][ T1000] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1866.677050][ T1000] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1866.677097][ T1000] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1866.677113][ T1000] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1866.677136][ T1000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1866.690959][ T1000] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1866.690995][ T1000] hub 2-1:1.0: probe with driver hub failed with error -5
[ 1866.691872][ T1000] cdc_wdm 2-1:1.0: skipping garbage
[ 1866.691888][ T1000] cdc_wdm 2-1:1.0: skipping garbage
[ 1866.706917][ T1000] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 1866.706937][ T1000] cdc_wdm 2-1:1.0: Unknown control protocol
[ 1866.995399][T18023] usb 2-1: USB disconnect, device number 30
[ 1867.014199][T13679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1867.085555][T13679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1867.127657][T13679] bond0 (unregistering): Released all slaves
[ 1867.169105][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1867.648109][T18408] Bluetooth: hci4: command tx timeout
[ 1867.746393][T19345] 9p: Bad value for 'wfdno'
[ 1868.673721][T19357] input: syz0 as /devices/virtual/input/input79
[ 1869.725094][T18408] Bluetooth: hci4: command tx timeout
[ 1869.989198][ T5263] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1870.375630][T13679] hsr_slave_0: left promiscuous mode
[ 1870.421024][T13679] hsr_slave_1: left promiscuous mode
[ 1870.422323][T13679] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1870.422349][T13679] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1870.466107][T13679] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1870.466136][T13679] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1870.705200][T13679] veth1_macvtap: left promiscuous mode
[ 1870.705307][T13679] veth0_macvtap: left promiscuous mode
[ 1870.706417][T13679] veth1_vlan: left promiscuous mode
[ 1870.710782][T13679] veth0_vlan: left promiscuous mode
[ 1871.805101][T18408] Bluetooth: hci4: command tx timeout
[ 1871.917214][T13679] team0 (unregistering): Port device team_slave_1 removed
[ 1871.955612][T17858] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1871.957518][T13679] team0 (unregistering): Port device team_slave_0 removed
[ 1872.034986][ T1000] usb 2-1: new low-speed USB device number 31 using dummy_hcd
[ 1872.115823][T17858] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00
[ 1872.117050][T17858] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1872.117084][T17858] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1872.117108][T17858] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1872.117128][T17858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1872.125831][T17858] usb 3-1: config 0 descriptor??
[ 1872.134649][ T5263] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1872.199796][ T1000] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1872.201014][ T1000] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1872.201039][ T1000] usb 2-1: config 0 has no interface number 0
[ 1872.201086][ T1000] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1872.201114][ T1000] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1872.201157][ T1000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1872.207993][ T1000] usb 2-1: config 0 descriptor??
[ 1872.266094][T19396] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1872.629098][T17858] input: HID 04f2:1421 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F2:1421.0032/input/input80
[ 1872.762244][ T1000] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1872.889520][ T1000] usb 2-1: USB disconnect, device number 31
[ 1872.902925][T17858] chicony 0003:04F2:1421.0032: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.2-1/input0
[ 1872.921322][T17858] usb 3-1: USB disconnect, device number 86
[ 1873.089695][T19310] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1873.089819][T19310] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1873.090026][T19310] bridge_slave_0: entered allmulticast mode
[ 1873.111476][T19310] bridge_slave_0: entered promiscuous mode
[ 1873.114565][T19310] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1873.114681][T19310] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1873.114969][T19310] bridge_slave_1: entered allmulticast mode
[ 1873.119094][T19310] bridge_slave_1: entered promiscuous mode
[ 1873.417475][T19310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1873.421772][T19310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1873.483027][T19310] team0: Port device team_slave_0 added
[ 1873.495969][T19310] team0: Port device team_slave_1 added
[ 1873.558903][T19413] fido_id[19413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1873.599535][T19310] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1873.599553][T19310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1873.599576][T19310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1873.601547][T19310] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1873.601560][T19310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1873.601583][T19310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1873.829004][T19310] hsr_slave_0: entered promiscuous mode
[ 1873.830079][T19310] hsr_slave_1: entered promiscuous mode
[ 1873.830812][T19310] debugfs: 'hsr0' already exists in 'hsr'
[ 1873.830833][T19310] Cannot create hsr debugfs directory
[ 1873.887423][T18408] Bluetooth: hci4: command tx timeout
[ 1873.971204][ T5263] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1876.003692][T19458] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(14)
[ 1878.523624][ T9906] hid-generic 0000:0000:0001.0033: unknown main item tag 0x0
[ 1878.523663][ T9906] hid-generic 0000:0000:0001.0033: unknown main item tag 0x0
[ 1878.523692][ T9906] hid-generic 0000:0000:0001.0033: unknown main item tag 0x0
[ 1878.523731][ T9906] hid-generic 0000:0000:0001.0033: unknown main item tag 0x0
[ 1878.523758][ T9906] hid-generic 0000:0000:0001.0033: unknown main item tag 0x0
[ 1878.523786][ T9906] hid-generic 0000:0000:0001.0033: unknown main item tag 0x0
[ 1878.523813][ T9906] hid-generic 0000:0000:0001.0033: unknown main item tag 0x0
[ 1878.523838][ T9906] hid-generic 0000:0000:0001.0033: unknown main item tag 0x0
[ 1879.483216][T19467] Bluetooth: MGMT ver 1.23
[ 1879.540805][ T9906] hid-generic 0000:0000:0001.0033: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[ 1880.200926][T19478] input: syz0 as /devices/virtual/input/input81
[ 1881.744983][T18983] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[ 1881.905758][T18983] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[ 1881.906946][T18983] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1881.906989][T18983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1881.918080][T18983] mdc800 2-1:1.0: probe fails -> Wrong Endpoints.
[ 1882.159632][T15180] usb 2-1: USB disconnect, device number 32
[ 1884.605118][T19534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1885.705118][   T31] usb 2-1: new low-speed USB device number 33 using dummy_hcd
[ 1885.887655][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1885.887715][   T31] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80
[ 1885.889433][   T31] usb 2-1: config 142 has an invalid interface number: 251 but max is 0
[ 1885.889461][   T31] usb 2-1: config 142 has no interface number 0
[ 1885.889506][   T31] usb 2-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1885.889533][   T31] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt
[ 1885.889566][   T31] usb 2-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt
[ 1885.889590][   T31] usb 2-1: config 142 interface 251 has no altsetting 0
[ 1885.906193][   T31] usb 2-1: string descriptor 0 read error: -22
[ 1885.906345][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1885.988639][T19553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1885.988735][T19553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1885.991712][   T31] cypress_m8 2-1:142.251: HID->COM RS232 Adapter converter detected
[ 1886.018742][   T31] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[ 1886.515538][    C0] usb 2-1: cypress_write_int_callback - unexpected nonzero write status received: -71
[ 1886.515725][    C0] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short
[ 1886.518794][    C0] usb 2-1: cypress_read_int_callback - unexpected nonzero read status received: -71
[ 1887.001396][T18023] usb 2-1: USB disconnect, device number 33
[ 1887.039426][T18023] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[ 1887.040337][T18023] cypress_m8 2-1:142.251: device disconnected
[ 1894.273256][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1894.311896][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1894.313435][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1894.314799][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1894.357739][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1894.944001][T19616] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1894.944141][T19616] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1894.944423][T19616] bridge_slave_0: entered allmulticast mode
[ 1894.947542][T19616] bridge_slave_0: entered promiscuous mode
[ 1894.950937][T19616] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1894.951151][T19616] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1894.951640][T19616] bridge_slave_1: entered allmulticast mode
[ 1894.954029][T19616] bridge_slave_1: entered promiscuous mode
[ 1895.003996][T19616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1895.009837][T19616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1895.041309][T19616] team0: Port device team_slave_0 added
[ 1895.043514][T19616] team0: Port device team_slave_1 added
[ 1895.072531][T19616] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1895.072550][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1895.072565][T19616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1895.073885][T19616] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1895.073900][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1895.073916][T19616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1895.179864][T19616] hsr_slave_0: entered promiscuous mode
[ 1895.180660][T19616] hsr_slave_1: entered promiscuous mode
[ 1895.181167][T19616] debugfs: 'hsr0' already exists in 'hsr'
[ 1895.181189][T19616] Cannot create hsr debugfs directory
[ 1896.525292][T18408] Bluetooth: hci5: command tx timeout
[ 1898.605146][T18408] Bluetooth: hci5: command tx timeout
[ 1900.685295][ T5610] Bluetooth: hci5: command tx timeout
[ 1901.244990][ T5610] Bluetooth: hci1: command 0x0406 tx timeout
[ 1902.765706][T18408] Bluetooth: hci5: command tx timeout
[ 1907.301706][ T5610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1907.352442][ T5610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1907.356901][ T5610] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1907.359457][ T5610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1907.361338][ T5610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1907.977490][T19636] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1907.977624][T19636] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1907.977741][T19636] bridge_slave_0: entered allmulticast mode
[ 1907.979355][T19636] bridge_slave_0: entered promiscuous mode
[ 1907.981250][T19636] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1907.981373][T19636] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1907.981477][T19636] bridge_slave_1: entered allmulticast mode
[ 1907.982857][T19636] bridge_slave_1: entered promiscuous mode
[ 1908.062820][T19636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1908.066893][T19636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1908.108920][T19636] team0: Port device team_slave_0 added
[ 1908.110957][T19636] team0: Port device team_slave_1 added
[ 1908.162742][T19636] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1908.162761][T19636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1908.162775][T19636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1908.164052][T19636] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1908.164065][T19636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1908.164081][T19636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1908.240683][T19636] hsr_slave_0: entered promiscuous mode
[ 1908.242100][T19636] hsr_slave_1: entered promiscuous mode
[ 1908.242969][T19636] debugfs: 'hsr0' already exists in 'hsr'
[ 1908.242993][T19636] Cannot create hsr debugfs directory
[ 1909.565079][T18408] Bluetooth: hci6: command tx timeout
[ 1911.645001][T18408] Bluetooth: hci6: command tx timeout
[ 1913.724966][T18408] Bluetooth: hci6: command tx timeout
[ 1914.527715][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.527762][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.805341][T18408] Bluetooth: hci6: command tx timeout
[ 1925.394043][ T5610] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1925.458077][ T5610] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1925.460502][ T5610] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1925.461481][ T5610] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1925.462522][ T5610] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1926.127316][T19655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1926.127449][T19655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1926.127563][T19655] bridge_slave_0: entered allmulticast mode
[ 1926.128959][T19655] bridge_slave_0: entered promiscuous mode
[ 1926.130801][T19655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1926.130921][T19655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1926.131026][T19655] bridge_slave_1: entered allmulticast mode
[ 1926.132494][T19655] bridge_slave_1: entered promiscuous mode
[ 1926.172551][T19655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1926.177234][T19655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1926.221515][T19655] team0: Port device team_slave_0 added
[ 1926.226296][T19655] team0: Port device team_slave_1 added
[ 1926.253213][T19655] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1926.253231][T19655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1926.253248][T19655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1926.255668][T19655] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1926.255682][T19655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1926.255708][T19655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1926.336914][T19655] hsr_slave_0: entered promiscuous mode
[ 1926.338266][T19655] hsr_slave_1: entered promiscuous mode
[ 1926.339163][T19655] debugfs: 'hsr0' already exists in 'hsr'
[ 1926.339187][T19655] Cannot create hsr debugfs directory
[ 1927.725220][T18408] Bluetooth: hci8: command tx timeout
[ 1929.805065][T18408] Bluetooth: hci8: command tx timeout
[ 1931.885123][T18408] Bluetooth: hci8: command tx timeout
[ 1933.965131][T18408] Bluetooth: hci8: command tx timeout
[ 1954.434643][ T5610] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1954.504565][ T5610] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1954.509139][ T5610] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1954.510132][ T5610] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1954.510813][ T5610] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1955.139925][T19677] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1955.140059][T19677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1955.140160][T19677] bridge_slave_0: entered allmulticast mode
[ 1955.141871][T19677] bridge_slave_0: entered promiscuous mode
[ 1955.143816][T19677] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1955.143939][T19677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1955.144034][T19677] bridge_slave_1: entered allmulticast mode
[ 1955.147119][T19677] bridge_slave_1: entered promiscuous mode
[ 1955.208226][T19677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1955.211888][T19677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1955.255667][T19677] team0: Port device team_slave_0 added
[ 1955.257777][T19677] team0: Port device team_slave_1 added
[ 1955.288209][T19677] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1955.288221][T19677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1955.288235][T19677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1955.289704][T19677] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1955.289718][T19677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1955.289732][T19677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1955.387838][T19677] hsr_slave_0: entered promiscuous mode
[ 1955.388617][T19677] hsr_slave_1: entered promiscuous mode
[ 1955.389142][T19677] debugfs: 'hsr0' already exists in 'hsr'
[ 1955.389160][T19677] Cannot create hsr debugfs directory
[ 1956.685046][T18408] Bluetooth: hci9: command tx timeout
[ 1958.764988][T18408] Bluetooth: hci9: command tx timeout
[ 1960.844966][T18408] Bluetooth: hci9: command tx timeout
[ 1962.924989][T18408] Bluetooth: hci9: command tx timeout
[ 1967.454526][ T9923] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1967.513637][ T9923] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1967.515430][ T9923] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1967.516995][ T9923] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1967.525179][ T9923] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1967.815051][T18408] Bluetooth: hci0: command 0x0406 tx timeout
[ 1968.259355][T19699] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1968.259501][T19699] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1968.259806][T19699] bridge_slave_0: entered allmulticast mode
[ 1968.261198][T19699] bridge_slave_0: entered promiscuous mode
[ 1968.263887][T19699] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1968.264017][T19699] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1968.264125][T19699] bridge_slave_1: entered allmulticast mode
[ 1968.314007][T19699] bridge_slave_1: entered promiscuous mode
[ 1968.345460][T19699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1968.349053][T19699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1968.396723][T19699] team0: Port device team_slave_0 added
[ 1968.399413][T19699] team0: Port device team_slave_1 added
[ 1968.434100][T19699] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1968.434117][T19699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1968.434131][T19699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1968.477961][T19699] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1968.477979][T19699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1968.478005][T19699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1968.540606][T19699] hsr_slave_0: entered promiscuous mode
[ 1968.541353][T19699] hsr_slave_1: entered promiscuous mode
[ 1968.541869][T19699] debugfs: 'hsr0' already exists in 'hsr'
[ 1968.541892][T19699] Cannot create hsr debugfs directory
[ 1969.725019][ T5610] Bluetooth: hci10: command tx timeout
[ 1971.805090][T18408] Bluetooth: hci10: command tx timeout
[ 1972.924975][T18408] Bluetooth: hci2: command 0x0406 tx timeout
[ 1973.885005][ T5610] Bluetooth: hci10: command tx timeout
[ 1975.984350][ T1330] ieee802154 phy0 wpan0: encryption failed: -22
[ 1975.984422][ T1330] ieee802154 phy1 wpan1: encryption failed: -22
[ 1975.991741][ T5610] Bluetooth: hci10: command tx timeout
[ 1985.503091][T18408] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1985.540684][T18408] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1985.542274][T18408] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1985.543269][T18408] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1985.544317][T18408] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1986.125927][T19719] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1986.126161][T19719] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1986.126352][T19719] bridge_slave_0: entered allmulticast mode
[ 1986.128264][T19719] bridge_slave_0: entered promiscuous mode
[ 1986.130109][T19719] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1986.130232][T19719] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1986.130331][T19719] bridge_slave_1: entered allmulticast mode
[ 1986.133306][T19719] bridge_slave_1: entered promiscuous mode
[ 1986.201986][T19719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1986.224666][T19719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1986.275942][T19719] team0: Port device team_slave_0 added
[ 1986.279753][T19719] team0: Port device team_slave_1 added
[ 1986.328747][T19719] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1986.328766][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1986.328793][T19719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1986.331116][T19719] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1986.331131][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1986.331158][T19719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1986.404364][T19719] hsr_slave_0: entered promiscuous mode
[ 1986.406535][T19719] hsr_slave_1: entered promiscuous mode
[ 1986.407455][T19719] debugfs: 'hsr0' already exists in 'hsr'
[ 1986.407480][T19719] Cannot create hsr debugfs directory
[ 1987.725074][ T5610] Bluetooth: hci11: command tx timeout
[ 1988.284896][ T5610] Bluetooth: hci4: command 0x0406 tx timeout
[ 1989.804928][T18408] Bluetooth: hci11: command tx timeout
[ 1991.885113][T18408] Bluetooth: hci11: command tx timeout
[ 1993.964999][T18408] Bluetooth: hci11: command tx timeout
[ 2004.125218][   T38] INFO: task syz-executor:18964 blocked for more than 143 seconds.
[ 2004.125249][   T38]       Tainted: G             L      syzkaller #0
[ 2004.125260][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2004.125271][   T38] task:syz-executor    state:D stack:22952 pid:18964 tgid:18964 ppid:1      task_flags:0x480140 flags:0x00080002
[ 2004.125322][   T38] Call Trace:
[ 2004.125330][   T38]  <TASK>
[ 2004.125344][   T38]  __schedule+0x16d9/0x5700
[ 2004.125383][   T38]  ? __lock_acquire+0x747/0x2de0
[ 2004.125415][   T38]  ? __pfx_stack_trace_save+0x10/0x10
[ 2004.125443][   T38]  ? check_noncircular+0xdb/0x150
[ 2004.125475][   T38]  ? __pfx___schedule+0x10/0x10
[ 2004.125498][   T38]  ? lock_acquire+0x115/0x350
[ 2004.125531][   T38]  ? schedule+0x90/0x2b0
[ 2004.125561][   T38]  schedule+0x164/0x2b0
[ 2004.125591][   T38]  schedule_timeout+0xc0/0x2c0
[ 2004.125621][   T38]  ? __pfx_schedule_timeout+0x10/0x10
[ 2004.125650][   T38]  ? do_raw_spin_lock+0x12b/0x2f0
[ 2004.125683][   T38]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2004.125705][   T38]  ? wait_for_completion+0x272/0x5e0
[ 2004.125727][   T38]  wait_for_completion+0x2ca/0x5e0
[ 2004.125761][   T38]  ? __pfx_wait_for_completion+0x10/0x10
[ 2004.125789][   T38]  ? remove_one+0x2d5/0x3b0
[ 2004.125822][   T38]  remove_one+0x2df/0x3b0
[ 2004.125850][   T38]  ? __pfx_remove_one+0x10/0x10
[ 2004.125877][   T38]  __simple_recursive_removal+0x215/0x520
[ 2004.125902][   T38]  ? __pfx_remove_one+0x10/0x10
[ 2004.125931][   T38]  debugfs_remove+0x5b/0x70
[ 2004.125955][   T38]  nsim_dev_health_exit+0x41/0xc0
[ 2004.126104][   T38]  nsim_dev_reload_destroy+0x2bf/0x490
[ 2004.126132][   T38]  nsim_drv_remove+0x58/0x160
[ 2004.126156][   T38]  ? __pfx_nsim_bus_remove+0x10/0x10
[ 2004.126182][   T38]  device_release_driver_internal+0x48b/0x880
[ 2004.126268][   T38]  bus_remove_device+0x449/0x560
[ 2004.126302][   T38]  ? __pfx_bus_remove_device+0x10/0x10
[ 2004.126329][   T38]  ? up_read+0x34/0x180
[ 2004.126350][   T38]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 2004.126385][   T38]  device_del+0x528/0x8f0
[ 2004.126449][   T38]  ? __pfx_device_del+0x10/0x10
[ 2004.126583][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2004.126611][   T38]  device_unregister+0x21/0xf0
[ 2004.126632][   T38]  del_device_store+0x2b5/0x370
[ 2004.126701][   T38]  ? __pfx_del_device_store+0x10/0x10
[ 2004.126732][   T38]  ? sysfs_file_kobj+0x1e4/0x230
[ 2004.126755][   T38]  ? sysfs_kf_write+0x166/0x260
[ 2004.126781][   T38]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 2004.126802][   T38]  kernfs_fop_write_iter+0x3a5/0x540
[ 2004.126839][   T38]  vfs_write+0x61e/0xbb0
[ 2004.126874][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 2004.126901][   T38]  ? do_sys_openat2+0x14e/0x200
[ 2004.126919][   T38]  ? kmem_cache_free+0x187/0x6d0
[ 2004.126965][   T38]  ksys_write+0x156/0x270
[ 2004.126999][   T38]  ? __pfx_ksys_write+0x10/0x10
[ 2004.127035][   T38]  do_syscall_64+0x166/0x520
[ 2004.127058][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2004.127080][   T38]  ? clear_bhb_loop+0x70/0xc0
[ 2004.127105][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2004.127126][   T38] RIP: 0033:0x7f09f6dee98e
[ 2004.127147][   T38] RSP: 002b:00007ffef0fc56d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2004.127169][   T38] RAX: ffffffffffffffda RBX: 0000555584f10500 RCX: 00007f09f6dee98e
[ 2004.127184][   T38] RDX: 0000000000000001 RSI: 00007ffef0fc5760 RDI: 0000000000000005
[ 2004.127198][   T38] RBP: 00007f09f6ec58ee R08: 0000000000000000 R09: 0000000000000000
[ 2004.127212][   T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2004.127226][   T38] R13: 00007ffef0fc5760 R14: 00007f09f7be4620 R15: 0000000000000003
[ 2004.127258][   T38]  </TASK>
[ 2004.127279][   T38] INFO: task syz.6.3105:19141 blocked for more than 143 seconds.
[ 2004.127297][   T38]       Tainted: G             L      syzkaller #0
[ 2004.127309][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2004.127319][   T38] task:syz.6.3105      state:D stack:25968 pid:19141 tgid:19138 ppid:17434  task_flags:0x400140 flags:0x00080002
[ 2004.127368][   T38] Call Trace:
[ 2004.127376][   T38]  <TASK>
[ 2004.127389][   T38]  __schedule+0x16d9/0x5700
[ 2004.127443][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 2004.127466][   T38]  ? __pfx___schedule+0x10/0x10
[ 2004.127509][   T38]  rt_mutex_schedule+0x76/0xf0
[ 2004.127536][   T38]  rt_mutex_slowlock_block+0x55e/0x690
[ 2004.127572][   T38]  ? rt_mutex_slowlock_block+0x33c/0x690
[ 2004.127602][   T38]  rt_mutex_slowlock+0x2d4/0x780
[ 2004.127631][   T38]  ? rt_mutex_slowlock+0x1f2/0x780
[ 2004.127658][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[ 2004.127702][   T38]  ? devlink_health_report+0x346/0xb20
[ 2004.127811][   T38]  ? devlink_health_report+0x346/0xb20
[ 2004.127837][   T38]  mutex_lock_nested+0x168/0x1d0
[ 2004.127869][   T38]  devlink_health_report+0x346/0xb20
[ 2004.127906][   T38]  nsim_dev_health_break_write+0x197/0x240
[ 2004.127940][   T38]  ? __pfx_nsim_dev_health_break_write+0x10/0x10
[ 2004.127989][   T38]  full_proxy_write+0x127/0x1f0
[ 2004.128019][   T38]  ? __pfx_full_proxy_write+0x10/0x10
[ 2004.128045][   T38]  vfs_write+0x29f/0xbb0
[ 2004.128077][   T38]  ? __pfx_vfs_write+0x10/0x10
[ 2004.128103][   T38]  ? __fget_files+0x2a/0x420
[ 2004.128151][   T38]  ? __fget_files+0x2a/0x420
[ 2004.128173][   T38]  ? __fget_files+0x3a8/0x420
[ 2004.128194][   T38]  ? __fget_files+0x2a/0x420
[ 2004.128225][   T38]  __x64_sys_pwrite64+0x199/0x230
[ 2004.128252][   T38]  ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 2004.128289][   T38]  do_syscall_64+0x166/0x520
[ 2004.128310][   T38]  ? trace_irq_disable+0x3b/0x140
[ 2004.128337][   T38]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2004.128357][   T38]  ? clear_bhb_loop+0x70/0xc0
[ 2004.128382][   T38]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2004.128402][   T38] RIP: 0033:0x7f746d40e159
[ 2004.128420][   T38] RSP: 002b:00007f746b666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 2004.128441][   T38] RAX: ffffffffffffffda RBX: 00007f746d695fa0 RCX: 00007f746d40e159
[ 2004.128457][   T38] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000003
[ 2004.128471][   T38] RBP: 00007f746d4a506b R08: 0000000000000000 R09: 0000000000000000
[ 2004.128483][   T38] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[ 2004.128497][   T38] R13: 00007f746d696038 R14: 00007f746d695fa0 R15: 00007ffc6dcaaa08
[ 2004.128530][   T38]  </TASK>
[ 2004.128573][   T38] 
[ 2004.128573][   T38] Showing all locks held in the system:
[ 2004.128588][   T38] locks held by khungtaskd/38: 1, last CPU#0:
[ 2004.128603][   T38]  #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2004.128666][   T38] locks held by kworker/u8:16/1624: 5, last CPU#1:
[ 2004.128681][   T38]  #0: ffff888033640138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2004.128738][   T38]  #1: ffffc9000612fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 2004.128792][   T38]  #2: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 2004.128856][   T38]  #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420
[ 2004.128909][   T38]  #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400
[ 2004.128982][   T38] locks held by getty/5357: 2, on CPU#0:
[ 2004.128997][   T38]  #0: ffff8880374580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2004.129050][   T38]  #1: ffffc900044ce2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360
[ 2004.129115][   T38] locks held by syz-executor/18964: 7, on CPU#0:
[ 2004.129130][   T38]  #0: ffff888036188510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.129186][   T38]  #1: ffff88806049c878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2004.129242][   T38]  #2: ffff888029385788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2004.129303][   T38]  #3: ffffffff8ee45dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2004.129360][   T38]  #4: ffff8880621b9160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 2004.129410][   T38]  #5: ffff888024dca310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160
[ 2004.129463][   T38]  #6: ffff88803ff786f0 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520
[ 2004.129523][   T38] locks held by syz-executor/19088: 4, on CPU#0:
[ 2004.129538][   T38]  #0: ffff888036188510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.129593][   T38]  #1: ffff888062ad7878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2004.129649][   T38]  #2: ffff888029385788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2004.129710][   T38]  #3: ffffffff8ee45dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2004.129768][   T38] locks held by syz.6.3105/19141: 2, on CPU#1:
[ 2004.129783][   T38]  #0: ffff88801eaaa510 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.129839][   T38]  #1: ffff888024dca310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_health_report+0x346/0xb20
[ 2004.129899][   T38] locks held by syz-executor/19310: 4, on CPU#0:
[ 2004.129914][   T38]  #0: ffff888036188510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.129969][   T38]  #1: ffff888060335c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2004.130032][   T38]  #2: ffff888029385788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2004.130093][   T38]  #3: ffffffff8ee45dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2004.130154][   T38] locks held by syz-executor/19616: 4, on CPU#0:
[ 2004.130169][   T38]  #0: ffff888036188510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.130224][   T38]  #1: ffff888037c2f078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2004.130282][   T38]  #2: ffff888029385788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2004.130344][   T38]  #3: ffffffff8ee45dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2004.130400][   T38] locks held by syz-executor/19636: 4, on CPU#0:
[ 2004.130414][   T38]  #0: ffff888036188510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.130470][   T38]  #1: ffff88803b13a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2004.130525][   T38]  #2: ffff888029385788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2004.130587][   T38]  #3: ffffffff8ee45dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2004.130643][   T38] locks held by syz-executor/19655: 4, on CPU#0:
[ 2004.130659][   T38]  #0: ffff888036188510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.130714][   T38]  #1: ffff888062a71c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2004.130770][   T38]  #2: ffff888029385788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2004.130832][   T38]  #3: ffffffff8ee45dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2004.130888][   T38] locks held by syz-executor/19677: 4, on CPU#0:
[ 2004.130903][   T38]  #0: ffff888036188510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.130959][   T38]  #1: ffff888063146078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2004.131019][   T38]  #2: ffff888029385788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2004.131079][   T38]  #3: ffffffff8ee45dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2004.131135][   T38] locks held by syz-executor/19699: 4, on CPU#0:
[ 2004.131150][   T38]  #0: ffff888036188510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.131200][   T38]  #1: ffff88803b275478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2004.131252][   T38]  #2: ffff888029385788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2004.131310][   T38]  #3: ffffffff8ee45dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2004.131366][   T38] locks held by syz-executor/19719: 4, on CPU#0:
[ 2004.131381][   T38]  #0: ffff888036188510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0
[ 2004.131436][   T38]  #1: ffff888060242078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540
[ 2004.131493][   T38]  #2: ffff888029385788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540
[ 2004.131555][   T38]  #3: ffffffff8ee45dd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370
[ 2004.131610][   T38] 
[ 2004.131616][   T38] =============================================
[ 2004.131616][   T38] 
[ 2004.131626][   T38] NMI backtrace for cpu 0
[ 2004.131643][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2004.131669][   T38] Tainted: [L]=SOFTLOCKUP
[ 2004.131677][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2004.131687][   T38] Call Trace:
[ 2004.131696][   T38]  <TASK>
[ 2004.131705][   T38]  dump_stack_lvl+0xe8/0x150
[ 2004.131735][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 2004.131764][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2004.131788][   T38]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 2004.131818][   T38]  sys_info+0x135/0x170
[ 2004.131842][   T38]  watchdog+0xfd7/0x1030
[ 2004.131875][   T38]  ? watchdog+0x1c7/0x1030
[ 2004.131907][   T38]  kthread+0x38b/0x470
[ 2004.131927][   T38]  ? __pfx_watchdog+0x10/0x10
[ 2004.131949][   T38]  ? __pfx_kthread+0x10/0x10
[ 2004.131971][   T38]  ret_from_fork+0x514/0xb70
[ 2004.132010][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 2004.132030][   T38]  ? __switch_to+0xc89/0x1420
[ 2004.132060][   T38]  ? __pfx_kthread+0x10/0x10
[ 2004.132082][   T38]  ret_from_fork_asm+0x1a/0x30
[ 2004.132115][   T38]  </TASK>
[ 2004.132124][   T38] Sending NMI from CPU 0 to CPUs 1:
[ 2004.132156][    C1] NMI backtrace for cpu 1
[ 2004.132173][    C1] CPU: 1 UID: 0 PID: 1624 Comm: kworker/u8:16 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2004.132198][    C1] Tainted: [L]=SOFTLOCKUP
[ 2004.132205][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2004.132218][    C1] Workqueue: bat_events batadv_dat_purge
[ 2004.132331][    C1] RIP: 0010:lock_release+0x27e/0x3c0
[ 2004.132357][    C1] Code: 5c 24 08 48 c7 c7 db 07 ae 8d e8 8d 65 b6 09 b8 ff ff ff ff 65 0f c1 05 60 d7 03 11 83 f8 01 75 2e 9c 58 a9 00 02 00 00 75 42 <f7> c3 00 02 00 00 75 47 65 48 8b 05 7a 91 03 11 48 3b 44 24 28 74
[ 2004.132373][    C1] RSP: 0018:ffffc9000612f9c8 EFLAGS: 00000046
[ 2004.132388][    C1] RAX: 0000000000000046 RBX: 0000000000000202 RCX: 0000000000000046
[ 2004.132400][    C1] RDX: 0000000000000001 RSI: ffffffff8dae07db RDI: ffffffff8bcc4b80
[ 2004.132414][    C1] RBP: ffff88802a122bf8 R08: ffffffff8fb22b7f R09: 1ffffffff1f6456f
[ 2004.132428][    C1] R10: dffffc0000000000 R11: fffffbfff1f64570 R12: 0000000000000004
[ 2004.132442][    C1] R13: 0000000000000004 R14: ffffffff8e1c3cc0 R15: ffff88802a121f40
[ 2004.132456][    C1] FS:  0000000000000000(0000) GS:ffff888125cc4000(0000) knlGS:0000000000000000
[ 2004.132472][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2004.132493][    C1] CR2: 0000560d3d70d660 CR3: 000000000dfb0000 CR4: 00000000003526f0
[ 2004.132510][    C1] Call Trace:
[ 2004.132517][    C1]  <TASK>
[ 2004.132525][    C1]  ? rt_spin_unlock+0x159/0x200
[ 2004.132552][    C1]  rt_spin_unlock+0x165/0x200
[ 2004.132576][    C1]  ? __pfx_batadv_dat_to_purge+0x10/0x10
[ 2004.132602][    C1]  __batadv_dat_purge+0x334/0x400
[ 2004.132626][    C1]  ? __batadv_dat_purge+0xae/0x400
[ 2004.132649][    C1]  ? __pfx_batadv_dat_to_purge+0x10/0x10
[ 2004.132674][    C1]  ? process_scheduled_works+0x97a/0x1630
[ 2004.132698][    C1]  batadv_dat_purge+0x20/0x70
[ 2004.132720][    C1]  process_scheduled_works+0xc3d/0x1630
[ 2004.132760][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2004.132787][    C1]  ? assign_work+0x3cf/0x5d0
[ 2004.132812][    C1]  worker_thread+0xa47/0xfb0
[ 2004.132843][    C1]  ? __kthread_parkme+0x71/0x1f0
[ 2004.132874][    C1]  kthread+0x38b/0x470
[ 2004.132891][    C1]  ? __pfx_worker_thread+0x10/0x10
[ 2004.132915][    C1]  ? __pfx_kthread+0x10/0x10
[ 2004.132933][    C1]  ret_from_fork+0x514/0xb70
[ 2004.132952][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[ 2004.132969][    C1]  ? __switch_to+0xc89/0x1420
[ 2004.132995][    C1]  ? __pfx_kthread+0x10/0x10
[ 2004.133013][    C1]  ret_from_fork_asm+0x1a/0x30
[ 2004.133038][    C1]  </TASK>
[ 2004.133162][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 2005.672799][   T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 2005.683983][   T38] Tainted: [L]=SOFTLOCKUP
[ 2005.688295][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 2005.698349][   T38] Call Trace:
[ 2005.701624][   T38]  <TASK>
[ 2005.704543][   T38]  vpanic+0x56d/0xa60
[ 2005.708517][   T38]  ? __pfx_vpanic+0x10/0x10
[ 2005.713010][   T38]  ? console_srcu_read_unlock+0x3a/0x60
[ 2005.718551][   T38]  panic+0xc5/0xd0
[ 2005.722256][   T38]  ? __pfx_panic+0x10/0x10
[ 2005.726659][   T38]  ? wq_watchdog_touch+0xf9/0x160
[ 2005.731672][   T38]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[ 2005.737822][   T38]  watchdog+0x1030/0x1030
[ 2005.742152][   T38]  ? watchdog+0x1c7/0x1030
[ 2005.746564][   T38]  kthread+0x38b/0x470
[ 2005.750621][   T38]  ? __pfx_watchdog+0x10/0x10
[ 2005.755286][   T38]  ? __pfx_kthread+0x10/0x10
[ 2005.759863][   T38]  ret_from_fork+0x514/0xb70
[ 2005.764464][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 2005.769562][   T38]  ? __switch_to+0xc89/0x1420
[ 2005.774233][   T38]  ? __pfx_kthread+0x10/0x10
[ 2005.778818][   T38]  ret_from_fork_asm+0x1a/0x30
[ 2005.783580][   T38]  </TASK>
[ 2005.786862][   T38] Kernel Offset: disabled
[ 2005.791184][   T38] Rebooting in 86400 seconds..