last executing test programs:

13.651790601s ago: executing program 1 (id=256):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(0x0, 0x8, 0x200000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, r1, 0x0, 0x0)
mkdir(0x0, 0x12)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
getpgrp(0x0)
migrate_pages(0x0, 0x3, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x803, 0x0)

13.487854184s ago: executing program 0 (id=257):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r6 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r6, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]})
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20014094, 0x0, 0x0)
pipe2(&(0x7f0000000300)={<r8=>0xffffffffffffffff}, 0x0)
splice(r8, 0x0, r7, 0x0, 0x18, 0x7)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB])

11.126953284s ago: executing program 1 (id=260):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3)
ftruncate(r1, 0xffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
pipe2(&(0x7f0000000100), 0x800)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x8100}, {0xffffffffffffffff, 0xad0}], 0x65, 0x28f)
fcntl$addseals(r1, 0x409, 0x7)
r4 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000140)=0x2)
unshare(0x42000000)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00')
socket(0x10, 0x3, 0x0)

11.038667681s ago: executing program 3 (id=261):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c65382f702b9eb", 0xa}, {&(0x7f00000006c0)="da467702f9520108dcebc5560e4f93142974b51221138c2cdf5b4d577cb800c423ace69c1eba8d0c505baa2ad7ddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc712a114aaeae7681c19a1975b5ae7a925a7b878d482b1375a1b59f2b669bcf1f5a39f4241eef5d48ba4a16fb354031b55dd5bad3ff8d69fe0a9e54a633953fea9e23fdf840a0b9270dfa4799e36a059f53656b65191a14e19c6330c4df5e04ca46", 0xc1}, {&(0x7f0000000300)="f111f39463acbac94f37eaaa931da78c8c414a4edadbcac605b6a5089e71e9b125f3a628ad2cbfd97cb9ad0e6eec571532e87f653961867d41d742ded2a2b2ae459f67", 0x43}], 0x3, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

10.779392952s ago: executing program 0 (id=262):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
r0 = syz_io_uring_setup(0x2f67, &(0x7f0000000240)={0x0, 0x70ef, 0x10100, 0x0, 0x299}, &(0x7f0000000400)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0)

9.897086264s ago: executing program 3 (id=264):
syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a060725010205010409"], 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003"], 0x0)

8.300058382s ago: executing program 1 (id=267):
syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0009000c00f40904000000010100000a24010f000102010209040100000102"], 0x0)
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0)
syz_usb_control_io(r0, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)={0x20, 0x8, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1e1501"], 0x0, 0x0})

7.20677519s ago: executing program 0 (id=269):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket$inet6(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000000240)={&(0x7f0000000100)={0xa, 0x1, 0xbe, @local, 0xfffffff1}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)}, 0x40)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x880, 0x4c, 0x21}, 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes256, 0x1, @desc1})
shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c)
r6 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4)

7.105222718s ago: executing program 3 (id=270):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000)
socket(0x10, 0x80002, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x1)

5.491982308s ago: executing program 0 (id=272):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[], 0x1, 0xc27, &(0x7f0000001940)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setaffinity(0x0, 0x0, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)

5.294581584s ago: executing program 2 (id=273):
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
socket$inet6(0xa, 0x1, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
syz_open_procfs(r0, &(0x7f0000000340)='net/packet\x00')
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x1, 0x183, &(0x7f0000000440)="$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")

3.946621002s ago: executing program 3 (id=274):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c65382f702b9eb", 0xa}, {&(0x7f0000000100)="8d25904b471f18c10cc0dd4b4d786c4ae155", 0x12}], 0x2, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

3.914859064s ago: executing program 2 (id=275):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c00"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.702830032s ago: executing program 2 (id=276):
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.565497473s ago: executing program 3 (id=277):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000009040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0)
pwrite64(r1, &(0x7f0000000540)="9e", 0x1, 0xfecf)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f00000001c0)={@desc={0x1, 0x0, @auto="964a62a2042db162"}})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

2.719362331s ago: executing program 0 (id=278):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c65382f702b9eb", 0xa}, {&(0x7f00000006c0)="da467702f9520108dcebc5560e4f93142974b51221138c2cdf5b4d577cb800c423ace69c1eba8d0c505baa2ad7ddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc712a114aaeae7681c19a1975b5ae7a925a7b878d482b1375a1b59f2b669bcf1f5a39f4241eef5d48ba4a16fb354031b55dd5bad3ff8d69fe0a9e54a633953fea9e23fdf840a0b9270dfa4799e36a059f53656b65191a14e19c6330c4df5e04ca46", 0xc1}, {&(0x7f0000000300)="f111f39463acbac94f37eaaa931da78c8c414a4edadbcac605b6a5089e71e9b125f3a628ad2cbfd97cb9ad0e6eec571532e87f653961867d41d742ded2a2b2ae459f67", 0x43}], 0x3, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.564836713s ago: executing program 2 (id=279):
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
socket$kcm(0x29, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(0x0, 0x8, 0x200000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, r1, 0x0, 0x0)
mkdir(0x0, 0x12)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
getpgrp(0x0)
migrate_pages(0x0, 0x3, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f0000001e40)={[{@stats}]})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0)

2.011172298s ago: executing program 0 (id=280):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000009040)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x0)
pwrite64(r0, &(0x7f0000000540)="9e", 0x1, 0xfecf)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1.626861929s ago: executing program 2 (id=281):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xc832, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, 0x0, 0x0, 0x8008801)
socket$nl_xfrm(0x10, 0x3, 0x6)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x83, 0x6, 0xfffa}, 0x1d, [0x0, 0xc95a, 0x2, 0x9, 0x81, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x6, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x8e2, 0x80000000, 0x242, 0x400007, 0xe, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x3d, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x4, 0x0, 0x5, 0xfffffffd, 0x5, 0x6, 0xb, 0xb, 0x1, 0x40], [0x10000007, 0x0, 0x8000012f, 0x8000, 0x9, 0xfffffff3, 0x1a9432e6, 0xcd, 0xf9, 0x9, 0x2c2, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x403, 0x401, 0x6, 0x1, 0xff, 0xfffffffe, 0xa, 0x5f2e, 0x4, 0xfffffffd, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x3, 0x8000, 0x0, 0xfe000000, 0xffff, 0xffffffff, 0x7f, 0x5, 0x8001, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x4, 0xfffffffc, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x80000001, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0xa, 0x5, 0xfffffffe, 0x2, 0x4, 0xd, 0x4, 0x6d01, 0x5, 0x10009, 0x800000, 0x5, 0x80, 0x101, 0x4, 0x2950bfaf, 0x1000, 0x9, 0x7, 0x5, 0xffffffff, 0x5, 0xac8, 0x7, 0x10002, 0x3, 0x7ff, 0xfffffff9, 0x4, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0x1ff, 0x404, 0x2], [0x9, 0xbb31, 0x100068b, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x2, 0x7, 0x9, 0x2003, 0x101, 0xfffc, 0x6, 0x207fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xfffc, 0x7, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x6, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1.520540557s ago: executing program 3 (id=282):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'})
futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000)
socket(0x10, 0x80002, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2)
sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r0, 0x1)

435.961145ms ago: executing program 2 (id=283):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8, 0xc595, 0x7, 0xffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xd], 0x8000000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

390.733849ms ago: executing program 1 (id=284):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c65382f702b9eb", 0xa}, {&(0x7f00000006c0)="da467702f9520108dcebc5560e4f93142974b51221138c2cdf5b4d577cb800c423ace69c1eba8d0c505baa2ad7ddff4bc6e17bd735b3576550a4b33160cad82f3df56db53fbf5fbad6125c8b7932af43ba88cd499a6c421696d57ff38d5231dc712a114aaeae7681c19a1975b5ae7a925a7b878d482b1375a1b59f2b669bcf1f5a39f4241eef5d48ba4a16fb354031b55dd5bad3ff8d69fe0a9e54a633953fea9e23fdf840a0b9270dfa4799e36a059f53656b65191a14e19c6330c4df5e04ca46", 0xc1}, {&(0x7f0000000100)="8d25904b471f18c10cc0dd4b4d786c4ae155", 0x12}, {&(0x7f0000000300)="f111f39463acbac94f37eaaa931da78c8c414a4edadbcac605b6a5089e71e9b125f3a628ad2cbfd97cb9ad0e6eec571532e87f653961867d41d742ded2a2b2ae459f67", 0x43}], 0x4, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

175.056596ms ago: executing program 1 (id=285):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="98a591c65382f702b9eb", 0xa}, {0x0}, {&(0x7f0000000100)="8d25904b471f18c10cc0dd4b4d786c4ae155", 0x12}], 0x3, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000100000908000240000000050900010073797a300000000028000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 1 (id=286):
capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffd, 0x8001, 0x2, 0x800000001, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000003fffffc, 0x8d], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts.
[   82.294729][ T5778] cgroup: Unknown subsys name 'net'
[   82.435647][ T5778] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.130979][ T5778] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.867100][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.885866][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.895677][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.904147][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.912476][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.920087][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.936553][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.023171][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.032376][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.035174][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.053715][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.061345][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.069087][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.069877][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.084444][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.092003][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.093122][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   86.100850][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   86.113640][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.113830][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.140581][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.166875][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.176519][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   86.184292][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.473418][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   86.704273][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.714409][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.722435][ T5787] bridge_slave_0: entered allmulticast mode
[   86.731628][ T5787] bridge_slave_0: entered promiscuous mode
[   86.740253][ T5799] chnl_net:caif_netlink_parms(): no params data found
[   86.779051][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.787177][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.794350][ T5787] bridge_slave_1: entered allmulticast mode
[   86.801515][ T5787] bridge_slave_1: entered promiscuous mode
[   86.827392][ T5792] chnl_net:caif_netlink_parms(): no params data found
[   86.907555][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   86.947583][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.048229][ T5787] team0: Port device team_slave_0 added
[   87.054477][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.061757][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.069098][ T5799] bridge_slave_0: entered allmulticast mode
[   87.077236][ T5799] bridge_slave_0: entered promiscuous mode
[   87.087764][ T5791] chnl_net:caif_netlink_parms(): no params data found
[   87.134196][ T5787] team0: Port device team_slave_1 added
[   87.146459][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.153920][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.170587][ T5799] bridge_slave_1: entered allmulticast mode
[   87.187128][ T5799] bridge_slave_1: entered promiscuous mode
[   87.337785][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.351382][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.361246][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.369034][ T5792] bridge_slave_0: entered allmulticast mode
[   87.376779][ T5792] bridge_slave_0: entered promiscuous mode
[   87.409824][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.432171][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.439493][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.448034][ T5792] bridge_slave_1: entered allmulticast mode
[   87.455881][ T5792] bridge_slave_1: entered promiscuous mode
[   87.480835][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.488171][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.514385][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.587203][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.602950][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.611301][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.643352][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.695306][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.740500][ T5799] team0: Port device team_slave_0 added
[   87.762399][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.769797][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.777317][ T5791] bridge_slave_0: entered allmulticast mode
[   87.784394][ T5791] bridge_slave_0: entered promiscuous mode
[   87.793655][ T5799] team0: Port device team_slave_1 added
[   87.826992][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.834327][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.841904][ T5791] bridge_slave_1: entered allmulticast mode
[   87.849832][ T5791] bridge_slave_1: entered promiscuous mode
[   87.871219][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.878835][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.905300][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.926239][ T5792] team0: Port device team_slave_0 added
[   87.935373][ T5792] team0: Port device team_slave_1 added
[   87.984130][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.994498][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.021340][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.036425][ T5794] Bluetooth: hci0: command tx timeout
[   88.052881][ T5787] hsr_slave_0: entered promiscuous mode
[   88.060147][ T5787] hsr_slave_1: entered promiscuous mode
[   88.103423][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.110530][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.137166][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.151316][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.165261][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.175370][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.182559][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.196292][ T5794] Bluetooth: hci3: command tx timeout
[   88.208915][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.214172][   T50] Bluetooth: hci2: command tx timeout
[   88.276952][   T50] Bluetooth: hci1: command tx timeout
[   88.322984][ T5791] team0: Port device team_slave_0 added
[   88.333791][ T5791] team0: Port device team_slave_1 added
[   88.356944][ T5799] hsr_slave_0: entered promiscuous mode
[   88.363849][ T5799] hsr_slave_1: entered promiscuous mode
[   88.370676][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.378863][ T5799] Cannot create hsr debugfs directory
[   88.464833][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.471952][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.499244][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.549717][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.556983][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.582944][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.599056][ T5792] hsr_slave_0: entered promiscuous mode
[   88.607678][ T5792] hsr_slave_1: entered promiscuous mode
[   88.613841][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.621637][ T5792] Cannot create hsr debugfs directory
[   88.727183][ T5791] hsr_slave_0: entered promiscuous mode
[   88.733743][ T5791] hsr_slave_1: entered promiscuous mode
[   88.740747][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.748570][ T5791] Cannot create hsr debugfs directory
[   89.033110][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.047340][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.089537][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.101411][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.171062][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.182167][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.226844][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.239476][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.301387][ T5791] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.312031][ T5791] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.323341][ T5791] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.344171][ T5791] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.413557][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.435006][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.464754][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.496326][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.531071][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.614036][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   89.633112][ T2107] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.640545][ T2107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.667934][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.696470][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[   89.725212][ T2107] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.732451][ T2107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.761837][ T2107] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.769121][ T2107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.781900][ T2107] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.789121][ T2107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.876904][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.889853][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.914653][ T5791] 8021q: adding VLAN 0 to HW filter on device team0
[   89.978586][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.986222][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.000907][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.018156][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[   90.060985][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.068274][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.082058][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.089299][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.115869][   T50] Bluetooth: hci0: command tx timeout
[   90.169879][ T2107] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.177120][ T2107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.276605][   T50] Bluetooth: hci3: command tx timeout
[   90.286483][   T50] Bluetooth: hci2: command tx timeout
[   90.330356][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.355647][   T50] Bluetooth: hci1: command tx timeout
[   90.498597][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.523889][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.647217][ T5799] veth0_vlan: entered promiscuous mode
[   90.672237][ T5787] veth0_vlan: entered promiscuous mode
[   90.695288][ T5799] veth1_vlan: entered promiscuous mode
[   90.712267][ T5787] veth1_vlan: entered promiscuous mode
[   90.840959][ T5787] veth0_macvtap: entered promiscuous mode
[   90.855362][ T5787] veth1_macvtap: entered promiscuous mode
[   90.898719][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.924879][ T5799] veth0_macvtap: entered promiscuous mode
[   90.939451][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.959247][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.970764][ T5799] veth1_macvtap: entered promiscuous mode
[   90.991934][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.038599][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.049839][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.058875][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.068156][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.099065][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.111163][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.123498][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.194723][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.209709][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.221458][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.248399][ T5792] veth0_vlan: entered promiscuous mode
[   91.272337][ T5799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.282655][ T5799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.292149][ T5799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.302427][ T5799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.314003][ T5791] veth0_vlan: entered promiscuous mode
[   91.344140][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.355369][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.363121][ T5791] veth1_vlan: entered promiscuous mode
[   91.391236][ T5792] veth1_vlan: entered promiscuous mode
[   91.461070][ T2107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.475253][ T2107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.547031][ T5791] veth0_macvtap: entered promiscuous mode
[   91.571032][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.582978][ T5791] veth1_macvtap: entered promiscuous mode
[   91.593292][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.603708][ T5792] veth0_macvtap: entered promiscuous mode
[   91.658336][ T5792] veth1_macvtap: entered promiscuous mode
[   91.666300][ T2107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.680387][ T2107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.737225][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.763072][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.778681][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.791634][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.822284][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.841874][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.875213][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.897911][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.913778][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.924099][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.941744][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.967452][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.024467][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.038371][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.049992][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.061103][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.169941][ T5882] syz.0.1: attempt to access beyond end of device
[   92.169941][ T5882] loop0: rw=4096, sector=128, nr_sectors = 8 limit=0
[   92.183580][ T5882] gfs2: error 10 reading superblock
[   92.245607][   T50] Bluetooth: hci0: command tx timeout
[   92.294715][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.334115][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.355895][   T50] Bluetooth: hci2: command tx timeout
[   92.362128][   T50] Bluetooth: hci3: command tx timeout
[   92.434113][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.446549][   T50] Bluetooth: hci1: command tx timeout
[   92.517776][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.811297][  T786] cfg80211: failed to load regulatory.db
[   92.845884][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.856400][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.867236][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.879204][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.901166][ T5791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.930100][ T5791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.955479][ T5791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.964256][ T5791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.023157][ T5884] syz.0.5[5884]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   93.080526][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.105833][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.248672][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.257546][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.267797][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.414131][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.437042][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.595793][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   93.712021][  T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.075777][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.117695][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.185693][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.211358][  T786] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   94.221083][  T786] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   94.231857][  T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   94.241278][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.255536][  T786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   94.276033][   T50] Bluetooth: hci0: command tx timeout
[   94.322247][  T786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   94.411734][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.439142][   T50] Bluetooth: hci3: command tx timeout
[   94.444591][   T50] Bluetooth: hci2: command tx timeout
[   94.462786][  T786] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   94.474982][  T786] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   94.477275][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.515473][  T786] usb 3-1: Product: syz
[   94.515847][   T50] Bluetooth: hci1: command tx timeout
[   94.519687][  T786] usb 3-1: Manufacturer: syz
[   94.599807][  T786] cdc_wdm 3-1:1.0: skipping garbage
[   94.605149][  T786] cdc_wdm 3-1:1.0: skipping garbage
[   94.743191][  T786] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   94.781519][  T786] cdc_wdm 3-1:1.0: Unknown control protocol
[   94.847091][ T5892] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.877231][  T786] usb 3-1: USB disconnect, device number 2
[   95.215627][ T5860] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   95.425689][ T5860] usb 1-1: Using ep0 maxpacket: 32
[   95.471161][ T5860] usb 1-1: unable to get BOS descriptor or descriptor too short
[   95.503617][ T5860] usb 1-1: config 241 has an invalid interface number: 213 but max is 0
[   95.526116][ T5860] usb 1-1: config 241 has an invalid descriptor of length 0, skipping remainder of the config
[   95.545599][ T5860] usb 1-1: config 241 has no interface number 0
[   95.586538][ T5860] usb 1-1: config 241 interface 213 has no altsetting 0
[   95.642659][ T5860] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=15.61
[   95.663037][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.673428][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[   95.695511][ T5860] usb 1-1: Product: syz
[   95.706030][ T5860] usb 1-1: Manufacturer: syz
[   95.716420][  T786] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   95.724043][ T5860] usb 1-1: SerialNumber: syz
[   95.765979][  T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.845933][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   95.943989][  T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.974293][  T786] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x1D, skipping
[   95.995301][  T786] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   96.023808][  T787] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   96.031912][  T786] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   96.043070][  T787] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   96.054525][  T786] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   96.062857][ T5860] usb 1-1: Found UVC 0.00 device syz (0408:3090)
[   96.062922][ T5860] usb 1-1: No valid video chain found.
[   96.073596][ T5860] usb 1-1: USB disconnect, device number 2
[   96.085744][  T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   96.115151][  T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[   96.138059][  T786] usb 2-1: Manufacturer: syz
[   96.156072][  T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[   96.168843][  T786] usb 2-1: config 0 descriptor??
[   96.190467][  T786] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   96.223969][  T787] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   96.251494][  T787] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   96.261133][  T787] usb 3-1: Product: syz
[   96.286609][  T787] usb 3-1: Manufacturer: syz
[   96.319766][  T787] cdc_wdm 3-1:1.0: skipping garbage
[   96.333124][  T787] cdc_wdm 3-1:1.0: skipping garbage
[   96.340677][  T787] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   96.351613][  T787] cdc_wdm 3-1:1.0: Unknown control protocol
[   96.469395][  T786] usb 2-1: USB disconnect, device number 2
[   96.530831][ T5844] usb 3-1: USB disconnect, device number 3
[   96.736765][ T5859] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.963013][ T5859] usb 4-1: config 0 has no interfaces?
[   96.968661][ T5859] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   96.977975][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.991091][ T5859] usb 4-1: config 0 descriptor??
[   97.105539][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   97.256031][   T27] usb 4-1: USB disconnect, device number 2
[   97.317219][ T5844] usb 3-1: Using ep0 maxpacket: 16
[   97.326150][ T5844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.345181][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   97.368263][ T5844] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[   97.379057][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.397367][ T5844] usb 3-1: Product: syz
[   97.405824][ T5844] usb 3-1: Manufacturer: syz
[   97.410745][ T5844] usb 3-1: SerialNumber: syz
[   97.840264][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.851836][   T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   97.867618][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.915725][ T5844] usb 3-1: 0:2 : does not exist
[   97.930178][ T5844] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   98.009933][ T5844] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[   98.060637][   T27] usb 4-1: config 0 has no interfaces?
[   98.066836][   T27] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   98.091930][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.096087][ T5844] usb 3-1: USB disconnect, device number 4
[   98.137570][   T27] usb 4-1: config 0 descriptor??
[   98.515998][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   98.723142][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   98.823179][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   98.925624][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   98.934079][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[   99.028038][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  100.382299][    T8] usb 4-1: USB disconnect, device number 3
[  106.495552][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  106.762055][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.781483][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.810815][    T9] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  106.820898][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.837087][    T9] usb 4-1: config 0 descriptor??
[  107.505070][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  107.546353][    T9] usbhid: probe of 4-1:0.0 failed with error -71
[  107.577138][    T9] usb 4-1: USB disconnect, device number 4
[  108.215522][ T5860] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  108.421932][ T5860] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  108.430849][ T5860] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  108.442983][ T5860] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  108.453041][ T5860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  108.455623][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  108.464230][ T5860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  108.485251][ T5860] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  108.494422][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  108.502507][ T5860] usb 3-1: Product: syz
[  108.506871][ T5860] usb 3-1: Manufacturer: syz
[  108.519986][ T5860] cdc_wdm 3-1:1.0: skipping garbage
[  108.525282][ T5860] cdc_wdm 3-1:1.0: skipping garbage
[  108.533236][ T5860] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  108.539385][ T5860] cdc_wdm 3-1:1.0: Unknown control protocol
[  108.545839][ T5844] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  108.586430][   T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  108.665631][    T9] usb 4-1: Using ep0 maxpacket: 32
[  108.672564][    T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  108.681869][    T9] usb 4-1: config 0 has no interface number 0
[  108.690839][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  108.700208][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.711599][    T9] usb 4-1: Product: syz
[  108.716067][    T9] usb 4-1: Manufacturer: syz
[  108.720709][    T9] usb 4-1: SerialNumber: syz
[  108.728119][    T9] usb 4-1: config 0 descriptor??
[  108.742192][    T9] smsc95xx v2.0.0
[  108.749655][ T5844] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  108.759959][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.789644][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.797793][ T5844] usb 1-1: config 0 descriptor??
[  108.806143][   T23] usb 2-1: config 0 has no interfaces?
[  108.814368][ T5860] usb 3-1: USB disconnect, device number 5
[  108.830093][   T23] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  108.853583][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.863764][   T23] usb 2-1: Product: syz
[  108.870714][   T23] usb 2-1: Manufacturer: syz
[  108.875373][   T23] usb 2-1: SerialNumber: syz
[  108.899548][   T23] usb 2-1: config 0 descriptor??
[  109.129806][ T5860] usb 2-1: USB disconnect, device number 3
[  109.146237][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  109.157704][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  109.509163][   T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  109.703451][   T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  109.712998][   T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  109.723759][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  109.733144][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  109.744516][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  109.760528][   T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  109.769789][   T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  109.778042][   T23] usb 3-1: Product: syz
[  109.783174][   T23] usb 3-1: Manufacturer: syz
[  109.797312][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  109.802588][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  109.817922][   T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  109.823961][   T23] cdc_wdm 3-1:1.0: Unknown control protocol
[  110.015624][  T786] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  110.208263][  T786] usb 2-1: config 0 has no interfaces?
[  110.213847][  T786] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  110.223010][  T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.236313][  T786] usb 2-1: config 0 descriptor??
[  110.370052][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.375954][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.382979][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.387105][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.388704][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.399183][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.406214][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.416145][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.422685][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.428432][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.434690][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.440505][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.446325][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.446457][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.460831][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.466703][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.472579][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.475932][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.478449][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.492091][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.498510][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.504504][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.510412][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.516337][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.522212][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.528315][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.534884][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.540634][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.546579][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.552518][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.558503][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.564407][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.570147][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.574396][ T5958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.575996][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.590219][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.596533][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.603199][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.609131][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.615028][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.620729][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.626516][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.632282][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.638762][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.638832][ T5958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.644559][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.658507][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.664237][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.670483][    C0] cdc_wdm 3-1:1.0: Stall on int endpoint
[  110.676232][    C0] cdc_wdm 3-1:1.0: Cannot schedule work
[  110.681893][    C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  110.692277][   T23] usb 3-1: USB disconnect, device number 6
[  110.716271][  T786] usb 2-1: USB disconnect, device number 4
[  111.139983][ T5844] pegasus 1-1:0.0: setup Pegasus II specific registers
[  111.368316][  T786] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  111.567061][  T786] usb 2-1: Using ep0 maxpacket: 8
[  111.580363][  T786] usb 2-1: unable to get BOS descriptor or descriptor too short
[  111.592220][  T786] usb 2-1: unable to read config index 0 descriptor/start: -71
[  111.600197][  T786] usb 2-1: can't read configurations, error -71
[  111.809465][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  111.871119][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  111.891097][    T9] smsc95xx: probe of 4-1:0.67 failed with error -71
[  111.906504][    T9] usb 4-1: USB disconnect, device number 5
[  111.999791][   T23] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  112.008528][   T23] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  112.018880][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  112.027989][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  112.041798][   T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  112.055757][   T23] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  112.064847][   T23] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  112.073407][   T23] usb 3-1: Product: syz
[  112.078020][   T23] usb 3-1: Manufacturer: syz
[  112.092378][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  112.098215][   T23] cdc_wdm 3-1:1.0: skipping garbage
[  112.107056][   T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  112.116891][   T23] cdc_wdm 3-1:1.0: Unknown control protocol
[  112.336682][    T9] usb 3-1: USB disconnect, device number 7
[  113.141599][ T5974] syz.3.27: attempt to access beyond end of device
[  113.141599][ T5974] loop3: rw=4096, sector=128, nr_sectors = 8 limit=0
[  113.154893][ T5974] gfs2: error 10 reading superblock
[  113.939266][ T5844] pegasus 1-1:0.0: can't locate MII phy, using default
[  114.292487][ T5844] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 72:d7:f6:f5:09:8c
[  114.381752][ T5844] usb 1-1: USB disconnect, device number 3
[  114.463730][ T5982] fuse: Unknown parameter 'fd0x0000000000000004'
[  116.218574][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  122.962857][ T6043] syz.0.33: attempt to access beyond end of device
[  122.962857][ T6043] loop0: rw=4096, sector=128, nr_sectors = 8 limit=0
[  122.976311][ T6043] gfs2: error 10 reading superblock
[  133.164116][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  133.171728][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  133.265671][ T5860] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  135.217737][ T5860] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  135.236187][ T5860] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  135.255661][ T5860] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  135.267265][ T5860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  135.279471][ T5860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  135.297052][ T5860] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  135.306525][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  135.314586][ T5860] usb 3-1: Product: syz
[  135.319484][ T5860] usb 3-1: Manufacturer: syz
[  135.354501][ T5860] cdc_wdm 3-1:1.0: skipping garbage
[  135.370338][ T5860] cdc_wdm 3-1:1.0: skipping garbage
[  135.383710][ T5860] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  135.397822][ T5860] cdc_wdm 3-1:1.0: Unknown control protocol
[  137.440904][ T5844] usb 3-1: USB disconnect, device number 9
[  137.689987][  T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  137.921401][  T787] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  137.946680][  T787] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  137.960373][  T787] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  137.973571][  T787] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  137.993062][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.012325][ T6133] loop2: detected capacity change from 0 to 128
[  138.031812][  T787] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  138.086268][ T6133] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  138.105166][ T6133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.264605][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.492425][  T787] snd-usb-audio: probe of 1-1:27.0 failed with error -12
[  138.566352][  T787] usb 1-1: USB disconnect, device number 4
[  141.426020][ T5844] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  141.445506][    T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  141.612057][ T5844] usb 2-1: device descriptor read/64, error -71
[  141.647699][    T8] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  141.664444][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.685269][    T8] usb 3-1: config 0 descriptor??
[  141.896767][ T5844] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  142.175508][ T5844] usb 2-1: device descriptor read/64, error -71
[  142.295796][ T5844] usb usb2-port1: attempt power cycle
[  145.023022][    T8] pegasus 3-1:0.0: can't reset MAC
[  145.035845][ T5844] usb usb2-port1: Cannot enable. Maybe the USB cable is bad?
[  145.061777][    T8] pegasus: probe of 3-1:0.0 failed with error -5
[  145.122240][  T787] usb 3-1: USB disconnect, device number 10
[  145.225519][ T5844] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  145.259491][ T5844] usb 2-1: Using ep0 maxpacket: 32
[  145.274038][ T5844] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  145.288049][ T5844] usb 2-1: config 0 has no interface number 0
[  145.300291][ T5844] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  145.311064][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.321730][ T5844] usb 2-1: Product: syz
[  145.327290][ T5844] usb 2-1: Manufacturer: syz
[  145.333997][ T5844] usb 2-1: SerialNumber: syz
[  145.345042][ T5844] usb 2-1: config 0 descriptor??
[  145.361275][ T5844] smsc95xx v2.0.0
[  145.485952][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  145.772199][ T5844] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  145.808025][ T5844] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  145.822512][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  145.855001][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  145.872738][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  145.893368][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  145.913483][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.959895][    T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  146.110187][    T9] snd-usb-audio: probe of 1-1:27.0 failed with error -12
[  146.190158][ T5860] usb 1-1: USB disconnect, device number 5
[  146.205511][  T787] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  146.405488][  T787] usb 3-1: Using ep0 maxpacket: 8
[  146.426251][  T787] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  146.434528][  T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.446168][  T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  146.456359][  T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  146.466971][  T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  146.480425][  T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  146.489905][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.728838][  T787] usb 3-1: usb_control_msg returned -32
[  146.739239][  T787] usbtmc 3-1:16.0: can't read capabilities
[  146.760278][  T787] usb 3-1: USB disconnect, device number 11
[  148.765471][ T5860] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  148.812591][ T5844] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  148.843897][ T5844] smsc95xx: probe of 2-1:0.67 failed with error -71
[  148.890354][ T5844] usb 2-1: USB disconnect, device number 10
[  148.925495][ T5860] usb 4-1: device descriptor read/64, error -71
[  149.237592][ T6195] syz.1.79: attempt to access beyond end of device
[  149.237592][ T6195] loop1: rw=4096, sector=128, nr_sectors = 8 limit=0
[  149.251115][ T6195] gfs2: error 10 reading superblock
[  149.275562][ T6195] loop1: detected capacity change from 0 to 16
[  149.285411][ T6195] erofs: Unknown parameter '00000000000000000000'
[  150.069675][ T5860] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  150.078522][ T5802] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  154.415764][   T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  154.508222][    T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  154.609372][   T27] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  154.620502][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.634153][   T27] usb 4-1: config 0 descriptor??
[  154.801400][    T8] usb 2-1: Using ep0 maxpacket: 32
[  154.817621][    T8] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  154.835944][    T8] usb 2-1: config 0 has no interface number 0
[  154.857713][    T8] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  154.885598][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.908663][    T8] usb 2-1: Product: syz
[  154.912918][    T8] usb 2-1: Manufacturer: syz
[  154.935453][    T8] usb 2-1: SerialNumber: syz
[  154.956803][    T8] usb 2-1: config 0 descriptor??
[  154.975079][    T8] smsc95xx v2.0.0
[  155.394273][    T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  155.406501][    T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  156.570843][    T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  156.615551][ T5839] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  156.758695][    T9] usb 3-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config
[  156.769164][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 64
[  156.787456][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.802278][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  156.811558][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  156.818360][ T5839] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  156.819671][    T9] usb 3-1: Manufacturer: syz
[  156.832878][ T5839] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  156.847769][ T5839] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  156.855038][    T9] usb 3-1: config 0 descriptor??
[  156.857741][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.876888][ T6239] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  156.885888][ T6237] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  156.898297][    T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  156.899337][ T5839] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  156.932675][   T27] pegasus 4-1:0.0: setup Pegasus II specific registers
[  157.048281][    T8] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[  157.064947][    T8] smsc95xx: probe of 2-1:0.67 failed with error -32
[  157.130718][ T5839] usb 3-1: USB disconnect, device number 12
[  157.181189][    T8] usb 1-1: USB disconnect, device number 6
[  158.102079][ T5860] usb 2-1: USB disconnect, device number 11
[  158.191704][    T8] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  158.797846][   T27] pegasus 4-1:0.0: can't locate MII phy, using default
[  158.917644][   T27] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 6a:17:67:f1:ec:68
[  158.969059][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.004424][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  159.052778][   T27] usb 4-1: USB disconnect, device number 8
[  159.066788][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  159.128417][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  159.187407][    T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  159.225552][    T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  159.254146][    T8] usb 3-1: Manufacturer: syz
[  159.274007][    T8] usb 3-1: config 0 descriptor??
[  159.367464][ T6260] loop0: detected capacity change from 0 to 2048
[  159.431395][ T6260] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.519803][    T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  159.596543][    T8] usb 3-1: USB disconnect, device number 13
[  159.614545][ T5802] udevd[5802]: setting owner of /dev/bus/usb/003/013 to uid=0, gid=0 failed: No such file or directory
[  159.699100][ T6269] syz.3.97: attempt to access beyond end of device
[  159.699100][ T6269] loop3: rw=4096, sector=128, nr_sectors = 8 limit=0
[  159.712333][ T6269] gfs2: error 10 reading superblock
[  163.000976][ T6300] syz.3.102: attempt to access beyond end of device
[  163.000976][ T6300] loop3: rw=4096, sector=128, nr_sectors = 8 limit=0
[  163.014451][ T6300] gfs2: error 10 reading superblock
[  163.915560][ T5844] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  163.995690][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  164.118080][ T5844] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  164.135489][ T5844] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  164.157381][    T9] usb 1-1: device descriptor read/64, error -71
[  164.165008][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  164.174679][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  164.195569][ T5844] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  164.195647][   T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  164.227485][ T5844] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  164.249692][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  164.276177][ T5844] usb 3-1: Product: syz
[  164.280960][ T5844] usb 3-1: Manufacturer: syz
[  164.302416][ T5844] cdc_wdm 3-1:1.0: skipping garbage
[  164.319770][ T5844] cdc_wdm 3-1:1.0: skipping garbage
[  164.335242][ T5844] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  164.356102][ T5844] cdc_wdm 3-1:1.0: Unknown control protocol
[  164.416022][   T27] usb 2-1: Using ep0 maxpacket: 8
[  164.423541][   T27] usb 2-1: no configurations
[  164.441724][   T27] usb 2-1: can't read configurations, error -22
[  164.605859][   T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  164.625114][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  164.779703][    T9] usb 1-1: device descriptor read/64, error -71
[  164.795824][   T27] usb 2-1: Using ep0 maxpacket: 8
[  164.805931][   T27] usb 2-1: no configurations
[  164.810687][   T27] usb 2-1: can't read configurations, error -22
[  164.817996][   T27] usb usb2-port1: attempt power cycle
[  164.906770][    T9] usb usb1-port1: attempt power cycle
[  165.265751][   T27] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  165.306479][   T27] usb 2-1: Using ep0 maxpacket: 8
[  165.325652][   T27] usb 2-1: no configurations
[  165.325697][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  165.330323][   T27] usb 2-1: can't read configurations, error -22
[  165.366185][    T9] usb 1-1: device descriptor read/8, error -71
[  165.505569][   T27] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  165.546222][   T27] usb 2-1: Using ep0 maxpacket: 8
[  165.552466][   T27] usb 2-1: no configurations
[  165.558082][   T27] usb 2-1: can't read configurations, error -22
[  165.564797][   T27] usb usb2-port1: unable to enumerate USB device
[  165.655751][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  165.696515][    T9] usb 1-1: device descriptor read/8, error -71
[  166.012284][    T9] usb usb1-port1: unable to enumerate USB device
[  166.044743][    T8] usb 3-1: USB disconnect, device number 14
[  166.205525][ T6333] syz.0.109: attempt to access beyond end of device
[  166.205525][ T6333] loop0: rw=4096, sector=128, nr_sectors = 8 limit=0
[  166.218779][ T6333] gfs2: error 10 reading superblock
[  169.008887][ T6348] syz.3.114: attempt to access beyond end of device
[  169.008887][ T6348] loop3: rw=4096, sector=128, nr_sectors = 8 limit=0
[  169.022237][ T6348] gfs2: error 10 reading superblock
[  169.039496][ T6349] syz.1.113: attempt to access beyond end of device
[  169.039496][ T6349] loop1: rw=4096, sector=128, nr_sectors = 8 limit=0
[  169.052831][ T6349] gfs2: error 10 reading superblock
[  169.900675][ T6349] loop1: detected capacity change from 0 to 16
[  169.908982][ T6349] erofs: Unknown parameter '00000000000000000000'
[  170.025602][ T5860] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  170.492390][ T5802] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  170.507956][    T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  170.685921][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.705481][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.735508][ T5860] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  170.780157][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.835281][ T5860] usb 1-1: config 0 descriptor??
[  170.856538][ T5860] usb 1-1: can't set config #0, error -71
[  170.887024][ T5860] usb 1-1: USB disconnect, device number 11
[  170.940978][    T8] usb 3-1: unable to read config index 0 descriptor/start: -71
[  170.975495][    T8] usb 3-1: can't read configurations, error -71
[  172.786171][ T6379] syz.3.122: attempt to access beyond end of device
[  172.786171][ T6379] loop3: rw=4096, sector=128, nr_sectors = 8 limit=0
[  172.799648][ T6379] gfs2: error 10 reading superblock
[  173.703406][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  173.975556][    T8] usb 3-1: Using ep0 maxpacket: 8
[  173.981652][    T8] usb 3-1: no configurations
[  174.002256][    T8] usb 3-1: can't read configurations, error -22
[  174.025177][    T8] usb usb3-port1: attempt power cycle
[  174.527947][  T786] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  175.265598][  T786] usb 4-1: Using ep0 maxpacket: 32
[  175.277734][  T786] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  175.445512][  T786] usb 4-1: config 0 interface 0 has no altsetting 0
[  175.463179][  T786] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  175.473243][  T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.494083][  T786] usb 4-1: config 0 descriptor??
[  176.428173][  T786] corsair-psu 0003:1B1C:1C09.0001: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0
[  176.565811][  T786] corsair-psu 0003:1B1C:1C09.0001: unable to initialize device (-38)
[  176.612773][  T786] corsair-psu: probe of 0003:1B1C:1C09.0001 failed with error -38
[  176.735519][ T5839] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  176.865189][  T787] usb 4-1: USB disconnect, device number 9
[  176.935870][ T5839] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.974495][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  177.039630][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  177.080105][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.141694][ T5839] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  177.151478][ T5839] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  177.165690][ T5839] usb 1-1: Manufacturer: syz
[  177.223425][ T5839] usb 1-1: config 0 descriptor??
[  177.453411][ T5839] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  177.649463][ T5839] usb 1-1: USB disconnect, device number 12
[  177.713457][ T6410] syz.1.130: attempt to access beyond end of device
[  177.713457][ T6410] loop1: rw=4096, sector=128, nr_sectors = 8 limit=0
[  177.727041][ T6410] gfs2: error 10 reading superblock
[  180.995680][    T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  181.277433][    T8] usb 4-1: Using ep0 maxpacket: 8
[  181.748293][    T8] usb 4-1: no configurations
[  181.775796][    T8] usb 4-1: can't read configurations, error -22
[  181.945602][    T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  182.145524][    T8] usb 4-1: Using ep0 maxpacket: 8
[  182.151428][    T8] usb 4-1: no configurations
[  182.156306][    T8] usb 4-1: can't read configurations, error -22
[  182.162755][    T8] usb usb4-port1: attempt power cycle
[  182.255578][ T5839] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  182.285529][  T786] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  182.287913][  T787] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  182.447828][ T5839] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  182.460192][ T5839] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  182.470419][ T5839] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  182.479696][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.480621][  T786] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  182.491737][  T787] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  182.505806][  T786] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  182.511515][  T787] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  182.525501][  T786] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  182.535808][ T6440] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  182.541966][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.556819][ T5839] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  182.571520][  T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  182.584434][ T6443] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  182.592773][    T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  182.622063][  T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  182.639542][  T786] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  182.648391][    T8] usb 4-1: Using ep0 maxpacket: 8
[  182.654495][  T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  182.656180][    T8] usb 4-1: no configurations
[  182.672937][  T787] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  182.684522][  T787] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  182.692359][    T8] usb 4-1: can't read configurations, error -22
[  182.715496][  T787] usb 2-1: Product: syz
[  182.727485][  T787] usb 2-1: Manufacturer: syz
[  182.750544][  T787] cdc_wdm 2-1:1.0: skipping garbage
[  182.776082][  T787] cdc_wdm 2-1:1.0: skipping garbage
[  182.792476][  T787] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  182.800279][  T787] cdc_wdm 2-1:1.0: Unknown control protocol
[  182.873076][ T5839] usb 3-1: USB disconnect, device number 18
[  182.886590][    T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  182.944414][  T786] usb 1-1: USB disconnect, device number 13
[  182.954584][    T8] usb 4-1: Using ep0 maxpacket: 8
[  182.972557][    T8] usb 4-1: no configurations
[  182.978064][    T8] usb 4-1: can't read configurations, error -22
[  183.003139][    T8] usb usb4-port1: unable to enumerate USB device
[  183.027402][  T787] usb 2-1: USB disconnect, device number 16
[  183.707474][  T786] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  183.928958][  T786] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  183.938517][    T8] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  183.951766][  T786] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  183.964251][  T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  183.979158][  T786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  183.990691][  T786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  184.007747][  T786] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  184.023778][  T786] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  184.042534][  T786] usb 2-1: Product: syz
[  184.048392][  T786] usb 2-1: Manufacturer: syz
[  184.075273][  T786] cdc_wdm 2-1:1.0: skipping garbage
[  184.087226][  T786] cdc_wdm 2-1:1.0: skipping garbage
[  184.094749][  T786] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  184.103969][  T786] cdc_wdm 2-1:1.0: Unknown control protocol
[  184.138835][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.151979][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  184.163164][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.178332][    T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  184.187605][    T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  184.195595][  T787] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  184.196264][    T8] usb 3-1: Manufacturer: syz
[  184.212876][    T8] usb 3-1: config 0 descriptor??
[  184.387591][  T787] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config
[  184.398144][  T787] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x1D, skipping
[  184.408785][  T787] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  184.424226][  T787] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  184.434373][    T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  184.439431][  T787] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  184.450273][  T787] usb 4-1: Manufacturer: syz
[  184.455297][    T8] usb 3-1: USB disconnect, device number 19
[  184.469657][  T787] usb 4-1: config 0 descriptor??
[  184.478400][ T6448] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  184.499462][  T787] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  184.646058][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.651896][    C0] cdc_wdm 2-1:1.0: Cannot schedule work
[  184.658239][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.663155][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.664105][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.679015][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.684767][    C0] cdc_wdm 2-1:1.0: Cannot schedule work
[  184.684869][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.691643][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.703837][    C0] cdc_wdm 2-1:1.0: Cannot schedule work
[  184.710607][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.716345][    C0] cdc_wdm 2-1:1.0: Cannot schedule work
[  184.723422][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.729314][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.735285][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.742138][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.753424][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.755622][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.775571][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.776907][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.781486][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.795437][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.801428][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.807374][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.808254][  T787] usb 4-1: USB disconnect, device number 14
[  184.813260][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.825441][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.831379][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.837406][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.844190][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.850133][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.856029][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.861939][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.867830][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.873743][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.879646][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.885568][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.891483][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.897369][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.903274][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.909200][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.915123][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.916884][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.921518][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.935418][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.942014][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.948004][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.954058][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.959968][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.965902][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.966127][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.971801][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.985436][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.991352][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  184.997497][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.003415][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.009398][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.015592][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.021646][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.027551][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.033505][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.039410][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.048464][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.054412][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.060368][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.066280][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.072185][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.078110][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.083984][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.089885][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.095819][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.101713][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.107634][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.113764][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.119676][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.125594][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.131947][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.138367][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.144268][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.156171][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.162203][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.168144][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.174164][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.180089][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.186130][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.192049][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.197963][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.203893][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.209840][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.215791][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.221711][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.227630][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.233546][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.239504][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.245449][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.252121][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.258037][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.264038][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.270029][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.272178][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.275930][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.295466][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.301413][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.305200][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.307392][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.325471][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.331410][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.345485][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.352234][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.358247][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.364356][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.370280][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.376267][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.382204][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.388166][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.394090][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.400003][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.405955][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.411896][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.417826][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.423736][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.429645][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.435584][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.441536][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.447464][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.454111][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.460211][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.466144][    C0] cdc_wdm 2-1:1.0: Stall on int endpoint
[  185.472003][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  185.483835][ T5860] usb 2-1: USB disconnect, device number 17
[  186.036853][ T6472] syz.3.146: attempt to access beyond end of device
[  186.036853][ T6472] loop3: rw=4096, sector=128, nr_sectors = 8 limit=0
[  186.050218][ T6472] gfs2: error 10 reading superblock
[  186.865373][    C0] sched: RT throttling activated
[  187.840610][    T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  188.042649][    T8] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  188.054325][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.087621][    T8] usb 1-1: config 0 descriptor??
[  188.091253][ T5860] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  188.253323][ T6489] syz.2.153: attempt to access beyond end of device
[  188.253323][ T6489] loop2: rw=4096, sector=128, nr_sectors = 8 limit=0
[  188.266769][ T6489] gfs2: error 10 reading superblock
[  188.303574][ T6489] loop2: detected capacity change from 0 to 16
[  188.314445][ T6489] erofs: Unknown parameter '00000000000000000000'
[  188.332830][   T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  188.378995][ T5860] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  188.475916][ T5860] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  188.581739][ T5860] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  188.625726][   T23] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  188.658833][ T5860] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  188.695247][   T23] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  188.761637][ T5860] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  188.809185][   T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  188.827710][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  188.869891][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.885118][ T5860] usb 4-1: Product: syz
[  188.918050][ T5860] usb 4-1: Manufacturer: syz
[  188.947073][ T5802] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  188.972316][   T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  188.983601][ T5860] cdc_wdm 4-1:1.0: skipping garbage
[  188.992080][ T5860] cdc_wdm 4-1:1.0: skipping garbage
[  188.998160][ T5860] cdc_wdm: probe of 4-1:1.0 failed with error -22
[  189.089856][   T23] snd-usb-audio: probe of 2-1:27.0 failed with error -2
[  189.225668][   T23] usb 2-1: USB disconnect, device number 18
[  189.280525][ T5860] usb 4-1: USB disconnect, device number 15
[  189.605474][  T786] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  189.796086][  T786] usb 3-1: Using ep0 maxpacket: 32
[  189.832168][  T786] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  189.919840][  T786] usb 3-1: config 0 has no interface number 0
[  190.009558][  T786] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  190.120819][  T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.135928][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  190.196153][  T786] usb 3-1: Product: syz
[  190.234155][  T786] usb 3-1: Manufacturer: syz
[  190.243919][  T786] usb 3-1: SerialNumber: syz
[  190.353446][  T786] usb 3-1: config 0 descriptor??
[  190.440344][    T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  190.461770][  T786] smsc95xx v2.0.0
[  190.466162][    T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  190.477509][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  190.486825][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[  190.507715][    T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  190.524559][    T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  190.534681][    T9] usb 4-1: Product: syz
[  190.540105][    T9] usb 4-1: Manufacturer: syz
[  190.571149][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  190.579536][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  190.584955][    T9] cdc_wdm: probe of 4-1:1.0 failed with error -22
[  190.868528][ T5860] usb 4-1: USB disconnect, device number 16
[  190.877453][    T8] pegasus 1-1:0.0: setup Pegasus II specific registers
[  190.999412][  T786] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  191.023666][    T8] pegasus 1-1:0.0: can't locate MII phy, using default
[  191.030832][  T786] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  191.050432][    T8] pegasus 1-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, e6:c8:1f:80:2e:3e
[  191.079980][    T8] usb 1-1: USB disconnect, device number 14
[  191.333019][ T6511] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  191.339956][ T6511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  191.355863][ T6511] vhci_hcd vhci_hcd.0: Device attached
[  191.365667][ T5860] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  191.555816][ T6500] capability: warning: `syz.0.157' uses 32-bit capabilities (legacy support in use)
[  191.588707][ T5860] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  191.615494][   T23] usb 33-1: new high-speed USB device number 2 using vhci_hcd
[  191.623418][ T5860] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  191.649419][ T5860] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  191.697806][ T5860] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  191.717381][ T6512] vhci_hcd: connection reset by peer
[  191.723633][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  191.732594][ T6521] 9pnet_fd: Insufficient options for proto=fd
[  191.744386][   T34] vhci_hcd: stop threads
[  191.750175][ T5860] usb 4-1: Product: syz
[  191.755088][   T34] vhci_hcd: release socket
[  191.759960][ T5860] usb 4-1: Manufacturer: syz
[  191.767206][   T34] vhci_hcd: disconnect device
[  191.778624][ T5860] cdc_wdm 4-1:1.0: skipping garbage
[  191.784509][ T5860] cdc_wdm: probe of 4-1:1.0 failed with error -22
[  192.038582][ T5860] usb 4-1: USB disconnect, device number 17
[  192.676113][ T5839] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  192.712488][  T786] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[  192.731492][  T786] smsc95xx: probe of 3-1:0.67 failed with error -32
[  192.745591][ T5860] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  192.795525][ T5844] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  192.867759][ T5839] usb 2-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config
[  192.878282][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x1D, skipping
[  192.889225][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  192.903711][ T5839] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  192.913020][ T5839] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  192.921334][ T5839] usb 2-1: Manufacturer: syz
[  192.932185][ T5839] usb 2-1: config 0 descriptor??
[  192.938586][ T6538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  192.947913][ T5860] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  192.959431][ T5839] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  192.966824][ T5860] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  192.978395][ T5860] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  192.988838][ T5844] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  192.994315][ T5860] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  193.012465][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  193.021215][ T5860] usb 4-1: Product: syz
[  193.025809][ T5860] usb 4-1: Manufacturer: syz
[  193.037950][ T5860] cdc_wdm 4-1:1.0: skipping garbage
[  193.043233][ T5860] cdc_wdm: probe of 4-1:1.0 failed with error -22
[  193.045628][ T5844] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  193.071114][ T5844] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  193.081667][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.099181][ T5844] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  193.131500][ T5844] snd-usb-audio: probe of 1-1:27.0 failed with error -2
[  193.140881][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.178419][ T5860] usb 2-1: USB disconnect, device number 19
[  193.256207][  T787] usb 4-1: USB disconnect, device number 18
[  193.303445][ T5839] usb 1-1: USB disconnect, device number 15
[  193.767429][ T5839] usb 3-1: USB disconnect, device number 20
[  194.121657][ T6559] syz.1.164: attempt to access beyond end of device
[  194.121657][ T6559] loop1: rw=4096, sector=128, nr_sectors = 8 limit=0
[  194.135188][ T6559] gfs2: error 10 reading superblock
[  195.028468][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  195.035993][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  195.125720][ T6563] 9pnet_fd: Insufficient options for proto=fd
[  195.908725][ T6577] syz.0.171: attempt to access beyond end of device
[  195.908725][ T6577] loop0: rw=4096, sector=128, nr_sectors = 8 limit=0
[  195.922366][ T6577] gfs2: error 10 reading superblock
[  196.934799][   T23] vhci_hcd: vhci_device speed not set
[  196.942631][ T5839] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  197.572039][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.625713][ T5844] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  197.629606][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.651443][ T5839] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  197.661871][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.702080][ T5839] usb 4-1: config 0 descriptor??
[  197.816013][ T6589] 9pnet_fd: Insufficient options for proto=fd
[  197.827556][ T5844] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  197.836612][ T5844] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[  197.858319][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  197.884170][ T5844] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  197.900900][ T5844] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  197.910778][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  197.919333][ T5844] usb 3-1: Product: syz
[  197.923730][ T5844] usb 3-1: Manufacturer: syz
[  197.983854][ T5844] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  198.307686][   T23] usb 3-1: USB disconnect, device number 21
[  198.408347][ T5839] usbhid 4-1:0.0: can't add hid device: -71
[  198.420606][ T5839] usbhid: probe of 4-1:0.0 failed with error -71
[  198.430819][ T5839] usb 4-1: USB disconnect, device number 19
[  198.778976][ T6602] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  198.785638][ T6602] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  198.794789][ T6602] vhci_hcd vhci_hcd.0: Device attached
[  199.035522][ T6603] vhci_hcd: connection closed
[  199.045933][   T34] vhci_hcd: stop threads
[  199.054997][   T34] vhci_hcd: release socket
[  199.065494][ T5839] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[  199.080215][   T34] vhci_hcd: disconnect device
[  199.085488][ T5844] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  199.282190][ T5844] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  199.296847][ T5844] usb 3-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config
[  199.308338][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  199.319393][ T5844] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  199.333057][  T786] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  199.343529][ T5844] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  199.359168][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  199.375522][ T5844] usb 3-1: Product: syz
[  199.380533][ T5844] usb 3-1: Manufacturer: syz
[  199.411703][ T5844] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  199.537623][  T786] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  199.560965][  T786] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  199.579546][  T786] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  199.600253][  T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.643004][ T6607] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  199.664042][ T5844] usb 3-1: USB disconnect, device number 22
[  199.683585][  T786] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  200.104567][ T6626] syz.1.190: attempt to access beyond end of device
[  200.104567][ T6626] loop1: rw=4096, sector=128, nr_sectors = 8 limit=0
[  200.118609][ T6626] gfs2: error 10 reading superblock
[  200.138756][ T6626] loop1: detected capacity change from 0 to 16
[  200.146736][ T6626] erofs: Unknown parameter '00000000000000000000'
[  201.656885][  T786] usb 4-1: USB disconnect, device number 20
[  201.729060][ T5802] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  203.448073][ T6645] loop2: detected capacity change from 0 to 512
[  203.485598][ T6645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  203.641733][ T6645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.655324][ T6645] ext4 filesystem being mounted at /syzcgroup/unified/syz2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.690826][ T5839] vhci_hcd: vhci_device speed not set
[  204.720662][ T6661] loop3: detected capacity change from 0 to 128
[  204.821875][ T6661] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  204.988302][ T6661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  206.908583][   T27] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  207.250693][   T27] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  207.272300][   T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  207.308487][   T27] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.351665][   T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  207.583279][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.621742][   T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  207.629720][   T27] usb 3-1: invalid MIDI out EP 0
[  207.706682][ T5859] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  208.072333][ T5859] usb 1-1: config 0 has no interfaces?
[  208.167171][ T5859] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  208.245513][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.286841][ T5859] usb 1-1: config 0 descriptor??
[  208.629065][   T27] snd-usb-audio: probe of 3-1:27.0 failed with error -22
[  208.639101][   T27] usb 3-1: USB disconnect, device number 23
[  208.683038][ T6240] udevd[6240]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.758463][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.865585][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.246660][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  209.366869][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  209.404924][   T27] usb 1-1: USB disconnect, device number 16
[  209.985547][   T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  210.202453][   T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.219995][   T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  210.246528][ T6698] loop1: detected capacity change from 0 to 512
[  210.262200][   T27] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  210.330423][ T6698] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  210.330542][   T27] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  210.367882][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.372610][ T6698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.385485][   T27] usb 1-1: Product: syz
[  210.415433][   T27] usb 1-1: Manufacturer: syz
[  210.420175][   T27] usb 1-1: SerialNumber: syz
[  210.441983][ T6698] ext4 filesystem being mounted at /syzcgroup/unified/syz1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.722530][   T27] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  210.755646][  T786] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  210.775582][   T27] cdc_ncm 1-1:1.0: bind() failure
[  211.069323][   T27] usb 1-1: USB disconnect, device number 17
[  211.113755][ T6707] /dev/loop1: Can't open blockdev
[  211.165084][  T786] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  211.174292][  T786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  211.196407][  T786] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  211.343433][  T786] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  211.991173][  T786] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  212.016394][  T786] usb 4-1: Product: syz
[  212.020657][  T786] usb 4-1: Manufacturer: syz
[  212.038581][ T5798] Bluetooth: hci3: command 0x0406 tx timeout
[  212.044767][ T5798] Bluetooth: hci2: command 0x0406 tx timeout
[  212.050903][ T5800] Bluetooth: hci0: command 0x0406 tx timeout
[  212.057469][ T5798] Bluetooth: hci1: command 0x0406 tx timeout
[  212.098770][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.118613][  T786] cdc_wdm 4-1:1.0: skipping garbage
[  212.140862][  T786] cdc_wdm: probe of 4-1:1.0 failed with error -22
[  212.446586][    T9] usb 4-1: USB disconnect, device number 21
[  212.702960][ T6713] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  212.765311][ T6713] mmap: syz.1.215 (6713) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  212.905667][   T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  213.108994][   T27] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  213.120310][   T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  213.131710][   T27] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.204976][   T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  213.291642][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.319388][   T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  213.328001][   T27] usb 1-1: invalid MIDI out EP 0
[  213.566822][   T27] snd-usb-audio: probe of 1-1:27.0 failed with error -22
[  213.575638][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  213.604302][   T27] usb 1-1: USB disconnect, device number 18
[  213.890978][    T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  213.910484][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  214.685498][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  214.754462][    T9] usb 4-1: string descriptor 0 read error: -71
[  214.785687][    T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  214.815630][    T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  214.861473][    T9] usb 4-1: can't set config #1, error -71
[  214.884912][    T9] usb 4-1: USB disconnect, device number 22
[  215.395673][ T6700] EXT4-fs warning (device loop1): kmmpd:168: kmmpd being stopped since MMP feature has been disabled.
[  215.604139][ T1140] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm kworker/u4:5: Invalid inode table block 0 in block_group 0
[  216.265575][  T786] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  216.918667][    T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  217.225507][ T5844] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  217.257875][    T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  217.269784][  T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.281948][    T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  217.292049][  T786] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  217.302299][    T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  217.312552][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.321077][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.331753][  T786] usb 3-1: config 0 descriptor??
[  217.345091][  T786] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  217.365796][ T6741] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  217.390963][    T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  217.425505][ T5844] usb 2-1: Using ep0 maxpacket: 8
[  217.444418][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.489373][ T5844] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  217.519423][ T5844] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  217.561446][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.588179][ T5844] usb 2-1: config 0 descriptor??
[  217.624204][ T5844] usb 3-1: USB disconnect, device number 24
[  217.684671][    T8] usb 1-1: USB disconnect, device number 19
[  217.839379][  T787] usb 2-1: USB disconnect, device number 20
[  218.246093][ T5844] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  219.922697][ T5844] usb 3-1: device descriptor read/all, error -71
[  220.425462][   T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  220.515679][    T8] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  220.784641][    T8] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  220.832980][    T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  221.197916][    T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  221.244196][    T8] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  221.275413][    T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  221.301322][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.331488][    T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  221.405931][  T786] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  221.467878][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.491300][    T8] usb 1-1: invalid MIDI out EP 0
[  221.496559][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.521716][   T23] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  221.970484][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.483935][   T23] usb 4-1: config 0 descriptor??
[  222.487693][  T786] usb 2-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config
[  222.530251][  T786] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x1D, skipping
[  222.601674][  T786] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  222.628969][  T786] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  222.640620][  T786] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  222.651841][    T8] snd-usb-audio: probe of 1-1:27.0 failed with error -22
[  222.665449][  T786] usb 2-1: Manufacturer: syz
[  222.701053][    T8] usb 1-1: USB disconnect, device number 20
[  222.712183][  T786] usb 2-1: config 0 descriptor??
[  222.753659][ T6770] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  222.830164][  T786] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  223.025516][  T787] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  223.102071][   T27] usb 2-1: USB disconnect, device number 21
[  223.149679][   T23] usbhid 4-1:0.0: can't add hid device: -71
[  223.164935][   T23] usbhid: probe of 4-1:0.0 failed with error -71
[  223.191586][   T23] usb 4-1: USB disconnect, device number 23
[  223.242267][  T787] usb 3-1: config 0 has no interfaces?
[  223.264097][  T787] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  223.285317][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.322942][  T787] usb 3-1: config 0 descriptor??
[  223.582185][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.604809][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.643854][    T8] usb 3-1: USB disconnect, device number 27
[  223.805482][  T786] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  224.079969][  T786] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  224.093385][  T786] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  224.112791][  T786] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  224.123279][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.139134][ T6785] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  224.211264][ T5844] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  224.332863][  T786] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  224.448561][    T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  224.503922][ T5844] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  224.621826][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  224.996521][ T5844] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  225.022644][ T5844] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  225.045484][    T8] usb 3-1: Using ep0 maxpacket: 16
[  225.056526][    T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.073001][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  225.083444][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  225.105568][ T5844] usb 4-1: Product: syz
[  225.109893][ T5844] usb 4-1: Manufacturer: syz
[  225.142176][    T8] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  225.153634][  T786] usb 1-1: USB disconnect, device number 21
[  225.177374][ T5844] cdc_wdm 4-1:1.0: skipping garbage
[  225.182679][ T5844] cdc_wdm: probe of 4-1:1.0 failed with error -22
[  225.190023][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.211054][    T8] usb 3-1: Product: syz
[  225.226397][    T8] usb 3-1: Manufacturer: syz
[  225.231168][    T8] usb 3-1: SerialNumber: syz
[  225.451427][ T5844] usb 4-1: USB disconnect, device number 24
[  225.725991][    T8] usb 3-1: 0:2 : does not exist
[  226.555606][    T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  226.915642][   T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  227.563337][ T5844] usb 3-1: USB disconnect, device number 28
[  227.604044][    T8] usb 4-1: device descriptor read/all, error -71
[  227.613401][   T23] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  227.637041][   T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  227.670234][   T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  227.701966][   T23] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  227.932373][   T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  227.942716][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.964229][   T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  227.972236][   T23] usb 2-1: invalid MIDI out EP 0
[  228.185684][ T5844] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  228.603036][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.636029][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.665206][ T5844] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  228.704616][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.728101][ T5844] usb 3-1: config 0 descriptor??
[  228.850908][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  228.878608][   T23] snd-usb-audio: probe of 2-1:27.0 failed with error -22
[  228.894085][   T23] usb 2-1: USB disconnect, device number 22
[  228.985620][   T27] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  229.145647][  T787] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  229.221975][   T27] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  229.235665][   T27] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  229.246847][   T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  229.256442][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.299688][ T6825] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  229.482437][   T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  229.525908][ T5844] usbhid 3-1:0.0: can't add hid device: -71
[  229.631319][  T787] usb 1-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config
[  229.664191][  T787] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  229.685119][  T787] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  229.696683][ T5844] usbhid: probe of 3-1:0.0 failed with error -71
[  229.795954][  T787] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  229.805083][  T787] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  229.813617][  T787] usb 1-1: Manufacturer: syz
[  229.832945][  T787] usb 1-1: config 0 descriptor??
[  229.847203][ T5844] usb 3-1: USB disconnect, device number 29
[  229.924200][  T786] usb 4-1: USB disconnect, device number 27
[  230.111037][  T787] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  230.145866][  T787] usb 1-1: USB disconnect, device number 22
[  235.536244][   T27] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  236.557822][   T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  236.585739][   T27] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  236.610780][   T23] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  236.627832][   T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  236.658238][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.719665][ T6874] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  236.769855][   T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  236.863989][   T23] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config
[  236.896479][   T23] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  236.955241][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  236.978589][   T23] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  237.014717][   T23] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  237.035446][   T23] usb 4-1: Manufacturer: syz
[  237.049804][ T5839] usb 1-1: USB disconnect, device number 23
[  237.094864][   T23] usb 4-1: config 0 descriptor??
[  237.318001][   T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  237.343917][   T23] usb 4-1: USB disconnect, device number 28
[  240.307013][ T6909] loop0: detected capacity change from 0 to 2048
[  241.407381][ T6909] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  241.415133][ T6909] UDF-fs: Scanning with blocksize 512 failed
[  241.494963][ T6909] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  241.552450][ T6909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.995599][ T5860] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  242.308016][ T5860] usb 2-1: config 0 has no interfaces?
[  242.326833][ T5860] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  242.353272][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.404594][ T5860] usb 2-1: config 0 descriptor??
[  242.663880][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.680749][ T6924] loop3: detected capacity change from 0 to 32768
[  242.709180][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.738385][ T5860] usb 2-1: USB disconnect, device number 23
[  243.369668][ T6924] loop3: detected capacity change from 32768 to 64
[  243.479706][ T6935] ERROR: (device loop3): dbAdjCtl: Corrupt dmapctl page
[  243.479706][ T6935] 
[  243.503428][ T6935] ERROR: (device loop3): remounting filesystem as read-only
[  243.505527][ T5839] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  243.524641][ T6935] ERROR: (device loop3): dbDiscardAG: -EIO
[  243.524641][ T6935] 
[  243.554477][ T6935] syz.3.277: attempt to access beyond end of device
[  243.554477][ T6935] loop3: rw=2051, sector=8192, nr_sectors = 8192 limit=64
[  243.605587][ T6935] JFS: sb_issue_discard(ffff88803197a000, 1024, 1024, GFP_NOFS, 0) = -5 => failed!
[  244.815521][ T5839] usb 2-1: Using ep0 maxpacket: 16
[  244.844449][ T5839] usb 2-1: device descriptor read/all, error -71
[  245.263806][ T2919] kworker/u4:9: attempt to access beyond end of device
[  245.263806][ T2919] loop3: rw=1, sector=264, nr_sectors = 8 limit=64
[  245.304547][ T2919] metapage_write_end_io: I/O error
[  245.322086][ T2919] kworker/u4:9: attempt to access beyond end of device
[  245.322086][ T2919] loop3: rw=2049, sector=30744, nr_sectors = 8 limit=64
[  245.371997][ T2919] lbmIODone: I/O error in JFS log
[  245.387635][   T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.400703][ T2919] kworker/u4:9: attempt to access beyond end of device
[  245.400703][ T2919] loop3: rw=1, sector=352, nr_sectors = 8 limit=64
[  245.425196][  T112] BUG: Bad page state in process jfsCommit  pfn:7cfd5
[  245.448087][  T112] page:ffffea0001f3f540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1d pfn:0x7cfd5
[  245.460609][ T2919] kworker/u4:9: attempt to access beyond end of device
[  245.460609][ T2919] loop3: rw=0, sector=232, nr_sectors = 8 limit=64
[  245.484578][  T112] flags: 0xfff0000000800d(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  245.495531][ T2919] metapage_read_end_io: I/O error
[  245.500729][ T2919] read_mapping_page failed!
[  245.505295][ T2919] ERROR: (device loop3): txCommit: 
[  245.505295][ T2919] 
[  245.514258][  T112] page_type: 0xffffffff()
[  245.526219][ T6937] loop0: detected capacity change from 0 to 32768
[  245.543114][  T112] raw: 00fff0000000800d dead000000000100 dead000000000122 0000000000000000
[  245.545594][ T2919] ERROR: (device loop3): remounting filesystem as read-only
[  245.582285][ T2919] jfs_write_inode: jfs_commit_inode failed!
[  245.589358][  T112] raw: 000000000000001d ffff88805e358ba0 00000000ffffffff 0000000000000000
[  245.624447][ T2919] kworker/u4:9: attempt to access beyond end of device
[  245.624447][ T2919] loop3: rw=1, sector=160, nr_sectors = 8 limit=64
[  245.637844][  T112] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  245.637869][  T112] page_owner tracks the page as allocated
[  245.637900][  T112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6924, tgid 6923 (syz.3.277), ts 243224284579, free_ts 232888889785
[  245.637947][  T112]  post_alloc_hook+0x1cd/0x210
[  245.637983][  T112]  get_page_from_freelist+0x195c/0x19f0
[  245.638014][  T112]  __alloc_pages+0x1e3/0x460
[  245.638042][  T112]  folio_alloc+0x1e/0x30
[  245.638072][  T112]  filemap_alloc_folio+0xdf/0x470
[  245.638102][  T112]  do_read_cache_folio+0x36c/0x7e0
[  245.638121][  T112]  do_read_cache_page+0x32/0x250
[  245.638141][  T112]  __get_metapage+0x31a/0xfa0
[  245.638159][  T112]  diWrite+0x3fc/0x1f20
[  245.638184][  T112]  txCommit+0x84c/0x5250
[  245.638203][  T112]  jfs_create+0x841/0xa40
[  245.638226][  T112]  path_openat+0x1277/0x3190
[  245.677325][ T2919] metapage_write_end_io: I/O error
[  245.750484][  T112]  do_filp_open+0x1c5/0x3d0
[  245.761208][  T112]  do_sys_openat2+0x12c/0x1c0
[  245.773031][  T112]  __x64_sys_openat+0x139/0x160
[  245.788304][  T112]  do_syscall_64+0x55/0xb0
[  245.805159][ T5792] syz-executor: attempt to access beyond end of device
[  245.805159][ T5792] loop3: rw=1, sector=264, nr_sectors = 8 limit=64
[  245.809776][  T112] page last free stack trace:
[  245.835602][ T5792] metapage_write_end_io: I/O error
[  245.839432][  T112]  free_unref_page_prepare+0x7ce/0x8e0
[  245.849914][  T112]  free_unref_page+0x32/0x2e0
[  245.854781][  T112]  kasan_depopulate_vmalloc_pte+0x75/0x90
[  245.861273][  T112]  __apply_to_page_range+0x84c/0xd50
[  245.873109][  T112]  kasan_release_vmalloc+0x97/0xb0
[  245.888098][  T112]  __purge_vmap_area_lazy+0x1640/0x1990
[  245.893885][  T112]  drain_vmap_area_work+0x40/0xd0
[  245.899483][  T112]  process_scheduled_works+0xa45/0x15b0
[  245.905243][  T112]  worker_thread+0xa55/0xfc0
[  245.910657][  T112]  kthread+0x2fa/0x390
[  245.914873][  T112]  ret_from_fork+0x48/0x80
[  245.919944][  T112]  ret_from_fork_asm+0x11/0x20
[  245.924896][  T112] Modules linked in:
[  245.928432][   T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.929984][  T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted 6.6.101-syzkaller #0
[  245.947109][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  245.957220][  T112] Call Trace:
[  245.960663][  T112]  <TASK>
[  245.963635][  T112]  dump_stack_lvl+0x16c/0x230
[  245.968358][  T112]  ? show_regs_print_info+0x20/0x20
[  245.973612][  T112]  ? swiotlb_print_info+0x70/0x70
[  245.978682][  T112]  ? dump_page+0xba7/0x14d0
[  245.983308][  T112]  bad_page+0x14b/0x170
[  245.987513][  T112]  free_unref_page_prepare+0x887/0x8e0
[  245.993021][  T112]  free_unref_page+0x32/0x2e0
[  245.997741][  T112]  ? __folio_put+0xef/0x210
[  246.002279][  T112]  txUnlock+0x27e/0xcb0
[  246.006489][  T112]  ? lockdep_hardirqs_on+0x98/0x150
[  246.011732][  T112]  jfs_lazycommit+0x570/0xa60
[  246.016562][  T112]  ? txFreelock+0x5a0/0x5a0
[  246.021109][  T112]  ? do_task_dead+0xd0/0xd0
[  246.025647][  T112]  ? __kthread_parkme+0x7a/0x1c0
[  246.030650][  T112]  kthread+0x2fa/0x390
[  246.034762][  T112]  ? txFreelock+0x5a0/0x5a0
[  246.039323][  T112]  ? kthread_blkcg+0xd0/0xd0
[  246.043968][  T112]  ret_from_fork+0x48/0x80
[  246.048423][  T112]  ? kthread_blkcg+0xd0/0xd0
[  246.053053][  T112]  ret_from_fork_asm+0x11/0x20
[  246.057885][  T112]  </TASK>
[  246.066533][  T112] Disabling lock debugging due to kernel taint
[  246.072799][  T112] page:ffffea0001f3f540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1d pfn:0x7cfd5
[  246.088405][ T6937] loop0: detected capacity change from 32768 to 64
[  246.095448][ T2972] kworker/u4:10: attempt to access beyond end of device
[  246.095448][ T2972] loop0: rw=2049, sector=30744, nr_sectors = 8 limit=64
[  246.112414][   T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.139790][ T2972] lbmIODone: I/O error in JFS log
[  246.141152][  T112] flags: 0xfff0000000800d(locked|referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff)
[  246.151290][ T2972] kworker/u4:10: attempt to access beyond end of device
[  246.151290][ T2972] loop0: rw=1, sector=352, nr_sectors = 8 limit=64
[  246.158568][  T112] page_type: 0xffffffff()
[  246.193114][  T112] raw: 00fff0000000800d dead000000000100 dead000000000122 0000000000000000
[  246.193660][   T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.214186][  T112] raw: 000000000000001d ffff88805e358ba0 00000000ffffffff 0000000000000000
[  246.224831][  T112] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  246.233575][ T2972] kworker/u4:10: attempt to access beyond end of device
[  246.233575][ T2972] loop0: rw=1, sector=160, nr_sectors = 8 limit=64
[  246.237316][  T112] page_owner tracks the page as allocated
[  246.272361][ T2972] metapage_write_end_io: I/O error
[  246.282754][  T112] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 6924, tgid 6923 (syz.3.277), ts 243224284579, free_ts 232888889785
[  246.290839][ T6953] lbmIODone: I/O error in JFS log
[  246.304929][  T112]  post_alloc_hook+0x1cd/0x210
[  246.311130][  T112]  get_page_from_freelist+0x195c/0x19f0
[  246.315576][ T6953] metapage_write_end_io: I/O error
[  246.317445][  T112]  __alloc_pages+0x1e3/0x460
[  246.326767][  T112]  folio_alloc+0x1e/0x30
[  246.329094][ T6953] metapage_write_end_io: I/O error
[  246.338458][  T112]  filemap_alloc_folio+0xdf/0x470
[  246.343565][  T112]  do_read_cache_folio+0x36c/0x7e0
[  246.348265][ T6953] metapage_write_end_io: I/O error
[  246.354441][ T6953] metapage_write_end_io: I/O error
[  246.367257][  T112]  do_read_cache_page+0x32/0x250
[  246.375583][  T112]  __get_metapage+0x31a/0xfa0
[  246.380337][  T112]  diWrite+0x3fc/0x1f20
[  246.390552][  T112]  txCommit+0x84c/0x5250
[  246.394887][  T112]  jfs_create+0x841/0xa40
[  246.399760][  T112]  path_openat+0x1277/0x3190
[  246.404424][  T112]  do_filp_open+0x1c5/0x3d0
[  246.409371][  T112]  do_sys_openat2+0x12c/0x1c0
[  246.414099][  T112]  __x64_sys_openat+0x139/0x160
[  246.419365][  T112]  do_syscall_64+0x55/0xb0
[  246.423826][  T112] page last free stack trace:
[  246.428591][  T112]  free_unref_page_prepare+0x7ce/0x8e0
[  246.434098][  T112]  free_unref_page+0x32/0x2e0
[  246.439008][  T112]  kasan_depopulate_vmalloc_pte+0x75/0x90
[  246.444797][  T112]  __apply_to_page_range+0x84c/0xd50
[  246.450175][  T112]  kasan_release_vmalloc+0x97/0xb0
[  246.455362][  T112]  __purge_vmap_area_lazy+0x1640/0x1990
[  246.460989][  T112]  drain_vmap_area_work+0x40/0xd0
[  246.466166][  T112]  process_scheduled_works+0xa45/0x15b0
[  246.471755][  T112]  worker_thread+0xa55/0xfc0
[  246.476454][  T112]  kthread+0x2fa/0x390
[  246.480583][  T112]  ret_from_fork+0x48/0x80
[  246.485626][  T112]  ret_from_fork_asm+0x11/0x20
[  246.490858][  T112] ------------[ cut here ]------------
[  246.496898][  T112] kernel BUG at include/linux/mm.h:1447!
[  246.506896][  T112] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  246.513029][  T112] CPU: 1 PID: 112 Comm: jfsCommit Tainted: G    B              6.6.101-syzkaller #0
[  246.522584][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  246.532759][  T112] RIP: 0010:put_metapage+0x253/0x340
[  246.538062][  T112] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 d7 ac dd fe e9 25 ff ff ff e8 ed 66 86 fe 48 8b 3c 24 48 c7 c6 80 f4 e3 8a e8 fd 27 c6 fe <0f> 0b f3 0f 1e fa 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff
[  246.557697][  T112] RSP: 0018:ffffc90002d17cc0 EFLAGS: 00010246
[  246.563794][  T112] RAX: 2131bca34e9b4c00 RBX: ffff88805e358ba0 RCX: 2131bca34e9b4c00
[  246.571788][  T112] RDX: 0000000000000000 RSI: ffffffff8afc6760 RDI: ffffffff8afc6720
[  246.579776][  T112] RBP: 000000000000007f R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d
[  246.587761][  T112] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: ffff88805e358bc8
[  246.595919][  T112] R13: ffffea0001f3f574 R14: 1ffff1100bc6b179 R15: 1ffff1100bc6b186
[  246.603901][  T112] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  246.612877][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  246.619471][  T112] CR2: 00007ffdd844e7b0 CR3: 000000002ed17000 CR4: 00000000003526e0
[  246.627483][  T112] Call Trace:
[  246.630800][  T112]  <TASK>
[  246.633743][  T112]  txUnlock+0x427/0xcb0
[  246.637937][  T112]  jfs_lazycommit+0x570/0xa60
[  246.642647][  T112]  ? txFreelock+0x5a0/0x5a0
[  246.647181][  T112]  ? do_task_dead+0xd0/0xd0
[  246.651707][  T112]  ? __kthread_parkme+0x7a/0x1c0
[  246.656667][  T112]  kthread+0x2fa/0x390
[  246.660748][  T112]  ? txFreelock+0x5a0/0x5a0
[  246.665264][  T112]  ? kthread_blkcg+0xd0/0xd0
[  246.669874][  T112]  ret_from_fork+0x48/0x80
[  246.674304][  T112]  ? kthread_blkcg+0xd0/0xd0
[  246.678922][  T112]  ret_from_fork_asm+0x11/0x20
[  246.683711][  T112]  </TASK>
[  246.686752][  T112] Modules linked in:
[  246.700790][  T112] ---[ end trace 0000000000000000 ]---
[  246.706445][  T112] RIP: 0010:put_metapage+0x253/0x340
[  246.724397][  T112] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 d7 ac dd fe e9 25 ff ff ff e8 ed 66 86 fe 48 8b 3c 24 48 c7 c6 80 f4 e3 8a e8 fd 27 c6 fe <0f> 0b f3 0f 1e fa 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff
[  246.744872][  T112] RSP: 0018:ffffc90002d17cc0 EFLAGS: 00010246
[  246.752422][  T112] RAX: 2131bca34e9b4c00 RBX: ffff88805e358ba0 RCX: 2131bca34e9b4c00
[  246.781765][  T112] RDX: 0000000000000000 RSI: ffffffff8afc6760 RDI: ffffffff8afc6720
[  246.790093][  T112] RBP: 000000000000007f R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d
[  246.799634][  T112] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: ffff88805e358bc8
[  246.807966][  T112] R13: ffffea0001f3f574 R14: 1ffff1100bc6b179 R15: 1ffff1100bc6b186
[  246.817039][  T112] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  246.826319][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  246.833059][  T112] CR2: 00007ffdd844e7b0 CR3: 000000002ed17000 CR4: 00000000003506e0
[  246.843391][  T112] Kernel panic - not syncing: Fatal exception
[  246.849786][  T112] Kernel Offset: disabled
[  246.854146][  T112] Rebooting in 86400 seconds..