last executing test programs:

8m54.235244643s ago: executing program 2 (id=148):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x5, 0x8, 0xff, 0x0, 0xfe, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x7, 0x54, 0x0, 0x70, 0x0, 0x8, 0x4}], 0xffbfffff})
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xffffffff, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8m53.224627628s ago: executing program 2 (id=153):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x220, 0x3d, 0xab, 0xf0, 0x8, 0x5ac, 0x217, 0x7554, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x55, 0xe0, 0x1, [{{0x9, 0x4, 0x3c, 0xfe, 0x0, 0x3, 0x80, 0x2, 0x5c}}]}}]}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d000000ba7b00001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0)
mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, &(0x7f0000000000)=0xa0000100000001, 0x4, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)="188b40b1a0d5251a62ac5d16ff5580828f09e25bfed71edfada827a10ecaf9e8a8494658c4c03ec59c5492cc8bd72acc83a17ce6732e1ab53997d5c6d44ff6602c7f6b30887b8902206149fd73172a4f24e591f1862d02eb221a905c703bf8aaefd029e6f132e657c04aa313876f87f60b362a8bccc8debc0ddbc830c41e61615438821af09a0e0de648116c435973bcb72ad5c3791e99b40ebb05af2008033ee4adbc06e38e8d69c2d5ac38d7cd38d4bdc19753e7cfef8080c57c5ab2dd6e062e59f2856e6f7a32c554da5242210a63fd309f2a3e54357b96ab94cf935a62c53aadc401dc28", 0xe6}, {&(0x7f0000000480)="2f581b34ffa6beed5b8c1b0599c9e3c6669aa0282dac6fafc8256014d86c787e006854c1b0a4c00843bc10ef95f11a38433128df29f0377295515ff5d7af5d9f7b57fe42b7e428ab2101c7496249056aa69ac25970d8a02f2944840928ac3b4e44c60d5897ba4bca2f83d52708a3c9c55ab0ac3440dc62be57fe0fd6f2f655c8b6573e7896ad196b4582747523346c3ed3917aa3ab5fa4c0d202b236116ffb070dac968641465be955d4f1c55c1fd9d22c8a39ea9728c81e6ec23a2ccf62f7e22b60ad94daeac106052920248f89d602930e53a5d5237b129acd6e2b", 0xdc}, {&(0x7f0000000580)="735f462f6b1ed0a6cd93dcc62172f033d521d177e9cdbc14ce2a2ee13d9ff12ac163f69d3adf15cec6addebaf9dfd313ad1c6fef69101490ffa674900347a7210fb4543c4cb38b3ad10b4064805c0babe4c56be3270745f32acf05c512678a124edddc075306657f9cf451375c4c2f8105ff9373ba017e63f14befdbd02864d57b7084a56fac30773e33db1fe8482f1d265b6fecc3", 0x95}], 0x3)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0x40015b0b, &(0x7f0000000040))

8m51.779382006s ago: executing program 2 (id=164):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100007000000000002b0000000800030068d41996", @ANYRES32=r2, @ANYBLOB="0a003400010101010101000008000c0005000000"], 0x30}, 0x1, 0x0, 0x0, 0x35e5895c1a66f683}, 0x40000)

8m51.617578364s ago: executing program 2 (id=166):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1a7a40)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00000000000000002000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}})

8m51.184142294s ago: executing program 2 (id=170):
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000000)={0x13, 0x1}) (async)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card3/oss_mixer\x00', 0x400000, 0x0)
write$proc_mixer(r0, &(0x7f0000000080)=[{'IMIX', @void}, {'PHONEOUT', @val={' \'', 'Master Capture Switch'}}, {'BASS', @val={' \'', 'Capture Volume'}}, {'BASS', @val={' \'', 'Line Capture Switch'}}], 0x96)
read$proc_mixer(r0, &(0x7f0000000140)=""/155, 0x9b) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xe) (async)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/oss_mixer\x00', 0x8000, 0x0) (async, rerun: 64)
bind$qrtr(r1, &(0x7f00000002c0)={0x2a, 0x3, 0x1}, 0xc) (async, rerun: 64)
r2 = accept$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000340)=0x1c) (async)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380)={<r3=>0x0, 0x38, "9861f1683455c2c5ce56584ea470bf3678091308126a38f0a2561e712fb23a170501c6afa0fc03861c42b6d126b9737961a682ce84ec2312"}, &(0x7f00000003c0)=0x40)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000400)={r3, 0x88}, 0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000440)={r3, 0x8, 0x1, 0x20, 0x7, 0x10001}, 0x14) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)={<r4=>r1})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r4) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e21, 0x6, @remote, 0xff}}, 0x3, 0x3, 0x3, 0x9, 0x2, 0x2, 0x9}, &(0x7f00000005c0)=0x9c) (async)
accept4$unix(r4, &(0x7f0000000600), &(0x7f0000000680)=0x6e, 0x0) (async, rerun: 32)
r5 = dup3(0xffffffffffffffff, r4, 0x0) (rerun: 32)
ioctl$NBD_PRINT_DEBUG(r5, 0xab06) (async)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f00000006c0)={0x7, 0xae, 0x3}) (async, rerun: 32)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1800) (async, rerun: 32)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000800)={0x0, @private, @private}, &(0x7f0000000840)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000880)={r3, 0x9}, 0x8)
close(r4) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r4)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x94, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20048004}, 0x44001) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000a80)={0x0, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r5, 0xc01064c2, &(0x7f0000000ac0)={0x0, 0x0, r7}) (async)
r8 = socket(0x11, 0xa, 0x80000001)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r4)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)

8m50.983607703s ago: executing program 2 (id=173):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404f0400b30000000000010902240000800100008f76c384d294decefd6ee3d5090400000203000200092100400001"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x22, 0x8, {0x8, 0x24, "e15319321c51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4)
r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, &(0x7f0000000340)={0x14, &(0x7f0000000100)={0x0, 0x7, 0x80, {0x80, 0x6, "f4551690d9709dd67b5f24550c9be99c364f00562ebd454adc286d0de146c94584a9711120c43c1fe9dc5496988886df5dc286c1cadfb7b7801945687edd55f68a8c1bf8a8afc82f68a41abb6b7025c95fd90300b040a2939445741d3a218a7cd24e63ab547e8069378c835ac2a4c6fc917a816dc68baadd02dc054c3aaf"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f0000000540)={0x34, &(0x7f0000000380)={0x20, 0x13, 0x23, "133d8127576e69240915823efe7ee9db251eed13713ad7ca0809a7f39022901a133572"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "8a1303e4e8b11ba017de0ba35897c1361e89fa550eaa8a644d493fd9f6f6f52dfb57e493e25656b28ace879fea553e"}})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
stat(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x61, 0x65, 0x36, 0x65, 0x38, 0x0, 0x32], 0x2d, [0x65, 0x36, 0x39, 0x39], 0x2d, [0x38, 0x36, 0x34, 0x35], 0x2d, [0x39, 0x34, 0x39, 0x63], 0x2d, [0x64, 0x32, 0x32, 0x31, 0xdb3ac6eaf2125e8b, 0x32, 0x33, 0x31]}}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}})
write$P9_RVERSION(r5, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xb391, 0x7, '9P2000.u'}, 0x15)

8m35.905160712s ago: executing program 32 (id=173):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000404f0400b30000000000010902240000800100008f76c384d294decefd6ee3d5090400000203000200092100400001"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x22, 0x8, {0x8, 0x24, "e15319321c51"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00000000c0), 0x4)
r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r2, &(0x7f0000000340)={0x14, &(0x7f0000000100)={0x0, 0x7, 0x80, {0x80, 0x6, "f4551690d9709dd67b5f24550c9be99c364f00562ebd454adc286d0de146c94584a9711120c43c1fe9dc5496988886df5dc286c1cadfb7b7801945687edd55f68a8c1bf8a8afc82f68a41abb6b7025c95fd90300b040a2939445741d3a218a7cd24e63ab547e8069378c835ac2a4c6fc917a816dc68baadd02dc054c3aaf"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}}, &(0x7f0000000540)={0x34, &(0x7f0000000380)={0x20, 0x13, 0x23, "133d8127576e69240915823efe7ee9db251eed13713ad7ca0809a7f39022901a133572"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0xffffffff}, &(0x7f0000000500)={0xc0, 0xa2, 0x2f, "8a1303e4e8b11ba017de0ba35897c1361e89fa550eaa8a644d493fd9f6f6f52dfb57e493e25656b28ace879fea553e"}})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
stat(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}], [{@fsuuid={'fsuuid', 0x3d, {[0x66, 0x61, 0x65, 0x36, 0x65, 0x38, 0x0, 0x32], 0x2d, [0x65, 0x36, 0x39, 0x39], 0x2d, [0x38, 0x36, 0x34, 0x35], 0x2d, [0x39, 0x34, 0x39, 0x63], 0x2d, [0x64, 0x32, 0x32, 0x31, 0xdb3ac6eaf2125e8b, 0x32, 0x33, 0x31]}}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}]}})
write$P9_RVERSION(r5, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xb391, 0x7, '9P2000.u'}, 0x15)

4m56.28631567s ago: executing program 0 (id=1455):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32)
readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/26, 0x1a}, {&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/28, 0x19}, {&(0x7f0000000400)=""/214, 0x5}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000100)=""/30, 0x1e}], 0x6) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0)
fcntl$setownex(r2, 0xf, 0x0) (async)
r3 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000000)=0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b05cb0b9a57833b14fcd62c0aba0ac67f03b20e87ba6f3610a5bd1d3369ae014c8036c1e596b800991698810ff706e98871c17ad581b0695476273ac6c33a7a51d4a44a5b95684befe95ef49b03458bce89d87355f35b766b242b9f98b661269bb9255d836fb4e30d0000c72ec5561adf6112ca278273b4af42597e7bfa1f5c228f13161b34517c92bc352c017afac22d14047e6fbdc61536f9e51738ea935cb2a577ec2b788433bc13a9e976cfee267f36d988b766a29632c84c94d4cf31d780ef683293d7eacfc93f248d137affcae7cffa699237ea9c74919850dc164f1483f3f352bf7dd787191705b26936e1d090526b6ac5765df318f160cc84b15b94c662cf92611c9eb0b92bfbd3512bffed96a4150d653e130625b6ae5a78da2c4b9c70c736a224b18d89222095fbc4c61bcad1eb73be9c6efaaae48f871223694999b2a925a37138be8220008180cc20e57a92076b2308003200", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)

4m56.202815398s ago: executing program 0 (id=1456):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000240)=0x2, 0x80, 0x2, 0x0, 0x0, 0x41)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r4)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x4044011)

4m55.918183977s ago: executing program 0 (id=1459):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc00400020208001e000300000307002100eab556d4938037e7860000000200ffffc6c953", 0x47}, {&(0x7f0000000000)="cfd69694f2be344a32bd33b8f3585dc4e39b064134b820efb35e530500c276266afa5a81b2362dae2d2f0eea83640d1dc5bda4183608095a32b712", 0x97}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x400c880)

4m55.808589373s ago: executing program 0 (id=1460):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x3})
setresgid(0xee00, 0x0, 0x0)
write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', ':\x00'}, 0x8)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r1=>0x0})
pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000140)={r1, 0x2, r2, 0x800, 0x80000})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x1000000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", "0000a455", "fffffffffffffffd"}, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x140f, 0x1, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x28}}, 0x8000)
syz_clone(0xa5000680, 0x0, 0x0, 0x0, 0x0, 0x0)

4m54.268180092s ago: executing program 0 (id=1469):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x100)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40bc5311, &(0x7f0000000000)={0x7e, 0x1})
shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) (async)
shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil)
shmget(0x1, 0x1000, 0xa0, &(0x7f0000ff9000/0x1000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0x8, 0x1, {0x1, 0x3, 0x80000000, 0x0, 0x800}, 0xea})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x7ffffffe, 0x0, 0x0, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR_vm(r3, 0x4018aee3, &(0x7f0000000200)=@attr_other={0x0, 0x9, 0x4, &(0x7f0000000180)=0xaa08})
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)) (async)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_cmd={0x2a, 0x7fffffff, 0x1000, 0x4a78, 0x4, 0x0, 0xf, 0x4, 0x0, 0x6, 0x3, 0x0, 0x5, 0x0, 0x10, 0xf996, [0x2, 0x400]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f0, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmmsg$inet(r0, &(0x7f0000002f80), 0x0, 0x20000044)

4m54.192604546s ago: executing program 0 (id=1470):
syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f"], 0x0)
close(0x3)
r0 = syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2279, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xfff, 0x40002, 0x200008001, 0x4})
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ec1306000000000000010902240001000020040904000602030000ff7f0000000000000301090a81032800000101921011b87549c51bed8013444718536c"], 0x0)

4m39.05856542s ago: executing program 33 (id=1470):
syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f"], 0x0)
close(0x3)
r0 = syz_open_dev$sg(&(0x7f00000005c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2279, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x0, 0xfff, 0x40002, 0x200008001, 0x4})
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ec1306000000000000010902240001000020040904000602030000ff7f0000000000000301090a81032800000101921011b87549c51bed8013444718536c"], 0x0)

7.019067169s ago: executing program 4 (id=2871):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r4, @ANYBLOB="0600060050000000060004"], 0x50}, 0x4, 0x700000000000000, 0xfeffffff}, 0x0)

6.901645835s ago: executing program 4 (id=2872):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
gettid() (async)
r1 = gettid()
wait4(r1, 0x0, 0x8, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004)
write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="416601", @ANYRES32=r4], 0x4)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r8)
read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020}, 0x2020) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, <r9=>0x0}, 0x2020)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004f80)={0x26f0, 0x42, 0x9, 0x0, 0x0, {0x3}, [@nested={0x26dc, 0x2d, 0x0, 0x1, [@nested={0x4, 0x25}, @nested={0x2580, 0x141, 0x0, 0x1, [@nested={0x247d, 0x8a, 0x0, 0x1, [@nested={0x238c, 0xf4, 0x0, 0x1, [@nested={0x27c, 0x2c, 0x0, 0x1, [@nested={0x4, 0x61}, @typed={0x8, 0xb0, 0x0, 0x0, @uid=r8}, @generic="a51c4341231b4fb159f3080e0102f11480262c461021c16a9bf156e65c8c174239471f86f80d02c21d07ed59388d377b8c2358c9df666ecc21818f922e6a37bf7ebb50304ff76256686da4a8002e9702b38cf358178e0793b430146008f35269bd429d6019460c64b797bc524e1290d3f707dc4a49f0892cb654b357bd3be37d071025469bb951fc19a9d2cf0ee70e4dc1831db41fa3eff8", @typed={0x14, 0x38, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @typed={0x8, 0x10da, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x142, 0x0, 0x0, @u32=0x3}, @generic="e9faa4dbdc6d6fce07ab84a0e43cc08320c44f931670e0575d7c10af1eaa3ebc3763035f446a513037976ba499bec5f7da2cb5f953c6946e1dcc0a710a353c790dc69bed331535fb51a2da799c33ce188d4e711bd0259fd25aa9f20e95961aac3dcb59f7542afab8fd89f648d89edb7eb5174a8c3f64ff85d7b56f501f7097a42c8af6f7d315c3b82f031dcc2fa3eaa99e88fa88059cda2533a3b8befce11445317daecd321af8e3f54bc830dc3ac86249d47e1d35935e0a817a3ff83189354bf0b7f0e0a63a6d399c956c730a1720cafed0d1a5a96b21711a9c1dce4a254f6456f7c1b8c400e229a5710c783a3a", @generic="d82ace2f897442335c528d65e7b19194ef6967d858f8dcf7485c41f1eb3dcf7a1fdb643fcac127e2a15779bd736f1ac10e3c6e5740c1c048c2d9aadacc5bae96a9bd76114f9dc8b10cab074efc75dabbe0c5c08c6d5f48221d7f2753dd6a26237b8529b739adaf51c69bd3ba6bbf4c7fc0eedd1eb4f923a2329fb1cc222370ab2e0a48e1280f2c34f996fe4424b21bb607aaf1218cd0cf4cc7c95209bda00bad14ec6db96cbae0fb7127391be1fcddb1ad89fc791a1d01527ab3da80", @generic="9b17d93be474"]}, @nested={0x1028, 0x149, 0x0, 0x1, [@generic="54b12082634b59a566fdaab6", @generic="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", @nested={0x4, 0x17}, @nested={0x4, 0x2a}, @typed={0x8, 0x6b, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0xd8, 0x0, 0x0, @uid=r9}]}, @generic="e61637ef2f521d31b969d8e2a9dd985528ef7e7a2ee4524dbeb4e38e05f03c3923f59be8c032e924d1af2c8c32b7d4e4bb04ad5c58a9a5f9be2bb6d59fecc0b0fde9e2eb3bbd6f6ac5a25ef1809c726021bb60d2deea4794b9f560bbf8611b80e08dab79411d96e7ecbc68655a46a6b17d787386c8885daf4a3f6a8ec391dd074da94ef8884918fcd02a73aebee9b65f52842d09e4951f825e7a389977a4a42865cb5ba5c04ca63bd26b702fc047662ad394b97bd2e99f57c78267f017c6e7736d63c333665421eca06c961ec025640e1e87cd7c0dae4be2c90dcc68ab108374b7aed170", @generic="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"]}, @generic="a8a49ccda811273211daf61b2f064ecbbc540c0ea3f736c80435fb7b8802792df4a9dba1993f25e16aad270969742331e84301da4f528a55ae7376b0d75bfaf6d0d948be672567ae9983dd88a964ee3c4e3a18c3997719a479885fc5ceb20d07c8bb4a1abb11eb390850ee3874be20bf754aa698d67954b85ea9fa6bbf99c01376fa9af2447a3b7e2954d3fdd757846422e1699d2f607426fcd786c480f9fb39a777933ca80a2867e869468c3242ef15b8a04f2ffbcde26d73a25895b9b59ac996637d420c00d7cc918377926e3cc9b92c1360c97995ed466b1b0ff8d1ba9c2043361cdf50", @typed={0x8, 0xef, 0x0, 0x0, @uid=r8}]}, @typed={0xc, 0xc6, 0x0, 0x0, @u64=0xffffffffffffff81}, @typed={0x14, 0xd7, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x11b}, @typed={0x5, 0x132, 0x0, 0x0, @str='\x00'}, @nested={0xc8, 0x55, 0x0, 0x1, [@nested={0xb6, 0x67, 0x0, 0x1, [@generic="5dfee50e16a0bc718ea81f374d6bc375cf7a377fde52c8adc47e01c4f087ec542431be3338a747a6caca00c2c89bb091d63b784f459a44ab23754e6be03ea19a4822d89730b36910ec790e94a949a1bf9077bc3e2dfd5b66fda08f0eb93b666abd7a72ba8dff809f641abef71707ff46a80c4dc70848eb589a7e80541fc62ee633661cffd285ebfd567b084811b3df064c675851a6726526be4746032e3ebb16c2dfd18f7a8fe76af27a9d0793ea", @nested={0x4, 0x3a}]}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0x109, 0x0, 0x0, @pid=r1}]}, @nested={0x52, 0x5e, 0x0, 0x1, [@generic="58cff85e5ea58b6c4ff3da7ac669d4e9eb8e13659f9ab5f195ad74fda3622f519fba6260becc5f2b6b0ce11a6e1c112cb53875572f074b30cd02a929ad2b1530ea94ae3f2b74c71e8607b39cdb9e"]}, @generic="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"]}]}, 0x26f0}}, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000020000082505a0a4400000000101090244000101000000090400001202060000052406000005240000000d240f0100000000000000000009058103"], 0x0)

4.551316603s ago: executing program 1 (id=2880):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r4, @ANYBLOB="0600060050000000060004"], 0x50}, 0x4, 0x700000000000000, 0xfffffffe}, 0x0)

3.840696221s ago: executing program 4 (id=2881):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x44)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x2, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mmap(&(0x7f000003f000/0x2000)=nil, 0x2000, 0xb635773f05ebbeea, 0x1010, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

3.783737385s ago: executing program 1 (id=2883):
syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x2c02)
syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02)

3.713557455s ago: executing program 1 (id=2884):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x72, 0x0, 0x5}]})
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000440)={0x1d, r2}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010628bd7000fedbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x800)
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0xd8, 0xcd, 0xa7, 0x20, 0xccd, 0xb2, 0xbc74, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb7, 0x2, 0x1, 0xd5, 0xae, 0x6, 0x0, [], [{{0x9, 0x5, 0x82, 0xc, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

3.693092384s ago: executing program 4 (id=2885):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x80000000000005b, 0x0, [{0xeb1912e31c4d133b, 0x76, &(0x7f0000000340)=""/118}]})
r2 = dup(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x0, 0x0, 0x0, 0x2)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0xb, r5, &(0x7f00000010c0)=""/4096, 0x1000)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x44, 0x200, 0x5b, 0x4, 0x8, 0xfffffffc, 0x401}, 0x20)
ioctl$TUNSETDEBUG(r3, 0x400454c9, &(0x7f00000003c0)=0x9)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x8004, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x3, 0x17, 0x1, 0x407, 0x5, 0x9, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x4005a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x80000004, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x2, 0x408, 0x8004, 0x5, 0x9, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xa, 0xac8, 0xbf, 0x2, 0x4, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb30, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0xb, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x9, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
write$tun(r3, &(0x7f0000000140)=ANY=[], 0xfdef)
connect$inet(r2, &(0x7f0000000880)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* rwr'], 0x9)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2})
sendto$rose(r2, &(0x7f0000000240)="4ce9ba0b6b57e8426c24c50b351ad0d87ccd43d17f1c621a160acc38aaad1b0bf020197c116a8d0ddd143d86e095c829728638879a521ad53de9fabb9ff8986b1309bda86c7e27a7ae264788819b83230658e2a7207db2ec8d303fdfee57caef1189632258117c6c4c7b5890a3851bb58e8d480f7dabccf97e66f2dc9ab8ff0076a9621e051f2bd2db6e842f27be36b24b00f16707c34d06a71ab57aa10e5be4d744038ba270356db10d6991d301890d7a84dc21", 0xb4, 0x8080, 0x0, 0x0)
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x3, 0x0, 0x8000000000000002, 0xfffffffffff7fe00})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c2983bfa733d66642c6b66646e6f3d", @ANYRESHEX=r8, @ANYBLOB="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", @ANYRESOCT=r8, @ANYBLOB=',\x00'])

3.499795304s ago: executing program 4 (id=2887):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100311395b40d8050c815f180902030109021b00010601f1080904c808017ff8ac4c090501030002"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x155551fa})
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000005200010030bd7000ffdbdf251c00000059d7780cdd0ad2f002e7e0749ba1d57503096b2eed568dba4b1d46b2eed791ccdac4016396ef27a1024132c1634e3ae17410b2ec2ffc94faef3aeb1781db3944bac9613f2861bba88777cbee0def00b4e569b50974b4c822d6250482df0c23d1709a9d0b000000976713a9c57465f95c247d95946ef82615baa43a825cde65eee34d07000acc303cbac5b525bd014c564fff3519924426dc03cb993a70e5ee55dd13fb10000000000000000000cc55f639125396879056973e333004301d5983a6414730849b399e9c2f3a758ee6d779bc9a1b42e379bc3dc1", @ANYBLOB="ca88758fcc7d4d5b0b4a5ac18cd9623bf806d8430cb5e0c5", @ANYRES8=r2], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x4000)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x7, 0x4e20, 0x1003, 0x2, 0x20, 0x80, 0x11}, {0xf, 0x9, 0x8, 0x3, 0xc, 0x81, 0x100, 0x4}, {0xb, 0x4b, 0x3, 0x4}, 0x85, 0xffffbffd, 0x1, 0x0, 0x3, 0x1}, {{@in=@multicast1, 0x4d6, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x1000004}}, 0xe8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000001280), 0x6)
close(r1)
r4 = syz_usb_connect$cdc_ecm(0x5, 0x179, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x40, 0x5, 0x8, 0x40, 0x8}, 0x92, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x6, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x816}}, {0x19, &(0x7f00000009c0)=@string={0x19, 0x3, "f6135233ecdbee3b70d2d4ef5009237fbfae5e5f161e59"}}, {0x9a, &(0x7f00000005c0)=ANY=[@ANYBLOB="9a03e60f5f9122570fbe54c8d6942a874aaaf0d1c7facbbe1d4d45e95429f6d2f1435ede48b240bd2fd461066425aedaac963b577568f215b00bcd9a03e70db5e48e6c094272acb7693f931e43da8893e3ee51802c12ba305bdc309e77ae6248972e8a0dbd96734527c1d6efacd62a275060b6074622f40e858e91498eeff5e39cff5bf93eed8600"/147]}, {0x94, &(0x7f0000000680)=ANY=[@ANYRESOCT=r0]}, {0xa1, &(0x7f0000000740)=ANY=[@ANYRES64=0x0]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80a}}]})
fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='*@', &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff)
syz_usb_ep_read(r4, 0x40, 0x65, &(0x7f0000000800)=""/101)
capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fddbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="100202803c00010024000100656e61626c656400000000000000000000000000000000000000000000000000050003000600000004000400080006009231450272a82478fcd272bb4be8e6f1255ead4ef7fd8facb4580928c81e0d6fc941d66fa0b5dbd64e85a7", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f696e64657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c690600000000000000000000000000000000000000000000000005000300060004000400040008000600", @ANYRES32=0x0, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
ioctl$KDSKBMODE(r5, 0x4b45, 0x0)
r6 = syz_usbip_server_init(0x1)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000014935d1071042c02bb95cc3c09"], 0x0)
r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r7)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x800008, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4ca8, 0x6, 0x5f, 0x4, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x2, 0x3, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xffffffff, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x78, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x1, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x11, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x401, 0x4, 0xb, 0x3, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x9, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0xff, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x8000003, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x23, 0x303c, 0x3e7, 0xb, 0x5, 0x7, 0xd9, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0x953a, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x112b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x8, 0x3, 0x2006, 0x80a2ed, 0x4, 0x23], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x9, 0xe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0xc28f, 0x4, 0xc9, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5201)
close(0x3)
write$usbip_server(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000300000001"], 0x35)

2.047405642s ago: executing program 5 (id=2893):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="6f46c908341889a11ea3992276d5ab9e10824f9fcfb7f6d042618c6866e3801459b03d38ea918910602c461a2efae322fa6119ac242a51d6da28c74d466e336b26c77454129b8f099137cbe49f4f0d25a1887a2a71ab45b6bed147c61d2108915369d90861af6441ec422495a54e03b9b8a72989a44ab1", 0x77}], 0x1, 0x0, 0x0, 0x84}], 0x1, 0x4040000)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x40010}, 0x4008080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

1.986869557s ago: executing program 5 (id=2894):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00000004c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x301f, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010005000000000000000000000a20000000000a01020000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000130000000030a03000000000000000000030000020900030073797a30000000000900010073797a3000000000040004"], 0xa0}}, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd})
syz_usb_connect(0x4, 0x701, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x3f, 0xae, 0xa0, 0x40, 0x4c5, 0x1330, 0xfa58, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6ef, 0x2, 0x68, 0x0, 0x80, 0xf9, [{{0x9, 0x4, 0x9b, 0x0, 0x4, 0x89, 0x8c, 0x9a, 0x2, [@hid_hid={0x9, 0x21, 0x3, 0x9, 0x1, {0x22, 0x5ac}}, @generic={0x5d, 0x3, "b162d5dd251d253e3527a7e98943f25c90ce3f03f0a128e2c63c3844f99c8eaeb6e79c59a3fafab157d428a02f0e9d2d1dcb1fb45e870e365ccae05c70fec24ddb0ecbbb6d3df4d41714a85d9fb40acfccb9ea353d309e3111f055"}], [{{0x9, 0x5, 0x0, 0x4, 0x8, 0x40, 0xb8, 0x80}}, {{0x9, 0x5, 0x5, 0x8, 0x200, 0x0, 0x8, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x28, 0x5}]}}, {{0x9, 0x5, 0x6, 0x1, 0x8, 0x8e, 0x2a, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe, 0x3738}]}}, {{0x9, 0x5, 0x6, 0x2, 0x20, 0x5c, 0x1, 0x2}}]}}, {{0x9, 0x4, 0x0, 0x5, 0x10, 0xb0, 0x29, 0xa0, 0x1, [@uac_as={[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x1, 0x9f, 0x0, "f94557", "dc8d"}, @as_header={0x7, 0x24, 0x1, 0x9, 0xb, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0xd5, 0x3, "50148ed7161a"}]}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x81, 0x9, 0x3f}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xe, 0xe9, 0x6, [@generic={0x15, 0x31, "22dad35e66b4ebeb884ea462ed35d88a1e8050"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x1}]}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x7, 0x51, 0xe, [@generic={0xe3, 0x5, "2e13d07b29cc8364ad721dd400ed0875af3e38e13cea3875e54639c687b6549933455d2f2ac10fb92ebfce521e682aad2dd1d691779e387cf01bc147b94eb9f4052e395b8f7954891ce744a471741849bee8377a7f836e172080bdbaba06d9d4292602830b93de71c9aa54a0d8cbcc77962ddaf3d9f3f720264682a2a26fc8ed5e25507d5c881f4f063a3f61bb86707da466d16e981f6dd5b78d694ba178bb947c99ae9e6cbc8eb97b3eaff8e875c7d86028e6cf976bfc29d46122d433e32ff22a6f37bc36982c1f0c745bc010f8c5bfa7caf3e57d74dbda819de2da1cb11cf0b9"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x59, 0x8, 0x53}}, {{0x9, 0x5, 0x3, 0x15, 0x5ff, 0x9, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xffff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x5, 0x0, 0x3, [@generic={0xf5, 0x4, "59e7b1602a72f949de9cdf263476e9bdadf427fcfb36e17a30218400b9b33a670838e5e9aa5f652fdf6bbb12fb02fb2db2268884a57e593773e8c1ba460c4b01e07f159fa412932215761f5f36bcfe4e6af5b4775e74ff856f5f74fd176d476e21b2414b66261651d7ecdca3dcab900c8b9517c60a01c18a72cd74847acdeecaa88aaad2c57d533f0d7cfeaa77860c6f2358800c6d67823b88a91edef6e00c696c5b2b88aded94d74159d2f8d250ef7131699de79898b2cd3b202d693c6c20203d33d6b5c3a08bc300878ef12b6c5f96c37c1f0a9b738fb7427f93af4587e2b0b22a9ec6fc47b6845d37b79e8a9ad1e2f2961f"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x7, 0xf2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x1, 0x8}, @generic={0x26, 0xd, "a929dcef06a61ea8abeb00fbd9e3b1ae196c5dc85e689f64a5df52f5dd9be79c039c8e6d"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x40, 0x3, 0x3, 0x4}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x1, 0x8, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x8, 0x2, 0x5, [@generic={0xe0, 0x2, "650d5d4b139cfa2d4ac2d8cdd77935a44753d6bf75c65938a2823d45cc053c050696edd52ac7c11d59e2e4b342c8ca26c974bcd2862e3ba677dc497ea90c6941c7f62238f940a27ef8c5bba38325eb472a52e16c01d59ccc4ac333f4c03dac60544928f5e9fed2b393edca8d4763bdda5174fe3a8f50cedda88bceb9837ad444ca5998d91e6b53c98bfca7d6f1cd47744db7bff38f3387552bb7b010c9cad79e283092bdc21c13ed5a3b620e875ec010670e6cabe8d4bcb418231ec0c7ea5a2cd5b579f560b0b6ff3244862c7a37bff3a3977d7f0f4473fbebe42a16e05b"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x2, 0x2, 0x40, [@generic={0xee, 0x23, "99fa46a681a89d62d13f59631a82947e0bd9d7dad2d08e69e9f8f24d83a09df788e354cfd469ec4c66a8c6dabe523a6dbf418e400cb320a8cd86c63e103cf0b65efd0bce8ecb597e2a17a945e66542a41c0f021650a136acc39f36f8915846c6760b2bd9705e2c42fc620d4052fe5bb13c1896c9bba52e85b5644518685344aa745fafacb5d919eb9fc09a21eeb89a9c21285e675457be704a7a63ba98212e98a68568bc3b0140e39aec798aec4b46dc8d3ce48347e5a739c151976cc44da3dab3ab9c46670412b472728bc036177a3f0e33dd61b12709d993ee39eaa4d42523bfef7d7a2f2d28b0d0c34a4d"}, @generic={0x99, 0x21, "720c681509be766f4a2a3e7fadd8b6a1d7d4b28d97c5329ba80c46f811a833945b36aca2f431e350f45b1c00a2a1972dd83880786e94f933044d7fd7d09d335a1193bb2dc558945e0e19e045b71c99c8051b4c09438356fb2a24bf982418a2108e450c8c4df81a65cf63b09109296d4e2aec9c64f6867704d00b8eea0dcae1eb4e36b765e47ea0530c583b61b7d3066bf383664bdf9749"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x8, 0x28, 0x7}}, {{0x9, 0x5, 0xb, 0x9, 0x400, 0x2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x3}]}}, {{0x9, 0x5, 0x9, 0xc, 0x3ff, 0x10, 0x9, 0xf9}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x2, 0xe, 0x4, [@generic={0xd7, 0x22, "53be10146029f134be28a3c08a0e0bbdaa3f356da1e96ed570d96500e2972c6000eb687b7e6058936abf24b92ca8ddcca75b34e763e1bb6ae0043f1fb955855ce9d3faa46e0216ce6299b6553b821e0daa595ea546c5fba34613121f142b34d2a6d659354be77c677fb7aa4d8c623fd70cc1f07e0d9e3eeb662e9b399741bddb9f08c76083848481efd1d733ea539b6e3b9e726ca7db35bfc7a0207e9acc6dc012c78378f7d37fdedbd55fb0efa372b0f71f2ffcde4d0de769cf200e3d8dc54dc84a2e310a0bc21fd933ea724a46506a541261a75e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x16, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x5, 0x33, 0x3}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x5, 0x80, 0x7f, 0x20, 0xf}, 0x39, &(0x7f0000000780)={0x5, 0xf, 0x39, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x4, 0xf, 0x4, [0xc000, 0x0, 0x1fec000]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "0b950a9046f05919b037f27190532e9e"}, @ptm_cap={0x3}, @generic={0x5, 0x10, 0x4, "d9d2"}]}, 0x9, [{0x5e, &(0x7f00000007c0)=@string={0x5e, 0x3, "200deb5038190e8faacba8089208c53293a3e5e6ab05090b22b496624768fa5d0844c5af06eeba0fea291fbab025330030b5087af6d583d087ec3e80cebb86aef1fb115674af8ac25d8ca005a2b7c521508994509490c22c640ddd18"}}, {0x2b, &(0x7f0000000840)=@string={0x2b, 0x3, "64398cbd001b75bfcbf59bdddd7162a8efcbd14a102f1cffd0008bbf51ad93bfb1f9e4a704b30ab81e"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x42a}}, {0xe9, &(0x7f0000000940)=@string={0xe9, 0x3, "5dcc1a14ead684fe28dc35443a23f0f3274811a2d6c7c0c27caa1409be7c174af9231a9516d866313871157a90dba57d36571c26f2b6d8760862f561edf1a20ffbc5987d6fa3911d7fde4e7776552f4a729937e557932659f434ea08886c97d411dd5b5821174d4947d4053df4e818305b8f095de2736d34f190a3acd81bd851a8cf19b851db62416e9c13cac71fa5aa95a6048712b0aa8ef8c75da51754ce39c8f7c65696dd4a300b70c301bd8d5de1dc4facc4b04dfd2e0467d5c46a57e59feb550110a75846a55ce05cf68a9d040ac807ab3db41f4a729e18038246ac9270e57d911f135a5e"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4}}, {0xf8, &(0x7f0000000a80)=@string={0xf8, 0x3, "4a4efc1715b11690bf1f469c98418cf0b126180cce8aaab6ebf58a57385438bdcff54566f18edafb51dbef63f641f20dc9abaffa25a4b3ca85142b73ca5bb0c59f5a44b761f2cbd3ca6fe8da7655a6d66ee55a0c40382229f93cedffa2ddc26bf58a0f0a3806dff5514f3e75718ab0403646954ee3b65d59b8470a96480f7443a174ae3eef956c8da6b83fb1946141c4d780ffebdae5bb7d0dbbe9e73506bdc53ed0e2f3dce03652a7a9d558659604af563c798440fdbc966fc5fdccac560fc42e0aa93ab61c1f7a02116398ad6acc2c87c6d33ff8c8d60dfadd8a9ceb8984d101061ab27bfb3cbf28c4f1e8a648d0780e99f7c40a73"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2809}}]})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000d00)={{0x1, 0x1, 0x18, <r3=>r1, {0x6}}, './file0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000d40)={'batadv0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'ip6gre0\x00', r4, 0x2f, 0x9, 0x5, 0x2, 0x52, @empty, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8, 0x80, 0xfffffffc, 0x32f}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000008000c000200000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r6 = syz_open_dev$sndctrl(&(0x7f0000000c80), 0x10001, 0x301300)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f000061d000/0x3000)=nil)
getgroups(0x2, &(0x7f0000000140)=[<r7=>0x0, <r8=>0xee00])
setresgid(r8, r7, r8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}})
stat(&(0x7f0000000300)='./file0\x00', 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r6, 0x800455d1, &(0x7f0000000cc0))

1.773925167s ago: executing program 3 (id=2896):
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x3a}) (async)
r0 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
cachestat(r0, &(0x7f00000001c0)={0xa000000, 0x6}, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0x1c}}, 0x4001)

1.680475505s ago: executing program 3 (id=2897):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000300)=ANY=[@ANYBLOB=',msize=0'])
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)={0x14, 0x14, 0x1, 0x0, 0x3, {0x2c}}, 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000005e40)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_ATTR(r2, &(0x7f0000005340)={0x78, 0x0, r3, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r4, r5, 0xb, 0x8, 0x1000000}}}, 0x78)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000700036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x6, 0x6, 0xd51df4994cc05469, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000)

1.507776098s ago: executing program 3 (id=2898):
socket$phonet_pipe(0x23, 0x5, 0x2)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r0, &(0x7f0000000040)={0x23, 0x14}, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x800)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b12d5210001", 0x1f)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
r8 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r8, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0xfdfdffff})
splice(r5, 0x0, r7, 0x0, 0x8001, 0x2)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r12=>0x0})
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c8203500310001001038040002000700d1050600fdfffa0a06000c040500f4007f000e0b020600660c0600394303090000030009000900040039dab70e36c4c450e4e99d1b9219cb31a51424831a4c2e47c759996ad52cf452e8ed1bb61460cb67c67883400a55c72290636c96eaa332885b07f1c09c2c037890330530c3d97084126a38bed1be3661859351a2b2c8bf3b08c6db2487e44ae1a867d5486f4627a324e958bf684cb2cc81b12c0582d6"], 0x3a)
r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000040000e207000700e00000020800020005000000080008"], 0x34}}, 0x0)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000140)=0x4)
sync_file_range(r3, 0xd, 0x2, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r12, @ANYBLOB="0c002c80080000006c09"], 0x38}}, 0x0)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8c0)

1.009933601s ago: executing program 5 (id=2899):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000240)=0x2000000, 0x4)
read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00026ebd7000fcdbdf250a000000180006793aa9428014000400fc00000000000000e6ff0000000000002554f018756c831162491d3992adf74c29b99db1016ac0893ff9a223fd9a786f058848e62121c58d82beb296f2a566089f998cec0c75e15ac8838200f9ec287847ad534afe101b2e286055a3ac451b82aedc01fe161d56ca66e35b05e9773285792295ff432669ec12fa03c3925b2ba1b4b1f8db3b04c32107df9dd3560f4ae914b5b097103c7536ba37ca89a6eae50c83208985d2a79a5693e26dcdf0fe681c206a84d68d677e68a598d9a5f613ec422e4fbe1e2051e425495c991f7fa3f7eef877e0fec663594536e38240d8eabe5c1d9e91dc43af0fc8e93b"], 0x2c}, 0x1, 0x0, 0x0, 0x2804cc80}, 0x20004011)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x3c, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

941.229939ms ago: executing program 5 (id=2900):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
listxattr(&(0x7f0000001b00)='./cgroup\x00', &(0x7f0000001cc0)=""/47, 0x2f)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES64=0x77359400, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRES8=r0], 0x48}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc0006}]})
times(0x0)

799.90671ms ago: executing program 5 (id=2901):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x44)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x2, 0x8)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mmap(&(0x7f000003f000/0x2000)=nil, 0x2000, 0xb635773f05ebbeea, 0x1010, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

769.023665ms ago: executing program 5 (id=2902):
syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100138fea408d219261442fd010203010902120001400904ce050002060008000000"], 0x0) (async)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff) (async, rerun: 32)
r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32)
r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000880)='idU\x88\xfe\xd7\x01y\xc1\v\xfd\x9c1\xa8y\'\xc0\x96\xf5r\xa2\x14v\xf3\xcb\xf5\x98\xba\x00\x1c~\xff\x01\x98Q\x06~\xf5U\tIx\xe9:\xc3\x1f\xff\x97\xc1\x05ZF\xb4\xe8\x84\x82\xcd\xec\xed\xa9\xcb<(\x15\x02l\x95\xa8\xf9z\xd6ZoL\xf1\x04c\xc6GE_}\xe29<\xbc\xab\x06\x1a\a\bH\xb3\x8a\xe4\x8d\xac\xe2\x85\xa8\xb2\xe4\xd6\xeb)\x14D\xae\xec\xfaV^\x9fJ#\xb6eN\xa4?\x13\xd0\xc1y\xac#\xf8=L&d\xcd=\xdaq\xb1\xa7\xf0=v0y\xef\x9cI\xcdm\xebn\xc1E\xbc\xdbLD\xc7\xb8\xde\xea\x9b`\x1am\xc9\xd7\x90\xa1c\x82\xbc\x9e\x92\xfb\x03r\x80}\xb6 \nK\x87\x80\xd5\x92\xcb\xb5T\xc2\xdc\xcb,7\xa7\xfdp\x161\n\xdaoT\xbbv\\\xbb$\x1d/\xa4\xber\\[}\xd2\x81\x93\xa4\t\xa6\xb4#[\x0e\x15DQ\xb7|\\\xb37\x10{\xb0\xa8v\xa19\x16\xbe\x8f\xfe\xd0\xc9\xee\x99Q\\\xce\xf8W(\xbd\xf0\x1bh\xbcyX5\x8a\x8a\x97\x17\xeb\n]\xb2\xec\x96\xec\x9e\v\x9d\xb2\xe2\xef\x98\xf8\xbd\x81\x99`\xe13)Y\xa6C\xaf\x14s\x14py\x16o\xa0\x15\xf5\xb3\rW\xf0\xab\xb5\xe6\xcd9l\rO\x8d\x05\xafm]\x0f\xc4>^U\xda\xb0Dk7D\x0flc9F\x85\x00'/352) (async, rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (rerun: 64)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) (async)
r7 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x4) (async, rerun: 64)
r8 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r8, 0x0, 0x18, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe000006a}, 0x10)
r9 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10)
connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) (async)
sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async)
recvmmsg(r7, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1}}], 0x1, 0x0, 0x0)

625.846054ms ago: executing program 3 (id=2903):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x407e, 0x20203843, 0x3, [r1], [0x800], [0x101, 0x0, 0x0, 0xb1e5]})
r2 = socket$can_raw(0x1d, 0x3, 0x1) (async)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000), 0x10) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async, rerun: 32)
mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (rerun: 32)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async)
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330088a8"], 0x10da)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402f17380000000000000109022400010000b0000904000001030002000921000000d60707000905810300"], 0x0) (async)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r6, &(0x7f00000001c0), 0x10) (async)
dup3(r2, r3, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000200021002ebd7000000000000ae40000050000000000000014000100"], 0x30}}, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) (async)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x48000}, 0x0) (async)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r10, 0x303, 0x70bd2c, 0x25dfd3fe}, 0x14}, 0x1, 0x0, 0x0, 0x88d0}, 0x40000) (async)
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYRESOCT=r10], 0x0)

568.049074ms ago: executing program 1 (id=2904):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x6)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xdd)
setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000005a00010f"], 0x18}}, 0x0)
r3 = open$dir(&(0x7f0000000300)='./file0\x00', 0x4000, 0x49)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setreuid(r5, 0x0)
setreuid(0x0, r5)
newfstatat(0xffffffffffffff9c, &(0x7f00000013c0)='\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x100)
fchownat(r3, &(0x7f0000001380)='./file0\x00', r5, r6, 0x1000)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x25, 0x109, 0x70bd1f, 0xfffffffc, {0xe}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x7fff, @remote, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="7c1ead42934472be71c27e63182fff424c07fe898d67a363e837771a2dfc0e8e96a4e6f6feb3049e36f4cf0b1f06053738f125c59dca122fe809b7977c12a9e83f295ec374040b68c3850504948d7887e8b415bf2414a678595d9ab6e361d193901674021dfabfe51ef312b0dddf160691ba616a5d2a1bda5e6f7a5ff12b6cb488", 0x81}, {&(0x7f0000000380)="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", 0x1000}], 0x2}}], 0x1, 0x24008000)

387.110526ms ago: executing program 4 (id=2905):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000300"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

329.803579ms ago: executing program 3 (id=2906):
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x3c0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="380000000000000029000000360000001103000000000000c910fc010000000000000000000000000000c20400000001"], 0x38}}], 0x2, 0x810) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) (async)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

280.276605ms ago: executing program 1 (id=2907):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x0, 0x1, 0x14}) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x0, 0x1, 0x14})
move_pages(0xffffffffffffffff, 0x5, &(0x7f00000000c0)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000100)=[0x8, 0x6, 0xdf000000, 0x4, 0x4], &(0x7f0000000140)=[0x0], 0x4) (async)
move_pages(0xffffffffffffffff, 0x5, &(0x7f00000000c0)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000100)=[0x8, 0x6, 0xdf000000, 0x4, 0x4], &(0x7f0000000140)=[0x0], 0x4)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000180)={0x0, {0x680, 0x2}})
r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x8000000000000001, 0x200800)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000200))
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r2, 0x29, 0x2c, &(0x7f0000000240)="bf5a4491a022c6fe2d23", 0xa)
syz_open_dev$evdev(&(0x7f0000000280), 0x5, 0x18800) (async)
r3 = syz_open_dev$evdev(&(0x7f0000000280), 0x5, 0x18800)
ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000002c0)=[0xdc, 0x1]) (async)
ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f00000002c0)=[0xdc, 0x1])
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000300)={0x3, 0x6})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0) (async)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) (async)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000003c0)={@empty, 0x6, 0x0, 0xfe, 0x8, 0x3, 0xffff}, 0x20)
r6 = accept4$bt_l2cap(r5, 0x0, &(0x7f0000000400), 0x800)
sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4, 0x1, 0x1, 0x3}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="ff4a04dbbd840089ae0bb3ab255803ffe7bc2dec80f97947ca58584c2326e9f9715f7a59da9acb720566d7951bbaa4338a882847c0fae7153319a353d67d89a31e27988132320fb898505a968216ee75ab61dd66f98832edd44f14254f1ee6f4d4c67fe1305bb4d887c460fb2f1b3619b01f914a1813887b15361a311a41cd4431d4ab308d87806f1d94dcdf2b66dd0ca8f893ed951dd6102c0a6d3e4af2f657312abdfc2a7f2f758bf9c275e45e91314973a304411ce9f29d3cbb6d896c03d0820257d8b969712bbe1a78ce87ca5f3511d136cefd0567b8", 0xd8}, {&(0x7f00000005c0)}], 0x2, &(0x7f0000000640)=[{0xa8, 0x10c, 0x0, "8c9a0f712a74ed5e24dca3be98369cb3dae3cc238a4cd4bfb5137bb506099bdbce74cb91deb0798832cdce9e288146444d4f1800bb53d94e700563464d87043c8cacb2cb204e3588b77642470c359f3889aa610c98aa1d99f018bcce59d26d37b4b1e537ae8cf6a9f920618857644b28a008b1b3f065909ed7e50e62bbcb9d0f7b0de53ee11f0ea6d2ebf0b5f96927e726fa5c3ff00fd4"}, {0x28, 0x114, 0x3, "2f17a025e9566f310f9609f190a298215cf3ae"}], 0xd0}, 0x2000a000)
setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000780)={0x1e5}, 0x4)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000a00)=[{0x1000, 0x5011, 0x6d, &(0x7f00000007c0)="55a2d702e1044a1fedb3a02c8ab38ab5cc400697a2f76bf5815b03f038f6186d48a16009154b1773c5e76c37925a77a121d2726930b6f8c00f0caf1936b69f9c5ad5d8f5f730fe1a8e68675a1e2211b8729f34af9421390c023ec0dba8becc9b70ff5fddda55d4cc66be37f991"}, {0x7, 0x400, 0xb0, &(0x7f0000000840)="9bad937d1fd05e552c1323e933a2f6deaf419a67806cb662ba6041bd02e19e8fc978381c3df037b1ab65755c7691b8bbbf4d81d7a1631f4fa242eb391b374a685af2b1712ce2767fe7e548dd4d3489c95f26fc54d9a1e34313286e3bbf7a41d4b2527218891ddb53dcf5155c1df4cda1cc6ff2ce6b2a3643d9e43ccab0747ef5b9f221a882c3cbac92580c1fd67f8dda1855711a20c89dcb2dd0c556e8a8b11efd14cf8ff4a69fbedd43520f81d7f951"}, {0x4, 0x10, 0xd2, &(0x7f0000000900)="e1d2fbf93e6e61577d09da2c163ebb79da76400e9ca981dd852fde38898d83cb0d8bb9dc54b842feb4760bd6d1636e05062f8d8a959a5dd247517708fbb8a8caa05e456eb081c3a0351c4a6d7da7654666fac80474fc03838317acdd3150b096e66d162ce4c952ddc3b4c3975a98cb6764ed3739e7112834fabe9184199c290d5cc96748b6f67bf803ec76b4ed6b8c41cceb3bceeb9189563a44324a84f5c3ea32726be96eccce40c956dcad3a0f95361bb932e487ce676726962825e695298b3595f28a23de23de023328d47b7c5e26a423"}], 0x3})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
fstatfs(r2, &(0x7f0000000a80)=""/74)
r8 = fanotify_init(0x8, 0x8000)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r8, 0xf50f, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000b00)={&(0x7f0000ffe000/0x2000)=nil}) (async)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000b00)={&(0x7f0000ffe000/0x2000)=nil})
ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000b40)={0x80}) (async)
ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000b40)={0x80})
close_range(r0, r7, 0x0)
ioctl$MON_IOCQ_URB_LEN(r5, 0x9201)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c00), 0x382c0, 0x0) (async)
r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c00), 0x382c0, 0x0)
ioctl$RTC_IRQP_SET(r9, 0x4008700c, 0x1db6)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r6, {0x9}}, './file0\x00'})

187.110507ms ago: executing program 1 (id=2908):
syz_usb_connect(0x0, 0x41, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r0, &(0x7f0000000380)={@val={0x0, 0x8917}, @val={0x3, 0x80, 0x7, 0xa465, 0x400, 0xa49a}, @ipv4=@tipc={{0xb, 0x4, 0x2, 0x5, 0xa8, 0x66, 0x0, 0x9, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4, 0xe0, 0x1, 0x6}, @generic={0x86, 0x2}, @lsrr={0x83, 0xb, 0xf2, [@loopback, @remote]}, @ra={0x94, 0x4}]}}, @name_distributor={{0x7c, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x844, 0x0, 0x0, 0x8d, 0x1, 0x2, 0x4e24, 0x4e21, 0x1, 0x2, 0x0, 0x0, 0x1}, [{0x0, 0x1000, 0x1e, 0xcf42, 0xbe13, 0x5, 0x6, 0xc7}, {0xffffff72, 0x4, 0x408, 0x9, 0x27, 0x7, 0x6, 0xffff}, {0xe30, 0x10, 0x5, 0x7f, 0x6, 0x5, 0x8, 0x8000}]}}}, 0xb6)

0s ago: executing program 3 (id=2909):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000dc4009040000010300000009210900000122a0"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xc0000000}]}, 0x1c}}, 0x4040)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r2, &(0x7f00000007c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x1, @b={0x2, 0x4, 0x1, 0x10, {0x13, "cf137019975b5a10b790fc7393b1df3ad56128"}, 0x2}}, 0x1c)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000a40)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="0c7f91c3f043c298c87d2237a984e26ce952bfe0c1a67ecab1dc1996b2d2889aec5fe738640bec7bf3fe372085cdd0e11172e5edc8a468c1cd6be3f4b1d583cae36789feb0435e43ef4ffd0cfb4188ca312ce79896f8268298c7a32774fa2efdce07ae67b8cf896956c796e1658094328dc91c96822be3b8b4ef0616c2f6fbe71b36293a04e600408f3619582ff0dd18dc7618a10b24b5f933293b806cae", @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

erface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  592.914585][ T5890] usb 6-1: Product: syz
[  592.918818][ T5890] usb 6-1: Manufacturer: syz
[  592.923811][T13542] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  592.934916][ T5890] usb 6-1: SerialNumber: syz
[  592.941068][T13542] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64
[  592.953288][ T5890] usb 6-1: config 0 descriptor??
[  592.958692][T13542] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  592.976500][ T5890] yurex 6-1:0.0: Could not find endpoints
[  592.984848][T13542] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  592.996064][T13542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.004615][T13542] usb 2-1: Product: syz
[  593.008976][T13542] usb 2-1: Manufacturer: syz
[  593.021842][T13542] usb 2-1: SerialNumber: syz
[  593.048836][T13542] usb 2-1: config 0 descriptor??
[  593.074131][T15115] ceph: Path missing in source
[  593.080101][T15090] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  593.114667][T13542] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input115
[  593.258763][ T5917] usb 6-1: USB disconnect, device number 115
[  593.356369][   T24] usb 2-1: USB disconnect, device number 8
[  593.561760][ T5913] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  593.714014][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short
[  593.723213][ T5913] usb 4-1: config 6 has an invalid interface number: 200 but max is 0
[  593.731390][ T5913] usb 4-1: config 6 has no interface number 0
[  593.737989][ T5913] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  593.749164][ T5913] usb 4-1: config 6 interface 200 has no altsetting 0
[  593.759038][ T5913] usb 4-1: string descriptor 0 read error: -22
[  593.765915][ T5913] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  593.775128][ T5913] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  593.791956][ T5913] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  593.995858][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  594.009378][ T5913] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  594.017942][ T5913] usb 4-1: media controller created
[  594.033444][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  594.196862][T15121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.206285][T15121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.211722][   T24] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  594.226566][T15121] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  594.233106][T15121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  594.241886][T15121] vhci_hcd vhci_hcd.0: Device attached
[  594.250424][T15121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.260504][T15121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.270339][T15121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.279346][T15121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.384781][   T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  594.392959][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  594.403688][   T24] usb 2-1: config 0 has no interface number 0
[  594.409934][   T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  594.419426][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.431456][   T24] usb 2-1: config 0 descriptor??
[  594.445132][   T24] iowarrior 2-1:0.1: no interrupt-in endpoint found
[  594.481863][ T5917] usb 39-1: new low-speed USB device number 22 using vhci_hcd
[  594.494218][ T5913] dvb-usb: bulk message failed: -71 (6/0)
[  594.496058][T15129] vhci_hcd: cannot find a urb of seqnum 50331648 max seqnum 21
[  594.506236][ T5913] dvb-usb: bulk message failed: -71 (6/0)
[  594.514476][ T3455] vhci_hcd vhci_hcd.3: stop threads
[  594.519751][ T3455] vhci_hcd vhci_hcd.3: release socket
[  594.520062][ T5913] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  594.533829][ T3455] vhci_hcd vhci_hcd.3: disconnect device
[  594.552523][ T5913] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input116
[  594.566495][ T5913] dvb-usb: schedule remote query interval to 150 msecs.
[  594.574128][ T5913] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  594.594336][ T5913] usb 4-1: USB disconnect, device number 79
[  594.631859][ T5913] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  594.971819][T13542] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[  595.122350][T13542] usb 6-1: Using ep0 maxpacket: 32
[  595.135453][T13542] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  595.144214][T13542] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  595.155642][T13542] usb 6-1: config 0 has no interface number 0
[  595.162026][T13542] usb 6-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  595.175513][T13542] usb 6-1: config 0 interface 196 has no altsetting 0
[  595.186760][T13542] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  595.196359][T13542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.206033][T13542] usb 6-1: Product: syz
[  595.210503][T13542] usb 6-1: Manufacturer: syz
[  595.229220][T13542] usb 6-1: SerialNumber: syz
[  595.237990][T13542] usb 6-1: config 0 descriptor??
[  595.256313][T13542] ipheth 6-1:0.196: Unable to find endpoints
[  595.459159][T13542] usb 6-1: USB disconnect, device number 116
[  595.822394][T13542] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  595.951683][T13542] usb 4-1: device descriptor read/64, error -71
[  596.191683][T13542] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  596.321849][T13542] usb 4-1: device descriptor read/64, error -71
[  596.334353][ T5890] usb 6-1: new low-speed USB device number 117 using dummy_hcd
[  596.432935][T13542] usb usb4-port1: attempt power cycle
[  596.491648][ T5890] usb 6-1: Invalid ep0 maxpacket: 32
[  596.621662][ T5890] usb 6-1: new low-speed USB device number 118 using dummy_hcd
[  596.771650][ T5890] usb 6-1: Invalid ep0 maxpacket: 32
[  596.777832][ T5890] usb usb6-port1: attempt power cycle
[  596.784127][T13542] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  596.812469][T13542] usb 4-1: device descriptor read/8, error -71
[  596.985302][   T10] usb 2-1: USB disconnect, device number 9
[  597.051661][T13542] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  597.072609][T13542] usb 4-1: device descriptor read/8, error -71
[  597.131746][ T5890] usb 6-1: new low-speed USB device number 119 using dummy_hcd
[  597.152366][ T5890] usb 6-1: Invalid ep0 maxpacket: 32
[  597.182000][T13542] usb usb4-port1: unable to enumerate USB device
[  597.281690][ T5890] usb 6-1: new low-speed USB device number 120 using dummy_hcd
[  597.302541][ T5890] usb 6-1: Invalid ep0 maxpacket: 32
[  597.308271][ T5890] usb usb6-port1: unable to enumerate USB device
[  597.321704][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  597.334689][T15166] No control pipe specified
[  597.484738][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  597.498242][   T10] usb 2-1: config 6 has an invalid interface number: 200 but max is 0
[  597.507275][   T10] usb 2-1: config 6 has no interface number 0
[  597.514536][   T10] usb 2-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  597.526048][   T10] usb 2-1: config 6 interface 200 has no altsetting 0
[  597.535322][   T10] usb 2-1: string descriptor 0 read error: -22
[  597.541816][   T10] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  597.550896][   T10] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  597.568141][   T10] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  597.768719][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  597.779159][   T10] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  597.788033][   T10] usb 2-1: media controller created
[  597.810575][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  597.972793][T15163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.983036][T15163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.994843][T15163] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  598.001407][T15163] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  598.009400][T15163] vhci_hcd vhci_hcd.0: Device attached
[  598.017719][T15163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.027150][T15163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.038228][T15163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.048349][T15163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.252945][ T5913] usb 35-1: new low-speed USB device number 19 using vhci_hcd
[  598.264087][   T10] dvb-usb: bulk message failed: -71 (6/0)
[  598.270371][T15171] vhci_hcd: cannot find a urb of seqnum 50331648 max seqnum 17
[  598.272863][   T10] dvb-usb: bulk message failed: -71 (6/0)
[  598.284141][ T3455] vhci_hcd vhci_hcd.1: stop threads
[  598.289448][ T3455] vhci_hcd vhci_hcd.1: release socket
[  598.295124][   T10] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  598.295143][ T3455] vhci_hcd vhci_hcd.1: disconnect device
[  598.317741][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input117
[  598.334441][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  598.350550][   T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  598.366842][   T10] usb 2-1: USB disconnect, device number 10
[  598.407992][   T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  598.688121][T15176] netlink: 'syz.3.2610': attribute type 30 has an invalid length.
[  598.699021][T15176] netlink: 'syz.3.2610': attribute type 33 has an invalid length.
[  598.708698][T15176] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2610'.
[  598.843637][T15182] openvswitch: netlink: IP tunnel TTL not specified.
[  598.950280][T15184] Bluetooth: MGMT ver 1.23
[  598.968724][ T5890] usb 4-1: new full-speed USB device number 84 using dummy_hcd
[  599.121989][ T5890] usb 4-1: device descriptor read/64, error -71
[  599.251884][T10674] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  599.274355][T15190] : entered promiscuous mode
[  599.371659][ T5890] usb 4-1: new full-speed USB device number 85 using dummy_hcd
[  599.403813][T10674] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  599.414061][T10674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  599.425379][T10674] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  599.438314][T10674] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  599.448483][T10674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.459359][T10674] usb 2-1: config 0 descriptor??
[  599.502192][ T5890] usb 4-1: device descriptor read/64, error -71
[  599.592674][ T5917] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  599.611931][ T5890] usb usb4-port1: attempt power cycle
[  599.668820][T10674] ath6kl: Failed to submit usb control message: -71
[  599.675784][T10674] ath6kl: unable to send the bmi data to the device: -71
[  599.683413][T10674] ath6kl: Unable to send get target info: -71
[  599.701126][T10674] ath6kl: Failed to init ath6kl core: -71
[  599.708243][T10674] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  599.722841][T10674] usb 2-1: USB disconnect, device number 11
[  599.971726][ T5890] usb 4-1: new full-speed USB device number 86 using dummy_hcd
[  599.992345][ T5890] usb 4-1: device descriptor read/8, error -71
[  600.075234][T15193] netlink: 165 bytes leftover after parsing attributes in process `syz.5.2615'.
[  600.242002][ T5890] usb 4-1: new full-speed USB device number 87 using dummy_hcd
[  600.284079][ T5890] usb 4-1: device descriptor read/8, error -71
[  600.393284][ T5890] usb usb4-port1: unable to enumerate USB device
[  600.471809][T13542] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[  600.643957][T13542] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  600.654972][T13542] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  600.664235][T13542] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.672289][T13542] usb 6-1: Product: syz
[  600.676690][T13542] usb 6-1: Manufacturer: syz
[  600.681306][T13542] usb 6-1: SerialNumber: syz
[  600.831884][ T5890] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  600.907509][T15198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.920659][T15198] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  600.977078][ T5890] usb 2-1: device descriptor read/64, error -71
[  601.051302][T15215] overlayfs: upper fs does not support file handles, falling back to index=off.
[  601.231734][ T5890] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  601.371734][ T5890] usb 2-1: device descriptor read/64, error -71
[  601.492806][ T5890] usb usb2-port1: attempt power cycle
[  601.801862][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.839372][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.852545][ T5890] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  601.873418][ T5890] usb 2-1: device descriptor read/8, error -71
[  601.923133][T15226] nfs4: Unknown parameter 'Óòþ¹_Ëɡ솠ç+a‚·‹¦$¨tL¾ì¤Â©îP•®ñÅ^ƒôª
[  601.923133][T15226] “XYø•Ç;õ€ï`?í�2i\ÏoPï›O#Ç?ŽvPÜÊ�®U+.jÅÈÅgPN§G:S4Ñjði¶¢H¬	*@qÓ	³Ž'ñ…"›(Ceôé­(©Ú›õÌÙ±
lÜLw'
[  602.141673][ T5890] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  602.186188][ T5890] usb 2-1: device descriptor read/8, error -71
[  602.313835][ T5890] usb usb2-port1: unable to enumerate USB device
[  602.453610][T15236] syz.3.2627 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  602.513116][T15236] syzkaller1: entered promiscuous mode
[  602.519146][T15236] syzkaller1: entered allmulticast mode
[  602.678323][T13542] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  602.836353][T13542] usb 6-1: USB disconnect, device number 121
[  603.023272][T15240] fuse: Unknown parameter 'ÛÛ<0x0000000000000004'
[  603.134972][T15244] loop3: detected capacity change from 0 to 7
[  603.153108][ T5826] Dev loop3: unable to read RDB block 7
[  603.158740][ T5826]  loop3: AHDI p3 p4
[  603.171781][ T5826] loop3: partition table partially beyond EOD, truncated
[  603.179718][ T5826] loop3: p3 start 1702000233 is beyond EOD, truncated
[  603.200387][T15244] Dev loop3: unable to read RDB block 7
[  603.215204][T15244]  loop3: AHDI p3 p4
[  603.231280][T15244] loop3: partition table partially beyond EOD, truncated
[  603.251895][T15244] loop3: p3 start 1702000233 is beyond EOD, truncated
[  603.360329][ T5913] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  603.652266][ T5917] usb 4-1: new low-speed USB device number 88 using dummy_hcd
[  603.791651][ T5917] usb 4-1: device descriptor read/64, error -71
[  603.964066][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  603.964087][   T30] audit: type=1326 audit(1768317139.459:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15250 comm="syz.4.2633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e2d98f749 code=0x0
[  604.032401][   T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  604.040145][ T5917] usb 4-1: new low-speed USB device number 89 using dummy_hcd
[  604.171774][ T5917] usb 4-1: device descriptor read/64, error -71
[  604.200817][   T24] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  604.230286][   T24] usb 2-1: config 0 has no interface number 0
[  604.240851][   T24] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  604.272553][   T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  604.300815][ T5917] usb usb4-port1: attempt power cycle
[  604.315822][   T24] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  604.331744][   T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  604.341940][   T24] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  604.350058][   T24] usb 2-1: Product: syz
[  604.355026][   T24] usb 2-1: SerialNumber: syz
[  604.365479][   T24] usb 2-1: config 0 descriptor??
[  604.390589][   T24] cm109 2-1:0.8: invalid payload size 0, expected 4
[  604.406563][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input118
[  604.661794][ T5917] usb 4-1: new low-speed USB device number 90 using dummy_hcd
[  604.687759][ T5917] usb 4-1: device descriptor read/8, error -71
[  604.823074][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  604.825017][ T5890] usb 2-1: USB disconnect, device number 16
[  604.830101][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  604.864765][ T5890] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  604.921698][ T5917] usb 4-1: new low-speed USB device number 91 using dummy_hcd
[  604.942477][ T5917] usb 4-1: device descriptor read/8, error -71
[  605.053668][ T5917] usb usb4-port1: unable to enumerate USB device
[  605.492686][T15288] loop3: detected capacity change from 0 to 7
[  605.499773][T15288] Dev loop3: unable to read RDB block 7
[  605.505585][T15288]  loop3: AHDI p3 p4
[  605.509512][T15288] loop3: partition table partially beyond EOD, truncated
[  605.518042][T15288] loop3: p3 start 1702000233 is beyond EOD, truncated
[  605.711734][   T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  605.841755][   T24] usb 2-1: device descriptor read/64, error -71
[  606.081876][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  606.213298][   T24] usb 2-1: device descriptor read/64, error -71
[  606.230788][T15295] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2646'.
[  606.332414][   T24] usb usb2-port1: attempt power cycle
[  606.398133][T15297] netlink: 'syz.3.2647': attribute type 27 has an invalid length.
[  606.408220][ T5834] Bluetooth: hci1: command 0x0405 tx timeout
[  606.433908][T15297] syzkaller1: entered promiscuous mode
[  606.439425][T15297] syzkaller1: entered allmulticast mode
[  606.691792][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  606.712461][   T24] usb 2-1: device descriptor read/8, error -71
[  606.762914][  T977] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  606.875090][T15301] loop6: detected capacity change from 0 to 2640
[  606.885124][T15303] Buffer I/O error on dev loop6, logical block 0, lost async page write
[  606.894770][T15301] Buffer I/O error on dev loop6, logical block 0, async page read
[  606.903142][T15301] Buffer I/O error on dev loop6, logical block 0, async page read
[  606.911035][T15301] Buffer I/O error on dev loop6, logical block 0, async page read
[  606.919218][T15301] Buffer I/O error on dev loop6, logical block 0, async page read
[  606.928184][  T977] usb 4-1: Using ep0 maxpacket: 16
[  606.933738][T15301] Buffer I/O error on dev loop6, logical block 0, async page read
[  606.942494][T15301] Buffer I/O error on dev loop6, logical block 0, async page read
[  606.950476][T15301] Buffer I/O error on dev loop6, logical block 0, async page read
[  606.958916][T15301] Buffer I/O error on dev loop6, logical block 0, async page read
[  606.961694][   T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  606.970089][T15301] ldm_validate_partition_table(): Disk read failed.
[  606.981481][  T977] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  606.990430][T15301] Buffer I/O error on dev loop6, logical block 0, async page read
[  607.001864][T15301] Dev loop6: unable to read RDB block 0
[  607.002376][   T24] usb 2-1: device descriptor read/8, error -71
[  607.008124][T15301]  loop6: unable to read partition table
[  607.019906][T15301] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  607.023189][  T977] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  607.059282][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.068326][  T977] usb 4-1: Product: syz
[  607.087808][  T977] usb 4-1: Manufacturer: syz
[  607.093170][  T977] usb 4-1: SerialNumber: syz
[  607.107055][  T977] usb 4-1: config 0 descriptor??
[  607.118678][  T977] appledisplay 4-1:0.0: Could not find int-in endpoint
[  607.132805][   T24] usb usb2-port1: unable to enumerate USB device
[  607.140403][  T977] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  607.275236][T15309] loop3: detected capacity change from 0 to 7
[  607.284188][T15309] Dev loop3: unable to read RDB block 7
[  607.289816][T15309]  loop3: AHDI p3 p4
[  607.293815][T15309] loop3: partition table partially beyond EOD, truncated
[  607.301193][T15309] loop3: p3 start 1702000233 is beyond EOD, truncated
[  607.339716][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.358940][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.368537][T15297] /dev/sg0: Can't lookup blockdev
[  607.376733][  T977] usb 4-1: USB disconnect, device number 92
[  607.466482][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2653'.
[  607.911685][ T5917] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[  608.061716][ T5917] usb 6-1: Using ep0 maxpacket: 16
[  608.068563][ T5917] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  608.081687][ T5917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  608.098484][ T5917] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  608.108808][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.117649][ T5917] usb 6-1: Product: syz
[  608.122326][ T5917] usb 6-1: Manufacturer: syz
[  608.127428][ T5917] usb 6-1: SerialNumber: syz
[  608.340401][T15318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.351157][T15318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.362340][ T5917] usb 6-1: 0:2 : does not exist
[  608.377413][ T5917] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  608.401770][  T977] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  608.419744][ T5917] usb 6-1: USB disconnect, device number 122
[  608.449427][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  608.533187][  T977] usb 4-1: device descriptor read/64, error -71
[  608.547368][T13542] IPVS: starting estimator thread 0...
[  608.644604][T15330] IPVS: using max 27 ests per chain, 64800 per kthread
[  608.791690][  T977] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  608.925623][T15337] loop3: detected capacity change from 0 to 7
[  608.933238][T15337] Dev loop3: unable to read RDB block 7
[  608.938947][T15337]  loop3: AHDI p3 p4
[  608.944057][  T977] usb 4-1: device descriptor read/64, error -71
[  608.950581][T15337] loop3: partition table partially beyond EOD, truncated
[  608.957922][T15337] loop3: p3 start 1702000233 is beyond EOD, truncated
[  609.030660][T15339] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2663'.
[  609.053489][  T977] usb usb4-port1: attempt power cycle
[  609.060654][T15339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  609.112552][ T5917] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  609.116875][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2664'.
[  609.409834][  T977] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  609.463040][  T977] usb 4-1: device descriptor read/8, error -71
[  609.505715][ T5917] usb 2-1: unable to read config index 0 descriptor/start: -71
[  609.524951][ T5917] usb 2-1: can't read configurations, error -71
[  609.616785][T15356] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2669'.
[  609.711713][  T977] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  609.741093][  T977] usb 4-1: device descriptor read/8, error -71
[  609.798190][T15368] loop3: detected capacity change from 0 to 7
[  609.805262][T15368] Dev loop3: unable to read RDB block 7
[  609.810869][T15368]  loop3: AHDI p3 p4
[  609.814897][T15368] loop3: partition table partially beyond EOD, truncated
[  609.822149][T15368] loop3: p3 start 1702000233 is beyond EOD, truncated
[  609.851666][ T5920] usb 6-1: new full-speed USB device number 123 using dummy_hcd
[  609.862273][  T977] usb usb4-port1: unable to enumerate USB device
[  609.934352][T15370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2673'.
[  610.053509][ T5920] usb 6-1: config index 0 descriptor too short (expected 539, got 27)
[  610.101643][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4
[  610.120769][ T5920] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  610.130481][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.138873][ T5920] usb 6-1: Product: syz
[  610.143345][ T5920] usb 6-1: Manufacturer: syz
[  610.148331][ T5920] usb 6-1: SerialNumber: syz
[  610.155742][ T5920] usb 6-1: config 0 descriptor??
[  610.164360][ T5920] hub 6-1:0.0: bad descriptor, ignoring hub
[  610.170298][ T5920] hub 6-1:0.0: probe with driver hub failed with error -5
[  610.181021][ T5920] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input120
[  610.196246][ T5920] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90
[  610.212380][ T5920] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -90
[  610.361712][ T5917] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  610.479440][T15385] batadv_slave_0: entered promiscuous mode
[  610.488709][T15384] batadv_slave_0: left promiscuous mode
[  610.522084][T10674] usb 6-1: USB disconnect, device number 123
[  610.538363][ T5917] usb 2-1: Using ep0 maxpacket: 32
[  610.555871][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.581980][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.592771][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  610.601965][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.613954][ T5917] usb 2-1: config 0 descriptor??
[  610.623075][ T5917] hub 2-1:0.0: USB hub found
[  610.826394][ T5917] hub 2-1:0.0: config failed, can't read hub descriptor (err -90)
[  611.127105][T15392] loop3: detected capacity change from 0 to 7
[  611.135150][T15392] Dev loop3: unable to read RDB block 7
[  611.140820][T15392]  loop3: AHDI p3 p4
[  611.144943][T15392] loop3: partition table partially beyond EOD, truncated
[  611.152347][T15392] loop3: p3 start 1702000233 is beyond EOD, truncated
[  611.242718][ T5917] usbhid 2-1:0.0: can't add hid device: -71
[  611.264967][ T5917] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  611.282330][ T5839] Bluetooth: hci1: command 0x0405 tx timeout
[  611.326396][ T5917] usb 2-1: USB disconnect, device number 22
[  611.601769][ T5920] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[  611.601787][T10674] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  611.762916][T10674] usb 4-1: Using ep0 maxpacket: 8
[  611.768242][ T5920] usb 6-1: Using ep0 maxpacket: 8
[  611.771279][T10674] usb 4-1: unable to get BOS descriptor or descriptor too short
[  611.777092][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short
[  611.782557][T10674] usb 4-1: config 52 has an invalid interface number: 171 but max is 0
[  611.791672][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  611.797406][T10674] usb 4-1: config 52 has no interface number 0
[  611.812105][ T5920] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  611.816198][T10674] usb 4-1: config 52 interface 171 has no altsetting 0
[  611.825115][ T5920] usb 6-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0
[  611.832840][T10674] usb 4-1: New USB device found, idVendor=12d1, idProduct=a481, bcdDevice=cc.a3
[  611.840327][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=8, SerialNumber=0
[  611.849803][T10674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  611.857530][ T5920] usb 6-1: Product: syz
[  611.865325][T10674] usb 4-1: Product: syz
[  611.869498][ T5920] usb 6-1: Manufacturer: syz
[  611.873938][T10674] usb 4-1: Manufacturer: syz
[  611.883239][T10674] usb 4-1: SerialNumber: syz
[  611.889417][ T5920] usb 6-1: config 0 descriptor??
[  612.118956][T10674] option 4-1:52.171: GSM modem (1-port) converter detected
[  612.139236][T15396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.152094][T10674] usb 4-1: USB disconnect, device number 97
[  612.160686][T15396] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.170374][T10674] option 4-1:52.171: device disconnected
[  612.180449][ T5917] usb 6-1: USB disconnect, device number 124
[  613.011725][ T5917] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  613.061695][T10674] usb 6-1: new full-speed USB device number 125 using dummy_hcd
[  613.173963][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short
[  613.182964][ T5917] usb 2-1: config 6 has an invalid interface number: 200 but max is 0
[  613.191219][ T5917] usb 2-1: config 6 has no interface number 0
[  613.197983][ T5917] usb 2-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  613.209505][ T5917] usb 2-1: config 6 interface 200 has no altsetting 0
[  613.220794][T10674] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  613.230236][T10674] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.240544][ T5917] usb 2-1: string descriptor 0 read error: -22
[  613.248395][ T5917] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  613.258714][T10674] usb 6-1: config 0 descriptor??
[  613.264050][ T5917] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  613.283924][ T5917] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  613.302035][ T5920] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[  613.477967][ T5834] Bluetooth: hci5: adv larger than maximum supported
[  613.478038][ T5834] Bluetooth: hci5: Malformed LE Event: 0x0d
[  613.496030][T10674] usb 6-1: string descriptor 0 read error: -71
[  613.505837][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  613.524274][T10674] usb-storage 6-1:0.0: USB Mass Storage device detected
[  613.539160][ T5917] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  613.558180][T10674] usb-storage 6-1:0.0: Quirks match for vid 05ab pid 0060: 2
[  613.573645][ T5917] usb 2-1: media controller created
[  613.598420][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  613.641904][ T5920] usb 4-1: unable to read config index 0 descriptor/start: -71
[  613.657325][T10674] usb 6-1: USB disconnect, device number 125
[  613.661718][ T5920] usb 4-1: can't read configurations, error -71
[  613.690132][T15398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.699976][T15398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.748449][T15398] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  613.755043][T15398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  613.794062][T15398] vhci_hcd vhci_hcd.0: Device attached
[  613.804546][T15414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.805227][T15413] netlink: 624 bytes leftover after parsing attributes in process `syz.4.2687'.
[  613.814654][T15414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.840577][T15398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.853124][T15398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.032704][  T977] usb 35-1: new low-speed USB device number 20 using vhci_hcd
[  614.073356][ T5917] dvb-usb: bulk message failed: -71 (6/0)
[  614.081018][T15410] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 18
[  614.100762][ T1006] vhci_hcd vhci_hcd.1: stop threads
[  614.106518][ T1006] vhci_hcd vhci_hcd.1: release socket
[  614.107580][ T5917] dvb-usb: bulk message failed: -71 (6/0)
[  614.116380][ T1006] vhci_hcd vhci_hcd.1: disconnect device
[  614.120631][ T5917] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  614.152276][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input121
[  614.182959][ T5917] dvb-usb: schedule remote query interval to 150 msecs.
[  614.192384][ T5917] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  614.211463][ T5917] usb 2-1: USB disconnect, device number 23
[  614.313768][ T5917] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  614.417941][T15425] loop3: detected capacity change from 0 to 7
[  614.428455][ T5826] Dev loop3: unable to read RDB block 7
[  614.434182][ T5826]  loop3: AHDI p3 p4
[  614.438238][ T5826] loop3: partition table partially beyond EOD, truncated
[  614.453228][ T5826] loop3: p3 start 1702000233 is beyond EOD, truncated
[  614.465693][T15425] Dev loop3: unable to read RDB block 7
[  614.471707][T15425]  loop3: AHDI p3 p4
[  614.475898][T15425] loop3: partition table partially beyond EOD, truncated
[  614.484100][T15425] loop3: p3 start 1702000233 is beyond EOD, truncated
[  614.642303][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2694'.
[  614.982239][T13542] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  615.143625][T13542] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  615.164942][T13542] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  615.206480][T13542] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  615.222430][T13542] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.241842][T13542] usb 2-1: Product: syz
[  615.248961][T13542] usb 2-1: Manufacturer: syz
[  615.261437][T13542] usb 2-1: SerialNumber: syz
[  615.381722][T15464] loop3: detected capacity change from 0 to 7
[  615.389017][T15464] Dev loop3: unable to read RDB block 7
[  615.397346][T15464]  loop3: AHDI p3 p4
[  615.402068][T15464] loop3: partition table partially beyond EOD, truncated
[  615.409945][T15464] loop3: p3 start 1702000233 is beyond EOD, truncated
[  615.680014][T13542] usb 2-1: 0:2 : does not exist
[  615.791825][ T5920] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[  615.901832][T10674] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  615.953689][ T5920] usb 6-1: unable to get BOS descriptor or descriptor too short
[  615.963299][ T5920] usb 6-1: config 6 has an invalid interface number: 200 but max is 0
[  615.971493][ T5920] usb 6-1: config 6 has no interface number 0
[  615.977724][ T5920] usb 6-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  615.988756][ T5920] usb 6-1: config 6 interface 200 has no altsetting 0
[  615.998185][ T5920] usb 6-1: string descriptor 0 read error: -22
[  616.004613][ T5920] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  616.014751][ T5920] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  616.030997][ T5920] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  616.061815][T10674] usb 4-1: Using ep0 maxpacket: 16
[  616.068958][T10674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  616.082642][T10674] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  616.087465][T13542] usb 2-1: USB disconnect, device number 24
[  616.091968][T10674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.109815][T10674] usb 4-1: Product: syz
[  616.114633][T10674] usb 4-1: Manufacturer: syz
[  616.121715][T10674] usb 4-1: SerialNumber: syz
[  616.134030][T10674] usb 4-1: config 0 descriptor??
[  616.146378][T10674] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  616.160252][T10674] em28xx 4-1:0.0: DVB interface 0 found: bulk
[  616.235200][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  616.246702][ T5920] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  616.255993][ T5920] usb 6-1: media controller created
[  616.273921][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  616.439909][T15468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.449286][T15468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.461596][T15468] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  616.468168][T15468] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  616.476116][T15468] vhci_hcd vhci_hcd.0: Device attached
[  616.486341][T15468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.495734][T15468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.505587][T15468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.515225][T15468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.712944][ T5917] usb 43-1: new low-speed USB device number 12 using vhci_hcd
[  616.732549][ T5920] dvb-usb: bulk message failed: -71 (6/0)
[  616.739699][T15473] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 11
[  616.747713][ T5920] dvb-usb: bulk message failed: -71 (6/0)
[  616.753534][ T1006] vhci_hcd vhci_hcd.5: stop threads
[  616.753612][ T1006] vhci_hcd vhci_hcd.5: release socket
[  616.753747][ T1006] vhci_hcd vhci_hcd.5: disconnect device
[  616.806664][ T5920] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  616.822478][ T5920] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input122
[  616.837963][ T5920] dvb-usb: schedule remote query interval to 150 msecs.
[  616.845195][ T5920] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  616.862302][ T5920] usb 6-1: USB disconnect, device number 126
[  616.924555][T10674] em28xx 4-1:0.0: chip ID is em2765
[  616.940467][ T5920] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  616.961834][ T5913] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  616.996259][T15472] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  617.015149][T15472] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  617.039892][T15472] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  617.046729][T15472] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  617.060252][T15472] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  617.068208][T15472] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  617.138979][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  617.152071][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.164380][ T5913] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[  617.174891][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.185391][ T5913] usb 2-1: config 0 descriptor??
[  617.236626][T10674] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  617.245594][T10674] em28xx 4-1:0.0: board has no eeprom
[  617.312078][T10674] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  617.320242][T10674] em28xx 4-1:0.0: dvb set to bulk mode.
[  617.326648][   T24] em28xx 4-1:0.0: Binding DVB extension
[  617.350020][T10674] usb 4-1: USB disconnect, device number 100
[  617.385461][T10674] em28xx 4-1:0.0: Disconnecting em28xx
[  617.426391][T15486] tmpfs: Bad value for 'mpol'
[  617.458170][   T24] em28xx 4-1:0.0: Registering input extension
[  617.463852][T15488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.476342][T10674] em28xx 4-1:0.0: Closing input extension
[  617.487876][T15488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.538526][T10674] em28xx 4-1:0.0: Freeing device
[  617.609740][T15491] loop3: detected capacity change from 0 to 7
[  617.621693][T15491] Dev loop3: unable to read RDB block 7
[  617.627303][T15491]  loop3: AHDI p3 p4
[  617.631242][T15491] loop3: partition table partially beyond EOD, truncated
[  617.638677][T15491] loop3: p3 start 1702000233 is beyond EOD, truncated
[  617.764596][ T5913] hid_parser_main: 22 callbacks suppressed
[  617.764622][ T5913] stadia 0003:18D1:9400.002E: unknown main item tag 0x0
[  617.807265][ T5913] stadia 0003:18D1:9400.002E: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0
[  617.823085][ T5913] stadia 0003:18D1:9400.002E: no inputs found
[  617.829666][ T5913] stadia 0003:18D1:9400.002E: force feedback init failed
[  617.951819][ T5913] usb 2-1: USB disconnect, device number 25
[  618.011692][ T5890] usb 6-1: new full-speed USB device number 127 using dummy_hcd
[  618.051767][ T5920] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  618.174588][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short
[  618.183142][ T5890] usb 6-1: not running at top speed; connect to a high speed hub
[  618.192367][ T5890] usb 6-1: config 4 has an invalid interface number: 218 but max is 0
[  618.200589][ T5890] usb 6-1: config 4 has no interface number 0
[  618.206809][ T5890] usb 6-1: config 4 interface 218 has no altsetting 0
[  618.216065][ T5890] usb 6-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice= 8.30
[  618.225281][ T5920] usb 4-1: Using ep0 maxpacket: 16
[  618.230573][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.238749][ T5890] usb 6-1: Product: syz
[  618.243413][ T5890] usb 6-1: Manufacturer: syz
[  618.248214][ T5890] usb 6-1: SerialNumber: syz
[  618.253685][ T5920] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  618.262050][ T5920] usb 4-1: config 1 has no interface number 0
[  618.268316][ T5920] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  618.282171][ T5920] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  618.296367][ T5920] usb 4-1: config 1 interface 105 has no altsetting 0
[  618.306079][ T5920] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  618.315285][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.323563][ T5920] usb 4-1: Product: syz
[  618.328544][ T5920] usb 4-1: Manufacturer: syz
[  618.333288][ T5920] usb 4-1: SerialNumber: syz
[  618.341023][T15495] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  618.349648][T15495] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  618.510193][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2716'.
[  618.564798][T15495] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  618.572787][T15495] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  618.694645][T15507] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  618.707513][ T5890] dvb-usb: found a 'DiBcom TFE8096P reference design' in warm state.
[  618.724746][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  618.734369][ T5890] dvbdev: DVB: registering new adapter (DiBcom TFE8096P reference design)
[  618.743960][ T5890] usb 6-1: media controller created
[  618.751185][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  618.763978][T15508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.776252][T15499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.782871][T15508] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.794899][ T5920] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32
[  618.802773][T15499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.812191][ T5920] aqc111 4-1:1.105: probe with driver aqc111 failed with error -32
[  618.873701][ T5890] DVB: Unable to find symbol dib8000_attach()
[  618.880161][ T5890] dvb-usb: no frontend was attached by 'DiBcom TFE8096P reference design'
[  618.895915][ T5834] Bluetooth: hci5: command 0x0406 tx timeout
[  618.963038][ T5890] rc_core: IR keymap rc-dib0700-rc5 not found
[  618.969330][ T5890] Registered IR keymap rc-empty
[  618.975364][ T5890] dvb-usb: could not initialize remote control.
[  618.982250][ T5890] dvb-usb: DiBcom TFE8096P reference design successfully initialized and connected.
[  618.995928][ T5890] usb 6-1: USB disconnect, device number 127
[  619.027851][ T5890] dvb-usb: DiBcom TFE8096P reference design successfully deinitialized and disconnected.
[  619.043346][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  619.121983][  T977] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  619.122387][ T5834] Bluetooth: hci1: command 0x0405 tx timeout
[  619.134735][ T5913] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  619.291705][ T5913] usb 2-1: Using ep0 maxpacket: 16
[  619.299389][ T5913] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  619.309699][ T5913] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  619.320868][ T5913] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  619.330199][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.338415][ T5913] usb 2-1: Product: syz
[  619.342773][ T5913] usb 2-1: Manufacturer: syz
[  619.347417][ T5913] usb 2-1: SerialNumber: syz
[  619.494888][T11338] cgroup: fork rejected by pids controller in /syz5
[  619.596100][T15512] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2719'.
[  619.630845][T15512] ubi8: attaching mtd0
[  619.640968][T15512] ubi8: scanning is finished
[  619.645711][T15512] ubi8: empty MTD device detected
[  619.774504][T15512] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB)
[  619.791762][T15512] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 3939 bytes
[  619.809781][T15512] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1
[  619.819490][T15512] ubi8: VID header offset: 93 (aligned 93), data offset: 157
[  619.839828][T15512] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  619.853848][T15512] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 22
[  619.876440][T15512] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1849063024
[  619.915802][T15512] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  619.948859][T15516] ubi8: background thread "ubi_bgt8d" started, PID 15516
[  620.127691][ T5913] usb 2-1: 0:2 : does not exist
[  620.167970][ T5913] usb 2-1: unit 6 not found!
[  620.291702][ T5913] usb 2-1: USB disconnect, device number 26
[  620.335379][T15523] loop3: detected capacity change from 0 to 7
[  620.353381][T15523] Dev loop3: unable to read RDB block 7
[  620.355050][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  620.366053][T15523]  loop3: AHDI p3 p4
[  620.381904][T15523] loop3: partition table partially beyond EOD, truncated
[  620.413353][T15523] loop3: p3 start 1702000233 is beyond EOD, truncated
[  620.683752][T14890] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.863997][T14890] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.882513][   T24] usb 4-1: USB disconnect, device number 101
[  621.058719][T14890] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.126098][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  621.201809][ T5834] Bluetooth: hci1: command 0x0405 tx timeout
[  621.212105][T14890] batman_adv: batadv0: Removing interface: netdevsim0
[  621.221140][T14890] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.268897][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  621.279881][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  621.289334][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  621.297674][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  621.325644][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  621.367417][T15543] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2729'.
[  621.379265][T15543] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2729'.
[  621.421722][  T977] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  621.569485][T15540] wg0 speed is unknown, defaulting to 1000
[  621.580385][T14890] bridge_slave_1: left allmulticast mode
[  621.585911][T15546] x_tables: duplicate underflow at hook 2
[  621.589546][T14890] bridge_slave_1: left promiscuous mode
[  621.597808][T14890] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.598629][  T977] usb 2-1: Using ep0 maxpacket: 8
[  621.618806][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.625327][T15546] x_tables: duplicate underflow at hook 2
[  621.632055][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.643505][T15546] x_tables: duplicate underflow at hook 2
[  621.653702][T15546] x_tables: duplicate underflow at hook 2
[  621.653867][  T977] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  621.659576][T15546] x_tables: duplicate underflow at hook 2
[  621.671161][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.684365][T14890] bridge_slave_0: left allmulticast mode
[  621.690571][T14890] bridge_slave_0: left promiscuous mode
[  621.699948][T14890] bridge0: port 1(bridge_slave_0) entered disabled state
[  621.701145][  T977] usb 2-1: config 0 descriptor??
[  621.708675][T15546] x_tables: duplicate underflow at hook 2
[  621.724681][T15546] x_tables: duplicate underflow at hook 2
[  621.730581][T15546] x_tables: duplicate underflow at hook 2
[  621.743044][T15546] x_tables: duplicate underflow at hook 2
[  621.772326][T15546] x_tables: duplicate underflow at hook 2
[  621.842610][ T5917] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  622.032052][T14890] team0: Port device geneve1 removed
[  622.056945][T14890] team0: Port device geneve0 removed
[  622.159150][T15535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2727'.
[  622.170286][T15535] tipc: Invalid UDP bearer configuration
[  622.170350][T15535] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  622.254799][  T977] usbhid 2-1:0.0: can't add hid device: -71
[  622.261092][  T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  622.301008][  T977] usb 2-1: USB disconnect, device number 27
[  622.509568][T15558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.520230][T15558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.636400][T15540] chnl_net:caif_netlink_parms(): no params data found
[  622.701733][T10674] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  622.752207][ T5913] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  622.836740][T15540] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.844185][T15540] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.851609][T15540] bridge_slave_0: entered allmulticast mode
[  622.859746][T10674] usb 4-1: unable to get BOS descriptor or descriptor too short
[  622.868307][T15540] bridge_slave_0: entered promiscuous mode
[  622.879862][T15540] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.884665][T10674] usb 4-1: config 6 has an invalid interface number: 200 but max is 0
[  622.889303][T15540] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.904511][T10674] usb 4-1: config 6 has no interface number 0
[  622.910664][T10674] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  622.921898][T15540] bridge_slave_1: entered allmulticast mode
[  622.924007][T15540] bridge_slave_1: entered promiscuous mode
[  622.929778][T10674] usb 4-1: config 6 interface 200 has no altsetting 0
[  622.948003][T10674] usb 4-1: string descriptor 0 read error: -22
[  622.955024][T10674] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  622.965341][T10674] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  622.974489][ T5913] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36
[  622.986430][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.000577][ T5913] usb 2-1: Product: syz
[  623.009625][T10674] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  623.024639][ T5913] usb 2-1: Manufacturer: syz
[  623.034630][ T5913] usb 2-1: SerialNumber: syz
[  623.055174][T15540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  623.077102][T15540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  623.142945][T15540] team0: Port device team_slave_0 added
[  623.152817][T15540] team0: Port device team_slave_1 added
[  623.193697][T15540] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.200689][T15540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.212327][T10674] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  623.233945][T15540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.249888][T10674] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  623.261885][T15540] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.268998][T10674] usb 4-1: media controller created
[  623.274600][T15540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  623.325215][T10674] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  623.340559][ T5913] mdc800 2-1:39.0: probe fails -> wrong Number of Configuration
[  623.350705][T15540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.362122][ T5839] Bluetooth: hci2: command tx timeout
[  623.396890][ T5913] usb 2-1: USB disconnect, device number 28
[  623.415948][T15560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.425076][T15560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.437164][T15560] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  623.443744][T15560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  623.452884][T15560] vhci_hcd vhci_hcd.0: Device attached
[  623.479096][T15560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.514139][T15560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.543133][T15560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.552769][T15560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.578893][T15586] syzkaller1: entered promiscuous mode
[  623.585423][T15586] syzkaller1: entered allmulticast mode
[  623.676702][T15540] hsr_slave_0: entered promiscuous mode
[  623.690342][T15540] hsr_slave_1: entered promiscuous mode
[  623.703135][T15540] debugfs: 'hsr0' already exists in 'hsr'
[  623.708945][T15540] Cannot create hsr debugfs directory
[  623.708983][ T5920] usb 39-1: new low-speed USB device number 23 using vhci_hcd
[  623.802553][T10674] dvb-usb: bulk message failed: -71 (6/0)
[  623.815555][T15581] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 22
[  623.816468][T15592] cgroup2: Unknown parameter 'obj_user'
[  623.833134][   T12] vhci_hcd vhci_hcd.3: stop threads
[  623.838914][   T12] vhci_hcd vhci_hcd.3: release socket
[  623.848030][T10674] dvb-usb: bulk message failed: -71 (6/0)
[  623.861723][T10674] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  623.877980][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  623.882487][T10674] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input125
[  623.907310][T10674] dvb-usb: schedule remote query interval to 150 msecs.
[  623.918902][T10674] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  623.944649][T10674] usb 4-1: USB disconnect, device number 102
[  624.061700][T14890] : left promiscuous mode
[  624.066773][T10674] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  624.101775][  T977] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  624.184198][T14890] tipc: Left network mode
[  624.274577][  T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  624.292306][  T977] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  624.301412][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.348256][  T977] usb 2-1: config 0 descriptor??
[  624.372525][T15592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  624.570157][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  624.761672][T10674] usb 4-1: new full-speed USB device number 103 using dummy_hcd
[  624.822742][  T977] logitech 0003:046D:C626.002F: unbalanced collection at end of report description
[  624.839172][  T977] logitech 0003:046D:C626.002F: parse failed
[  624.846535][  T977] logitech 0003:046D:C626.002F: probe with driver logitech failed with error -22
[  624.899001][T14890] hsr_slave_0: left promiscuous mode
[  624.916315][T14890] hsr_slave_1: left promiscuous mode
[  624.944293][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  624.944347][T10674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  624.968987][T14890] batman_adv: batadv0: Removing interface: batadv_slave_0
[  624.995239][T10674] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  625.012957][T14890] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  625.018378][T10674] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  625.024200][  T977] usb 2-1: USB disconnect, device number 29
[  625.037717][T14890] batman_adv: batadv0: Removing interface: batadv_slave_1
[  625.040961][T10674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.086328][T10674] usb 4-1: config 0 descriptor??
[  625.092451][T15603] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  625.119868][T14890] veth1_macvtap: left promiscuous mode
[  625.132906][T14890] veth0_macvtap: left promiscuous mode
[  625.138955][T14890] veth0_vlan: left promiscuous mode
[  625.295811][T14890] pimreg3 (unregistering): left allmulticast mode
[  625.448814][ T5839] Bluetooth: hci2: command tx timeout
[  625.570210][T10674] microsoft 0003:045E:009D.0030: unknown main item tag 0x0
[  625.613641][T10674] microsoft 0003:045E:009D.0030: unknown main item tag 0x0
[  625.620951][T10674] microsoft 0003:045E:009D.0030: unknown main item tag 0x0
[  625.642095][T10674] microsoft 0003:045E:009D.0030: unknown main item tag 0x0
[  625.655206][T10674] microsoft 0003:045E:009D.0030: unbalanced collection at end of report description
[  625.672149][T10674] microsoft 0003:045E:009D.0030: parse failed
[  625.678913][T10674] microsoft 0003:045E:009D.0030: probe with driver microsoft failed with error -22
[  625.718094][T15627] FAT-fs (nullb0): bogus number of reserved sectors
[  625.731838][T15627] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  625.744607][T15627] FAT-fs (nullb0): bogus number of reserved sectors
[  625.753019][T15627] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  625.849360][T10674] usb 4-1: USB disconnect, device number 103
[  626.098691][T14890] team0 (unregistering): Port device team_slave_1 removed
[  626.149705][T14890] team0 (unregistering): Port device team_slave_0 removed
[  626.771700][T13542] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  626.782841][T15631] netlink: 703 bytes leftover after parsing attributes in process `syz.1.2740'.
[  626.945553][T13542] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  626.958221][T13542] usb 4-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  626.977981][T13542] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  626.991159][T13542] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  627.002152][T13542] usb 4-1: Manufacturer: syz
[  627.006805][T13542] usb 4-1: SerialNumber: syz
[  627.110391][T15540] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  627.136882][T15540] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  627.175904][T15540] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  627.202136][  T977] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  627.242593][T15540] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  627.258445][T15637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.278586][T15637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.309498][T13542] usbhid 4-1:36.0: couldn't find an input interrupt endpoint
[  627.341439][T13542] usb 4-1: USB disconnect, device number 104
[  627.370152][  T977] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  627.392624][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.403220][  T977] usb 2-1: Product: syz
[  627.407439][  T977] usb 2-1: Manufacturer: syz
[  627.427153][  T977] usb 2-1: SerialNumber: syz
[  627.438648][  T977] usb 2-1: config 0 descriptor??
[  627.516273][T15540] 8021q: adding VLAN 0 to HW filter on device bond0
[  627.522371][ T5839] Bluetooth: hci2: command tx timeout
[  627.556194][T15540] 8021q: adding VLAN 0 to HW filter on device team0
[  627.578556][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.585866][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  627.620254][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.627581][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  627.664083][  T977] hso 2-1:0.0: Failed to find BULK IN ep
[  627.677134][  T977] usb-storage 2-1:0.0: USB Mass Storage device detected
[  627.863513][T15640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.875803][T15640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.213868][T15540] 8021q: adding VLAN 0 to HW filter on device batadv0
[  628.361636][  T977] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[  628.527374][  T977] usb 4-1: config 0 has an invalid interface number: 3 but max is 2
[  628.556477][  T977] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  628.582039][  T977] usb 4-1: config 0 has no interface number 1
[  628.588183][  T977] usb 4-1: config 0 has no interface number 2
[  628.611756][  T977] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  628.620866][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.657241][  T977] usb 4-1: config 0 descriptor??
[  628.701240][T15681] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2745'.
[  628.713062][T15681] tipc: Invalid UDP bearer configuration
[  628.713128][T15681] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  628.849623][T15540] veth0_vlan: entered promiscuous mode
[  628.872186][ T5920] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  628.887195][T15540] veth1_vlan: entered promiscuous mode
[  628.896239][  T977] usb 4-1: Could not set interface, error -71
[  628.943188][  T977] usb 4-1: string descriptor 0 read error: -71
[  628.969705][  T977] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22
[  628.999122][T15540] veth0_macvtap: entered promiscuous mode
[  629.002667][  T977] usb 4-1: USB disconnect, device number 105
[  629.039019][T15540] veth1_macvtap: entered promiscuous mode
[  629.145658][T15540] batman_adv: batadv0: Interface activated: batadv_slave_0
[  629.168655][T15540] batman_adv: batadv0: Interface activated: batadv_slave_1
[  629.188315][  T144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.199019][  T144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  629.225857][ T3455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  629.268650][ T3455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  629.377327][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.401615][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.487390][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  629.511806][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.523061][T15713] netlink: 'syz.3.2748': attribute type 2 has an invalid length.
[  629.534362][T15713] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2748'.
[  629.547774][T15712] netlink: 'syz.3.2748': attribute type 2 has an invalid length.
[  629.563533][T15712] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2748'.
[  629.604276][ T5839] Bluetooth: hci2: command tx timeout
[  629.745894][T15720] loop3: detected capacity change from 0 to 7
[  629.779744][T15720] Dev loop3: unable to read RDB block 7
[  629.804400][T15720]  loop3: AHDI p3 p4
[  629.808610][T15720] loop3: partition table partially beyond EOD, truncated
[  629.817338][T15720] loop3: p3 start 1702000233 is beyond EOD, truncated
[  629.993629][ T5920] usb 2-1: USB disconnect, device number 30
[  630.234143][T15739] IPVS: length: 4096 != 24
[  630.248755][T15739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2754'.
[  630.259560][T15739] program syz.3.2754 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  630.521166][T10674] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  630.671998][ T5917] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  630.681537][T10674] usb 6-1: device descriptor read/64, error -71
[  630.841364][ T5917] usb 4-1: Using ep0 maxpacket: 8
[  630.847814][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  630.858830][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  630.869405][ T5917] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  630.878732][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.891940][ T5917] usb 4-1: config 0 descriptor??
[  630.931048][T10674] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  630.950954][ T5933] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  631.060993][T10674] usb 6-1: device descriptor read/64, error -71
[  631.103213][ T5917] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  631.120238][ T5933] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  631.129975][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.138125][ T5933] usb 2-1: Product: syz
[  631.142356][ T5933] usb 2-1: Manufacturer: syz
[  631.146965][ T5933] usb 2-1: SerialNumber: syz
[  631.154417][ T5933] usb 2-1: config 0 descriptor??
[  631.171161][T10674] usb usb6-port1: attempt power cycle
[  631.304247][T15750] iowarrior 4-1:0.0: Error -90 while submitting URB
[  631.315314][   T24] usb 4-1: USB disconnect, device number 106
[  631.510635][T10674] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  631.531651][T10674] usb 6-1: device descriptor read/8, error -71
[  631.569565][ T5933] usb 2-1: Firmware version (0.0) predates our first public release.
[  631.577772][ T5933] usb 2-1: Please update to version 0.2 or newer
[  631.771787][T15762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.782576][T15762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.791227][T10674] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  631.811120][T10674] usb 6-1: device descriptor read/8, error -71
[  631.826576][ T5933] usb 2-1: USB disconnect, device number 31
[  631.919596][T15767] loop3: detected capacity change from 0 to 7
[  631.939735][T15767] Dev loop3: unable to read RDB block 7
[  631.946443][T15767]  loop3: AHDI p3 p4
[  631.947077][T10674] usb usb6-port1: unable to enumerate USB device
[  631.951069][T15767] loop3: partition table partially beyond EOD, truncated
[  631.964725][T15767] loop3: p3 start 1702000233 is beyond EOD, truncated
[  632.063807][T15769] program syz.3.2762 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  632.305770][T15773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2764'.
[  632.321866][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'.
[  632.333770][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'.
[  632.391250][ T5890] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  632.570120][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  632.576936][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  632.600407][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  632.613906][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  632.623650][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.632025][ T5890] usb 4-1: Product: syz
[  632.636221][ T5890] usb 4-1: Manufacturer: syz
[  632.641122][ T5890] usb 4-1: SerialNumber: syz
[  632.690883][T15775] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2765'.
[  632.701227][T15775] tipc: Invalid UDP bearer configuration
[  632.701267][T15775] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  632.860271][ T5890] usb 4-1: 0:2 : does not exist
[  632.885306][ T5890] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  632.950206][ T5890] usb 4-1: USB disconnect, device number 107
[  633.001153][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  633.012103][T15788] loop3: detected capacity change from 0 to 7
[  633.029508][ T5832] Dev loop3: unable to read RDB block 7
[  633.037454][ T5832]  loop3: AHDI p3 p4
[  633.046161][ T5832] loop3: partition table partially beyond EOD, truncated
[  633.053704][ T5832] loop3: p3 start 1702000233 is beyond EOD, truncated
[  633.061702][T15788] Dev loop3: unable to read RDB block 7
[  633.067291][T15788]  loop3: AHDI p3 p4
[  633.075847][T15788] loop3: partition table partially beyond EOD, truncated
[  633.084074][T15788] loop3: p3 start 1702000233 is beyond EOD, truncated
[  633.499198][ T5933] libceph: connect (1)[c::]:6789 error -101
[  633.505694][ T5933] libceph: mon0 (1)[c::]:6789 connect error
[  633.536562][T15801] ceph: No mds server is up or the cluster is laggy
[  633.699590][ T5890] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  633.761130][ T5933] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  633.849517][ T5890] usb 6-1: Using ep0 maxpacket: 16
[  633.857686][ T5890] usb 6-1: config 4 has an invalid interface number: 51 but max is 0
[  633.866232][ T5890] usb 6-1: config 4 has no interface number 0
[  633.873176][ T5890] usb 6-1: config 4 interface 51 has no altsetting 0
[  633.883447][ T5890] usb 6-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b
[  633.911048][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.919112][ T5890] usb 6-1: Product: syz
[  633.923746][ T5890] usb 6-1: Manufacturer: syz
[  633.924047][ T5933] usb 2-1: Using ep0 maxpacket: 16
[  633.928376][ T5890] usb 6-1: SerialNumber: syz
[  633.945941][ T5890] upd78f0730 6-1:4.51: upd78f0730 converter detected
[  633.959559][ T5890] usb 6-1: upd78f0730 converter now attached to ttyUSB0
[  633.960936][ T5933] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  633.999823][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.007888][ T5933] usb 2-1: Product: syz
[  634.022053][ T5933] usb 2-1: Manufacturer: syz
[  634.026762][ T5933] usb 2-1: SerialNumber: syz
[  634.053172][ T5933] r8152-cfgselector 2-1: Unknown version 0x0000
[  634.065281][ T5933] r8152-cfgselector 2-1: config 0 descriptor??
[  634.132463][T15815] loop3: detected capacity change from 0 to 7
[  634.145661][ T5826] Dev loop3: unable to read RDB block 7
[  634.149122][T15795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.158918][ T5826]  loop3: AHDI p3 p4
[  634.165176][ T5826] loop3: partition table partially beyond EOD, truncated
[  634.166867][T15795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.174802][ T5826] loop3: p3 start 1702000233 is beyond EOD, truncated
[  634.182546][ T5890] usb 6-1: USB disconnect, device number 6
[  634.196014][T15815] Dev loop3: unable to read RDB block 7
[  634.210958][T15815]  loop3: AHDI p3 p4
[  634.215801][ T5890] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  634.224862][T15815] loop3: partition table partially beyond EOD, truncated
[  634.246569][ T5890] upd78f0730 6-1:4.51: device disconnected
[  634.252842][T15815] loop3: p3 start 1702000233 is beyond EOD, truncated
[  634.375721][T15818] netlink: 'syz.3.2780': attribute type 1 has an invalid length.
[  634.392228][T15818] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2780'.
[  634.489875][ T5933] r8152-cfgselector 2-1: USB disconnect, device number 32
[  634.589149][   T24] usb 4-1: new full-speed USB device number 108 using dummy_hcd
[  634.741711][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  634.751819][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  634.762193][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  634.775199][   T24] usb 4-1: string descriptor 0 read error: -22
[  634.781794][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  634.791143][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.811076][   T24] usb 4-1: 0:2 : does not exist
[  635.014990][   T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  635.043227][   T24] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  635.062116][   T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  635.075258][   T24] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  635.108830][  T977] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  635.121634][   T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  635.163759][   T24] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  635.186937][   T24] usb 4-1: USB disconnect, device number 108
[  635.278811][  T977] usb 6-1: Using ep0 maxpacket: 8
[  635.286193][  T977] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  635.297795][  T977] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  635.308177][  T977] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  635.318188][  T977] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  635.331605][  T977] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  635.340924][  T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.558679][  T977] usb 6-1: usb_control_msg returned -32
[  635.589083][  T977] usbtmc 6-1:16.0: can't read capabilities
[  635.763376][T15840] loop3: detected capacity change from 0 to 7
[  635.772611][T15840] Dev loop3: unable to read RDB block 7
[  635.778277][T15840]  loop3: AHDI p3 p4
[  635.783027][T15840] loop3: partition table partially beyond EOD, truncated
[  635.784036][T15842] fuse: Invalid rootmode
[  635.790446][T15840] loop3: p3 start 1702000233 is beyond EOD, truncated
[  635.907260][T15844] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  636.032657][   T10] usb 6-1: USB disconnect, device number 7
[  636.115105][T15852] mac80211_hwsim hwsim26 
4

: renamed from wlan1 (while UP)
[  636.158648][  T977] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  636.320352][  T977] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  636.329162][  T977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  636.339604][  T977] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  636.349096][  T977] usb 4-1: config 1 has no interface number 1
[  636.355226][  T977] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  636.368108][  T977] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  636.384044][  T977] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  636.393564][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.401978][  T977] usb 4-1: Product: syz
[  636.406178][  T977] usb 4-1: Manufacturer: syz
[  636.411203][  T977] usb 4-1: SerialNumber: syz
[  636.468230][   T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  636.630100][   T10] usb 2-1: Using ep0 maxpacket: 16
[  636.637104][  T977] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  636.644803][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  636.655784][  T977] usb 4-1: MIDIStreaming interface descriptor not found
[  636.662875][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  636.674519][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.701093][   T10] usb 2-1: config 0 descriptor??
[  636.756976][  T977] usb 4-1: USB disconnect, device number 109
[  636.830396][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  637.033780][T15862] netlink: 'syz.5.2796': attribute type 21 has an invalid length.
[  637.042318][T15862] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2796'.
[  637.130962][   T10] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0
[  637.148025][   T10] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0
[  637.155135][   T10] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0
[  637.180204][   T10] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0
[  637.199534][   T10] mcp2221 0003:04D8:00DD.0031: unknown main item tag 0x0
[  637.220449][   T10] mcp2221 0003:04D8:00DD.0031: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  637.557707][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  637.579093][  T977] usb 2-1: USB disconnect, device number 33
[  637.719378][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  637.730597][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  637.741551][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  637.755116][   T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  637.764395][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.772484][   T10] usb 6-1: Product: syz
[  637.776789][   T10] usb 6-1: Manufacturer: syz
[  637.781992][   T10] usb 6-1: SerialNumber: syz
[  637.789772][   T10] usb 6-1: config 0 descriptor??
[  638.001739][   T10] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  638.180052][T15871] loop3: detected capacity change from 0 to 7
[  638.190905][T15871] Dev loop3: unable to read RDB block 7
[  638.196526][T15871]  loop3: AHDI p3 p4
[  638.201143][T15871] loop3: partition table partially beyond EOD, truncated
[  638.210637][T15871] loop3: p3 start 1702000233 is beyond EOD, truncated
[  638.211027][ T5933] usb 6-1: USB disconnect, device number 8
[  638.389310][T15875] /dev/sg0: Can't lookup blockdev
[  638.662201][ T5933] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  638.828002][ T5933] usb 4-1: device descriptor read/64, error -71
[  639.079606][ T5933] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  639.230036][ T5933] usb 4-1: device descriptor read/64, error -71
[  639.337187][ T5933] usb usb4-port1: attempt power cycle
[  639.407478][T15906] loop3: detected capacity change from 0 to 7
[  639.420727][T15906] Dev loop3: unable to read RDB block 7
[  639.426978][T15906]  loop3: AHDI p3 p4
[  639.430931][T15906] loop3: partition table partially beyond EOD, truncated
[  639.447594][T15906] loop3: p3 start 1702000233 is beyond EOD, truncated
[  639.716692][ T5933] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  639.737266][ T5933] usb 4-1: device descriptor read/8, error -71
[  639.756862][  T977] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  639.846722][   T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  639.911895][T15919] netlink: 'syz.4.2814': attribute type 27 has an invalid length.
[  639.927089][T15919] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2814'.
[  639.932484][  T977] usb 6-1: too many endpoints for config 0 interface 0 altsetting 8: 33, using maximum allowed: 30
[  639.949111][  T977] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  639.961026][  T977] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[  639.961065][  T977] usb 6-1: config 0 interface 0 has no altsetting 0
[  639.983201][  T977] usb 6-1: New USB device found, idVendor=1b96, idProduct=0011, bcdDevice= 0.00
[  639.987379][ T5933] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  639.993532][  T977] usb 6-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0
[  640.010165][  T977] usb 6-1: Product: syz
[  640.019323][  T977] usb 6-1: config 0 descriptor??
[  640.020417][T15908] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  640.038744][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  640.050153][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  640.068592][ T5933] usb 4-1: device descriptor read/8, error -71
[  640.176845][ T5933] usb usb4-port1: unable to enumerate USB device
[  640.187115][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  640.187153][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  640.215516][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  640.215580][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.215604][   T10] usb 2-1: Product: syz
[  640.215620][   T10] usb 2-1: Manufacturer: syz
[  640.215637][   T10] usb 2-1: SerialNumber: syz
[  640.223533][   T10] usb 2-1: config 0 descriptor??
[  640.240016][   T10] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected
[  640.242601][   T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  640.243038][   T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  640.435452][  T977] ntrig 0003:1B96:0011.0032: item fetching failed at offset 2/5
[  640.444304][ T5890] usb 2-1: USB disconnect, device number 34
[  640.461268][ T5890] garmin_gps 2-1:0.0: device disconnected
[  640.481923][  T977] ntrig 0003:1B96:0011.0032: parse failed
[  640.497213][  T977] ntrig 0003:1B96:0011.0032: probe with driver ntrig failed with error -22
[  640.523773][  T977] usb 6-1: USB disconnect, device number 9
[  640.834262][T15930] FAULT_INJECTION: forcing a failure.
[  640.834262][T15930] name failslab, interval 1, probability 0, space 0, times 0
[  640.848050][T15930] CPU: 1 UID: 0 PID: 15930 Comm: syz.5.2816 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  640.848085][T15930] Tainted: [L]=SOFTLOCKUP
[  640.848093][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  640.848106][T15930] Call Trace:
[  640.848115][T15930]  <TASK>
[  640.848125][T15930]  dump_stack_lvl+0xe8/0x150
[  640.848156][T15930]  should_fail_ex+0x414/0x560
[  640.848188][T15930]  should_failslab+0xa8/0x100
[  640.848218][T15930]  __kmalloc_cache_noprof+0x84/0x700
[  640.848243][T15930]  ? madvise_collapse+0x136/0xdf0
[  640.848275][T15930]  madvise_collapse+0x136/0xdf0
[  640.848316][T15930]  madvise_vma_behavior+0xfca/0x4420
[  640.848353][T15930]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  640.848379][T15930]  ? process_measurement+0x12bb/0x1a50
[  640.848434][T15930]  ? __pfx_process_measurement+0x10/0x10
[  640.848468][T15930]  ? __lock_acquire+0x6b6/0x2cf0
[  640.848498][T15930]  ? __lock_acquire+0x6b6/0x2cf0
[  640.848522][T15930]  ? __lock_acquire+0x6b6/0x2cf0
[  640.848554][T15930]  ? unwind_next_frame+0xa5/0x23d0
[  640.848589][T15930]  ? __lock_acquire+0x6b6/0x2cf0
[  640.848629][T15930]  ? mas_prev_slot+0xb31/0xbb0
[  640.848675][T15930]  ? find_vma_prev+0xe3/0x150
[  640.848707][T15930]  ? __pfx_find_vma_prev+0x10/0x10
[  640.848741][T15930]  ? _parse_integer_limit+0x1ae/0x1f0
[  640.848768][T15930]  madvise_walk_vmas+0x575/0xaf0
[  640.848788][T15930]  ? __lock_acquire+0x6b6/0x2cf0
[  640.848815][T15930]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  640.848839][T15930]  ? blk_start_plug+0x6f/0x1b0
[  640.848861][T15930]  madvise_do_behavior+0x38e/0x550
[  640.848885][T15930]  ? __pfx_madvise_do_behavior+0x10/0x10
[  640.848912][T15930]  ? down_read+0x274/0x2e0
[  640.848928][T15930]  ? madvise_lock+0x146/0x2f0
[  640.848953][T15930]  do_madvise+0x1bc/0x270
[  640.848973][T15930]  ? __pfx_do_madvise+0x10/0x10
[  640.849019][T15930]  ? __pfx_ksys_write+0x10/0x10
[  640.849049][T15930]  __x64_sys_madvise+0xa7/0xc0
[  640.849074][T15930]  do_syscall_64+0xec/0xf80
[  640.849104][T15930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.849124][T15930]  ? trace_irq_disable+0x37/0x100
[  640.849149][T15930]  ? clear_bhb_loop+0x40/0x90
[  640.849174][T15930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  640.849192][T15930] RIP: 0033:0x7fe2e418f749
[  640.849213][T15930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  640.849229][T15930] RSP: 002b:00007fe2e23d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  640.849254][T15930] RAX: ffffffffffffffda RBX: 00007fe2e43e6090 RCX: 00007fe2e418f749
[  640.849269][T15930] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000
[  640.849283][T15930] RBP: 00007fe2e23d5090 R08: 0000000000000000 R09: 0000000000000000
[  640.849298][T15930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  640.849310][T15930] R13: 00007fe2e43e6128 R14: 00007fe2e43e6090 R15: 00007ffd2cc6fb78
[  640.849345][T15930]  </TASK>
[  641.505735][ T5890] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  641.630340][T15945] loop3: detected capacity change from 0 to 7
[  641.641217][ T5826] Dev loop3: unable to read RDB block 7
[  641.647757][ T5826]  loop3: AHDI p3 p4
[  641.651798][ T5826] loop3: partition table partially beyond EOD, truncated
[  641.660255][ T5826] loop3: p3 start 1702000233 is beyond EOD, truncated
[  641.674634][T15945] Dev loop3: unable to read RDB block 7
[  641.680940][T15945]  loop3: AHDI p3 p4
[  641.684896][T15945] loop3: partition table partially beyond EOD, truncated
[  641.698179][T15945] loop3: p3 start 1702000233 is beyond EOD, truncated
[  641.705690][ T5890] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  641.717657][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.754507][ T5890] usb 2-1: config 0 descriptor??
[  641.992636][ T5890] kaweth 2-1:0.0: Firmware present in device.
[  642.135379][ T5933] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  642.220552][ T5890] kaweth 2-1:0.0: Statistics collection: 0
[  642.235556][ T5890] kaweth 2-1:0.0: Multicast filter limit: 0
[  642.252819][ T5890] kaweth 2-1:0.0: MTU: 0
[  642.257581][ T5890] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00
[  642.275632][ T5933] usb 4-1: device descriptor read/64, error -71
[  642.525179][ T5933] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[  642.655115][ T5933] usb 4-1: device descriptor read/64, error -71
[  642.705124][  T977] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  642.765402][ T5933] usb usb4-port1: attempt power cycle
[  642.855146][  T977] usb 6-1: Using ep0 maxpacket: 32
[  642.862677][  T977] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  642.871485][  T977] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  642.880179][  T977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  642.889199][  T977] usb 6-1: config 1 has no interface number 0
[  642.895450][  T977] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  642.906557][ T5890] kaweth 2-1:0.0: Error setting receive filter
[  642.912916][  T977] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  642.926177][ T5890] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[  642.934902][  T977] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  642.945385][  T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.956824][ T5890] usb 2-1: USB disconnect, device number 35
[  642.968659][  T977] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  643.104900][ T5933] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  643.125637][ T5933] usb 4-1: device descriptor read/8, error -71
[  643.172254][  T977] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  643.364761][ T5933] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  643.385349][ T5933] usb 4-1: device descriptor read/8, error -71
[  643.494982][ T5933] usb usb4-port1: unable to enumerate USB device
[  643.586201][T15955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.595382][T15955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.606449][  T977] usb 6-1: USB disconnect, device number 10
[  643.613500][  T977] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  643.684666][ T5890] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  643.854516][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  643.862068][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  643.873075][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  643.883181][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  643.896194][ T5890] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  643.905438][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  643.916591][ T5890] usb 2-1: config 0 descriptor??
[  644.339808][ T5890] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0
[  644.351054][ T5890] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max
[  644.382345][ T5890] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0033/input/input126
[  644.488870][ T5890] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  644.533446][T15957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  644.566005][T15957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  644.589668][ T5890] usb 2-1: USB disconnect, device number 36
[  644.613573][T15961] fido_id[15961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  645.163855][  T121] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  645.314675][  T121] usb 6-1: Using ep0 maxpacket: 8
[  645.327963][  T121] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  645.338123][  T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.346798][ T5933] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  645.354253][T15977] binder: 15976:15977 ioctl c0306201 200000000540 returned -22
[  645.354918][  T121] usb 6-1: Product: syz
[  645.368555][  T121] usb 6-1: Manufacturer: syz
[  645.373244][  T121] usb 6-1: SerialNumber: syz
[  645.383821][  T121] usb 6-1: config 0 descriptor??
[  645.514299][ T5933] usb 4-1: Using ep0 maxpacket: 16
[  645.522717][ T5933] usb 4-1: config 53 has an invalid interface number: 151 but max is 0
[  645.531522][ T5933] usb 4-1: config 53 has no interface number 0
[  645.538023][ T5933] usb 4-1: config 53 interface 151 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11
[  645.551914][ T5933] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=7a.dd
[  645.561195][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.569381][ T5933] usb 4-1: Product: syz
[  645.573801][ T5933] usb 4-1: Manufacturer: syz
[  645.578475][ T5933] usb 4-1: SerialNumber: syz
[  645.793629][T15970] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2831'.
[  645.817517][T15970] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2831'.
[  645.884963][ T5933] usbtest 4-1:53.151: Linux gadget zero
[  645.890628][ T5933] usbtest 4-1:53.151: high-speed {control in/out int-out} tests (+alt)
[  645.943556][ T5933] usb 4-1: USB disconnect, device number 118
[  646.033543][   T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  646.202245][   T10] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  646.211768][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  646.220670][   T10] usb 2-1: Product: syz
[  646.225164][   T10] usb 2-1: Manufacturer: syz
[  646.229787][   T10] usb 2-1: SerialNumber: syz
[  646.239177][   T10] usb 2-1: config 0 descriptor??
[  646.251895][   T10] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  646.261057][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  646.275963][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  646.286111][   T10] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  646.294994][   T10] usb 2-1: media controller created
[  646.319931][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  646.333467][ T5933] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  646.404162][  T121] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110
[  646.411630][  T121] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  646.446931][   T10] cxusb: set interface failed
[  646.452791][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  646.484215][ T5933] usb 4-1: device descriptor read/64, error -71
[  646.500141][   T10] DVB: Unable to find symbol mt352_attach()
[  646.512011][   T10] dvb-usb: bulk message failed: -22 (5/0)
[  646.518579][   T10] zl10353_read_register: readreg error (reg=127, ret==-121)
[  646.526111][   T10] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  646.568623][  T121] usb 6-1: USB disconnect, device number 11
[  646.624397][   T10] rc_core: IR keymap rc-dvico-mce not found
[  646.630359][   T10] Registered IR keymap rc-empty
[  646.638311][   T10] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  646.667228][   T10] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input127
[  646.680175][   T10] dvb-usb: schedule remote query interval to 100 msecs.
[  646.688016][   T10] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  646.708515][   T10] usb 2-1: USB disconnect, device number 37
[  646.743258][ T5933] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  646.801815][   T10] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  646.883018][ T5933] usb 4-1: device descriptor read/64, error -71
[  647.013313][ T5933] usb usb4-port1: attempt power cycle
[  647.363791][ T5933] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  647.385704][ T5933] usb 4-1: device descriptor read/8, error -71
[  647.442692][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  647.595355][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  647.606074][   T10] usb 6-1: config 6 has an invalid interface number: 200 but max is 0
[  647.614492][   T10] usb 6-1: config 6 has no interface number 0
[  647.620741][   T10] usb 6-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  647.631878][   T10] usb 6-1: config 6 interface 200 has no altsetting 0
[  647.632625][ T5933] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  647.641641][   T10] usb 6-1: string descriptor 0 read error: -22
[  647.653608][   T10] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  647.662749][   T10] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  647.674258][ T5933] usb 4-1: device descriptor read/8, error -71
[  647.684058][   T10] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  647.782868][ T5933] usb usb4-port1: unable to enumerate USB device
[  647.792588][ T5890] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  647.887512][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  647.897867][   T10] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  647.906014][   T10] usb 6-1: media controller created
[  647.920043][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  647.942443][ T5890] usb 2-1: Using ep0 maxpacket: 32
[  647.950250][ T5890] usb 2-1: config 0 has an invalid interface number: 53 but max is 0
[  647.958879][ T5890] usb 2-1: config 0 has no interface number 0
[  647.965132][ T5890] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  647.974833][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.985445][ T5890] usb 2-1: config 0 descriptor??
[  648.090683][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.100442][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.111689][T16008] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  648.118235][T16008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  648.126122][T16008] vhci_hcd vhci_hcd.0: Device attached
[  648.135188][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.144177][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.156642][T16008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.165516][T16008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.195695][ T5913] usb 2-1: USB disconnect, device number 38
[  648.362339][ T5933] usb 43-1: new low-speed USB device number 13 using vhci_hcd
[  648.377790][   T10] dvb-usb: bulk message failed: -71 (6/0)
[  648.384586][T16014] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 12
[  648.394965][   T10] dvb-usb: bulk message failed: -71 (6/0)
[  648.395005][ T1006] vhci_hcd vhci_hcd.5: stop threads
[  648.400824][   T10] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  648.409651][ T1006] vhci_hcd vhci_hcd.5: release socket
[  648.418884][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input128
[  648.420177][ T1006] vhci_hcd vhci_hcd.5: disconnect device
[  648.439838][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  648.447086][   T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  648.467108][   T10] usb 6-1: USB disconnect, device number 12
[  648.540931][   T10] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  649.750125][T16050] program syz.3.2857 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  649.827811][T16050] ieee802154 phy1 wpan1: encryption failed: -22
[  649.945968][  T121] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  650.114105][  T121] usb 6-1: unable to get BOS descriptor or descriptor too short
[  650.125457][  T121] usb 6-1: config 6 has an invalid interface number: 200 but max is 0
[  650.135923][  T121] usb 6-1: config 6 has no interface number 0
[  650.158039][  T121] usb 6-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  650.170356][  T121] usb 6-1: config 6 interface 200 has no altsetting 0
[  650.184217][  T121] usb 6-1: string descriptor 0 read error: -22
[  650.190700][  T121] usb 6-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  650.199925][  T121] usb 6-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  650.217496][  T121] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  650.271343][ T5913] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  650.361256][T10674] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  650.418316][  T121] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  650.433062][  T121] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  650.442018][  T121] usb 6-1: media controller created
[  650.447698][ T5913] usb 2-1: config 0 interface 0 has no altsetting 0
[  650.461196][ T5913] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  650.470291][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  650.481361][  T121] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  650.501145][T10674] usb 4-1: device descriptor read/64, error -71
[  650.509928][ T5913] usb 2-1: config 0 descriptor??
[  650.621163][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.630074][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.642380][T16048] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  650.648941][T16048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  650.657032][T16048] vhci_hcd vhci_hcd.0: Device attached
[  650.664272][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.673509][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.683324][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.692686][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.721594][ T5913]  (null): keene_cmd_main failed (-71)
[  650.739061][ T5913] video4linux radio48: keene_cmd_main failed (-71)
[  650.746224][T10674] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  650.754564][ T5913] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  650.766136][ T5913] usb 2-1: USB disconnect, device number 39
[  650.891086][T10674] usb 4-1: device descriptor read/64, error -71
[  650.908865][  T121] dvb-usb: bulk message failed: -71 (6/0)
[  650.914965][T16072] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 12
[  650.922850][  T121] dvb-usb: bulk message failed: -71 (6/0)
[  650.928740][  T121] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  650.938966][T15604] vhci_hcd vhci_hcd.5: stop threads
[  650.944264][  T121] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input129
[  650.958423][T15604] vhci_hcd vhci_hcd.5: release socket
[  650.959757][  T121] dvb-usb: schedule remote query interval to 150 msecs.
[  650.965684][T15604] vhci_hcd vhci_hcd.5: disconnect device
[  650.982782][  T121] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  651.000423][  T121] usb 6-1: USB disconnect, device number 13
[  651.008381][T10674] usb usb4-port1: attempt power cycle
[  651.049824][  T121] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  651.320186][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'.
[  651.350836][T10674] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  651.372151][T10674] usb 4-1: device descriptor read/8, error -71
[  651.561182][  T121] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  651.620576][T10674] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  651.631409][T16080] FAULT_INJECTION: forcing a failure.
[  651.631409][T16080] name failslab, interval 1, probability 0, space 0, times 0
[  651.641353][T10674] usb 4-1: device descriptor read/8, error -71
[  651.645526][T16080] CPU: 0 UID: 0 PID: 16080 Comm: syz.5.2865 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  651.645555][T16080] Tainted: [L]=SOFTLOCKUP
[  651.645563][T16080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  651.645574][T16080] Call Trace:
[  651.645583][T16080]  <TASK>
[  651.645590][T16080]  dump_stack_lvl+0xe8/0x150
[  651.645617][T16080]  should_fail_ex+0x414/0x560
[  651.645654][T16080]  should_failslab+0xa8/0x100
[  651.645680][T16080]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  651.645710][T16080]  ? zswap_store+0xb7d/0x1f10
[  651.645731][T16080]  ? zswap_store+0x6ff/0x1f10
[  651.645758][T16080]  zswap_store+0xb7d/0x1f10
[  651.645785][T16080]  ? zswap_store+0x6ff/0x1f10
[  651.645817][T16080]  ? __pfx_zswap_store+0x10/0x10
[  651.645846][T16080]  ? do_raw_spin_unlock+0x122/0x240
[  651.645875][T16080]  ? folio_free_swap+0x378/0x480
[  651.645897][T16080]  swap_writeout+0x710/0xd70
[  651.645930][T16080]  shmem_writeout+0x123f/0x1660
[  651.645985][T16080]  ? __pfx_shmem_writeout+0x10/0x10
[  651.646015][T16080]  ? folio_clear_dirty_for_io+0x177/0x710
[  651.646049][T16080]  shrink_folio_list+0x337c/0x5320
[  651.646109][T16080]  ? __pfx_shrink_folio_list+0x10/0x10
[  651.646133][T16080]  ? css_rstat_updated+0x239/0x520
[  651.646163][T16080]  ? __pfx_css_rstat_updated+0x10/0x10
[  651.646186][T16080]  ? __asan_memset+0x22/0x50
[  651.646204][T16080]  ? move_folios_to_lru+0xe83/0x1050
[  651.646255][T16080]  ? __pfx_css_rstat_updated+0x10/0x10
[  651.646279][T16080]  ? __mod_zone_page_state+0xd7/0x140
[  651.646324][T16080]  ? _raw_spin_unlock_irq+0x23/0x50
[  651.646354][T16080]  evict_folios+0x473e/0x57f0
[  651.646419][T16080]  ? __pfx_evict_folios+0x10/0x10
[  651.646445][T16080]  ? do_shrink_slab+0x890/0x10d0
[  651.646477][T16080]  ? get_swappiness+0x452/0x4c0
[  651.646498][T16080]  ? __pfx_get_swappiness+0x10/0x10
[  651.646522][T16080]  ? __lock_acquire+0x6b6/0x2cf0
[  651.646544][T16080]  try_to_shrink_lruvec+0x8be/0xb60
[  651.646595][T16080]  shrink_one+0x25c/0x720
[  651.646622][T16080]  ? shrink_node+0x2db0/0x39c0
[  651.646650][T16080]  shrink_node+0x31da/0x39c0
[  651.646681][T16080]  ? shrink_node+0x2db0/0x39c0
[  651.646700][T16080]  ? compaction_suit_allocation_order+0x20a/0x280
[  651.646724][T16080]  ? compact_zone+0x83c/0x4760
[  651.646762][T16080]  ? __pfx_shrink_node+0x10/0x10
[  651.646795][T16080]  ? rcu_is_watching+0x15/0xb0
[  651.646817][T16080]  ? compaction_suitable+0x204/0x370
[  651.646846][T16080]  do_try_to_free_pages+0x668/0x18a0
[  651.646896][T16080]  ? __pfx_do_try_to_free_pages+0x10/0x10
[  651.646920][T16080]  ? allow_direct_reclaim+0x4ce/0x570
[  651.646949][T16080]  try_to_free_pages+0x85c/0xd30
[  651.646980][T16080]  ? __pfx_try_to_free_pages+0x10/0x10
[  651.647009][T16080]  ? psi_group_change+0xab8/0x1050
[  651.647054][T16080]  ? fs_reclaim_acquire+0x7d/0x100
[  651.647080][T16080]  __alloc_pages_direct_reclaim+0x144/0x300
[  651.647113][T16080]  ? __pfx___alloc_pages_direct_reclaim+0x10/0x10
[  651.647153][T16080]  __alloc_pages_slowpath+0x4bf/0xc20
[  651.647195][T16080]  __alloc_frozen_pages_noprof+0x319/0x370
[  651.647221][T16080]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  651.647260][T16080]  __folio_alloc_noprof+0x18/0x120
[  651.647285][T16080]  alloc_charge_folio+0x3c8/0x830
[  651.647338][T16080]  hpage_collapse_scan_file+0x17a2/0x4f20
[  651.647369][T16080]  ? hpage_collapse_scan_file+0x19d/0x4f20
[  651.647397][T16080]  ? debug_object_free+0x2b2/0x400
[  651.647421][T16080]  ? __pfx_hpage_collapse_scan_file+0x10/0x10
[  651.647442][T16080]  ? __flush_work+0x9c8/0xbc0
[  651.647462][T16080]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  651.647489][T16080]  ? __flush_work+0xd2/0xbc0
[  651.647532][T16080]  ? __up_read+0x25d/0x670
[  651.647561][T16080]  ? __pfx___up_read+0x10/0x10
[  651.647594][T16080]  madvise_collapse+0x3f8/0xdf0
[  651.647637][T16080]  madvise_vma_behavior+0xfca/0x4420
[  651.647668][T16080]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  651.647691][T16080]  ? process_measurement+0x12bb/0x1a50
[  651.647730][T16080]  ? __pfx_process_measurement+0x10/0x10
[  651.647760][T16080]  ? __lock_acquire+0x6b6/0x2cf0
[  651.647785][T16080]  ? __lock_acquire+0x6b6/0x2cf0
[  651.647806][T16080]  ? __lock_acquire+0x6b6/0x2cf0
[  651.647834][T16080]  ? unwind_next_frame+0xa5/0x23d0
[  651.647864][T16080]  ? __lock_acquire+0x6b6/0x2cf0
[  651.647899][T16080]  ? mas_prev_slot+0xb31/0xbb0
[  651.647939][T16080]  ? find_vma_prev+0xe3/0x150
[  651.647965][T16080]  ? __pfx_find_vma_prev+0x10/0x10
[  651.648000][T16080]  ? _parse_integer_limit+0x1ae/0x1f0
[  651.648028][T16080]  madvise_walk_vmas+0x575/0xaf0
[  651.648047][T16080]  ? __lock_acquire+0x6b6/0x2cf0
[  651.648077][T16080]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  651.648103][T16080]  ? blk_start_plug+0x6f/0x1b0
[  651.648126][T16080]  madvise_do_behavior+0x38e/0x550
[  651.648153][T16080]  ? __pfx_madvise_do_behavior+0x10/0x10
[  651.648182][T16080]  ? down_read+0x274/0x2e0
[  651.648199][T16080]  ? madvise_lock+0x146/0x2f0
[  651.648225][T16080]  do_madvise+0x1bc/0x270
[  651.648248][T16080]  ? __pfx_do_madvise+0x10/0x10
[  651.648292][T16080]  ? __pfx_ksys_write+0x10/0x10
[  651.648320][T16080]  __x64_sys_madvise+0xa7/0xc0
[  651.648343][T16080]  do_syscall_64+0xec/0xf80
[  651.648369][T16080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.648387][T16080]  ? trace_irq_disable+0x37/0x100
[  651.648409][T16080]  ? clear_bhb_loop+0x40/0x90
[  651.648432][T16080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.648451][T16080] RIP: 0033:0x7fe2e418f749
[  651.648470][T16080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  651.648486][T16080] RSP: 002b:00007fe2e23d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  651.648506][T16080] RAX: ffffffffffffffda RBX: 00007fe2e43e6090 RCX: 00007fe2e418f749
[  651.648520][T16080] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000
[  651.648532][T16080] RBP: 00007fe2e23d5090 R08: 0000000000000000 R09: 0000000000000000
[  651.648543][T16080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  651.648554][T16080] R13: 00007fe2e43e6128 R14: 00007fe2e43e6090 R15: 00007ffd2cc6fb78
[  651.648584][T16080]  </TASK>
[  652.037589][T16084] loop3: detected capacity change from 0 to 7
[  652.120305][  T121] usb 2-1: Using ep0 maxpacket: 8
[  652.136444][ T5826] Dev loop3: unable to read RDB block 7
[  652.139231][  T121] usb 2-1: config 0 has an invalid interface number: 92 but max is 0
[  652.142597][ T5826]  loop3: AHDI p3 p4
[  652.147467][  T121] usb 2-1: config 0 has no interface number 0
[  652.173426][ T5826] loop3: partition table partially beyond EOD, truncated
[  652.173699][ T5826] loop3: p3 start 1702000233 is beyond EOD, 
[  652.184320][T10674] usb usb4-port1: unable to enumerate USB device
[  652.185582][  T121] usb 2-1: too many endpoints for config 0 interface 92 altsetting 74: 163, using maximum allowed: 30
[  652.236998][ T5826] truncated
[  652.327036][  T121] usb 2-1: config 0 interface 92 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 163
[  652.327129][T16084] Dev loop3: unable to read RDB block 7
[  652.340433][  T121] usb 2-1: config 0 interface 92 has no altsetting 0
[  652.342630][  T121] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  652.362699][T16084]  loop3: AHDI p3 p4
[  652.366649][T16084] loop3: partition table partially beyond EOD, truncated
[  652.374159][T16084] loop3: p3 start 1702000233 is beyond EOD, truncated
[  652.382383][  T121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.391015][  T121] usb 2-1: Product: syz
[  652.395222][  T121] usb 2-1: Manufacturer: syz
[  652.399857][  T121] usb 2-1: SerialNumber: syz
[  652.414173][  T121] usb 2-1: config 0 descriptor??
[  652.558611][T16091] program syz.4.2869 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  652.639331][  T121] usb 2-1: selecting invalid altsetting 3
[  652.649253][T16091] ieee802154 phy1 wpan1: encryption failed: -22
[  652.663790][  T121] comedi comedi5: could not set alternate setting 3 in high speed
[  652.693201][  T121] usbdux 2-1:0.92: driver 'usbdux' failed to auto-configure device.
[  652.719726][  T121] usbdux 2-1:0.92: probe with driver usbdux failed with error -22
[  652.732852][  T121] usb 2-1: USB disconnect, device number 40
[  652.881225][ T2125] nci: nci_rsp_packet: unknown rsp opcode 0x126
[  653.010017][   T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  653.169779][   T10] usb 6-1: Using ep0 maxpacket: 32
[  653.177058][   T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  653.186724][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.212513][   T10] usb 6-1: config 0 descriptor??
[  653.425799][   T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  653.440105][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  653.458583][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  653.471526][   T10] usb 6-1: media controller created
[  653.489775][ T5882] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  653.499100][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  653.499756][ T5933] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  653.597348][   T10] DVB: Unable to find symbol dib7000p_attach()
[  653.605612][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  653.665325][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short
[  653.680742][ T5882] usb 2-1: config 6 has an invalid interface number: 200 but max is 0
[  653.708271][ T5882] usb 2-1: config 6 has no interface number 0
[  653.719934][ T5882] usb 2-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  653.741912][   T10] rc_core: IR keymap rc-dib0700-rc5 not found
[  653.748202][   T10] Registered IR keymap rc-empty
[  653.753198][ T5882] usb 2-1: config 6 interface 200 has no altsetting 0
[  653.760344][   T10] dvb-usb: could not initialize remote control.
[  653.766637][   T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  653.778513][ T5882] usb 2-1: string descriptor 0 read error: -22
[  653.785102][ T5882] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  653.796191][   T10] usb 6-1: USB disconnect, device number 14
[  653.807361][ T5882] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  653.842488][ T5882] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  653.854603][   T10] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  654.034236][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  654.047337][ T5882] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  654.055454][ T5882] usb 2-1: media controller created
[  654.071434][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  654.212041][T16118] loop3: detected capacity change from 0 to 7
[  654.221178][T16118] Dev loop3: unable to read RDB block 7
[  654.226873][T16118]  loop3: AHDI p3 p4
[  654.236400][T16107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.239346][T16118] loop3: partition table partially beyond EOD, truncated
[  654.250325][T16107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.254228][T16118] loop3: p3 start 1702000233 is beyond EOD, truncated
[  654.279838][T16107] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  654.286431][T16107] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  654.298514][T16107] vhci_hcd vhci_hcd.0: Device attached
[  654.307294][T16107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.318971][T16107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.331106][T16107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.341539][T16107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.529444][  T121] usb 35-1: new low-speed USB device number 21 using vhci_hcd
[  654.554811][ T5882] dvb-usb: bulk message failed: -71 (6/0)
[  654.564610][ T5882] dvb-usb: bulk message failed: -71 (6/0)
[  654.564762][T16119] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 19
[  654.579549][ T5882] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  654.579809][ T7282] vhci_hcd vhci_hcd.1: stop threads
[  654.592363][ T5882] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input131
[  654.605603][ T7282] vhci_hcd vhci_hcd.1: release socket
[  654.608183][ T5882] dvb-usb: schedule remote query interval to 150 msecs.
[  654.613878][ T5882] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  654.622550][ T7282] vhci_hcd vhci_hcd.1: disconnect device
[  654.647989][ T5882] usb 2-1: USB disconnect, device number 41
[  654.655052][ T5933] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  654.706079][ T5882] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  654.789020][ T5933] usb 6-1: device descriptor read/64, error -71
[  655.032703][ T5933] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[  655.168862][ T5933] usb 6-1: device descriptor read/64, error -71
[  655.279202][ T5933] usb usb6-port1: attempt power cycle
[  655.618597][ T5933] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  655.639344][ T5933] usb 6-1: device descriptor read/8, error -71
[  655.810156][T16098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  655.882976][ T5933] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[  655.929322][ T5933] usb 6-1: device descriptor read/8, error -71
[  656.050622][   T30] audit: type=1326 audit(1768317191.558:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16135 comm="syz.1.2884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f021a78f749 code=0x0
[  656.058775][ T5933] usb usb6-port1: unable to enumerate USB device
[  656.149574][T16141] tmpfs: Bad value for 'mpol'
[  656.428254][ T5882] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  656.497117][T16150] loop3: detected capacity change from 0 to 7
[  656.507716][T16150] Dev loop3: unable to read RDB block 7
[  656.513430][T16150]  loop3: AHDI p3 p4
[  656.517513][T16150] loop3: partition table partially beyond EOD, truncated
[  656.524954][T16150] loop3: p3 start 1702000233 is beyond EOD, truncated
[  656.579803][ T5882] usb 2-1: Using ep0 maxpacket: 32
[  656.588257][ T5882] usb 2-1: config 0 has an invalid interface number: 183 but max is 0
[  656.596509][ T5882] usb 2-1: config 0 has no interface number 0
[  656.603188][ T5882] usb 2-1: config 0 interface 183 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  656.615722][ T5882] usb 2-1: config 0 interface 183 has no altsetting 0
[  656.625043][ T5882] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b2, bcdDevice=bc.74
[  656.634905][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.643084][ T5882] usb 2-1: Product: syz
[  656.647309][ T5882] usb 2-1: Manufacturer: syz
[  656.653471][ T5882] usb 2-1: SerialNumber: syz
[  656.660466][ T5882] usb 2-1: config 0 descriptor??
[  656.668779][ T5882] em28xx 2-1:0.183: New device syz syz @ 480 Mbps (0ccd:00b2, interface 183, class 183)
[  656.679281][ T5882] em28xx 2-1:0.183: Video interface 183 found:
[  656.878964][  T977] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  657.039733][  T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.050170][  T977] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  657.059270][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.070357][  T977] usb 4-1: config 0 descriptor??
[  657.343199][  T977] usb 4-1: USB disconnect, device number 127
[  657.977921][ T5882] em28xx 2-1:0.183: unknown em28xx chip ID (0)
[  658.051464][ T5882] em28xx 2-1:0.183: reading from i2c device at 0xa0 failed (error=-5)
[  658.088049][ T5882] em28xx 2-1:0.183: board has no eeprom
[  658.104607][T16172] CUSE: info not properly terminated
[  658.113416][T16172] netlink: 'syz.3.2897': attribute type 21 has an invalid length.
[  658.124714][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2897'.
[  658.178319][ T5882] em28xx 2-1:0.183: Identified as Terratec Cinergy HTC Stick (card=82)
[  658.191515][ T5882] em28xx 2-1:0.183: Currently, V4L2 is not supported on this model
[  658.202302][  T977] em28xx 2-1:0.183: Binding DVB extension
[  658.210145][  T977] em28xx 2-1:0.183: no endpoint for DVB mode and transfer type 0
[  658.213407][T16175] Cannot find add_set index 46338 as target
[  658.222871][  T977] em28xx 2-1:0.183: failed to pre-allocate USB transfer buffers for DVB.
[  658.241697][  T977] em28xx 2-1:0.183: Registering input extension
[  658.307270][T16176] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2898'.
[  658.323779][ T5839] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  658.333216][T16176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2898'.
[  658.792902][   T30] audit: type=1326 audit(1768317194.299:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.5.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e418f749 code=0x7ffc0000
[  658.816090][   T30] audit: type=1326 audit(1768317194.299:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.5.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e418f749 code=0x7ffc0000
[  658.840580][   T30] audit: type=1326 audit(1768317194.299:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.5.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fe2e418f749 code=0x7ffc0000
[  658.863968][   T30] audit: type=1326 audit(1768317194.299:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.5.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e418f749 code=0x7ffc0000
[  658.892846][   T30] audit: type=1326 audit(1768317194.299:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16179 comm="syz.5.2900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e418f749 code=0x7ffc0000
[  659.084745][T10674] usb 2-1: USB disconnect, device number 42
[  659.110044][T10674] em28xx 2-1:0.183: Disconnecting em28xx
[  659.115762][T10674] em28xx 2-1:0.183: Closing input extension
[  659.163972][T10674] em28xx 2-1:0.183: Freeing device
[  659.186785][ T5882] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  659.261241][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2904'.
[  659.348862][ T5882] usb 6-1: device descriptor read/64, error -71
[  659.597857][ T5882] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  659.666758][  T121] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  659.747046][ T5882] usb 6-1: device descriptor read/64, error -71
[  659.816535][ T5817] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  659.867292][ T5882] usb usb6-port1: attempt power cycle
[  659.990018][ T5817] usb 2-1: unable to get BOS descriptor or descriptor too short
[  660.007903][ T5817] usb 2-1: config 14 has an invalid interface number: 21 but max is 0
[  660.026555][ T5817] usb 2-1: config 14 has no interface number 0
[  660.043295][T10674] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  660.050974][ T5817] usb 2-1: config 14 interface 21 has no altsetting 0
[  660.069951][ T5817] usb 2-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc
[  660.086354][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.096783][ T5817] usb 2-1: Product: syz
[  660.101011][ T5817] usb 2-1: Manufacturer: syz
[  660.116617][ T5817] usb 2-1: SerialNumber: syz
[  660.179000][T16186] ------------[ cut here ]------------
[  660.185709][T16186] WARNING: mm/memcontrol-v1.c:642 at memcg1_swapout+0x6c2/0x8d0, CPU#1: syz.5.2902/16186
[  660.195571][T16186] Modules linked in:
[  660.200570][T16186] CPU: 1 UID: 0 PID: 16186 Comm: syz.5.2902 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.211546][T16186] Tainted: [L]=SOFTLOCKUP
[  660.215893][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  660.225987][T16186] RIP: 0010:memcg1_swapout+0x6c2/0x8d0
[  660.228346][ T5882] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  660.231489][T16186] Code: ce 7e 0d 00 0f 85 01 fa ff ff 48 89 df 48 c7 c6 20 c4 98 8b e8 8f 4e f8 fe c6 05 3b ce 7e 0d 01 90 0f 0b 90 e9 e2 f9 ff ff 90 <0f> 0b 90 e9 eb fb ff ff 90 0f 0b 90 41 80 3c 2e 00 0f 85 d5 fe ff
[  660.258663][T16186] RSP: 0018:ffffc900034a6718 EFLAGS: 00010002
[  660.264776][T16186] RAX: 0000000000000002 RBX: ffffea0000dccfc0 RCX: ffff888067f4a150
[  660.272779][T16186] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000aff3a50
[  660.278797][ T5882] usb 6-1: device descriptor read/8, error -71
[  660.280772][T16186] RBP: dffffc0000000000 R08: ffffc9000aff3a53 R09: 1ffff920015fe74a
[  660.294924][T16186] R10: dffffc0000000000 R11: fffff520015fe74b R12: ffffea0000dccfc8
[  660.302962][T16186] R13: 1ffffd40001b99f8 R14: 1ffffd40001b99f9 R15: ffff8880775a9178
[  660.310977][T16186] FS:  00007fe2e23b46c0(0000) GS:ffff888125aad000(0000) knlGS:0000000000000000
[  660.319944][T16186] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  660.326565][T16186] CR2: 00007fb7f7572a60 CR3: 0000000050c1e000 CR4: 00000000003526f0
[  660.334569][T16186] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  660.342561][T16186] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  660.350628][T16186] Call Trace:
[  660.353921][T16186]  <TASK>
[  660.356867][T16186]  __remove_mapping+0xac5/0xe30
[  660.361745][T16186]  shrink_folio_list+0x28d8/0x5320
[  660.366902][T16186]  ? __pfx_shrink_folio_list+0x10/0x10
[  660.372420][T16186]  ? css_rstat_updated+0x239/0x520
[  660.377551][T16186]  ? __pfx_css_rstat_updated+0x10/0x10
[  660.383029][T16186]  reclaim_folio_list+0xeb/0x4e0
[  660.387973][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  660.392932][T16186]  ? __pfx_reclaim_folio_list+0x10/0x10
[  660.398491][T16186]  ? lru_gen_update_size+0x818/0xd20
[  660.403786][T16186]  ? __mod_zone_page_state+0xd7/0x140
[  660.409171][T16186]  ? lru_gen_del_folio+0x359/0x540
[  660.414290][T16186]  reclaim_pages+0x454/0x520
[  660.418904][T16186]  ? __pfx_reclaim_pages+0x10/0x10
[  660.424024][T16186]  ? madvise_cold_or_pageout_pte_range+0x1977/0x1ce0
[  660.430783][T16186]  madvise_cold_or_pageout_pte_range+0x19a0/0x1ce0
[  660.437320][T16186]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  660.444184][T16186]  ? css_rstat_updated+0x239/0x520
[  660.449314][T16186]  ? __pfx_css_rstat_updated+0x10/0x10
[  660.454786][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  660.459735][T16186]  walk_pgd_range+0x1037/0x1d30
[  660.464602][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  660.469577][T16186]  ? __pfx_walk_pgd_range+0x10/0x10
[  660.474796][T16186]  ? folios_put_refs+0x58b/0x670
[  660.479750][T16186]  __walk_page_range+0x14c/0x710
[  660.484709][T16186]  ? folio_batch_move_lru+0x39b/0x420
[  660.490097][T16186]  walk_page_range_vma_unsafe+0x34c/0x400
[  660.495831][T16186]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  660.502091][T16186]  ? mlock_drain_local+0x79/0x480
[  660.507131][T16186]  ? walk_page_range_vma+0x6b/0x90
[  660.512257][T16186]  madvise_vma_behavior+0x30c7/0x4420
[  660.517644][T16186]  ? __update_page_owner_handle+0x5a/0x570
[  660.523460][T16186]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  660.529193][T16186]  ? __page_table_check_zero+0x6a/0x3e0
[  660.534756][T16186]  ? __page_table_check_zero+0x6a/0x3e0
[  660.540313][T16186]  ? __page_table_check_zero+0x6a/0x3e0
[  660.545868][T16186]  ? __page_table_check_zero+0x397/0x3e0
[  660.551509][T16186]  ? __page_table_check_zero+0x6a/0x3e0
[  660.557161][T16186]  ? post_alloc_hook+0x250/0x2a0
[  660.562117][T16186]  ? get_page_from_freelist+0x23a5/0x2440
[  660.567936][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  660.572888][T16186]  ? fs_reclaim_acquire+0x7d/0x100
[  660.578123][T16186]  ? mas_prev_slot+0xb31/0xbb0
[  660.582911][T16186]  ? find_vma_prev+0xe3/0x150
[  660.587598][T16186]  ? __pfx_find_vma_prev+0x10/0x10
[  660.592735][T16186]  ? page_table_check_set+0x148/0x610
[  660.598119][T16186]  madvise_walk_vmas+0x575/0xaf0
[  660.603067][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  660.608030][T16186]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  660.613511][T16186]  ? blk_start_plug+0x6f/0x1b0
[  660.618377][T16186]  madvise_do_behavior+0x38e/0x550
[  660.623511][T16186]  ? __pfx_madvise_do_behavior+0x10/0x10
[  660.629259][T16186]  ? down_read+0x274/0x2e0
[  660.633693][T16186]  ? madvise_lock+0x146/0x2f0
[  660.638386][T16186]  do_madvise+0x1bc/0x270
[  660.642728][T16186]  ? __pfx_do_madvise+0x10/0x10
[  660.647593][T16186]  ? lock_vma_under_rcu+0x42c/0x4a0
[  660.652824][T16186]  __x64_sys_madvise+0xa7/0xc0
[  660.657610][T16186]  do_syscall_64+0xec/0xf80
[  660.662156][T16186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.668228][T16186]  ? trace_irq_disable+0x37/0x100
[  660.673265][T16186]  ? clear_bhb_loop+0x40/0x90
[  660.677950][T16186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.683859][T16186] RIP: 0033:0x7fe2e418f749
[  660.688459][T16186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  660.708072][T16186] RSP: 002b:00007fe2e23b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  660.716496][T16186] RAX: ffffffffffffffda RBX: 00007fe2e43e6180 RCX: 00007fe2e418f749
[  660.724478][T16186] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000
[  660.732462][T16186] RBP: 00007fe2e4213f91 R08: 0000000000000000 R09: 0000000000000000
[  660.740436][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  660.748409][T16186] R13: 00007fe2e43e6218 R14: 00007fe2e43e6180 R15: 00007ffd2cc6fb78
[  660.756401][T16186]  </TASK>
[  660.759425][T16186] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  660.766740][T16186] CPU: 1 UID: 0 PID: 16186 Comm: syz.5.2902 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.777680][T16186] Tainted: [L]=SOFTLOCKUP
[  660.782004][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  660.792060][T16186] Call Trace:
[  660.795353][T16186]  <TASK>
[  660.798292][T16186]  vpanic+0x1e0/0x670
[  660.802292][T16186]  panic+0xb9/0xc0
[  660.806033][T16186]  ? __pfx_panic+0x10/0x10
[  660.810510][T16186]  __warn+0x317/0x4b0
[  660.814513][T16186]  ? memcg1_swapout+0x6c2/0x8d0
[  660.819383][T16186]  ? memcg1_swapout+0x6c2/0x8d0
[  660.824237][T16186]  __report_bug+0x288/0x500
[  660.828756][T16186]  ? memcg1_swapout+0x6c2/0x8d0
[  660.833630][T16186]  ? __pfx___report_bug+0x10/0x10
[  660.838671][T16186]  ? __pfx_css_rstat_updated+0x10/0x10
[  660.844162][T16186]  ? lruvec_stat_mod_folio+0x6f/0x2e0
[  660.849549][T16186]  ? memcg1_swapout+0x6c2/0x8d0
[  660.854412][T16186]  report_bug+0x16a/0x220
[  660.858754][T16186]  ? memcg1_swapout+0x6c2/0x8d0
[  660.863622][T16186]  ? memcg1_swapout+0x6c4/0x8d0
[  660.868488][T16186]  handle_bug+0x98/0x200
[  660.872746][T16186]  exc_invalid_op+0x1a/0x50
[  660.877260][T16186]  asm_exc_invalid_op+0x1a/0x20
[  660.882119][T16186] RIP: 0010:memcg1_swapout+0x6c2/0x8d0
[  660.887581][T16186] Code: ce 7e 0d 00 0f 85 01 fa ff ff 48 89 df 48 c7 c6 20 c4 98 8b e8 8f 4e f8 fe c6 05 3b ce 7e 0d 01 90 0f 0b 90 e9 e2 f9 ff ff 90 <0f> 0b 90 e9 eb fb ff ff 90 0f 0b 90 41 80 3c 2e 00 0f 85 d5 fe ff
[  660.907193][T16186] RSP: 0018:ffffc900034a6718 EFLAGS: 00010002
[  660.913283][T16186] RAX: 0000000000000002 RBX: ffffea0000dccfc0 RCX: ffff888067f4a150
[  660.921354][T16186] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000aff3a50
[  660.929340][T16186] RBP: dffffc0000000000 R08: ffffc9000aff3a53 R09: 1ffff920015fe74a
[  660.937317][T16186] R10: dffffc0000000000 R11: fffff520015fe74b R12: ffffea0000dccfc8
[  660.945393][T16186] R13: 1ffffd40001b99f8 R14: 1ffffd40001b99f9 R15: ffff8880775a9178
[  660.953389][T16186]  ? memcg1_swapout+0x22d/0x8d0
[  660.958257][T16186]  __remove_mapping+0xac5/0xe30
[  660.963126][T16186]  shrink_folio_list+0x28d8/0x5320
[  660.968282][T16186]  ? __pfx_shrink_folio_list+0x10/0x10
[  660.973796][T16186]  ? css_rstat_updated+0x239/0x520
[  660.978931][T16186]  ? __pfx_css_rstat_updated+0x10/0x10
[  660.984500][T16186]  reclaim_folio_list+0xeb/0x4e0
[  660.989456][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  660.994413][T16186]  ? __pfx_reclaim_folio_list+0x10/0x10
[  660.999965][T16186]  ? lru_gen_update_size+0x818/0xd20
[  661.005261][T16186]  ? __mod_zone_page_state+0xd7/0x140
[  661.010652][T16186]  ? lru_gen_del_folio+0x359/0x540
[  661.015774][T16186]  reclaim_pages+0x454/0x520
[  661.020384][T16186]  ? __pfx_reclaim_pages+0x10/0x10
[  661.025504][T16186]  ? madvise_cold_or_pageout_pte_range+0x1977/0x1ce0
[  661.032202][T16186]  madvise_cold_or_pageout_pte_range+0x19a0/0x1ce0
[  661.038733][T16186]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  661.045603][T16186]  ? css_rstat_updated+0x239/0x520
[  661.050805][T16186]  ? __pfx_css_rstat_updated+0x10/0x10
[  661.056313][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  661.061285][T16186]  walk_pgd_range+0x1037/0x1d30
[  661.066161][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  661.071134][T16186]  ? __pfx_walk_pgd_range+0x10/0x10
[  661.076347][T16186]  ? folios_put_refs+0x58b/0x670
[  661.081311][T16186]  __walk_page_range+0x14c/0x710
[  661.086284][T16186]  ? folio_batch_move_lru+0x39b/0x420
[  661.091680][T16186]  walk_page_range_vma_unsafe+0x34c/0x400
[  661.097425][T16186]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  661.103687][T16186]  ? mlock_drain_local+0x79/0x480
[  661.108722][T16186]  ? walk_page_range_vma+0x6b/0x90
[  661.113854][T16186]  madvise_vma_behavior+0x30c7/0x4420
[  661.119258][T16186]  ? __update_page_owner_handle+0x5a/0x570
[  661.125076][T16186]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  661.130806][T16186]  ? __page_table_check_zero+0x6a/0x3e0
[  661.136368][T16186]  ? __page_table_check_zero+0x6a/0x3e0
[  661.141921][T16186]  ? __page_table_check_zero+0x6a/0x3e0
[  661.147486][T16186]  ? __page_table_check_zero+0x397/0x3e0
[  661.153125][T16186]  ? __page_table_check_zero+0x6a/0x3e0
[  661.158681][T16186]  ? post_alloc_hook+0x250/0x2a0
[  661.163628][T16186]  ? get_page_from_freelist+0x23a5/0x2440
[  661.169361][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  661.174307][T16186]  ? fs_reclaim_acquire+0x7d/0x100
[  661.179456][T16186]  ? mas_prev_slot+0xb31/0xbb0
[  661.184284][T16186]  ? find_vma_prev+0xe3/0x150
[  661.189009][T16186]  ? __pfx_find_vma_prev+0x10/0x10
[  661.194170][T16186]  ? page_table_check_set+0x148/0x610
[  661.199562][T16186]  madvise_walk_vmas+0x575/0xaf0
[  661.204517][T16186]  ? __lock_acquire+0x6b6/0x2cf0
[  661.209467][T16186]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  661.214945][T16186]  ? blk_start_plug+0x6f/0x1b0
[  661.219715][T16186]  madvise_do_behavior+0x38e/0x550
[  661.224852][T16186]  ? __pfx_madvise_do_behavior+0x10/0x10
[  661.230587][T16186]  ? down_read+0x274/0x2e0
[  661.235014][T16186]  ? madvise_lock+0x146/0x2f0
[  661.239726][T16186]  do_madvise+0x1bc/0x270
[  661.244089][T16186]  ? __pfx_do_madvise+0x10/0x10
[  661.248965][T16186]  ? lock_vma_under_rcu+0x42c/0x4a0
[  661.254225][T16186]  __x64_sys_madvise+0xa7/0xc0
[  661.259009][T16186]  do_syscall_64+0xec/0xf80
[  661.263533][T16186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.269611][T16186]  ? trace_irq_disable+0x37/0x100
[  661.274645][T16186]  ? clear_bhb_loop+0x40/0x90
[  661.279336][T16186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.285234][T16186] RIP: 0033:0x7fe2e418f749
[  661.289656][T16186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  661.309272][T16186] RSP: 002b:00007fe2e23b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  661.317694][T16186] RAX: ffffffffffffffda RBX: 00007fe2e43e6180 RCX: 00007fe2e418f749
[  661.325686][T16186] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000
[  661.333696][T16186] RBP: 00007fe2e4213f91 R08: 0000000000000000 R09: 0000000000000000
[  661.341699][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  661.349807][T16186] R13: 00007fe2e43e6218 R14: 00007fe2e43e6180 R15: 00007ffd2cc6fb78
[  661.357808][T16186]  </TASK>
[  661.361214][T16186] Kernel Offset: disabled
[  661.365543][T16186] Rebooting in 86400 seconds..