last executing test programs:

6.406677553s ago: executing program 1 (id=317):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0x5}, 'port0\x00', 0xf3, 0x111c47, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8})
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(streebog512-generic,ecb-twofish-avx)\x00'}, 0x58)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0)
sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)
r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r9, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x3ffffc, 0x8})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r9, 0xa9525000)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x3)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {0x1}}, './file0\x00'})
mkdir(&(0x7f0000000600)='./file0\x00', 0x46)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000b1c0)={0x2020}, 0x2020)

4.166591246s ago: executing program 1 (id=328):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
pipe2$9p(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}})
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00')
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4)
inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x44000020)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x100120, 0x4)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
mount_setattr(r3, &(0x7f0000000200)='./file0\x00', 0x1000, &(0x7f0000000240)={0x88, 0x8, 0x0, {r4}}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async)
pipe2$9p(&(0x7f0000000180), 0x0) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x4, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') (async)
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) (async)
inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x44000020) (async)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x100120, 0x4) (async)
creat(&(0x7f0000000000)='./file0\x00', 0x0) (async)
close_range(r4, 0xffffffffffffffff, 0x0) (async)
mount_setattr(r3, &(0x7f0000000200)='./file0\x00', 0x1000, &(0x7f0000000240)={0x88, 0x8, 0x0, {r4}}, 0x20) (async)

3.998851722s ago: executing program 1 (id=329):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x5, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e22"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
fsopen(0x0, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002)
syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=<r5=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r4, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000001c0)={0x1, 0x7, 0x1, 0x0, 0x7})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2)

3.471091221s ago: executing program 2 (id=336):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x600480, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x7f, @none, 0x4}, 0xe)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@mcast2, @loopback, @remote, 0xe0e, 0x0, 0x4, 0x400, 0x8000, 0x400020, r3})
mount(&(0x7f0000000380)=@nullb, &(0x7f0000000200)='./cgroup\x00', &(0x7f00000003c0)='qnx4\x00', 0x0, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x800)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000002c0)=<r7=>0x0)
ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000400)={0x0, @nfc={0x27, r7, 0x1, 0x5}, @hci={0x1f, 0x0, 0x4}, @hci={0x1f, 0x1, 0x1}, 0x200, 0x0, 0x0, 0x0, 0xfe, &(0x7f0000000300)='sit0\x00', 0x1, 0x6, 0x2300})
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x4, 0x20, 0x7, 0x63b6}, &(0x7f00000001c0)=0x18)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
accept4(r0, 0x0, 0x0, 0x800)

2.771361664s ago: executing program 1 (id=337):
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000540)={0x3, "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"})
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r1 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902120001000000000904"], 0x0)

2.170562454s ago: executing program 2 (id=338):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b"], 0xe)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r2, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x625, 0x2, 0x35f32603, 0x4, 0x4})

1.534992889s ago: executing program 1 (id=347):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
read$hidraw(r1, &(0x7f0000002340)=""/147, 0x93)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='\x00')
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, &(0x7f0000000000)={0x0, 0xd, 0x18, {0x18, 0x5, "1287e11b0273aef69ee823ed309eef7beb53650336f1"}}, &(0x7f0000000040)={0x0, 0x3, 0x58, @string={0x58, 0x3, "e4e10e95b5563bf2f85cf168ac15a3e2e75c2e5b4241bfce3aa79bf83cd00d285c4c55a7f465e18760d28164debd9fa31ed98f871671a4f2b5467e5ccf8bb04c3e096cc74c3ed2362e21251c983e2aca6360e72c56e2"}}, &(0x7f0000000100)={0x0, 0x22, 0x11, {[@local=@item_4={0x3, 0x2, 0xa, "3b79fd5a"}, @global=@item_4={0x3, 0x1, 0x6, "d2aaa1d3"}, @local=@item_012={0x1, 0x2, 0x9, "a9"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_012={0x2, 0x0, 0xc, "f9dc"}, @global=@item_012={0x0, 0x1, 0x4}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x93, 0x1, {0x22, 0x375}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000540)={0x80, 0xf, 0x9e, "ea7b7eea4bd540e710e71c46f4f172b695650874d40fb3d31f8978dfb538269df3292daf19236f9141151012db0ccc62035e408b9a02e859072d8c4cb1c4401841142075b911b399f9fecb5f030108986bd8ac96306d9aced787f410121d3ca0981572035bd6b35ce9bdc5aadab6c9406966a9bf53244d3649195fc269b3bd8976f382e6fb4a8c610af4d4d3ad96fcca334d6dce00f3f6b1479227ac8c89"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000600)={0x20, 0x1, 0x79, "10abf9ce4539d1f954760ffb9f932a7f0afeead50263abdb23e5a73ff80e3260ddaa3838d8b4db11277664143edcb6c120a68c3ae3131c4cae0c2916346ab6c01324196135e8684b6a72630ab49abb30840554c98e0372e4b445d8d31782737deb752fde69781d8c6321afc2293570d1817e3ecf77cf4c03d2"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x7}})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="200f7800000078087ae9430c96ab87432fab96b0c9da886334c96cd2f9071b7b5e35b77f2f32c155246cb1f609acc036dbf8b704c3c72ddfa24890642cdb4ca8d4b7f99d45ddc739eb7be729dbed15a2de2444477f9b32f6c18711cc1264f5aa82e66175f3a5eb03e82c9ff0a88f0ff293517d8693fe66925a676dc7839c"], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="dd8f83402337bda5b2877a638b0983096d18968af3c4c6a0cf9ddc3ce507ef6e1086e2ab9b4e8bae06cdc8ca35b9abf89078650a25a026010855c6da820df585c59778dc5acbc9ca43e78a59c0c9a812ba67008a457147c88e2979d5608d9af154579bdfbe126c35170fb5a9380dea439b4b10535e5de92e10e158b36bc74b88976782e3838f06301572a2709ec15ffbe70600fab0f31ea2dda5523a927c3443fd1aeb18355aa3bf9930b3b3eceeaa112f4b089e600217fe64c46b7e24db839c0d7a538978961a06cc64c250028cec48b712eb"], 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000040)={[0x3]}, 0x0, 0x8)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x1f, @string={0x1f, 0x3, "bfdee692de5ece6510adc1bca2a9c1134d263e03afc1471882954ee3b4"}}}, 0x0)
syz_usb_ep_write(r2, 0x81, 0xfffffdf6, &(0x7f0000000200)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c7807e8773eed7b94fa099ab84feadec2ea95f67aba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e9b8e4fb4634f8d4c0000000d75f34bb50d8f7084000000000000000000")

1.392514009s ago: executing program 3 (id=350):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00')
write$binfmt_script(r1, &(0x7f00000009c0)={'#! ', './file0', [{0x20, ']\\{'}]}, 0xf) (async)
write$binfmt_script(r1, &(0x7f00000009c0)={'#! ', './file0', [{0x20, ']\\{'}]}, 0xf)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0)
fsopen(&(0x7f00000014c0)='proc\x00', 0x0) (async)
r3 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1}) (async)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1})
fsmount(r3, 0x0, 0x82) (async)
r5 = fsmount(r3, 0x0, 0x82)
fchdir(r5)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x64) (async)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x64)
lseek(r6, 0x101, 0x1)
getdents64(r6, 0x0, 0xffffffffffffff14)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe)

1.271096865s ago: executing program 2 (id=353):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88901, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008084}, 0x84)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000080)={0x7f, 0x8, [0x5, 0xffff]})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)

1.214835081s ago: executing program 3 (id=354):
syz_usb_connect_ath9k(0x3, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85}}]}}, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000003c0)={0x3, 0x0, [{0x40000021, 0x0, 0x1af}, {0x398, 0x0, 0x9}, {0xa97, 0x0, 0x8}]}) (async)
ioctl$KVM_RUN(r0, 0xae80, 0x0) (async)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async)
userfaultfd(0x80001) (async)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040b0b04d5000000000000000000"], 0xe)
r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3)
fcntl$addseals(r1, 0x409, 0x7) (async)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6b6, 0x10})
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000002fc0)=@deltfilter={0xe34, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xb, 0xc}, {0x8, 0xfff2}}, [@f_tcindex={{0xc}, {0xda4, 0x2, [@TCA_TCINDEX_ACT={0xfc, 0x7, [@m_ife={0xf8, 0x1b, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfff1}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x10000, 0x0, 0x14dc, 0x3}}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}}]}, {0x87, 0x6, "4311e2c225ef819e89fc48e2be3c3853d9dd26486edf79b4af6fa4e60f6b7ea30a1202d4c709e31b936e6fdf0f6c982891107cb9727d52226be3923e951c830fb40b539074982e08fbc073d305155fae64a456a51c20de636f222b4caf5679ba79ab50544b4611674b80393f2f012bfb60b922419b5b05e02c327c132ebdeed42ff9f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x9}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x10e4}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x4, 0xfff2}}, @TCA_TCINDEX_POLICE={0xc74, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x800, 0x7fff, 0x5, {0x9, 0xca091a07dff9e731, 0xb74, 0x6, 0x600, 0xbe}, {0x3, 0x1, 0x43, 0xf657, 0x4, 0x7ff}, 0x8, 0x10000, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0xe, 0x57, 0x2, 0x3, 0x8, 0x1, 0x7, 0x3, 0x3, 0x9, 0x2, 0x7ff, 0x2, 0xffffffff, 0x7fffffff, 0x2, 0x40, 0x4, 0x63d5, 0x8, 0x40000, 0x3, 0x0, 0x2, 0x5, 0x4, 0x0, 0x8, 0x3, 0x9, 0x6, 0x40, 0xc048, 0x2, 0xfffffc00, 0x0, 0x5, 0x4, 0xc000, 0x4, 0x8, 0x2, 0x8, 0x3, 0x7, 0x4, 0xc11, 0x40, 0xfffffff6, 0x4, 0x0, 0x0, 0x6, 0x4, 0xfff, 0x8, 0x6, 0x5, 0x1, 0x7, 0x0, 0xd, 0x80000000, 0x3, 0x6, 0x9, 0x7, 0x1c, 0xc1ba, 0x5, 0x9, 0x40, 0x7, 0x0, 0x2, 0x4, 0x619, 0x1, 0x8, 0xd2, 0x60, 0x3, 0x0, 0x2, 0x2, 0x100, 0x1, 0x1, 0xd135, 0x2, 0x100, 0x2, 0x8a0, 0x6, 0x1, 0x8, 0x5, 0x80000000, 0x8001, 0x9a9, 0x3, 0x6, 0x2, 0x0, 0x1ff, 0x0, 0x6, 0x4, 0x1, 0xb, 0x8, 0x7, 0xa0b, 0x4, 0x6, 0x1, 0x3ff, 0x30000000, 0x6, 0x58, 0x5, 0x2, 0x5, 0x2, 0xf, 0x3, 0x9, 0x6, 0xfffffff9, 0x1, 0xd0, 0x3, 0x4, 0x1, 0x5, 0x3, 0x2, 0x5, 0xffffffff, 0x2, 0xfff, 0x14, 0x9, 0x8, 0x7, 0x2, 0x1, 0x81, 0x8785, 0xc0b4, 0x4, 0x2, 0x4, 0x2, 0x301c, 0x6, 0x1, 0x80000000, 0x10, 0x9f91, 0x400, 0x4fcc, 0x3, 0x300, 0x7, 0x6, 0x10001, 0xc7, 0x7fff, 0x2, 0x661c, 0x0, 0x1, 0x2, 0x8001, 0x80000000, 0x7, 0x5, 0x6, 0x7, 0x9, 0x0, 0x3, 0x3, 0x1ff, 0xab, 0x6, 0x3, 0x8000, 0xa2, 0x200000, 0x63, 0x0, 0x5, 0x8, 0x6, 0x812, 0xff, 0x400, 0x1, 0x4, 0x4, 0x8, 0x7, 0x3ff, 0x9, 0x8, 0x0, 0x2, 0x1, 0x100, 0x70000, 0x9, 0xb, 0x2, 0xfffffff7, 0x2, 0x3, 0x7ff, 0x81, 0x283, 0x0, 0x7, 0x800, 0x6, 0x6, 0x8001, 0x1, 0x3, 0x6552, 0x7, 0x40, 0x2, 0x9, 0x2, 0x0, 0x8000, 0x7fffffff, 0x2, 0x5d08, 0x20100, 0x5, 0xffffffff, 0x5, 0x8, 0x101, 0x3, 0x10001, 0x3ff, 0x0, 0x7, 0x2e, 0xfff, 0xe]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x8, 0x80000001, 0x8, 0x1000, 0x73, 0xd, 0x4, 0x6cf2242a, 0x4e91, 0xf, 0x80000001, 0x100, 0x6, 0x77f, 0x2, 0x1, 0x1, 0x3, 0xedf6, 0x1ff, 0x6, 0x5, 0x7ff, 0x164, 0x1, 0x3f96, 0x7fff, 0x8, 0x81, 0xb1d, 0x2, 0x40, 0x4, 0x6, 0x1, 0x9, 0xf, 0x0, 0x9, 0xbab, 0x7, 0x8, 0x0, 0x0, 0xd, 0x4, 0x5, 0xd10, 0xf, 0x7, 0x6a3, 0x6, 0x6, 0x200, 0x80, 0x6, 0xeebaf5a3, 0x0, 0xffffffff, 0x8cb6, 0x7, 0xfffffffb, 0x6, 0x8, 0x8, 0x3, 0x23, 0x159, 0xc, 0x4, 0x4, 0x9, 0x6, 0x100, 0x1, 0x9, 0x3, 0x0, 0x2, 0x401, 0xff, 0x8, 0x241b, 0x3, 0x0, 0x1, 0x1, 0x7, 0x3, 0x8, 0x75f9, 0xe, 0xff8b, 0x8, 0x3, 0x100, 0x5, 0x0, 0xe60b, 0xef6, 0x7, 0x5, 0x1ff, 0x1, 0xd, 0x10001, 0x7fff, 0x81, 0x5, 0x40, 0x3400000, 0x4, 0x1, 0xa, 0xff, 0x7, 0x5, 0x8000, 0x200, 0x3, 0x3, 0x8, 0x4, 0x2, 0x2, 0x4, 0x100, 0xfff, 0xffff9e0d, 0x1, 0x7, 0x2, 0x800, 0x0, 0x3ff, 0x8, 0x1, 0x4, 0x5, 0x22581ed3, 0x2, 0x2, 0xffffffff, 0xc0000000, 0x2, 0x80000000, 0x8, 0x4, 0xc000000, 0x6, 0x8001, 0xd, 0x800, 0x1, 0x4, 0x9, 0xd, 0x1, 0xfffffff8, 0x80, 0x6, 0x4, 0x5, 0x4, 0x7f, 0x100, 0x4, 0x7, 0x7fffffff, 0xb, 0x7b420a05, 0x7, 0x1, 0x9, 0x8, 0x2, 0x2, 0x0, 0x3, 0x7, 0x6, 0x5, 0xe, 0x1, 0x80000001, 0x9, 0x6, 0x5, 0x100, 0x7fffffff, 0x400, 0x2, 0x2, 0xe, 0x7, 0x6, 0x1, 0x1, 0x301, 0x80000001, 0x47, 0x1, 0x80000000, 0x10000, 0x6, 0x6, 0x9, 0xffff, 0x7fff, 0x1, 0x200, 0x80000000, 0x3, 0x6, 0x5, 0x9, 0x5, 0x2, 0xba1, 0x2, 0x80000001, 0x80000000, 0x7f, 0x8000, 0xe, 0x10001, 0x1, 0x100, 0xffffffff, 0x3, 0x81, 0x4, 0x100, 0x9, 0x7, 0x2, 0x1, 0xbc, 0x3, 0xa743, 0x7, 0x75a7, 0x100, 0xe668, 0x9, 0x9, 0x5, 0x1, 0x40, 0x1, 0x1, 0x9, 0x7, 0x8, 0x10001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffff37}, @TCA_POLICE_RESULT={0x8, 0x5, 0x401}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x3, 0x80000000, 0x6, 0x952, 0x0, 0x2, 0x5, 0xa00, 0x7, 0x401, 0x1000, 0x3, 0x2, 0x5, 0x2, 0x6, 0x9, 0x4, 0x80000001, 0x0, 0x800, 0x7f, 0x2, 0x3, 0x800, 0x9, 0x92f, 0x2, 0x4, 0xffff, 0x1, 0xf, 0xfffffc00, 0x2f9f, 0x9, 0xa000, 0x3, 0xfffffffe, 0x7f, 0x4, 0x577, 0x7fff, 0x10000, 0x401, 0x7ff, 0x9, 0x10000, 0x80000001, 0xb, 0x3, 0x6, 0xce, 0x2, 0x2, 0x6, 0x0, 0x4, 0xa60, 0xc, 0x6, 0x2, 0x7, 0x5, 0x6, 0x7f, 0x3, 0x401, 0xcb, 0xb, 0x1000, 0x2, 0xd3, 0x6, 0xe5ec, 0x7, 0x85c3, 0x2dff, 0x6, 0x2, 0x0, 0x8, 0x3, 0x1, 0xfffffff6, 0xff000000, 0x7eebe6, 0xfffffffb, 0x4, 0x7, 0x6, 0x0, 0x1fd, 0x81, 0x10, 0x8, 0x3, 0x6, 0xa, 0x800, 0xaf, 0x0, 0x7, 0x83ae, 0x6, 0x1, 0x100, 0x5, 0xaa, 0x0, 0x9, 0x6, 0x9, 0x5, 0x9, 0xfff, 0x800, 0x80, 0x1, 0x9, 0x9, 0x9, 0x2, 0x5, 0x7, 0x2, 0x4, 0x8, 0x1, 0xffff9049, 0xfff, 0x9, 0x10001, 0x6, 0x1, 0x5, 0x1000, 0x3, 0x800, 0x5, 0x6, 0x800, 0xf, 0x4, 0xe, 0xa72, 0x1, 0x2, 0x6fe2, 0x1, 0x5, 0x81, 0x68b9, 0xfffffffa, 0x1, 0xfffffffc, 0x0, 0x0, 0xb48, 0x8, 0xfff, 0x4000, 0xf3e, 0x5, 0x8, 0x9, 0x7fff, 0x5, 0x1, 0xa7, 0x1, 0x5, 0x4, 0x7, 0x2, 0xdd8f, 0x101, 0x2, 0x9, 0x3, 0x1f5, 0x7, 0x0, 0x2, 0x6, 0x1ff, 0x4, 0x2b, 0x800, 0x8, 0x6, 0x8000, 0x0, 0x6, 0x5, 0x80000000, 0x807, 0x7, 0x6, 0x8d, 0x2, 0x8, 0x7, 0x9836, 0x0, 0x0, 0x5, 0xd, 0x1ff, 0x8, 0x1ff, 0xdc, 0x1, 0x2, 0x3, 0x2, 0x9, 0x4, 0x10001, 0x8001, 0x5, 0x4, 0x9, 0x7, 0x800000, 0x2, 0x4, 0x9, 0xa15, 0x8d6, 0x4, 0x7, 0xdf8, 0xfff, 0x0, 0x8000, 0x9, 0x0, 0x3, 0x80, 0x2, 0x9, 0x2, 0x0, 0xb, 0x10, 0xe, 0x5, 0x8, 0x6, 0x4, 0x6, 0x8, 0x4, 0x1]}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x5}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x2ed}]}}, @f_rsvp6={{0xa}, {0x54, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xd, 0x4, 0xdc}, {0x9, 0x6, 0x2}, 0x62, 0x8, 0x6}}, @TCA_RSVP_DST={0x14, 0x2, @loopback}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x1}}]}}]}, 0xe34}, 0x1, 0x0, 0x0, 0x40800}, 0x40010) (async)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r3, 0x0) (async)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) (async)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) (async)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0xd, 0xa, 0xd287, 0xa, 0xfd, 0xffeffffa, 0x4006, 0xfff, 0x1, 0x6, 0x105, 0xf7fffffe, 0x7, 0x2, 0x1, 0x8, 0x927, 0x2, 0x401, 0xd, 0xe69, 0x6, 0x10008, 0x6, 0x1cdc, 0xfbfffff8]})
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')

1.150713202s ago: executing program 3 (id=356):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xee00, 0xee01}}, './file0\x00'})
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000040)={{0x8, 0x6, 0x200, 0x8, 0xec}, [{0x8001, 0x2, 0x59, 0x19}, {0xffffffff, 0x1, 0x1, 0xfe}, {0x9, 0xa6074e, 0xc, 0x6}, {0x8, 0x5, 0x3, 0x5}, {0x1, 0x3, 0x2, 0xaa}, {0x10001, 0x9, 0x6, 0x80}, {0x5, 0x8000000000000001, 0x5, 0xfd}, {0x2, 0xb, 0xb, 0x5}, {0x5, 0x80000001, 0x3e, 0x2}]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', <r2=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in6=@loopback, 0x4e23, 0x4, 0x4e20, 0x4, 0xa, 0x0, 0x80, 0x62, r2, r1}, {0x843, 0xc6, 0x5, 0x1, 0x1, 0x0, 0xb704, 0x2}, {0x21ca, 0x1, 0x2, 0x95}, 0xe, 0x6e6bbd, 0x0, 0x1, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d3, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34ff, 0x1, 0x0, 0xbf, 0x3, 0x5, 0x8000}}, 0xe8)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f00000002c0))
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@delqdisc={0x58, 0x25, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0x6}, {0x1, 0x4}, {0xa, 0x2}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2a}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040040)
write$ppp(r0, &(0x7f0000000480)="124a9c5fdf7065ce292b1c22d535568c2187d3b9896a01137575e3e67118b7c939d723efd6fe9ba006dd6372e6987b48bad5977e469440274f2f96ca93c1cfd1de44aed800fb4a62da16288bac565b4a8b741a3dadfc7ae6bfbcf62e1c97a912215281015964ff9ce3bab844663e76acc71edd9e087a2b0d91563eceaee942cb591be10a2cb79ec2a8c2846b7ed1bd2a525c296664fcd708cec78832cfd6a1e80cf26ff4eeeb5dae0562ee9078581875680fd87660c078bde3eb21bacfef766ad562047a19722ae1a669f6c3c4e4afebf3ef95b9efb352bf981b4393a3f322bf6ce7f1a9898a1cc54e38404ba5ce657e", 0xf0)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000005c0)={0x7, 0x40, [0xc8, 0x12000000000, 0x4, 0xffffffffffffff8d], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000600)={0x6, 0x1, {0xffffffffffffffff, 0x2, 0x6, 0x3, 0x8000}, 0xfffffe01})
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000680)=@routing={0x0, 0x0, 0x2, 0x7f}, 0x8)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000006c0)={0x6})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x85}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)
ioctl$USBDEVFS_GET_SPEED(r0, 0x551f)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={r2, @empty, @local}, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000880)=0x2, 0x4)
getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000008c0), &(0x7f0000000900)=0x4)
ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000940)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x44})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004854}, 0x0)
ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000b00)={<r5=>0x0, 0x7, 0x7, 0x9, 0x300, 0x3, 0xd, 0x8, {<r6=>0x0, @in6={{0xa, 0x4e20, 0x1000, @local, 0xc}}, 0x0, 0x7, 0x5, 0x3, 0x8}}, &(0x7f0000000bc0)=0xb0)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000c00)={r5, 0x6}, 0x8)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000c40)={'nat\x00', 0x0, [0x72a, 0x0, 0x0, 0x2, 0x8f]}, &(0x7f0000000cc0)=0x54)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/profiling', 0x400, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000e40)={<r8=>r6}, &(0x7f0000000e80)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000ec0)={r8, 0x1, 0x5, 0x0, 0x1, 0x7, 0x0, 0x0, {r6, @in={{0x2, 0x4e23, @empty}}, 0x7fff, 0x7fffffff, 0x1, 0x8001, 0x9}}, &(0x7f0000000f80)=0xb0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, 0x4, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}]}, 0x2c}}, 0x20008000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000010c0)={0x18000, 0x7f, 0x0, 'queue0\x00', 0x4})

1.019336948s ago: executing program 2 (id=357):
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6(0x10, 0x80002, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x2}]}, 0x10)
sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmsg(r3, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000)
recvmmsg(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000006380)=""/4102, 0x1006}, {&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000500)=""/43, 0x2b}], 0x4}, 0x2159}], 0x3, 0x2000, 0x0)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x6)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0)
landlock_restrict_self(r7, 0x4)
landlock_restrict_self(r7, 0x0)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')
keyctl$unlink(0x9, r4, 0xfffffffffffffffe)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

1.018760677s ago: executing program 3 (id=358):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000880)="9f736e4f96b6cdb8436f46e6b0f9cb95644967a57a2aa269e33c98e57fd8cd1e4f72d2181654344b811cec66aa8048b99dd4f9ade302aab806cb9d4ed44c4e2d4a7e8b7b049dea111e11a8f16dc42e941ded19d7652668bd714f7823c55753f6b94e291432c4c8b1ba915cf4b1ca5df335cac1ffdb46fcf0fe47c337649e7b533fae5edeced563afead6707fa3e3ec33c00e815d5dacd600007599f4b5b223ff24c6f92cbb494ac4f5e036852735fd0601da518e8b5e85487b5637710c6a17f457fb215b9f741aa57b0d0bd9fee13c0733fa08aa260458e54f9ebd0799e42d6f4728885fcf31d837e16c8a65e9", 0xed}, {&(0x7f0000000340)="fd4e395a9df008f9217fe52e82c8fab606dc704a2628b201d796c66f547315587bf0", 0x22}, {&(0x7f0000002840)="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", 0x1000}], 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x4000810)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, <r0=>0xffffffffffffffff, {0x1}}, './file0\x00'})
bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1})
removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00')
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31", 0x97}, {0x0}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda2681", 0x28}, {&(0x7f0000000ac0)}], 0x5, 0x4d9e, 0x8)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.018532822s ago: executing program 0 (id=359):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c0001"], 0x98}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x804)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2012)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/181, 0xb5}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001dc0)=""/4059, 0xfdb}, {&(0x7f00000038c0)=""/4111, 0x100f}, {&(0x7f0000000a00)=""/221, 0xdd}, {&(0x7f0000000940)=""/143, 0x8f}, {&(0x7f0000000340)=""/167, 0xa7}], 0x7}, 0x400120e1)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000020601080000000000000000000000000900020073797a30000000000500010007000000058005000a000000040007800900020073797a32000000004b17bb928362655b3f67c0"], 0x40}}, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000001d80)=0x8)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000511000/0x400000)=nil)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x101800)
ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
fcntl$getownex(r1, 0x10, &(0x7f0000000280))
getuid()
stat(&(0x7f00000002c0)='./file0\x00', &(0x7f00000011c0))
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r4, 0x3)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x7}, 0x18, 0x2)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x9)
landlock_restrict_self(r5, 0xb)

840.951037ms ago: executing program 0 (id=360):
r0 = socket(0x2, 0x80805, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
epoll_create(0x10001)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x19)
ioctl$TIOCGLCKTRMIOS(r2, 0x40085500, &(0x7f0000000100)={0x43, 0x200, 0x10, 0x3781, 0xa, "000000000000050700010000002000"})
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @link_local})
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x300, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0)
connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10)

803.191683ms ago: executing program 2 (id=361):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffd, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x7fffffff})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00')

735.405634ms ago: executing program 0 (id=362):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@dyn}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa0042, 0x0)
ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x486, 0x0, 0x7}]})
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x20010, r2, 0x43c24000)
r4 = memfd_secret(0x80000)
fchown(r4, 0x0, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000004740)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}})
open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0)
r6 = openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0)
renameat2(r6, &(0x7f0000000280)='./file1\x00', r0, &(0x7f0000000300)='./bus\x00', 0x1)
mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x1400)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./bus\x00')

734.967501ms ago: executing program 3 (id=363):
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="bf453337e97c792a9531a211818455182597ca1155a9311fe6d1fcc0e593f9bf007ca59fbe7ed3567c2db9b0bb46b568809a989919e56f853dd4616fb3257cc57aa07e358287d036", 0x48}, {&(0x7f0000000440)="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"/326, 0x146}, {&(0x7f00000000c0)="8fd611add82d99141245b893dd70f469ffabcdf8886ec4c28ebfa0bb46b71b5f7429bdec18cc5ed149591dc4ae5f692d66341abc3a5c3a63627271e0c5c6bddbdc9c0440c87ddeb05622595e97d88a0dad428da2677a3280d804f15a57d80cf0a26f75e8bb8b96319f51b538ff4ebe2e34160d451b6542b08f9cc66effb3f2a124d3539ef6c38e1c27f8e32e168915b81b1d75c8f595add9eb821359f967d9705d085c99b0b4ee92e5fbb8b7a1857e6185444f8764a0e0a159f5190921c089156443ca6d2dac1d708cf2aeda2fccdcb833a852", 0xd3}, {&(0x7f0000000300)="fccc321b5ef07d95714db370efda351281138b027f93ed6a12002783cc6d4837a11727bae0bd00721c552094b5f920b02d3362d28b4a483a451d39e0efbab98a87abb2a4768b3b3f4cae8f47b904554775104aa20b8753418c419d62a32ee6ed4c7357368be4b78e20d2511ac2b454f605db4ab7991fc39efb6583135a070ea93d36589fe29e92cfc10686d8d7bf4478fcb6d6f0298925682eb521c25546e57c71292b", 0xa3}, {&(0x7f0000000080)="dd9e0c3c018a923bfecb218965f81d610698cdd711a91100000000b498ec7283ad4b0c9d8951eed680288809978552de25", 0x31}], 0x5)

684.567598ms ago: executing program 2 (id=364):
syz_usb_connect(0x1, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000))
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$uac1(0x1, 0xb3, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xf7, 0x499, 0x1044, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x3, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x800, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6d, 0x1, 0x5, 0xfe}]}, {{0x9, 0x5, 0x1, 0x9, 0x7e7, 0x1, 0x4, 0xa, {0x7, 0x25, 0x1, 0x8, 0x4, 0x401}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x6, 0x4, 0x5}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x7ff, 0xc, 0x8, "d709fd66618e80"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xd, 0xff, 0x3, "ebf1ec77586c6bc8"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5b, 0x1, 0x5, 0xf3, "f758a9a45f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0xf3, 0x9, 0x2, {0x7, 0x25, 0x1, 0xc, 0x6}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x8, 0xfa, 0x0, 0xff, 0x3}, 0x1e7, &(0x7f00000001c0)={0x5, 0xf, 0x1e7, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x2c44, 0x0, 0x81}, @ssp_cap={0x18, 0x10, 0xa, 0xe, 0x3, 0x3, 0xff0f, 0x5, [0x0, 0xff3f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x0, 0x3, 0x1, 0x3}, @generic={0xb1, 0x10, 0xb, "b5fd2077efe343286edf62d079eeb2f911b769173b551043f46331b693c8cf862f34b228ecb5b31eaddc444e20fe0922fcc420875243745ab2696adcf5b2f7397f97efea6fa16aa71a75e0643c294043176a819355bf469a339c0042bf995dac30972e5dff6f6eb7d535439d8780b1232edb88d25b6fc3aae1e13967a5de93ba30f80b6ff2ade62e16711d23b1f7fe9571695ce20187b87621479d89108d06266c460d94321a182ba2e49ed96734"}, @generic={0xfb, 0x10, 0xa, "048a3884a77954359c1adfbfb7205a41a3ddea30258ffc2aebe56a313ae7a09e04bb0bc38785ba18fd59d10a6f3eadc23bc9423ba0d6c186d08b6ac3e47c1cfb158bfb6f17c1512a4a28fd578dae126ddc0cba4d4c2e4cfe2c4adbce94845ff742aa348742ea449c7a82aaadfa559dbb6dd14e60a475031dd206303d55327b9ec2f1a372e12df7adbdd8b659b01feed14236db6d4074d95c1486b9c408576aa0f3cc0a0e0f5664fb84651a23de41e6e79a318c1f1459af2b62c576225f185876ab14ca678d6285ca222e286673b283bff4e0c2af5ac2596ab28b12d99c6b1a5083b01f2b5bee3e24416f753d348798ddd8238ad3cc445ff1"}]}, 0x1, [{0x5, &(0x7f0000000400)=@string={0x5, 0x3, "2af659"}}]})
writev(r0, &(0x7f0000000180)=[{&(0x7f00000003c0)="8c", 0x1}], 0x1)

658.547913ms ago: executing program 0 (id=365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32)
r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async, rerun: 32)
write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x6005}, @void, @eth={@local, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010102}}}}}}, 0x2e) (rerun: 32)

574.883393ms ago: executing program 3 (id=366):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') (async, rerun: 32)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async)
pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) (async)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

282.005275ms ago: executing program 0 (id=367):
socketpair(0x1, 0x6, 0x2, &(0x7f0000000080))
unshare(0x8000000)
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000140))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003540)=@vmx={0x101, 0x0, 0x2080, {0x7000, 0x40000, {}, 0x1, 0x9a3}, {"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", "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"}})
semget$private(0x0, 0x4000, 0x555)
semtimedop(0x0, &(0x7f0000000440)=[{0x3, 0x6, 0x1000}], 0x1, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0xfffffffe})

14.825833ms ago: executing program 1 (id=368):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f00000006c0)={0x40, 0x6, 0x5, "0c9aa54b92"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xfe}, 0x0, &(0x7f0000000780)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f00000007c0)={0x40, 0xa0, 0x4, 0x9}, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2)
socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x3, 0x6)
epoll_create1(0x80000)
r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800)
r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, 0xfffffffffffffffe})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[], 0x0)
socket(0x28, 0x1, 0x0)

0s ago: executing program 0 (id=369):
syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f090402000001020000090402010101ff0000090582", @ANYRESDEC], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000001800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x582, 0xa3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf6f4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x80, 0xe, 0x43, {0x7, 0x25, 0x1, 0x4, 0x7a, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x0, 0x40, {0x7, 0x25, 0x1, 0xc, 0xea, 0xffc3}}}}}}}}]}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f0000000100))
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x50, r1, 0xe6e48000)

kernel console output (not intermixed with test programs):

 IBSS network, BSSID 50:50:50:50:50:50
[   74.425572][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   74.571026][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.612178][    T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[   74.634138][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.653503][    T9] usb 4-1: Product: syz
[   74.661528][    T9] usb 4-1: Manufacturer: syz
[   74.674096][    T9] usb 4-1: SerialNumber: syz
[   74.752280][ T5872] usb 1-1: Using ep0 maxpacket: 32
[   74.774526][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.778704][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   74.801895][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.813010][ T5872] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   74.822411][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.855922][ T5872] usb 1-1: config 0 descriptor??
[   75.086353][ T5826] Bluetooth: hci2: command tx timeout
[   75.091784][ T5826] Bluetooth: hci0: command tx timeout
[   75.097746][ T5826] Bluetooth: hci3: command tx timeout
[   75.210138][ T5934] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET)
[   75.320622][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.341216][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.966081][ T5872] ft260 0003:0403:6030.0001: unknown main item tag 0x0
[   75.973216][ T5872] ft260 0003:0403:6030.0001: unknown main item tag 0x0
[   76.285101][ T5821] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   76.439177][ T5821] usb 2-1: Using ep0 maxpacket: 16
[   76.446605][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[   76.475043][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[   76.495107][ T5821] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[   76.513356][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   76.535061][ T5821] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   76.563956][ T5821] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[   76.583879][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.601978][ T5821] usb 2-1: Product: syz
[   76.615407][ T5821] usb 2-1: Manufacturer: syz
[   76.625885][ T5821] usb 2-1: SerialNumber: syz
[   76.647929][ T5821] usb 2-1: config 0 descriptor??
[   76.662801][ T5821] port100 2-1:0.0: NFC: Could not get supported command types
[   76.815609][ T5929] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11'.
[   76.837320][ T5872] ft260 0003:0403:6030.0001: failed to retrieve chip version
[   76.868730][ T5872] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -71
[   76.908849][    T9] rtl8150 4-1:1.0: couldn't reset the device
[   76.939136][    T9] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[   76.954842][ T5872] usb 1-1: USB disconnect, device number 2
[   77.043999][ T5821] usb 2-1: USB disconnect, device number 2
[   77.048280][    T9] usb 4-1: USB disconnect, device number 2
[   77.072771][ T5949] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.15'.
[   77.105081][ T5820] Bluetooth: hci3: command tx timeout
[   77.105104][   T51] Bluetooth: hci2: command tx timeout
[   77.115918][ T5826] Bluetooth: hci0: command tx timeout
[   77.187405][ T5858] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.350198][ T5858] usb 3-1: config 0 has no interfaces?
[   77.356256][ T5858] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   77.365419][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.379826][ T5858] usb 3-1: config 0 descriptor??
[   77.415100][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   77.565267][    T9] usb 4-1: Using ep0 maxpacket: 32
[   77.572550][    T9] usb 4-1: config 0 has an invalid interface number: 6 but max is 0
[   77.580608][    T9] usb 4-1: config 0 has no interface number 0
[   77.589134][    T9] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.623996][ T5858] usb 3-1: USB disconnect, device number 2
[   77.635081][    T9] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.644824][    T9] usb 4-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   77.679795][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[   77.690874][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.704640][    T9] usb 4-1: config 0 descriptor??
[   77.905587][ T5821] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   78.071792][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[   78.083405][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   78.094564][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   78.106955][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   78.119831][ T5821] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[   78.133580][    T9] logitech-djreceiver 0003:046D:C537.0002: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.3-1/input6
[   78.195602][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.205245][ T5821] usb 2-1: Product: syz
[   78.210384][ T5821] usb 2-1: Manufacturer: syz
[   78.216383][ T5821] usb 2-1: SerialNumber: syz
[   78.229281][ T5821] usb 2-1: config 0 descriptor??
[   78.242214][ T5821] iguanair 2-1:0.0: probe with driver iguanair failed with error -12
[   78.298312][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   78.343804][ T5821] usb 4-1: USB disconnect, device number 3
[   78.457479][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.460046][   T29] usb 2-1: USB disconnect, device number 3
[   78.484501][    T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   78.508159][    T9] usb 1-1: config 1 interface 1 has no altsetting 0
[   78.540085][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   78.557155][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.565604][    T9] usb 1-1: Product: syz
[   78.569911][    T9] usb 1-1: Manufacturer: syz
[   78.570532][ T5972] netlink: 9460 bytes leftover after parsing attributes in process `syz.1.22'.
[   78.574550][    T9] usb 1-1: SerialNumber: syz
[   78.589386][ T5972] openvswitch: netlink: Flow key attr not present in new flow.
[   78.636151][ T5826] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   78.649785][ T5826] Bluetooth: hci1: Injecting HCI hardware error event
[   78.658130][ T5826] Bluetooth: hci1: hardware error 0x00
[   78.800294][    T9] usb 1-1: selecting invalid altsetting 0
[   78.806832][    T9] usb 1-1: selecting invalid altsetting 0
[   78.812800][    T9] cdc_ncm 1-1:1.0: bind() failure
[   78.826103][    T9] usb 1-1: selecting invalid altsetting 0
[   78.831951][    T9] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -22
[   78.841731][    T9] usb 1-1: selecting invalid altsetting 0
[   78.847632][    T9] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -22
[   78.857244][    T9] usb 1-1: selecting invalid altsetting 0
[   78.863071][    T9] usbtest 1-1:1.1: probe with driver usbtest failed with error -22
[   78.970442][ T5867] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   78.992121][ T5858] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   79.116830][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'.
[   79.145338][ T5867] usb 2-1: device descriptor read/64, error -71
[   79.185181][ T5858] usb 3-1: Using ep0 maxpacket: 16
[   79.193079][ T5858] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   79.214828][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   79.240820][ T5858] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   79.253756][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.264241][ T5858] usb 3-1: Product: syz
[   79.303933][ T5858] usb 3-1: Manufacturer: syz
[   79.308844][ T5858] usb 3-1: SerialNumber: syz
[   79.335457][ T5858] usb 3-1: config 0 descriptor??
[   79.357576][ T5858] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   79.385384][ T5858] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[   79.406256][ T5867] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   79.565269][ T5867] usb 2-1: device descriptor read/64, error -71
[   79.695744][ T5867] usb usb2-port1: attempt power cycle
[   79.905914][   T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   79.941989][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   79.953173][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   79.989506][ T5858] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[   79.996423][ T5858] em28xx 3-1:0.0: Config register raw data: 0x41
[   80.055085][ T5867] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   80.067602][   T29] usb 4-1: config 0 has no interfaces?
[   80.073340][   T29] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   80.082548][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.085601][ T5867] usb 2-1: device descriptor read/8, error -71
[   80.100438][   T29] usb 4-1: config 0 descriptor??
[   80.312060][   T29] usb 4-1: USB disconnect, device number 4
[   80.345469][ T5867] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   80.365736][ T5867] usb 2-1: device descriptor read/8, error -71
[   80.475820][ T5867] usb usb2-port1: unable to enumerate USB device
[   80.497059][ T5901] usb 1-1: USB disconnect, device number 3
[   80.785146][ T5826] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   81.034221][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'.
[   81.081159][ T6032] netlink: 92 bytes leftover after parsing attributes in process `syz.0.33'.
[   81.092967][ T5867] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   81.266657][ T5867] usb 4-1: Using ep0 maxpacket: 8
[   81.273780][ T5867] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   81.286836][ T5867] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.296916][ T5867] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.309254][ T5867] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   81.323377][ T5867] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.336860][ T5867] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   81.346852][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.429603][   T24] cfg80211: failed to load regulatory.db
[   81.566484][ T5867] usb 4-1: usb_control_msg returned -32
[   81.572113][ T5867] usbtmc 4-1:16.0: can't read capabilities
[   81.648450][   T29] usb 4-1: USB disconnect, device number 5
[   81.800531][ T5901] usb 3-1: USB disconnect, device number 3
[   81.840328][ T5901] em28xx 3-1:0.0: Disconnecting em28xx
[   81.872717][ T5901] em28xx 3-1:0.0: Freeing device
[   82.040182][   T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   82.100145][ T6080] input: syz1 as /devices/virtual/input/input6
[   82.141735][ T6084] warning: `syz.0.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   82.198517][   T29] usb 4-1: Using ep0 maxpacket: 32
[   82.222774][   T29] usb 4-1: config 0 has an invalid interface number: 172 but max is 0
[   82.237671][   T29] usb 4-1: config 0 has no interface number 0
[   82.254236][   T29] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   82.280204][   T29] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[   82.297975][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.317980][   T29] usb 4-1: Product: syz
[   82.328544][   T29] usb 4-1: Manufacturer: syz
[   82.340397][   T29] usb 4-1: SerialNumber: syz
[   82.371925][   T29] usb 4-1: config 0 descriptor??
[   82.390936][   T29] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[   82.546653][ T6104] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.44'.
[   82.563606][ T6104] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   82.565693][ T5821] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.725094][ T5821] usb 1-1: Using ep0 maxpacket: 32
[   82.739665][ T5821] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[   82.755164][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.764224][ T5821] usb 1-1: Product: syz
[   82.773166][ T5821] usb 1-1: Manufacturer: syz
[   82.785096][ T5821] usb 1-1: SerialNumber: syz
[   82.796141][ T5821] usb 1-1: config 0 descriptor??
[   82.992696][ T6063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.006419][ T6063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.036828][ T5821] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 004
[   83.218522][   T29] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[   83.238168][ T6093] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.42'.
[   83.247393][   T29] gspca_pac7302 4-1:0.172: probe with driver gspca_pac7302 failed with error -71
[   83.274669][ T5858] usb 1-1: USB disconnect, device number 4
[   83.277948][   T29] usb 4-1: USB disconnect, device number 6
[   83.455745][ T5867] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   83.517036][ T6119] capability: warning: `syz.2.48' uses deprecated v2 capabilities in a way that may be insecure
[   83.615127][ T5867] usb 2-1: Using ep0 maxpacket: 16
[   83.632211][ T5867] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   83.642308][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.652819][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.668696][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.685054][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.693055][ T5867] usb 2-1: Product: syz
[   83.697577][ T5867] usb 2-1: Manufacturer: syz
[   83.702187][ T5867] usb 2-1: SerialNumber: syz
[   83.881208][ T6130] netlink: 'syz.2.51': attribute type 3 has an invalid length.
[   83.889107][ T6130] netlink: 'syz.2.51': attribute type 3 has an invalid length.
[   83.900183][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.51'.
[   84.073136][ T5826] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[   84.117570][ T5867] usb 2-1: 0:2 : does not exist
[   84.134962][ T6145] netlink: 'syz.0.57': attribute type 10 has an invalid length.
[   84.191842][ T6146] ptrace attach of "./syz-executor exec"[5813] was attempted by ""[6146]
[   84.256992][ T5901] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   84.268983][ T6148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.58'.
[   84.284066][ T6148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.58'.
[   84.335105][ T5858] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   84.420051][ T5901] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[   84.432133][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.440194][ T5901] usb 3-1: Product: syz
[   84.444359][ T5901] usb 3-1: Manufacturer: syz
[   84.449180][ T5901] usb 3-1: SerialNumber: syz
[   84.465703][ T5901] usb 3-1: config 0 descriptor??
[   84.488951][ T5858] usb 4-1: Using ep0 maxpacket: 8
[   84.506121][ T5858] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[   84.515865][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.523872][ T5858] usb 4-1: Product: syz
[   84.528676][ T5858] usb 4-1: Manufacturer: syz
[   84.533573][ T5858] usb 4-1: SerialNumber: syz
[   84.753886][ T5867] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[   84.814581][ T5867] usb 2-1: USB disconnect, device number 8
[   84.820698][ T5858] mxuport 4-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[   84.838717][ T5858] mxuport 4-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[   84.856999][ T5858] mxuport 4-1:254.0: probe with driver mxuport failed with error -71
[   84.873661][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   84.893048][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.912543][ T5858] usb 4-1: USB disconnect, device number 7
[   84.920095][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.922795][ T6161] gfs2: error -5 reading superblock
[   85.046802][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'.
[   85.088616][ T6168] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.471306][   T30] audit: type=1326 audit(1772421545.145:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6184 comm="syz.3.71" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4979b9c799 code=0x0
[   85.565128][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   85.716634][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   85.727813][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   85.737701][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   85.747252][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.751862][ T5901] usb 3-1: f81604_read: reg: 100e failed: -EPROTO
[   85.759163][ T6178] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   85.778281][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   85.788631][ T5901] usb 3-1: f81604_read: reg: 200f failed: -EPROTO
[   85.828051][ T5901] usb 3-1: USB disconnect, device number 4
[   85.835625][ T5483] usb 3-1: f81604_read: reg: 100f failed: -ENODEV
[   85.858021][ T5483] usb 3-1: f81604_read: reg: 200f failed: -ENODEV
[   85.871680][ T5901] usb 3-1: f81604_read: reg: 100f failed: -ENODEV
[   85.894359][ T5483] usb 3-1: f81604_read: reg: 200f failed: -ENODEV
[   85.916066][ T5901] usb 3-1: f81604_read: reg: 200f failed: -ENODEV
[   86.031404][ T5821] usb 1-1: USB disconnect, device number 5
[   86.338049][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'.
[   86.435092][ T5821] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   86.602208][ T5805] udevd[5805]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   86.616723][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.623536][ T5805] udevd[5805]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[   86.635227][ T5821] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   86.658916][ T5821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.698387][ T5821] usb 1-1: config 0 descriptor??
[   86.715777][ T5821] pwc: Askey VC010 type 2 USB webcam detected.
[   86.728293][   T29] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   86.805142][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   86.887521][   T29] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[   86.898049][   T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.929316][   T29] usb 3-1: config 0 has no interface number 0
[   86.939415][   T29] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[   86.950528][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.965161][   T29] usb 3-1: Product: syz
[   86.969442][   T29] usb 3-1: Manufacturer: syz
[   86.976268][   T29] usb 3-1: SerialNumber: syz
[   86.989357][   T29] usb 3-1: config 0 descriptor??
[   86.997860][ T6236] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[   87.001840][   T29] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[   87.018087][   T29] uvcvideo 3-1:0.105: No valid video chain found.
[   87.150340][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.173149][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.201044][ T5901] usb 3-1: USB disconnect, device number 5
[   87.336507][ T6246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.336975][ T6246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.556456][ T5821] pwc: recv_control_msg error -71 req 02 val 2700
[   87.564748][ T5821] pwc: recv_control_msg error -71 req 02 val 2c00
[   87.584457][ T5821] pwc: recv_control_msg error -71 req 04 val 1000
[   87.591838][ T5821] pwc: recv_control_msg error -71 req 04 val 1300
[   87.607032][ T5821] pwc: recv_control_msg error -71 req 04 val 1400
[   87.624142][ T5821] pwc: recv_control_msg error -71 req 02 val 2000
[   87.633587][ T5821] pwc: recv_control_msg error -71 req 02 val 2100
[   87.645494][ T5821] pwc: recv_control_msg error -71 req 04 val 1500
[   87.656435][ T5821] pwc: recv_control_msg error -71 req 02 val 2500
[   87.665714][ T6256] netlink: 100 bytes leftover after parsing attributes in process `syz.3.81'.
[   87.666086][ T5821] pwc: recv_control_msg error -71 req 02 val 2400
[   87.691988][ T5821] pwc: recv_control_msg error -71 req 02 val 2600
[   87.699127][ T5821] pwc: recv_control_msg error -71 req 02 val 2900
[   87.699181][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.718307][ T5821] pwc: recv_control_msg error -71 req 02 val 2800
[   87.727201][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.735259][ T5901] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   87.743888][ T5821] pwc: recv_control_msg error -71 req 04 val 1100
[   87.757606][ T5821] pwc: recv_control_msg error -71 req 04 val 1200
[   87.777746][ T6256] binder_alloc: 6255: binder_alloc_buf size 4294968240 failed, no address space
[   87.789580][ T5821] pwc: Registered as video103.
[   87.823526][ T5821] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[   87.861232][ T6256] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[   87.885586][ T5821] usb 1-1: USB disconnect, device number 6
[   87.916127][ T5901] usb 2-1: Using ep0 maxpacket: 8
[   87.923202][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.958568][ T5901] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[   87.971457][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.992262][ T5901] usb 2-1: config 0 descriptor??
[   88.055129][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   88.158943][ T6263] netlink: 'syz.0.83': attribute type 4 has an invalid length.
[   88.217561][ T5950] usb 2-1: USB disconnect, device number 9
[   88.230947][   T24] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   88.250632][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.279313][   T24] usb 3-1: Product: syz
[   88.283514][   T24] usb 3-1: Manufacturer: syz
[   88.299080][   T24] usb 3-1: SerialNumber: syz
[   88.312478][   T24] usb 3-1: config 0 descriptor??
[   88.732397][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.757392][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.778136][   T24] usb 3-1: Firmware: major: 182, minor: 167, hardware type: ATUSB (0)
[   88.996630][   T24] usb 3-1: Read permanent extended address 00:00:00:00:00:00:00:10 from device
[   89.125097][ T5821] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   89.169828][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.185484][   T29] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   89.188628][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.225242][   T24] usb 3-1: USB disconnect, device number 6
[   89.245069][ T6285] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[   89.285713][ T5821] usb 1-1: Using ep0 maxpacket: 32
[   89.311714][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   89.327345][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   89.349738][   T29] usb 2-1: Using ep0 maxpacket: 32
[   89.374364][   T29] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[   89.384471][   T29] usb 2-1: config 2 has no interface number 0
[   89.391268][   T29] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[   89.406813][ T5821] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[   89.416106][   T29] usb 2-1: config 2 interface 88 has no altsetting 0
[   89.422832][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.431219][ T5821] usb 1-1: Product: syz
[   89.435633][ T5821] usb 1-1: Manufacturer: syz
[   89.440515][ T5821] usb 1-1: SerialNumber: syz
[   89.446606][   T29] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[   89.457775][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.466803][ T5821] usb 1-1: config 0 descriptor??
[   89.483220][   T29] usb 2-1: Product: syz
[   89.487655][ T5821] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8
[   89.497635][   T29] usb 2-1: Manufacturer: syz
[   89.502246][   T29] usb 2-1: SerialNumber: syz
[   89.515550][ T6281] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[   89.684783][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.703811][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.735640][ T6281] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[   89.768269][   T24] usb 1-1: USB disconnect, device number 7
[   90.065103][ T5858] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   90.236490][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.248110][ T5858] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.266381][ T5858] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   90.275511][ T5858] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   90.283507][ T5858] usb 3-1: Manufacturer: syz
[   90.295664][ T5858] usb 3-1: config 0 descriptor??
[   90.576864][   T29] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   90.588321][   T29] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[   90.601181][   T29] asix 2-1:2.88: probe with driver asix failed with error -71
[   90.631477][   T29] usb 2-1: USB disconnect, device number 10
[   90.778624][ T6311] Bluetooth: MGMT ver 1.23
[   90.795057][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   90.940132][ T6320] sg_write: data in/out 393439/136 bytes for SCSI command 0xc7-- guessing data in;
[   90.940132][ T6320]    program syz.0.100 not setting count and/or reply_len properly
[   90.964321][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.977602][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.988936][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[   90.998894][    T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   91.009421][    T9] usb 4-1: Manufacturer: syz
[   91.018262][    T9] usb 4-1: config 0 descriptor??
[   91.316556][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.327832][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.337547][ T5858] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71
[   91.347814][ T5858] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71
[   91.356376][ T5858] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71
[   91.364714][ T5858] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[   91.373629][ T5858] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71
[   91.387018][ T5858] usb 3-1: USB disconnect, device number 7
[   91.396663][ T5867] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   91.437472][    T9] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   91.444304][    T9] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   91.453698][    T9] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   91.460560][    T9] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   91.467474][    T9] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   91.474260][    T9] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   91.481571][    T9] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0
[   91.490952][    T9] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[   91.535082][ T5867] usb 2-1: device descriptor read/64, error -71
[   91.785131][ T5867] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   91.915214][ T5867] usb 2-1: device descriptor read/64, error -71
[   92.025466][ T5867] usb usb2-port1: attempt power cycle
[   92.385132][ T5867] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[   92.415563][ T5867] usb 2-1: device descriptor read/8, error -71
[   92.425112][   T29] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   92.552413][    T9] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device
[   92.568170][    T9] pyra 0003:1E7D:2CF6.0004: couldn't install mouse
[   92.585646][   T29] usb 1-1: Using ep0 maxpacket: 16
[   92.590104][    T9] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71
[   92.604958][   T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.609819][    T9] usb 4-1: USB disconnect, device number 9
[   92.622381][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   92.642924][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   92.657435][   T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   92.667708][   T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   92.684411][   T29] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   92.685614][ T5867] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   92.694074][   T29] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   92.710592][   T29] usb 1-1: Manufacturer: syz
[   92.712423][ T6347] fido_id[6347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[   92.719410][   T29] usb 1-1: config 0 descriptor??
[   92.756839][ T5867] usb 2-1: device descriptor read/8, error -71
[   92.865482][ T5867] usb usb2-port1: unable to enumerate USB device
[   92.985066][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[   93.027022][   T29] rc_core: IR keymap rc-hauppauge not found
[   93.033042][   T29] Registered IR keymap rc-empty
[   93.039681][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.067104][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.090315][   T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   93.115732][   T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10
[   93.132055][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.155403][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.165202][    T9] usb 4-1: Using ep0 maxpacket: 32
[   93.172573][    T9] usb 4-1: config 0 has an invalid interface number: 17 but max is 0
[   93.183071][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.183896][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.193701][    T9] usb 4-1: config 0 has no interface number 0
[   93.208757][    T9] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[   93.220072][    T9] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x5 has invalid maxpacket 1431, setting to 1024
[   93.233021][    T9] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   93.238702][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.243401][    T9] usb 4-1: config 0 interface 17 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[   93.266121][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=ab.c3
[   93.276537][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.284541][    T9] usb 4-1: Product: syz
[   93.289748][    T9] usb 4-1: Manufacturer: syz
[   93.294356][    T9] usb 4-1: SerialNumber: syz
[   93.295875][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.306669][    T9] usb 4-1: config 0 descriptor??
[   93.307348][ T6346] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   93.317286][    T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.17/input/input11
[   93.335153][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.355166][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.355190][ T5867] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   93.385120][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.405146][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.425244][   T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[   93.448415][   T29] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   93.457729][   T29] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   93.498976][ T5879] usb 1-1: USB disconnect, device number 8
[   93.518041][ T5172] bcm5974 4-1:0.17: could not read from device
[   93.531724][ T5867] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.538186][ T5172] bcm5974 4-1:0.17: could not read from device
[   93.542915][ T5867] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c
[   93.573017][    T9] usb 4-1: USB disconnect, device number 10
[   93.573800][ T5172] bcm5974 4-1:0.17: could not read from device
[   93.585598][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.650192][ T5867] usb 3-1: config 0 descriptor??
[   93.862764][ T6360] mmap: syz.2.111 (6360) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   93.883401][ T5867] usb 3-1: string descriptor 0 read error: -71
[   94.105335][ T6371] Invalid ELF header magic: != ELF
[   94.111042][ T6371] Invalid ELF header magic: != ELF
[   94.117310][ T6371] Invalid ELF header magic: != ELF
[   94.122920][ T6371] Invalid ELF header magic: != ELF
[   94.129283][ T6371] Invalid ELF header magic: != ELF
[   94.134736][ T6371] Invalid ELF header magic: != ELF
[   94.140238][ T6371] Invalid ELF header magic: != ELF
[   94.145967][ T6371] Invalid ELF header magic: != ELF
[   94.151453][ T6371] Invalid ELF header magic: != ELF
[   94.157816][ T6371] Invalid ELF header magic: != ELF
[   94.413559][ T6388] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size.
[   94.508506][ T6380] netlink: 68 bytes leftover after parsing attributes in process `syz.3.116'.
[   94.525777][ T5867] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[   94.676487][ T5867] usb 3-1: device descriptor read/64, error -71
[   94.901965][ T6410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.124'.
[   94.935167][ T5867] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[   95.075174][ T5867] usb 3-1: device descriptor read/64, error -71
[   95.085841][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   95.235062][ T5821] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[   95.245146][    T9] usb 1-1: Using ep0 maxpacket: 32
[   95.252874][    T9] usb 1-1: config index 0 descriptor too short (expected 8192, got 61)
[   95.262764][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.273995][    T9] usb 1-1: config 0 has no interfaces?
[   95.276295][ T6414] netlink: 84 bytes leftover after parsing attributes in process `syz.1.126'.
[   95.281791][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19
[   95.298491][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.306917][    T9] usb 1-1: Product: syz
[   95.312735][    T9] usb 1-1: Manufacturer: syz
[   95.318057][ T5867] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[   95.326233][    T9] usb 1-1: SerialNumber: syz
[   95.334952][    T9] usb 1-1: config 0 descriptor??
[   95.356070][ T5867] usb 3-1: device descriptor read/8, error -71
[   95.411916][ T6420] netlink: 'syz.1.128': attribute type 21 has an invalid length.
[   95.412406][ T5821] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   95.430461][ T5821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.442156][ T5821] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   95.444161][ T6420] syzkaller1: entered promiscuous mode
[   95.452363][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   95.458223][ T6420] syzkaller1: entered allmulticast mode
[   95.465107][ T5821] usb 4-1: SerialNumber: syz
[   95.553102][ T6403] overlayfs: invalid origin (000000ca387fe0fb3738702bed8ab4416592a5356da96db48150eae0040000006fe65c239a40022f0000000000000000)
[   95.585359][    T9] usb 1-1: USB disconnect, device number 9
[   95.604496][ T5867] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[   95.646369][ T5867] usb 3-1: device descriptor read/8, error -71
[   95.698559][ T5821] usb 4-1: 0:2 : does not exist
[   95.736577][ T5821] usb 4-1: USB disconnect, device number 11
[   95.764553][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.783581][ T5867] usb 3-1: USB disconnect, device number 8
[   95.925094][ T5867] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   96.055125][ T5867] usb 3-1: device descriptor read/64, error -71
[   96.085139][ T5879] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[   96.173636][ T6427] netlink: 48 bytes leftover after parsing attributes in process `syz.0.131'.
[   96.188349][  T179] Bluetooth: hci4: Frame reassembly failed (-84)
[   96.199528][ T6427] loop6: detected capacity change from 0 to 7
[   96.210359][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.219992][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.228086][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.237717][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.245774][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.255369][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.275031][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.284619][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.292726][ T5879] usb 2-1: Using ep0 maxpacket: 32
[   96.292771][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.305851][ T5879] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   96.307477][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.325102][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.334693][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.345454][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.355089][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.355331][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.371141][ T5805] ldm_validate_partition_table(): Disk read failed.
[   96.381600][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.391227][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.412891][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.422522][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.432606][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[   96.442234][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   96.452146][ T5805] Dev loop6: unable to read RDB block 0
[   96.463262][ T5879] usb 2-1: config 0 descriptor??
[   96.479500][ T5879] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   96.491361][ T5805]  loop6: unable to read partition table
[   96.497456][ T5805] loop6: partition table beyond EOD, truncated
[   96.516986][ T6427] ldm_validate_partition_table(): Disk read failed.
[   96.524365][ T6427] Dev loop6: unable to read RDB block 0
[   96.531310][ T6427]  loop6: unable to read partition table
[   96.538290][ T6427] loop6: partition table beyond EOD, truncated
[   96.544662][ T6427] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[   96.651511][ T5187] ldm_validate_partition_table(): Disk read failed.
[   96.658569][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   96.668063][ T5187] Dev loop6: unable to read RDB block 0
[   96.674407][ T5187]  loop6: unable to read partition table
[   96.682065][ T5187] loop6: partition table beyond EOD, truncated
[   96.694163][ T6444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   96.723228][ T6444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   96.731290][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[   96.773418][ T5879] gspca_vc032x: reg_w err -71
[   96.787077][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.795624][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.800984][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.820745][ T5867] usb 3-1: Using ep0 maxpacket: 32
[   96.829451][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.833876][ T6447] netlink: 'syz.0.135': attribute type 27 has an invalid length.
[   96.848993][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.859997][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.868194][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.873609][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.883611][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.889219][    T9] usb 4-1: Using ep0 maxpacket: 16
[   96.895272][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.901582][ T5867] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   96.911313][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.917303][    T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.929051][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.934348][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.940090][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.949582][    T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.959828][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.966812][    T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   96.980965][ T5867] usb 3-1: config 0 descriptor??
[   96.985962][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.991544][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   96.999189][ T5867] hub 3-1:0.0: USB hub found
[   97.004159][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[   97.011158][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   97.016839][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   97.022154][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   97.027675][    T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   97.036799][ T5820] Bluetooth: hci0: command 0x0406 tx timeout
[   97.042987][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.052298][ T5879] gspca_vc032x: I2c Bus Busy Wait 00
[   97.057766][ T5879] gspca_vc032x: Unknown sensor...
[   97.062895][ T5879] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[   97.073792][    T9] usb 4-1: config 0 descriptor??
[   97.094131][ T5879] usb 2-1: USB disconnect, device number 15
[   97.161120][ T6459] netlink: 'syz.1.138': attribute type 2 has an invalid length.
[   97.173101][ T6459] netlink: 164 bytes leftover after parsing attributes in process `syz.1.138'.
[   97.181403][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'.
[   97.198727][ T5867] hub 3-1:0.0: 19 ports detected
[   97.208841][ T5867] hub 3-1:0.0: insufficient power available to use all downstream ports
[   97.410623][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.419649][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.691905][    T9] usbhid 4-1:0.0: can't add hid device: -71
[   97.715582][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   97.752034][    T9] usb 4-1: USB disconnect, device number 12
[   98.126853][ T6477] overlayfs: failed lookup in lower (newroot/35, name='file0', err=-40): overlapping layers
[   98.165264][   T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   98.208016][ T6479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.221522][ T6479] netlink: 180 bytes leftover after parsing attributes in process `syz.1.145'.
[   98.230579][   T51] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   98.267782][ T5867] hub 3-1:0.0: hub_hub_status failed (err = -71)
[   98.286839][ T5867] hub 3-1:0.0: config failed, can't get hub status (err -71)
[   98.309274][ T5867] usbhid 3-1:0.0: can't add hid device: -71
[   98.324259][ T5867] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   98.325043][   T29] usb 1-1: Using ep0 maxpacket: 32
[   98.366776][ T5867] usb 3-1: USB disconnect, device number 10
[   98.367489][   T29] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   98.407911][   T29] usb 1-1: config 0 interface 0 has no altsetting 0
[   98.414582][   T29] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[   98.427177][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.442417][   T29] usb 1-1: config 0 descriptor??
[   98.685113][ T5879] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[   98.835104][ T5879] usb 4-1: Using ep0 maxpacket: 16
[   98.842157][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   98.858200][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   98.871175][ T5879] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   98.880313][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.888359][ T5879] usb 4-1: Product: syz
[   98.893541][ T5879] usb 4-1: Manufacturer: syz
[   98.898384][ T5879] usb 4-1: SerialNumber: syz
[   98.906068][ T5879] usb 4-1: config 0 descriptor??
[   98.914051][ T5879] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   98.923481][ T5879] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[   99.095122][ T5867] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   99.217711][   T29] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0
[   99.245067][ T5867] usb 3-1: Using ep0 maxpacket: 32
[   99.253146][ T5867] usb 3-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config
[   99.264076][ T5867] usb 3-1: config 102 has 0 interfaces, different from the descriptor's value: 1
[   99.284329][ T5867] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=d9.27
[   99.293555][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.302822][ T5867] usb 3-1: Product: 凇滾꣹Ώ橡某邆宻켸ꆭׯ꥕뮶죊쀐椁秭ᇄ
[   99.311460][ T5867] usb 3-1: Manufacturer: 湪ꀈ䖦Ớ깈ᠦ攦嗮瘪ﭛ沑湹얜䵯ᣞ횞汬큍㴺뗸鱕靻㨝딓ᚵះ捎씁韍鏤몐泼阌葿侈蝿ᖇꋁ듶ܻ擱슼꾨떻ꕱ⪞扩풛ޥﺟ琧째⸰潺㜰䁅ᇾᚠ덮橺葚瘬煃ɰ홳层䈽슫窐
[   99.419145][   T29] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -71
[   99.537722][ T5879] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[   99.546191][ T5879] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[   99.560906][ T5867] usb 3-1: USB disconnect, device number 11
[   99.616586][    T9] usb 1-1: USB disconnect, device number 10
[   99.655074][   T29] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   99.805069][   T29] usb 2-1: Using ep0 maxpacket: 32
[   99.811650][   T29] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[   99.820775][   T29] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   99.829537][   T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[   99.838644][   T29] usb 2-1: config 1 has no interface number 0
[   99.844793][   T29] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   99.855714][   T29] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   99.868646][   T29] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   99.877717][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.893203][   T29] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  100.099024][   T29] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  100.157358][ T5879] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  100.251608][ T6503] process 'syz.2.153' launched './file2' with NULL argv: empty string added
[  100.534064][ T5867] usb 2-1: USB disconnect, device number 16
[  100.541111][ T5867] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  100.557291][   T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  100.717974][   T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  100.727878][   T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  100.740865][   T29] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  100.750045][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.758077][   T29] usb 1-1: Product: syz
[  100.762307][   T29] usb 1-1: Manufacturer: syz
[  100.766961][   T29] usb 1-1: SerialNumber: syz
[  100.775151][   T29] usb 1-1: config 0 descriptor??
[  100.776245][ T5879] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  100.787230][ T6505] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  100.798385][ T6505] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  100.806274][ T5879] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  100.813037][ T5879] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  100.819879][ T5879] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  100.834654][ T5879] usb 4-1: USB disconnect, device number 13
[  101.006830][ T6505] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  101.014157][ T6505] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  101.024528][   T29] Error reading MAC address
[  101.134003][ T6515] sp0: Synchronizing with TNC
[  101.150175][ T6514] [U] �`
[  101.416205][ T6522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.435098][   T29] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  101.464515][ T6522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.500346][ T6522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.558544][ T6522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.585066][   T29] usb 2-1: Using ep0 maxpacket: 8
[  101.593424][   T29] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  101.604966][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.613118][   T29] usb 2-1: Product: syz
[  101.617387][   T29] usb 2-1: Manufacturer: syz
[  101.622115][   T29] usb 2-1: SerialNumber: syz
[  101.630165][   T29] usb 2-1: config 0 descriptor??
[  101.635881][ T5821] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  101.648451][   T29] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  101.659021][   T29] dvb-usb: bulk message failed: -22 (2/0)
[  101.671381][   T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  101.678239][  T179] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.681458][   T29] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  101.698749][   T29] usb 2-1: media controller created
[  101.702040][  T179] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.719116][   T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  101.726545][  T179] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.749004][   T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.788832][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.806884][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  101.819640][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.832182][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  101.845999][ T5821] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  101.855276][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.874341][ T5821] usb 4-1: config 0 descriptor??
[  101.935148][   T29] dvb-usb: bulk message failed: -22 (1/0)
[  101.978269][   T29] DVB: Unable to find symbol mt352_attach()
[  101.984402][   T29] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  102.055955][    T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  102.056215][   T29] rc_core: IR keymap rc-dvico-portable not found
[  102.071570][   T29] Registered IR keymap rc-empty
[  102.078452][   T29] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  102.090409][ T5821] usbhid 4-1:0.0: can't add hid device: -71
[  102.100268][   T29] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12
[  102.111543][ T5821] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  102.126876][ T5821] usb 4-1: USB disconnect, device number 14
[  102.133725][   T29] dvb-usb: schedule remote query interval to 100 msecs.
[  102.147499][   T29] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  102.165917][   T29] usb 2-1: USB disconnect, device number 17
[  102.187751][    T9] usb 3-1: device descriptor read/64, error -71
[  102.223780][   T29] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  102.425195][    T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  102.555154][    T9] usb 3-1: device descriptor read/64, error -71
[  102.625358][ T5821] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  102.665327][    T9] usb usb3-port1: attempt power cycle
[  102.786912][ T5821] usb 4-1: Using ep0 maxpacket: 32
[  102.802385][ T5821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.816127][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.830166][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.845904][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  102.863324][ T5821] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  102.875674][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.894888][ T5821] usb 4-1: config 0 descriptor??
[  103.027976][    T9] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  103.058465][    T9] usb 3-1: device descriptor read/8, error -71
[  103.115739][ T6540] netlink: 'syz.1.163': attribute type 46 has an invalid length.
[  103.123851][ T6540] netlink: 'syz.1.163': attribute type 28 has an invalid length.
[  103.132691][ T6539] kvm: kvm [6538]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x4000006e) = 0x8004
[  103.143219][ T6539] loop8: detected capacity change from 0 to 2
[  103.152456][ T6539] Dev loop8: unable to read RDB block 2
[  103.159763][ T6539]  loop8: unable to read partition table
[  103.166093][ T6539] loop8: partition table beyond EOD, truncated
[  103.172427][ T6539] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  103.305510][    T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  103.313578][ T5821] usbhid 4-1:0.0: can't add hid device: -71
[  103.326025][    T9] usb 3-1: device descriptor read/8, error -71
[  103.343595][ T5821] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  103.352774][   T29] usb 1-1: USB disconnect, device number 11
[  103.381896][ T5821] usb 4-1: USB disconnect, device number 15
[  103.441711][    T9] usb usb3-port1: unable to enumerate USB device
[  103.715153][ T5950] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  103.845110][ T5821] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  103.867065][ T5950] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  103.876199][ T5950] usb 2-1: config 0 has no interface number 0
[  103.882321][ T5950] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  103.895373][ T5950] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  103.908372][ T5950] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  103.919157][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  103.927894][ T5950] usb 2-1: Product: syz
[  103.932675][ T5950] usb 2-1: SerialNumber: syz
[  103.942666][ T5950] usb 2-1: config 0 descriptor??
[  103.951200][ T5950] cm109 2-1:0.8: invalid payload size 8, expected 4
[  103.961405][ T5950] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input13
[  104.017131][ T5821] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  104.029026][ T5821] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 173, changing to 4
[  104.042575][ T5821] usb 1-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40
[  104.072944][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.081153][ T5821] usb 1-1: Product: syz
[  104.085375][ T5821] usb 1-1: Manufacturer: syz
[  104.089970][ T5821] usb 1-1: SerialNumber: syz
[  104.150480][    C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
[  104.166562][   T30] audit: type=1326 audit(1772421563.845:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.3.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4979b9c799 code=0x0
[  104.319944][ T5821] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  104.328034][ T5821] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  104.377186][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.384337][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.391544][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.398661][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.406159][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.408914][ T5821] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  104.413460][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.432258][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.432805][ T5821] usb 1-1: USB disconnect, device number 12
[  104.439960][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.452928][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.460243][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  104.485989][ T5950] usb 2-1: USB disconnect, device number 18
[  104.491945][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  104.522784][ T5950] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  104.543739][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  105.066597][ T5950] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  105.236106][ T5867] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  105.247612][ T5950] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  105.258762][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.272137][ T5950] usb 2-1: config 0 descriptor??
[  105.395133][ T5867] usb 3-1: device descriptor read/64, error -71
[  105.504609][ T5950] usb 2-1: Cannot set MAC address
[  105.520073][ T5950] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  105.541312][ T5950] usb 2-1: USB disconnect, device number 19
[  105.645090][ T5867] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  105.785053][ T5867] usb 3-1: device descriptor read/64, error -71
[  105.902046][ T5867] usb usb3-port1: attempt power cycle
[  105.965334][ T5879] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  106.079664][ T6626] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication
[  106.090573][ T6626] netlink: 448 bytes leftover after parsing attributes in process `syz.3.186'.
[  106.125096][ T5879] usb 2-1: Using ep0 maxpacket: 32
[  106.131625][ T5879] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  106.142992][ T5879] usb 2-1: config 0 interface 0 has no altsetting 0
[  106.149762][ T5879] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  106.158880][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.170191][ T5879] usb 2-1: config 0 descriptor??
[  106.265546][ T5867] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  106.296032][ T5867] usb 3-1: device descriptor read/8, error -71
[  106.545096][ T5867] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  106.565496][ T5867] usb 3-1: device descriptor read/8, error -71
[  106.581131][ T6616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.589887][ T6616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.675694][ T5867] usb usb3-port1: unable to enumerate USB device
[  106.752614][ T6635] program syz.0.188 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.819240][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.189'.
[  106.840118][ T6622] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  106.909424][ T6644] fuse: Unknown parameter 'fd	�s�ʿ�$U��&VA(@A<�#hp�\S���'
[  106.962915][ T5879] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  106.995108][ T5879] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  107.010029][ T5879] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  107.018599][ T5879] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  107.029851][ T5879] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  107.046835][ T5879] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[  107.245080][ T5867] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  107.395116][ T5867] usb 4-1: Using ep0 maxpacket: 8
[  107.401833][ T5867] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  107.412733][ T5867] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  107.421904][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.431097][ T5867] usb 4-1: Product: syz
[  107.436603][ T5879] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -110
[  107.446595][ T5867] usb 4-1: Manufacturer: syz
[  107.451189][ T5867] usb 4-1: SerialNumber: syz
[  107.459542][ T5879] usb 2-1: USB disconnect, device number 20
[  107.469552][ T5867] usb 4-1: config 0 descriptor??
[  107.483733][ T5867] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  107.877455][   T30] audit: type=1804 audit(1772421567.555:4): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.195" name="/newroot/53/file1" dev="tmpfs" ino=309 res=1 errno=0
[  107.925799][ T6666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'.
[  108.022983][ T6670] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  108.218899][ T6684] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  108.306245][ T6649] veth1_virt_wifi: entered promiscuous mode
[  108.314220][ T6649] veth1_virt_wifi: entered allmulticast mode
[  108.533339][ T5867] gspca_zc3xx: reg_w_i err -71
[  108.795213][ T5950] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  108.812644][ T5826] block nbd1: Receive control failed (result -32)
[  108.826188][ T6676] block nbd1: shutting down sockets
[  108.955174][ T5950] usb 1-1: Using ep0 maxpacket: 16
[  108.963915][ T5950] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  108.973077][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.981124][ T5950] usb 1-1: Product: syz
[  108.987528][ T5950] usb 1-1: Manufacturer: syz
[  108.992119][ T5950] usb 1-1: SerialNumber: syz
[  109.006811][ T5950] usb 1-1: config 0 descriptor??
[  109.024013][ T5950] visor 1-1:0.0: Sony Clie 3.5 converter detected
[  109.043125][ T6689] Zero length message leads to an empty skb
[  109.135085][ T5867] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  109.141438][ T5867] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  109.153272][ T5867] usb 4-1: USB disconnect, device number 16
[  109.281410][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'.
[  109.425652][ T5950] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  109.629224][ T5821] usb 1-1: USB disconnect, device number 13
[  109.638864][ T5821] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  109.650318][ T5821] visor 1-1:0.0: device disconnected
[  109.725253][ T5950] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  109.826095][ T5879] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  109.875055][ T5950] usb 2-1: Using ep0 maxpacket: 32
[  109.881770][ T5950] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  109.890239][ T5950] usb 2-1: config 0 has no interface number 0
[  109.896630][ T5950] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  109.908546][ T5950] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  109.917616][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.925636][ T5950] usb 2-1: Product: syz
[  109.929780][ T5950] usb 2-1: Manufacturer: syz
[  109.934961][ T5950] usb 2-1: SerialNumber: syz
[  109.941608][ T5950] usb 2-1: config 0 descriptor??
[  109.947325][ T6698] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  109.989811][ T5879] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  109.999000][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.007046][ T5879] usb 3-1: Product: syz
[  110.011236][ T5879] usb 3-1: Manufacturer: syz
[  110.016000][ T5879] usb 3-1: SerialNumber: syz
[  110.022789][ T5879] usb 3-1: config 0 descriptor??
[  110.157762][ T6698] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  110.242324][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.252526][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.290459][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.303082][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.331821][   T29] usb 3-1: USB disconnect, device number 20
[  110.417362][ T5821] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  110.485239][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  110.575532][ T5821] usb 1-1: Using ep0 maxpacket: 16
[  110.588042][ T5821] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  110.601188][ T5821] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  110.625129][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.633147][ T5821] usb 1-1: Product: syz
[  110.638527][ T5821] usb 1-1: Manufacturer: syz
[  110.643144][ T5821] usb 1-1: SerialNumber: syz
[  110.662086][ T5821] usb 1-1: config 0 descriptor??
[  110.670883][ T5821] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  110.696054][ T5821] usb 1-1: Detected FT232R
[  110.808172][ T5950] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  110.828008][ T5950] asix 2-1:0.188: probe with driver asix failed with error -71
[  110.845341][ T5950] usb 2-1: USB disconnect, device number 21
[  110.877192][ T5821] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  110.947264][ T6739] fuse: Unknown parameter 'fh�0x0000000000000005'
[  111.024210][ T6741] netlink: 9 bytes leftover after parsing attributes in process `syz.3.216'.
[  111.062225][ T6741] gretap0: entered promiscuous mode
[  111.071955][ T6741] netlink: 5 bytes leftover after parsing attributes in process `syz.3.216'.
[  111.086043][ T6741] 0��{X��: renamed from gretap0
[  111.101616][ T6741] 0��{X��: left promiscuous mode
[  111.108666][ T5821] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  111.116981][ T6741] 0��{X��: entered allmulticast mode
[  111.133378][ T6741] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  111.185186][ T5950] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  111.216558][ T6750] syzkaller1: entered promiscuous mode
[  111.222111][ T6750] syzkaller1: entered allmulticast mode
[  111.358045][ T5950] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  111.368989][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.377399][ T5950] usb 2-1: Product: syz
[  111.381573][ T5950] usb 2-1: Manufacturer: syz
[  111.389572][ T5950] usb 2-1: SerialNumber: syz
[  111.405665][ T5879] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  111.415950][ T5950] usb 2-1: config 0 descriptor??
[  111.424078][ T5950] ch341 2-1:0.0: ch341-uart converter detected
[  111.565929][ T5879] usb 3-1: Using ep0 maxpacket: 16
[  111.572963][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  111.584516][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  111.598442][ T5879] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  111.607560][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.615613][ T5879] usb 3-1: Product: syz
[  111.619762][ T5879] usb 3-1: Manufacturer: syz
[  111.624365][ T5879] usb 3-1: SerialNumber: syz
[  111.630186][ T5950] usb 2-1: failed to receive control message: -121
[  111.637690][ T5879] usb 3-1: config 0 descriptor??
[  111.643970][ T5950] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -121
[  111.646264][ T6761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.656136][ T5879] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  111.665055][ T6761] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.685043][ T5879] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  111.696650][ T5901] usb 1-1: USB disconnect, device number 14
[  111.719890][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  111.731821][ T5901] ftdi_sio 1-1:0.0: device disconnected
[  111.765151][ T5821] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  111.916663][ T5821] usb 4-1: config index 0 descriptor too short (expected 65183, got 72)
[  111.926974][ T5821] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  111.936929][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.944904][ T5821] usb 4-1: Product: syz
[  111.949244][ T5821] usb 4-1: Manufacturer: syz
[  111.953863][ T5821] usb 4-1: SerialNumber: syz
[  111.964036][ T5821] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  111.988693][   T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  112.085136][ T5901] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  112.193349][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.203096][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.213779][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.222943][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.232784][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.241179][ T5901] usb 1-1: Using ep0 maxpacket: 16
[  112.248407][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.250403][ T5901] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  112.257601][ T5950] usb 4-1: USB disconnect, device number 18
[  112.272918][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.276737][ T5879] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  112.287056][ T5901] usb 1-1: config 0 descriptor??
[  112.295380][ T5879] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  112.301646][ T5901] gspca_main: sonixj-2.14.0 probing 0471:0327
[  112.494771][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.504290][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.514566][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.523442][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.532407][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.541771][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.550998][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.560453][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.569672][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.578376][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.905582][ T5879] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  112.913413][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  112.921929][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  112.928939][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  112.935818][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  112.942882][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  113.008943][ T6766] syzkaller1: entered promiscuous mode
[  113.014529][ T6766] syzkaller1: entered allmulticast mode
[  113.025359][   T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  113.033337][   T24] ath9k_htc: Failed to initialize the device
[  113.041818][ T5950] usb 4-1: ath9k_htc: USB layer deinitialized
[  113.129266][ T5901] gspca_sonixj: reg_r err -71
[  113.134059][ T5901] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  113.147299][ T5901] usb 1-1: USB disconnect, device number 15
[  113.157729][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  113.173959][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  113.180610][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  113.189716][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  113.196380][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  113.212000][ T5879] usb 3-1: USB disconnect, device number 21
[  113.218439][ T6772] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10)
[  113.225198][ T6772] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  113.235271][ T6772] vhci_hcd vhci_hcd.0: Device attached
[  113.241293][ T6774] vhci_hcd: cannot find the pending unlink 15
[  113.365087][ T5950] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  113.475291][ T5821] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  113.525174][ T5950] usb 4-1: Using ep0 maxpacket: 32
[  113.531760][ T5950] usb 4-1: config index 0 descriptor too short (expected 241, got 72)
[  113.535533][ T5901] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  113.541465][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  113.559030][ T5950] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da
[  113.568090][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.578013][ T5950] usb 4-1: config 0 descriptor??
[  113.586657][ T5950] mos7840 4-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected
[  113.695051][ T5901] usb 1-1: Using ep0 maxpacket: 16
[  113.706068][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.717074][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.728051][ T5901] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.737256][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.746482][ T5901] usb 1-1: Product: syz
[  113.750717][ T5901] usb 1-1: Manufacturer: syz
[  113.755631][ T5901] usb 1-1: SerialNumber: syz
[  113.882975][    T9] usb 2-1: USB disconnect, device number 22
[  113.892618][    T9] ch341 2-1:0.0: device disconnected
[  113.926295][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'.
[  113.965585][ T6774] vhci_hcd: connection reset by peer
[  113.975425][ T5901] usb 1-1: 0:2 : does not exist
[  113.991842][  T179] vhci_hcd vhci_hcd.0: stop threads
[  113.998755][  T179] vhci_hcd vhci_hcd.0: release socket
[  114.006045][  T179] vhci_hcd vhci_hcd.0: disconnect device
[  114.013625][ T5901] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  114.048485][ T5879] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  114.064833][ T5901] usb 1-1: USB disconnect, device number 16
[  114.106742][ T5805] udevd[5805]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.208762][ T5879] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.221050][ T5879] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  114.234346][ T5879] usb 3-1: config 1 interface 0 has no altsetting 0
[  114.243033][ T5879] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.40
[  114.253225][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.261324][ T5879] usb 3-1: Product: 쯣ﭳⶽ튒膌슇蟌旻嘦閉ﶓ暪◗Ή䖶릑㓻罵捱侑ꭲ陋ൃҺ픖Ⴞᒕ㽕႟깾맀ዄᯗ｜乻汐闾䮗裮煮Ьࠞ醿犓⎌ꡋᖟ饟墀ϟ巘蟃鎏탏ŀ百䃋麞䶪Ӥ뢨뮻蛖빟㚎젤览郈섻嵂鰧麓鈝㬰﵁伉Ɉ畝뤝꾉灯蒜ب犯ꚮ폏䱗ឱ䑫〕馬뫌촊垅翵란怲⫛䷁ꡝ쇷楀埬䌃ึ얣敺
[  114.295769][ T5879] usb 3-1: Manufacturer: 빭≘⚤７凯ǯ親ᮃ烤鿍⑽뜓脫僥奼ᓛᣓᧁ箔蕔뛻⭹鐠ꆾ츭諃굑樼⧳褕晍쇖氈ବ전삘鼀䯱졬볿빸ಲ옲菊樚얭鋨꣗嬤㥈橵䋰湹巒歎ꩃ瑈吳ﯙ옇쑦搈諍混란⠚佨튚㺠滺ꨆ텕쒱槍块굽惟춙缿䓑찼륽앋䧝鰖⵾鎁ᇆ긺첚纘㞤絜ꀹ戲㪾㙻荣ᵎ
[  114.329690][ T5879] usb 3-1: SerialNumber: 溁擦嗕挛䢆攭뼲栢雺잺筸勒₌럡篮죀꨸⢋줷쫽庌퐤򫖩犭鑙⫤ﯞ▏罏㦷쁖쩰峩녔脪튉⢣⃰䄜ꃫ᪽㳻邕黟踷儂㽪姭쯫沷騡疖赾쭻좮뽲㪞覱㚁껑망ѣꚴﲇ뿐綑勗Ꮰ德࿄飋㭄댭㑱꜂糴挰诳쵵떦牬ㆄሤԃ筵깔穁෥䡤फ़蕜
[  114.495172][ T5901] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  114.572252][ T6800] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  114.575229][ T6799] Mount JFS Failure: -22
[  114.578781][ T6800] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  114.592855][ T6799] jfs_mount failed w/return code = -22
[  114.598606][ T6800] vhci_hcd vhci_hcd.0: Device attached
[  114.614851][ T6802] vhci_hcd: connection closed
[  114.615158][   T49] vhci_hcd vhci_hcd.0: stop threads
[  114.625540][ T5901] usb 2-1: device descriptor read/64, error -71
[  114.631882][   T49] vhci_hcd vhci_hcd.0: release socket
[  114.638422][   T49] vhci_hcd vhci_hcd.0: disconnect device
[  114.689480][ T5950] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71
[  114.715865][ T5950] mos7840 ttyUSB2: probe with driver mos7840 failed with error -71
[  114.754146][ T5950] usb 4-1: USB disconnect, device number 19
[  114.782832][ T5950] mos7840 4-1:0.0: device disconnected
[  114.875977][ T5901] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  115.015312][ T5901] usb 2-1: device descriptor read/64, error -71
[  115.126335][ T5901] usb usb2-port1: attempt power cycle
[  115.365105][   T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  115.406938][ T6833] Sensor A: =================  START STATUS  =================
[  115.414608][ T6833] Sensor A: Test Pattern: 75% Colorbar
[  115.421050][ T6833] Sensor A: Show Information: All
[  115.426376][ T6833] Sensor A: Vertical Flip: false
[  115.431413][ T6833] Sensor A: Horizontal Flip: false
[  115.438908][ T6833] Sensor A: Brightness: 128
[  115.443460][ T6833] Sensor A: Contrast: 128
[  115.447869][ T6833] Sensor A: Hue: 0
[  115.451611][ T6833] Sensor A: Saturation: 128
[  115.456197][ T6833] Sensor A: ==================  END STATUS  ==================
[  115.475097][ T5901] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  115.495757][ T5901] usb 2-1: device descriptor read/8, error -71
[  115.526413][   T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  115.535870][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.557622][   T24] usb 1-1: config 0 descriptor??
[  115.724509][ T6843] cgroup: Invalid name
[  115.745142][ T5901] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  115.767957][ T5901] usb 2-1: device descriptor read/8, error -71
[  115.876793][ T5901] usb usb2-port1: unable to enumerate USB device
[  116.283894][   T30] audit: type=1804 audit(1772421575.955:5): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.248" name="bus" dev="ramfs" ino=13715 res=1 errno=0
[  116.388263][   T24] usb 1-1: Cannot set autoneg
[  116.393133][   T24] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  116.428317][   T24] usb 1-1: USB disconnect, device number 17
[  116.726293][ T5879] usbhid 3-1:1.0: can't add hid device: -71
[  116.734485][ T5879] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  116.747462][ T5879] usb 3-1: USB disconnect, device number 22
[  116.944382][ T6858] tls_set_device_offload: netdev not found
[  117.200034][ T5901] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  117.215122][ T5879] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  117.235085][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  117.396648][ T5901] usb 1-1: config 0 interface 1 has no altsetting 0
[  117.406840][ T5901] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e
[  117.407599][ T5879] usb 3-1: Using ep0 maxpacket: 8
[  117.421740][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.428830][    T9] usb 4-1: config 0 has no interfaces?
[  117.433733][ T5901] usb 1-1: Product: syz
[  117.439672][ T5901] usb 1-1: Manufacturer: syz
[  117.439869][    T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  117.444590][ T5901] usb 1-1: SerialNumber: syz
[  117.453765][ T5879] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  117.466390][ T5901] usb 1-1: config 0 descriptor??
[  117.475764][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.483835][ T5879] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  117.502533][    T9] usb 4-1: config 0 descriptor??
[  117.520146][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  117.539901][ T5901] msi2500 1-1:0.1: Registered as swradio24
[  117.545954][ T5879] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  117.546717][ T6870] ipvlan0: entered promiscuous mode
[  117.555969][ T5879] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.556011][ T5879] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  117.556033][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.595519][ T5901] msi2500 1-1:0.1: SDR API is still slightly experimental and functionality changes may follow
[  117.598056][ T6870] ipvlan0: entered allmulticast mode
[  117.611790][ T6870] veth0_vlan: entered allmulticast mode
[  117.648966][ T5901] videodev: could not get a free minor
[  117.654466][ T5901] msi2500 1-1:0.0: Failed to register as video device (-23)
[  117.672224][ T5901] msi2500 1-1:0.0: probe with driver msi2500 failed with error -23
[  117.692694][ T5901] usb 1-1: USB disconnect, device number 18
[  117.758408][ T5950] usb 4-1: USB disconnect, device number 20
[  117.978732][ T6878] tipc: Enabling of bearer <dth:v> rejected, media not registered
[  118.226888][ T6880] ceph: No mds server is up or the cluster is laggy
[  118.234906][ T6881] ceph: No mds server is up or the cluster is laggy
[  118.330834][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  118.340348][ T6892] usbtmc 3-1:16.0: simple usb_control_msg failed -32
[  118.341150][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  118.465269][ T5950] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  118.489260][ T6896] netlink: 100 bytes leftover after parsing attributes in process `syz.3.261'.
[  118.565380][ T5901] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  118.615222][ T5821] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  118.625128][ T5950] usb 1-1: Using ep0 maxpacket: 8
[  118.633003][ T5950] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  118.646210][ T5950] usb 1-1: config 179 has no interface number 0
[  118.652539][ T5950] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  118.673639][ T5950] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  118.686273][ T5950] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  118.699472][ T5950] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  118.711461][ T5950] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  118.724960][ T5950] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  118.726705][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.734346][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.761114][ T5901] usb 2-1: config 0 interface 0 has no altsetting 0
[  118.764803][ T6888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.775116][ T5901] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  118.796569][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.815493][ T5901] usb 2-1: config 0 descriptor??
[  118.830366][ T5901] pwc: Askey VC010 type 2 USB webcam detected.
[  118.945216][ T6916] =======================================================
[  118.945216][ T6916] WARNING: The mand mount option has been deprecated and
[  118.945216][ T6916]          and is ignored by this kernel. Remove the mand
[  118.945216][ T6916]          option from the mount to silence this warning.
[  118.945216][ T6916] =======================================================
[  119.024796][ T5950] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14
[  119.213686][ T6888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.222758][ T6888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.226976][ T5901] pwc: recv_control_msg error -32 req 02 val 2b00
[  119.238553][ T5901] pwc: recv_control_msg error -32 req 02 val 2700
[  119.246056][ T5901] pwc: recv_control_msg error -32 req 02 val 2c00
[  119.253754][ T5901] pwc: recv_control_msg error -32 req 04 val 1000
[  119.261697][ T5901] pwc: recv_control_msg error -32 req 04 val 1300
[  119.268863][ T5901] pwc: recv_control_msg error -32 req 04 val 1400
[  119.276916][ T5901] pwc: recv_control_msg error -32 req 02 val 2000
[  119.284158][ T5901] pwc: recv_control_msg error -32 req 02 val 2100
[  119.291213][ T5901] pwc: recv_control_msg error -32 req 04 val 1500
[  119.298265][ T5901] pwc: recv_control_msg error -32 req 02 val 2500
[  119.305446][ T5901] pwc: recv_control_msg error -32 req 02 val 2400
[  119.485303][ T5821] usb 1-1: USB disconnect, device number 19
[  119.485354][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  119.500918][    C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  119.514447][ T5901] pwc: recv_control_msg error -32 req 02 val 2900
[  119.526689][ T5901] pwc: recv_control_msg error -32 req 02 val 2800
[  119.537646][ T5901] pwc: recv_control_msg error -32 req 04 val 1100
[  119.545762][ T5901] pwc: recv_control_msg error -32 req 04 val 1200
[  119.559048][ T5901] pwc: Registered as video103.
[  119.579453][ T5901] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15
[  119.606341][ T6918] FAULT_INJECTION: forcing a failure.
[  119.606341][ T6918] name failslab, interval 1, probability 0, space 0, times 1
[  119.619065][ T6918] CPU: 1 UID: 0 PID: 6918 Comm: syz.3.268 Not tainted syzkaller #0 PREEMPT(full) 
[  119.619085][ T6918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  119.619100][ T6918] Call Trace:
[  119.619112][ T6918]  <TASK>
[  119.619119][ T6918]  dump_stack_lvl+0xe8/0x150
[  119.619147][ T6918]  should_fail_ex+0x412/0x560
[  119.619172][ T6918]  should_failslab+0xa8/0x100
[  119.619194][ T6918]  __kmalloc_noprof+0xe8/0x760
[  119.619214][ T6918]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  119.619239][ T6918]  tomoyo_realpath_from_path+0xe3/0x5d0
[  119.619269][ T6918]  ? tomoyo_path_number_perm+0x219/0x630
[  119.619295][ T6918]  tomoyo_path_number_perm+0x246/0x630
[  119.619322][ T6918]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  119.619350][ T6918]  ? __lock_acquire+0x6b5/0x2cf0
[  119.619382][ T6918]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  119.619422][ T6918]  ? __fget_files+0x2a/0x420
[  119.619449][ T6918]  ? __fget_files+0x2a/0x420
[  119.619470][ T6918]  ? __fget_files+0x3a0/0x420
[  119.619492][ T6918]  ? __fget_files+0x2a/0x420
[  119.619518][ T6918]  security_file_ioctl+0xc3/0x2a0
[  119.619542][ T6918]  __se_sys_ioctl+0x47/0x170
[  119.619563][ T6918]  do_syscall_64+0x14d/0xf80
[  119.619582][ T6918]  ? trace_irq_disable+0x3b/0x150
[  119.619603][ T6918]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.619620][ T6918]  ? clear_bhb_loop+0x40/0x90
[  119.619641][ T6918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.619656][ T6918] RIP: 0033:0x7f4979b9c799
[  119.619677][ T6918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.619690][ T6918] RSP: 002b:00007f497aa29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  119.619711][ T6918] RAX: ffffffffffffffda RBX: 00007f4979e15fa0 RCX: 00007f4979b9c799
[  119.619723][ T6918] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000003
[  119.619733][ T6918] RBP: 00007f497aa29090 R08: 0000000000000000 R09: 0000000000000000
[  119.619743][ T6918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.619752][ T6918] R13: 00007f4979e16038 R14: 00007f4979e15fa0 R15: 00007ffca7716548
[  119.619779][ T6918]  </TASK>
[  119.619791][ T6918] ERROR: Out of memory at tomoyo_realpath_from_path.
[  119.826731][    T9] usb 3-1: USB disconnect, device number 23
[  120.040797][ T6932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.271'.
[  120.255174][    T9] usb 2-1: USB disconnect, device number 27
[  120.365929][ T6950] hpfs: Bad magic ... probably not HPFS
[  120.405484][ T5821] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  120.455142][   T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  120.556658][ T5821] usb 4-1: config 0 has no interfaces?
[  120.562164][ T5821] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  120.571276][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.581108][ T5821] usb 4-1: config 0 descriptor??
[  120.595170][    T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  120.605095][   T24] usb 1-1: Using ep0 maxpacket: 16
[  120.611819][   T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  120.620982][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.631373][   T24] usb 1-1: config 0 descriptor??
[  120.635934][ T5879] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  120.643039][   T24] gspca_main: sonixj-2.14.0 probing 0471:0327
[  120.745055][    T9] usb 2-1: Using ep0 maxpacket: 8
[  120.751854][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  120.760531][    T9] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[  120.768778][    T9] usb 2-1: config 0 has no interface number 0
[  120.774943][    T9] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  120.786536][    T9] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  120.791916][ T5821] usb 4-1: USB disconnect, device number 21
[  120.796440][    T9] usb 2-1: config 0 interface 88 has no altsetting 0
[  120.812092][ T5879] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  120.822654][ T5879] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  120.837841][ T5879] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  120.842047][   T24] gspca_sonixj: reg_r err -32
[  120.846957][ T5879] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  120.846981][ T5879] usb 3-1: Manufacturer: syz
[  120.846996][ T5879] usb 3-1: SerialNumber: syz
[  120.867746][    T9] usb 2-1: string descriptor 0 read error: -22
[  120.874231][   T24] sonixj 1-1:0.0: probe with driver sonixj failed with error -32
[  120.876367][    T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  120.892787][    T9] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  120.903137][    T9] usb 2-1: config 0 descriptor??
[  120.916452][    T9] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input16
[  120.966780][ T5945] udevd[5945]: Error opening device "/dev/input/event4": Input/output error
[  120.975805][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4"
[  120.983343][ T5945] udevd[5945]: Unable to EVIOCGABS device "/dev/input/event4"
[  121.111434][ T5879] usbhid 3-1:36.0: couldn't find an input interrupt endpoint
[  121.124781][ T5879] usb 3-1: USB disconnect, device number 24
[  121.135070][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.147137][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.157223][ T6948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.166862][ T6948] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.177123][ T5821] usb 2-1: USB disconnect, device number 28
[  121.343156][ T6954] FAULT_INJECTION: forcing a failure.
[  121.343156][ T6954] name failslab, interval 1, probability 0, space 0, times 0
[  121.356702][ T6954] CPU: 0 UID: 0 PID: 6954 Comm: syz.3.277 Not tainted syzkaller #0 PREEMPT(full) 
[  121.356723][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  121.356733][ T6954] Call Trace:
[  121.356740][ T6954]  <TASK>
[  121.356747][ T6954]  dump_stack_lvl+0xe8/0x150
[  121.356781][ T6954]  should_fail_ex+0x412/0x560
[  121.356806][ T6954]  should_failslab+0xa8/0x100
[  121.356828][ T6954]  __kmalloc_noprof+0xe8/0x760
[  121.356847][ T6954]  ? tomoyo_encode+0x28b/0x550
[  121.356871][ T6954]  tomoyo_encode+0x28b/0x550
[  121.356896][ T6954]  tomoyo_realpath_from_path+0x58d/0x5d0
[  121.356926][ T6954]  ? tomoyo_path_number_perm+0x219/0x630
[  121.356951][ T6954]  tomoyo_path_number_perm+0x246/0x630
[  121.356979][ T6954]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  121.357006][ T6954]  ? __lock_acquire+0x6b5/0x2cf0
[  121.357038][ T6954]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  121.357079][ T6954]  ? __fget_files+0x2a/0x420
[  121.357105][ T6954]  ? __fget_files+0x2a/0x420
[  121.357127][ T6954]  ? __fget_files+0x3a0/0x420
[  121.357148][ T6954]  ? __fget_files+0x2a/0x420
[  121.357175][ T6954]  security_file_ioctl+0xc3/0x2a0
[  121.357201][ T6954]  __se_sys_ioctl+0x47/0x170
[  121.357223][ T6954]  do_syscall_64+0x14d/0xf80
[  121.357242][ T6954]  ? trace_irq_disable+0x3b/0x150
[  121.357264][ T6954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.357281][ T6954]  ? clear_bhb_loop+0x40/0x90
[  121.357301][ T6954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.357317][ T6954] RIP: 0033:0x7f4979b9c799
[  121.357333][ T6954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.357346][ T6954] RSP: 002b:00007f497aa29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.357364][ T6954] RAX: ffffffffffffffda RBX: 00007f4979e15fa0 RCX: 00007f4979b9c799
[  121.357376][ T6954] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000003
[  121.357386][ T6954] RBP: 00007f497aa29090 R08: 0000000000000000 R09: 0000000000000000
[  121.357394][ T6954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.357403][ T6954] R13: 00007f4979e16038 R14: 00007f4979e15fa0 R15: 00007ffca7716548
[  121.357428][ T6954]  </TASK>
[  121.357445][ T6954] ERROR: Out of memory at tomoyo_realpath_from_path.
[  121.621790][ T6956] program syz.3.278 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  121.846011][ T6965] 9p: Bad value for 'wfdno'
[  121.955074][ T5821] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  122.005065][   T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  122.105111][ T5821] usb 3-1: Using ep0 maxpacket: 16
[  122.111872][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  122.122868][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0
[  122.131520][ T5821] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  122.141419][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.149562][ T5821] usb 3-1: Product: syz
[  122.153725][ T5821] usb 3-1: Manufacturer: syz
[  122.158456][ T5821] usb 3-1: SerialNumber: syz
[  122.164205][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  122.176022][ T5821] usb 3-1: config 0 descriptor??
[  122.181196][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  122.191062][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 25449, setting to 1024
[  122.202518][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 1024
[  122.212670][   T24] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  122.221795][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.233038][   T24] usb 4-1: config 0 descriptor??
[  122.246657][ T6962] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  122.413470][    C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  122.423808][ T5821] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17
[  122.442282][ T5821] imon:send_packet: packet tx failed (-71)
[  122.456580][   T24] hdpvr 4-1:0.0: firmware version 0x3c dated ��H"L�lr�ߧ��L�ˆP��m�g"�
�̓�_�-h��e�/}
[  122.466934][ T5821] imon 3-1:0.0: panel buttons/knobs setup failed
[  122.473864][   T24] hdpvr 4-1:0.0: untested firmware, the driver might not work.
[  122.525509][ T5821] rc_core: IR keymap rc-imon-pad not found
[  122.535277][ T5821] Registered IR keymap rc-empty
[  122.540544][ T5821] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  122.551706][ T5821] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  122.562101][ T5821] imon:send_packet: packet tx failed (-71)
[  122.585180][ T5821] imon 3-1:0.0: remote input dev register failed
[  122.591599][ T5821] imon 3-1:0.0: imon_init_intf0: rc device setup failed
[  122.610223][ T5821] imon 3-1:0.0: unable to initialize intf0, err 0
[  122.616783][ T5821] imon:imon_probe: failed to initialize context!
[  122.623123][ T5821] imon 3-1:0.0: unable to register, err -19
[  122.633827][ T5821] usb 3-1: USB disconnect, device number 25
[  122.880501][   T24] hdpvr 4-1:0.0: Could not setup controls
[  122.895507][   T24] hdpvr 4-1:0.0: registering videodev failed
[  122.909544][   T24] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71
[  122.920399][   T24] usb 4-1: USB disconnect, device number 22
[  122.955378][ T5821] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  123.115044][ T5821] usb 3-1: Using ep0 maxpacket: 16
[  123.121513][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  123.132509][ T5815] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  123.140157][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0
[  123.149147][ T5821] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  123.158269][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.166971][ T5821] usb 3-1: Product: syz
[  123.171137][ T5821] usb 3-1: Manufacturer: syz
[  123.175787][ T5821] usb 3-1: SerialNumber: syz
[  123.182219][ T5821] usb 3-1: config 0 descriptor??
[  123.228972][   T24] usb 1-1: USB disconnect, device number 20
[  123.260137][ T6976] FAULT_INJECTION: forcing a failure.
[  123.260137][ T6976] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  123.276738][ T6976] CPU: 1 UID: 0 PID: 6976 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT(full) 
[  123.276763][ T6976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  123.276772][ T6976] Call Trace:
[  123.276779][ T6976]  <TASK>
[  123.276787][ T6976]  dump_stack_lvl+0xe8/0x150
[  123.276815][ T6976]  should_fail_ex+0x412/0x560
[  123.276840][ T6976]  _copy_from_user+0x2d/0xb0
[  123.276862][ T6976]  get_user_ifreq+0x6b/0x180
[  123.276888][ T6976]  br_ioctl_stub+0x172/0xd60
[  123.276908][ T6976]  ? do_vfs_ioctl+0x1166/0x1530
[  123.276928][ T6976]  ? __pfx_br_ioctl_stub+0x10/0x10
[  123.276945][ T6976]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  123.276965][ T6976]  ? sock_ioctl+0x4fa/0x7f0
[  123.276997][ T6976]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  123.277032][ T6976]  ? __pfx_br_ioctl_stub+0x10/0x10
[  123.277047][ T6976]  sock_ioctl+0x523/0x7f0
[  123.277073][ T6976]  ? __pfx_sock_ioctl+0x10/0x10
[  123.277097][ T6976]  ? __fget_files+0x2a/0x420
[  123.277120][ T6976]  ? __fget_files+0x3a0/0x420
[  123.277142][ T6976]  ? __fget_files+0x2a/0x420
[  123.277167][ T6976]  ? bpf_lsm_file_ioctl+0x9/0x20
[  123.277187][ T6976]  ? __pfx_sock_ioctl+0x10/0x10
[  123.277211][ T6976]  __se_sys_ioctl+0xfc/0x170
[  123.277232][ T6976]  do_syscall_64+0x14d/0xf80
[  123.277251][ T6976]  ? trace_irq_disable+0x3b/0x150
[  123.277274][ T6976]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.277291][ T6976]  ? clear_bhb_loop+0x40/0x90
[  123.277312][ T6976]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.277329][ T6976] RIP: 0033:0x7f93a219c799
[  123.277345][ T6976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.277358][ T6976] RSP: 002b:00007f93a2fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  123.277376][ T6976] RAX: ffffffffffffffda RBX: 00007f93a2415fa0 RCX: 00007f93a219c799
[  123.277388][ T6976] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000003
[  123.277398][ T6976] RBP: 00007f93a2fec090 R08: 0000000000000000 R09: 0000000000000000
[  123.277408][ T6976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  123.277418][ T6976] R13: 00007f93a2416038 R14: 00007f93a2415fa0 R15: 00007fff7002da18
[  123.277445][ T6976]  </TASK>
[  123.498641][ T5815] usb 2-1: config 0 has no interfaces?
[  123.504168][ T5815] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  123.513299][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.526108][ T5815] usb 2-1: config 0 descriptor??
[  123.533943][ T6958] netlink: 592 bytes leftover after parsing attributes in process `syz.2.279'.
[  123.567163][ T5821] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19
[  123.963130][    C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  123.970231][ T5821] imon:send_packet: packet tx failed (-71)
[  123.995081][ T5821] imon 3-1:0.0: panel buttons/knobs setup failed
[  124.045110][ T5821] rc_core: IR keymap rc-imon-pad not found
[  124.051024][ T5821] Registered IR keymap rc-empty
[  124.058898][ T5821] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  124.069118][ T5821] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  124.078585][ T5821] imon:send_packet: packet tx failed (-71)
[  124.105149][ T5821] imon 3-1:0.0: remote input dev register failed
[  124.111674][ T5821] imon 3-1:0.0: imon_init_intf0: rc device setup failed
[  124.126892][ T5821] imon 3-1:0.0: unable to initialize intf0, err 0
[  124.133371][ T5821] imon:imon_probe: failed to initialize context!
[  124.139814][ T5821] imon 3-1:0.0: unable to register, err -19
[  124.149033][ T5821] usb 3-1: USB disconnect, device number 26
[  124.513776][ T6985] overlayfs: statfs failed on './file0'
[  124.895069][ T5879] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  125.035395][ T7011] FAULT_INJECTION: forcing a failure.
[  125.035395][ T7011] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.049010][ T7011] CPU: 1 UID: 0 PID: 7011 Comm: syz.2.296 Not tainted syzkaller #0 PREEMPT(full) 
[  125.049035][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  125.049045][ T7011] Call Trace:
[  125.049052][ T7011]  <TASK>
[  125.049059][ T7011]  dump_stack_lvl+0xe8/0x150
[  125.049088][ T7011]  should_fail_ex+0x412/0x560
[  125.049113][ T7011]  _copy_to_user+0x31/0xb0
[  125.049137][ T7011]  simple_read_from_buffer+0xe1/0x170
[  125.049166][ T7011]  proc_fail_nth_read+0x1bb/0x230
[  125.049194][ T7011]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  125.049224][ T7011]  ? rw_verify_area+0x2a6/0x4d0
[  125.049241][ T7011]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  125.049266][ T7011]  vfs_read+0x20c/0xa70
[  125.049281][ T7011]  ? fdget_pos+0x246/0x320
[  125.049309][ T7011]  ? __pfx___mutex_lock+0x10/0x10
[  125.049332][ T7011]  ? __pfx_vfs_read+0x10/0x10
[  125.049351][ T7011]  ? __fget_files+0x2a/0x420
[  125.049376][ T7011]  ? __fget_files+0x3a0/0x420
[  125.049395][ T5879] usb 1-1: Using ep0 maxpacket: 32
[  125.049396][ T7011]  ? __fget_files+0x2a/0x420
[  125.049432][ T7011]  ksys_read+0x150/0x270
[  125.049450][ T7011]  ? __pfx_ksys_read+0x10/0x10
[  125.049465][ T7011]  ? __pfx_sock_ioctl+0x10/0x10
[  125.049499][ T7011]  do_syscall_64+0x14d/0xf80
[  125.049519][ T7011]  ? trace_irq_disable+0x3b/0x150
[  125.049541][ T7011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.049558][ T7011]  ? clear_bhb_loop+0x40/0x90
[  125.049578][ T7011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.049594][ T7011] RIP: 0033:0x7f2afa15cfce
[  125.049611][ T7011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  125.049625][ T7011] RSP: 002b:00007f2af83edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  125.049643][ T7011] RAX: ffffffffffffffda RBX: 00007f2af83ee6c0 RCX: 00007f2afa15cfce
[  125.049656][ T7011] RDX: 000000000000000f RSI: 00007f2af83ee0a0 RDI: 0000000000000005
[  125.049666][ T7011] RBP: 00007f2af83ee090 R08: 0000000000000000 R09: 0000000000000000
[  125.049677][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.049686][ T7011] R13: 00007f2afa416038 R14: 00007f2afa415fa0 R15: 00007fff6d6308a8
[  125.049714][ T7011]  </TASK>
[  125.277040][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.289406][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.299309][ T5879] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  125.308419][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.319631][ T5879] usb 1-1: config 0 descriptor??
[  125.329685][ T5879] hub 1-1:0.0: USB hub found
[  125.420169][ T7019] netlink: 'syz.2.299': attribute type 1 has an invalid length.
[  125.429058][ T7019] netlink: zone id is out of range
[  125.434528][ T7019] netlink: set zone limit has 8 unknown bytes
[  125.535978][ T5879] hub 1-1:0.0: 1 port detected
[  125.710724][ T7032] pimreg: entered allmulticast mode
[  125.854853][   T24] usb 2-1: USB disconnect, device number 29
[  125.934834][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'.
[  125.958894][ T7045] netlink: 576 bytes leftover after parsing attributes in process `syz.1.305'.
[  125.976266][   T30] audit: type=1326 audit(1772421585.655:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec1879c799 code=0x0
[  126.318923][ T5879] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  126.326893][ T5858] usb 1-1: USB disconnect, device number 21
[  126.633076][ T7054] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  126.642961][ T7054] overlayfs: failed to set xattr on upper
[  126.650322][ T7054] overlayfs: ...falling back to redirect_dir=nofollow.
[  126.657442][ T7054] overlayfs: ...falling back to index=off.
[  126.663271][ T7054] overlayfs: ...falling back to uuid=null.
[  126.669796][ T7054] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  126.902031][ T7062] netlink: 'syz.0.311': attribute type 1 has an invalid length.
[  126.957398][ T5858] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  127.126546][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  127.137389][ T5858] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  127.151257][ T5858] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  127.161460][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.170741][ T5858] usb 4-1: Product: syz
[  127.175290][ T5858] usb 4-1: Manufacturer: syz
[  127.179943][ T5858] usb 4-1: SerialNumber: syz
[  127.205199][ T5858] usb 4-1: config 0 descriptor??
[  127.210931][ T7056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  127.219614][ T7056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  127.351262][ T5867] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  127.431976][ T7056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  127.440533][ T7056] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  127.556796][ T5867] usb 1-1: config 0 has no interfaces?
[  127.562326][ T5867] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  127.573017][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.591104][ T5867] usb 1-1: config 0 descriptor??
[  127.606661][ T7081] tipc: Started in network mode
[  127.612810][ T7081] tipc: Node identity 56be225856e2, cluster identity 4711
[  127.621126][ T7081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  127.713724][ T7081] syzkaller0: entered promiscuous mode
[  127.719821][ T7081] syzkaller0: entered allmulticast mode
[  127.726700][ T7081] tipc: Resetting bearer <eth:syzkaller0>
[  127.742528][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.751628][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.317'.
[  127.762038][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.783943][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.792448][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.803176][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.810845][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.818537][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.834812][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.852126][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.859900][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.876690][    T9] usb 1-1: USB disconnect, device number 22
[  127.908589][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.918090][ T5867] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  127.949389][ T5867] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on 
[  128.050079][ T7090] fido_id[7090]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  128.128008][ T7080] tipc: Resetting bearer <eth:syzkaller0>
[  128.147996][ T7094] netlink: 14 bytes leftover after parsing attributes in process `syz.2.320'.
[  128.282042][ T5858] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  129.504400][ T7080] tipc: Disabling bearer <eth:syzkaller0>
[  129.560477][ T5858] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:0d:01:01:03
[  129.586468][ T5879] tipc: Node number set to 6038104
[  129.609873][ T5858] usb 4-1: USB disconnect, device number 23
[  129.642635][ T5858] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet
[  129.938279][ T7120] 9pnet: p9_errstr2errno: server reported unknown error ./file0
[  130.127733][ T7127] overlayfs: missing 'lowerdir'
[  130.195097][ T5858] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  130.215472][ T7133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.224204][ T7133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.255157][ T5901] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  130.348258][ T5858] usb 4-1: Using ep0 maxpacket: 32
[  130.373080][ T5858] usb 4-1: config 0 has no interfaces?
[  130.389082][ T5858] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  130.404042][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.420150][ T5901] usb 2-1: config 0 has no interfaces?
[  130.423707][ T5858] usb 4-1: config 0 descriptor??
[  130.427681][ T5901] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  130.456691][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.470240][ T5901] usb 2-1: config 0 descriptor??
[  130.546447][ T7146] netlink: 'syz.2.336': attribute type 3 has an invalid length.
[  130.568164][ T7146] qnx4: no qnx4 filesystem (no root dir).
[  130.650301][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.659097][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.668220][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.677436][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.686889][   T24] usb 4-1: USB disconnect, device number 24
[  130.692101][ T5867] usb 2-1: USB disconnect, device number 30
[  130.765074][ T5901] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  130.835169][ T5858] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  130.915111][ T5901] usb 1-1: Using ep0 maxpacket: 8
[  130.921556][ T5901] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  130.929972][ T5901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  130.940054][ T5901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  130.950464][ T5901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  130.960411][ T5901] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  130.973384][ T5901] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  130.982494][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.992504][ T5858] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  131.004934][ T5858] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  131.015961][ T5858] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  131.026133][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.038044][ T7146] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  131.049512][ T5858] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  131.155355][   T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  131.204502][ T5901] usb 1-1: usb_control_msg returned -32
[  131.210151][ T5901] usbtmc 1-1:16.0: can't read capabilities
[  131.299630][ T5815] usb 3-1: USB disconnect, device number 27
[  131.306416][   T24] usb 4-1: Using ep0 maxpacket: 32
[  131.321443][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  131.334809][   T24] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  131.353640][   T24] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.372617][   T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.00
[  131.385975][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.394017][   T24] usb 4-1: Product: syz
[  131.398265][   T24] usb 4-1: Manufacturer: syz
[  131.402862][   T24] usb 4-1: SerialNumber: syz
[  131.418164][   T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  131.505071][ T5879] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  131.559721][ T7153] usbtmc 1-1:16.0: usb_control_msg returned -32
[  131.568499][ T5858] usb 1-1: USB disconnect, device number 23
[  131.613658][   T12] usb 4-1: Failed to submit usb control message: -71
[  131.614079][ T5867] usb 4-1: USB disconnect, device number 25
[  131.622825][   T12] usb 4-1: unable to send the bmi data to the device: -71
[  131.633942][   T12] usb 4-1: unable to get target info from device
[  131.640321][   T12] usb 4-1: could not get target info (-71)
[  131.646402][   T12] usb 4-1: could not probe fw (-71)
[  131.671036][ T5879] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  131.682347][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.696626][ T5879] usb 2-1: config 0 descriptor??
[  131.707791][ T5879] asix 2-1:0.0: probe with driver asix failed with error -22
[  131.903093][ T5867] usb 2-1: USB disconnect, device number 31
[  132.173099][ T7163] netlink: 'syz.0.342': attribute type 12 has an invalid length.
[  132.458699][ T7177] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  132.559344][ T7185] netlink: 'syz.0.349': attribute type 23 has an invalid length.
[  132.632164][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  132.645090][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  132.692612][ T7155] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  132.733302][   T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  132.895786][   T24] usb 2-1: Using ep0 maxpacket: 16
[  132.907196][   T24] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.927110][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  132.933823][   T24] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  132.976581][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.013998][   T24] usb 2-1: config 0 descriptor??
[  133.048368][ T7212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.359'.
[  133.059663][ T7212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.359'.
[  133.070283][ T7212] netlink: 60 bytes leftover after parsing attributes in process `syz.0.359'.
[  133.458823][   T24] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  133.605594][ T5879] usb 3-1: new low-speed USB device number 28 using dummy_hcd
[  133.778748][ T5879] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  133.795523][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.797216][ T5879] usb 3-1: config 0 has no interface number 0
[  133.813630][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.831546][ T5879] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  133.853354][ T5879] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  133.870390][   T24] usb 2-1: USB disconnect, device number 32
[  133.873863][ T5879] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  133.910935][ T5879] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  133.942863][ T5879] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  133.974285][ T5879] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  133.995050][ T5826] Bluetooth: hci3: command 0x0419 tx timeout
[  134.001473][ T5826] ------------[ cut here ]------------
[  134.007165][ T5826] refcnt < 0
[  134.007188][ T5826] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#0: kworker/u9:6/5826
[  134.022148][ T5826] Modules linked in:
[  134.026650][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  134.036232][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  134.046376][ T5826] Workqueue: hci3 hci_conn_timeout
[  134.051772][ T5826] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  134.057371][ T5826] Code: 48 89 df e8 83 99 09 00 eb 07 e8 9c a9 18 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 82 a9 18 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  134.077185][ T5826] RSP: 0018:ffffc900041d7b10 EFLAGS: 00010293
[  134.083264][ T5826] RAX: ffffffff8aad4cce RBX: ffff888037398000 RCX: ffff88807d4a9e80
[  134.091334][ T5826] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  134.099529][ T5826] RBP: 00000000ffffffff R08: ffff888037398013 R09: 1ffff11006e73002
[  134.107667][ T5826] R10: dffffc0000000000 R11: ffffed1006e73003 R12: dffffc0000000000
[  134.115712][ T5826] R13: 1ffff1100fa95468 R14: ffff888037398a40 R15: ffff888037398010
[  134.124219][ T5826] FS:  0000000000000000(0000) GS:ffff888125002000(0000) knlGS:0000000000000000
[  134.133485][ T5826] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.140181][ T5826] CR2: 00007fec189e6158 CR3: 000000000e74c000 CR4: 00000000003526f0
[  134.148343][ T5826] Call Trace:
[  134.151636][ T5826]  <TASK>
[  134.154575][ T5826]  ? process_one_work+0x87c/0x1650
[  134.159752][ T5826]  process_one_work+0x949/0x1650
[  134.164709][ T5826]  ? __pfx_process_one_work+0x10/0x10
[  134.170122][ T5826]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.175193][ T5826]  worker_thread+0xb46/0x1140
[  134.179889][ T5826]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  134.185752][ T5826]  kthread+0x388/0x470
[  134.189833][ T5826]  ? __pfx_worker_thread+0x10/0x10
[  134.194951][ T5826]  ? __pfx_kthread+0x10/0x10
[  134.199628][ T5826]  ret_from_fork+0x51e/0xb90
[  134.204209][ T5826]  ? __pfx_ret_from_fork+0x10/0x10
[  134.209343][ T5826]  ? __switch_to+0xc7d/0x1450
[  134.214022][ T5826]  ? __pfx_kthread+0x10/0x10
[  134.218637][ T5826]  ret_from_fork_asm+0x1a/0x30
[  134.223708][ T5826]  </TASK>
[  134.227268][ T5826] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  134.234558][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  134.243996][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  134.254036][ T5826] Workqueue: hci3 hci_conn_timeout
[  134.259140][ T5826] Call Trace:
[  134.262403][ T5826]  <TASK>
[  134.265317][ T5826]  vpanic+0x56c/0xa60
[  134.269285][ T5826]  ? __pfx__printk+0x10/0x10
[  134.273859][ T5826]  ? __pfx_vpanic+0x10/0x10
[  134.278344][ T5826]  ? is_bpf_text_address+0x292/0x2b0
[  134.283608][ T5826]  ? is_bpf_text_address+0x26/0x2b0
[  134.288792][ T5826]  panic+0xc5/0xd0
[  134.292509][ T5826]  ? __pfx_panic+0x10/0x10
[  134.296945][ T5826]  ? ret_from_fork_asm+0x1a/0x30
[  134.301877][ T5826]  __warn+0x315/0x4f0
[  134.305858][ T5826]  ? hci_conn_timeout+0xff/0x2c0
[  134.310782][ T5826]  ? hci_conn_timeout+0xff/0x2c0
[  134.315704][ T5826]  __report_bug+0x29a/0x540
[  134.320278][ T5826]  ? __pfx_stack_trace_save+0x10/0x10
[  134.325634][ T5826]  ? hci_conn_timeout+0xff/0x2c0
[  134.330563][ T5826]  ? __pfx___report_bug+0x10/0x10
[  134.335578][ T5826]  ? add_lock_to_list+0xc7/0x100
[  134.340530][ T5826]  ? lockdep_unlock+0x5d/0xd0
[  134.345195][ T5826]  ? __lock_acquire+0x146e/0x2cf0
[  134.350211][ T5826]  ? hci_conn_timeout+0xff/0x2c0
[  134.355132][ T5826]  report_bug+0x16a/0x220
[  134.359451][ T5826]  ? hci_conn_timeout+0xff/0x2c0
[  134.364371][ T5826]  ? hci_conn_timeout+0x101/0x2c0
[  134.369378][ T5826]  handle_bug+0x9c/0x200
[  134.373611][ T5826]  exc_invalid_op+0x1a/0x50
[  134.378103][ T5826]  asm_exc_invalid_op+0x1a/0x20
[  134.382938][ T5826] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  134.388470][ T5826] Code: 48 89 df e8 83 99 09 00 eb 07 e8 9c a9 18 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 82 a9 18 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  134.408060][ T5826] RSP: 0018:ffffc900041d7b10 EFLAGS: 00010293
[  134.414113][ T5826] RAX: ffffffff8aad4cce RBX: ffff888037398000 RCX: ffff88807d4a9e80
[  134.422071][ T5826] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  134.430026][ T5826] RBP: 00000000ffffffff R08: ffff888037398013 R09: 1ffff11006e73002
[  134.437985][ T5826] R10: dffffc0000000000 R11: ffffed1006e73003 R12: dffffc0000000000
[  134.445941][ T5826] R13: 1ffff1100fa95468 R14: ffff888037398a40 R15: ffff888037398010
[  134.453901][ T5826]  ? hci_conn_timeout+0xfe/0x2c0
[  134.458837][ T5826]  ? process_one_work+0x87c/0x1650
[  134.463939][ T5826]  process_one_work+0x949/0x1650
[  134.468881][ T5826]  ? __pfx_process_one_work+0x10/0x10
[  134.474236][ T5826]  ? do_raw_spin_lock+0x12b/0x2f0
[  134.479254][ T5826]  worker_thread+0xb46/0x1140
[  134.483927][ T5826]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  134.489726][ T5826]  kthread+0x388/0x470
[  134.493779][ T5826]  ? __pfx_worker_thread+0x10/0x10
[  134.498876][ T5826]  ? __pfx_kthread+0x10/0x10
[  134.503449][ T5826]  ret_from_fork+0x51e/0xb90
[  134.508028][ T5826]  ? __pfx_ret_from_fork+0x10/0x10
[  134.513126][ T5826]  ? __switch_to+0xc7d/0x1450
[  134.517792][ T5826]  ? __pfx_kthread+0x10/0x10
[  134.522370][ T5826]  ret_from_fork_asm+0x1a/0x30
[  134.527136][ T5826]  </TASK>
[  134.530382][ T5826] Kernel Offset: disabled
[  134.534693][ T5826] Rebooting in 86400 seconds..