last executing test programs:

25m0.208403401s ago: executing program 4 (id=53):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40084)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
syz_mount_image$btrfs(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f0000000e00)="$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")
write$nci(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000006440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000064c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000006500), 0x10106, 0x2, 0x0)
getpeername$unix(r2, 0x0, 0x0)
open(0x0, 0x4242, 0x1df2a23c5997faa6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006540)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
utimensat(r4, 0x0, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x80042, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0xe)
ioctl$TCFLSH(r5, 0x540b, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40003, &(0x7f0000000080), 0x13f, 0x3}}, 0x20)
getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/164, 0xa4)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0)
write(r6, &(0x7f0000000200)='\f', 0x1)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0)

24m56.255089122s ago: executing program 4 (id=55):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x0, 0x0)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r5, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4badb76a1252b620a652216afdc2f2c3a3c383464eb75a2e69b3b0a343bcebad9ee"], &(0x7f0000000580)='GPL\x00', 0x2, 0xea, &(0x7f00000005c0)=""/234}, 0x94)
setsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
getsockopt$sock_int(r4, 0x1, 0x56, 0x0, &(0x7f00000002c0))

24m50.715675142s ago: executing program 32 (id=48):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019700)=0x7)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4badb76a1252b620a652216afdc2f2c3a3c383464eb75a2e69b3b0a343bcebad9ee"], &(0x7f0000000580)='GPL\x00', 0x2, 0xea, &(0x7f00000005c0)=""/234}, 0x94)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)

24m46.466915071s ago: executing program 4 (id=60):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
ftruncate(0xffffffffffffffff, 0x8008976)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="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"/1369, 0x559, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

24m44.751971942s ago: executing program 33 (id=54):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
ftruncate(0xffffffffffffffff, 0x8008976)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

24m37.293356251s ago: executing program 34 (id=58):
syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0)
getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000005c0), 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f0000000680)='./tracefs_dir\x00', &(0x7f00000006c0)='tracefs\x00', 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1)
sendto$inet6(r0, &(0x7f00000002c0)="a6", 0x1, 0x20000045, &(0x7f0000000300)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c)
socket$kcm(0x10, 0x2, 0x0)

24m30.418629315s ago: executing program 35 (id=60):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
ftruncate(0xffffffffffffffff, 0x8008976)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603551c030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f3231d04630343234ed32333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3ed41dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba28c090000000000004606474446d7cd066a4113e319f6bb6ea530a01f8e739e4c4fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf95dddd1520015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b880e518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e28123b79bcbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b5b30c3f3d028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c2d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97d8bd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edce40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e060000000000000004fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b300"/1369, 0x559, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

20m51.462424764s ago: executing program 6 (id=220):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r0)
socket(0x40000000015, 0x5, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000400)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e000000000000000200000002"], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpu.stat\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
pselect6(0x40, &(0x7f0000000880)={0x5, 0xfffffffffffffff9, 0x248, 0x6, 0x9, 0x1ce, 0x7fff, 0xfffffffffffffffe}, 0x0, &(0x7f00000008c0)={0x3ff, 0x80, 0x5, 0x3, 0x101, 0x6, 0x5, 0x80000001}, 0x0, 0x0)

20m48.484786668s ago: executing program 6 (id=223):
signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000001280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000400), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x6)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, 0x0, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000a40)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x1}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_DELAY(r4, 0x80084121, 0x0)
prlimit64(r0, 0x0, 0x0, &(0x7f0000000d80))
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000dc0)={0x28, 0x0, 0x0, @host}, 0x10)
r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0505510, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x9, 0x0})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x206082, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)

20m46.642033953s ago: executing program 6 (id=227):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000019700)=0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r3, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4badb76a1252b620a652216afdc2f2c3a3c383464eb75a2e69b3b0a343bcebad9ee"], &(0x7f0000000580)='GPL\x00', 0x2, 0xea, &(0x7f00000005c0)=""/234}, 0x94)

20m44.62740548s ago: executing program 6 (id=228):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
ftruncate(0xffffffffffffffff, 0x8008976)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="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"/1369, 0x559, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

20m28.90551443s ago: executing program 36 (id=228):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
ftruncate(0xffffffffffffffff, 0x8008976)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="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"/1369, 0x559, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

20m18.955414588s ago: executing program 37 (id=240):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
ftruncate(0xffffffffffffffff, 0x8008976)
set_mempolicy(0x4005, 0x0, 0x6)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="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"/1369, 0x559, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

19m19.484988334s ago: executing program 38 (id=286):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r1, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000019700)=0x7)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r3, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4badb76a1252b620a652216afdc2f2c3a3c383464eb75a2e69b3b0a343bcebad9ee"], &(0x7f0000000580)='GPL\x00', 0x2, 0xea, &(0x7f00000005c0)=""/234}, 0x94)
setsockopt$sock_timeval(r2, 0x1, 0x15, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)

14m15.268078049s ago: executing program 39 (id=459):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x84c42, 0x1fa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x0)

13m24.593972129s ago: executing program 1 (id=500):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8)
syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aa0bb5deeee954cca70d7faaaaaaaaaa42238e910adb86dd60fca33f00186700fe80000000000000000000fbff837622cb2a1280b6ac371b0000000000fc00000000000000000000000000000021000000000000000000000000000000003edbb66e519915b2a68fafad"], 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000019d40)=0x40003)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000019d80)={0x0, 0x0, &(0x7f0000019dc0)={&(0x7f0000019e00)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setns(0xc9, 0x0)
dup(0xffffffffffffffff)
setgid(0xee00)
r8 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r8, 0xee01, 0x0)

13m10.142814492s ago: executing program 1 (id=511):
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000800)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000880)={{0x2, 0x5, 0x6, 0x8, 'syz0\x00', 0xb}, 0x4, 0x200, 0x5, r1, 0x2, 0xffffffff, 'syz0\x00', &(0x7f0000000100)=['\x00', '^\x00'], 0x3})
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x3ff}, @sack_perm, @window={0x3, 0xffff}, @mss={0x2, 0xfff}, @mss, @window], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
recvfrom$inet(r3, &(0x7f0000000080), 0x0, 0xc9103120, 0x0, 0x0)

13m8.426166645s ago: executing program 1 (id=512):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
ftruncate(0xffffffffffffffff, 0x8008976)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="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"/1369, 0x559, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

13m4.43914644s ago: executing program 1 (id=514):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
ftruncate(0xffffffffffffffff, 0x8008976)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="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"/1369, 0x559, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
socket(0x2b, 0x80801, 0x1)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

13m0.721142527s ago: executing program 1 (id=518):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='0', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8)
syz_emit_ethernet(0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="aa0bb5deeee954cca70d7faaaaaaaaaa42238e910adb86dd60fca33f00186700fe80000000000000000000fbff837622cb2a1280b6ac371b0000000000fc00000000000000000000000000000021000000000000000000000000000000003edbb66e519915b2a68fafad"], 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000019d80)={0x0, 0x0, &(0x7f0000019dc0)={&(0x7f0000019e00)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = dup(r7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @empty}], 0x10)
setgid(0xee00)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)

12m57.314032878s ago: executing program 1 (id=520):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r1 = getpgrp(0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./tracefs\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000019bc0)='./tracefs/dynamic_events\x00', 0x2, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

12m48.976529645s ago: executing program 40 (id=515):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000850)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r1 = getpgrp(0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./tracefs\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000019bc0)='./tracefs/dynamic_events\x00', 0x2, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

12m40.343307135s ago: executing program 41 (id=520):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r1 = getpgrp(0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./tracefs\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000019bc0)='./tracefs/dynamic_events\x00', 0x2, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

10m3.600401019s ago: executing program 4 (id=523):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0)
read$msr(r4, &(0x7f0000000cc0)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x8, &(0x7f0000019d40)=0x40003)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000019d80)={0x0, 0x0, 0x0}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = dup(r7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @empty}], 0x10)
setgid(0xee00)
add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)

10m0.332786299s ago: executing program 4 (id=606):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019700)=0x7)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r5, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4badb76a1252b620a652216afdc2f2c3a3c383464eb75a2e69b3b0a343bcebad9ee"], &(0x7f0000000580)='GPL\x00', 0x2}, 0x94)
setsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
getsockopt$sock_int(r4, 0x1, 0x56, 0x0, &(0x7f00000002c0))

9m56.67328036s ago: executing program 6 (id=527):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16], &(0x7f0000000580)='GPL\x00', 0x2, 0xea, &(0x7f00000005c0)=""/234}, 0x94)

9m55.425339054s ago: executing program 6 (id=612):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019700)=0x7)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r5, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4badb76a1252b620a652216afdc2f2c3a3c383464eb75a2e69b3b0a343bcebad9ee"], &(0x7f0000000580)='GPL\x00', 0x2}, 0x94)
setsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
getsockopt$sock_int(r4, 0x1, 0x56, 0x0, &(0x7f00000002c0))

9m53.340649217s ago: executing program 4 (id=613):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)

9m39.482375559s ago: executing program 42 (id=612):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019700)=0x7)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r5, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4badb76a1252b620a652216afdc2f2c3a3c383464eb75a2e69b3b0a343bcebad9ee"], &(0x7f0000000580)='GPL\x00', 0x2}, 0x94)
setsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
getsockopt$sock_int(r4, 0x1, 0x56, 0x0, &(0x7f00000002c0))

9m37.181749209s ago: executing program 43 (id=613):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)

8m15.776997843s ago: executing program 3 (id=666):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x4000850)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r2 = getpgrp(0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r5, &(0x7f0000000a80)=""/102392, 0x18ff8)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r6, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)
recvmmsg(r6, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
landlock_restrict_self(0xffffffffffffffff, 0xc)

8m9.557971283s ago: executing program 3 (id=669):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000019700)=0x7)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r4, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4badb76a1252b620a652216afdc2f2c3a3c"], &(0x7f0000000580)='GPL\x00', 0x2, 0xea, &(0x7f00000005c0)=""/234}, 0x94)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
getsockopt$sock_int(r3, 0x1, 0x56, 0x0, &(0x7f00000002c0))

8m1.763538735s ago: executing program 3 (id=673):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x4000850)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r1 = getpgrp(0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./tracefs\x00', 0x1ff)
recvmmsg(r5, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

7m54.899633011s ago: executing program 3 (id=676):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019700)=0x7)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r4, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d"], &(0x7f0000000580)='GPL\x00', 0x2, 0xea, &(0x7f00000005c0)=""/234}, 0x94)

7m43.017935325s ago: executing program 3 (id=683):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3ae}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000180))
syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x1000)

7m40.838635928s ago: executing program 3 (id=684):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x4000850)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r2 = getpgrp(0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./tracefs\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000019bc0)='./tracefs/dynamic_events\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

7m25.556012894s ago: executing program 44 (id=684):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x4000850)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r2 = getpgrp(0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r4, &(0x7f0000000a80)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019a80)=0x7)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)
mkdirat(0xffffffffffffff9c, &(0x7f0000019b00)='./tracefs\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000019bc0)='./tracefs/dynamic_events\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

5m51.929611451s ago: executing program 0 (id=720):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xff, 0x52, 0x0, 'queue0\x00'})
write$sndseq(r0, &(0x7f0000000080)=[{0x84, 0x77, 0x0, 0x7, @tick, {}, {}, @quote={{0x9, 0xcc}, 0x6, &(0x7f00000000c0)={0xd7, 0x4, 0x7a, 0x3, @time={0x9, 0x1000}, {0x2, 0x2}, {0x8, 0xf}, @queue={0x24, {0x2, 0x7}}}}}], 0x1c)
r1 = syz_usb_connect(0x5, 0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003020000000203"]}, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000980)='secret\x00', 0x0, 0x0)
close(0x3)
write$char_usb(r2, &(0x7f00000009c0), 0x0)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000a40)=ANY=[@ANYBLOB="12018002000001bf4ce3240100010a00020102ed8be771f6d0f8d4535e7137931160a9d203a64575328000ee9ba37c3d9248e71f21ec92f146c96d480755eca2d5559b401236722af9f9c038aa581a200378fbdd6cb58e040000000000000020f4a96e5d59121538674018c7ee6b346193d835a138d8aa9f04aab4164d12cecb251a2997902592067441c8f3572e"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x20400)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000440)=@v2={0x5, 0x3, 0x15, 0x80, 0x79, "a977ec8b5cc7500f7467695c8b6961439d66dc14ec0ee08f8a34715c98cf5787a4f34634007f5734e01ec19bc67c7ff4e86bc253cb94e4b5a576b9e295c1a18a34bd5515007f57f8bcd8c91c7575111f16d17a42be6165c63e2c5127f76383c467f53f7caef0bcde596a0d9943ccff8c8db6d5288a4fa127fe"}, 0x82, 0x2)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket(0x2, 0x3, 0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r6)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a00)={'wlan0\x00'})
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000340)={0x3, [0x0, 0x0, 0x0]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'veth1\x00'})
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000007c0)='syz_tun\x00', 0x10)
sendto$inet(r4, 0x0, 0x38, 0x20000800, &(0x7f0000000800)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac140cb9b01414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000240)})

5m51.896002123s ago: executing program 0 (id=723):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40084)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7)
syz_mount_image$btrfs(&(0x7f0000000380), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f0000000e00)="$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")
write$nci(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000006440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000064c0), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000006500), 0x10106, 0x2, 0x0)
getpeername$unix(r2, 0x0, 0x0)
open(0x0, 0x4242, 0x1df2a23c5997faa6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006540)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0xe)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40003, &(0x7f0000000080), 0x13f, 0x3}}, 0x20)
getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/164, 0xa4)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0)
write(r4, &(0x7f0000000200)='\f', 0x1)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0)

5m48.454617439s ago: executing program 0 (id=729):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/kernel/ns_last_pid\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
syz_io_uring_setup(0xf00, &(0x7f0000000240)={0x0, 0x5961, 0x40, 0x2, 0x3b6, 0x0, r0}, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000004c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f0000019680)=0x7)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x4, 0x4, &(0x7f00000001c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x6a}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f0000000200)='GPL\x00'}, 0x80)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_emit_vhci(0x0, 0x47)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x2, @sliced={0x9c, [0x6d31, 0xfff, 0xfff8, 0xe64c, 0xa, 0x1, 0x7, 0xd, 0x5, 0x6, 0xc, 0x1, 0x5, 0x4, 0x7d67, 0x9, 0x8, 0xb, 0x2, 0x3ff, 0xff, 0x6, 0x3, 0x4577, 0xffa0, 0x7, 0x7, 0xe, 0x1, 0x6, 0x7, 0x2e7d, 0x13, 0x6, 0x1, 0x1, 0x0, 0x8007, 0x85b8, 0x5, 0x8, 0x5, 0x8, 0x6, 0x8, 0x6, 0x80, 0x5], 0x1}})

5m43.535950223s ago: executing program 0 (id=734):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x4000850)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r2 = getpgrp(0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r5, &(0x7f0000000a80)=""/102392, 0x18ff8)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r6, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000)
recvmmsg(r6, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
landlock_restrict_self(0xffffffffffffffff, 0xc)

5m41.582268905s ago: executing program 0 (id=735):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3902, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x4000850)
prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7)
r2 = getpgrp(0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[])
sched_setaffinity(r2, 0x8, &(0x7f0000000500)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0)
read$msr(r5, &(0x7f0000000a80)=""/102392, 0x18ff8)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'})
socket$netlink(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000019bc0)='./tracefs/dynamic_events\x00', 0x2, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)

5m29.310061824s ago: executing program 0 (id=743):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000019700)=0x7)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r3, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4ba"], &(0x7f0000000580)='GPL\x00', 0x2, 0xea, &(0x7f00000005c0)=""/234}, 0x94)

5m12.988644328s ago: executing program 45 (id=743):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x8, &(0x7f0000019700)=0x7)
readahead(0xffffffffffffffff, 0x80000001, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000ffd0000000000001000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000", @ANYRES16=r3, @ANYBLOB="7e3721c0da09a2818b98a6d425f6134123093e3a8a5515e47a1b92245d0eae3a16406a4dcf92717c304250dcf4a84dd4d2cfe2bcbaf84d8b6df37cf23cf27e6d32d88c5deccc401c12baef7f047ee5a4db8351b893aefbcfc0abe40dc12ca4ba"], &(0x7f0000000580)='GPL\x00', 0x2, 0xea, &(0x7f00000005c0)=""/234}, 0x94)

32.92601156s ago: executing program 9 (id=2607):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/4087, 0xff7}, {&(0x7f0000001400)=""/4053, 0xfd5}, {&(0x7f0000003440)=""/92, 0x5c}], 0x3}, 0x10042)

32.702565052s ago: executing program 9 (id=2610):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba00090400000903000000092100"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)

10.460774556s ago: executing program 8 (id=2677):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000840)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x2c, &(0x7f00000008c0)={0x0, 0x18, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)

8.899380816s ago: executing program 5 (id=2681):
r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000002700)=<r1=>0x0, &(0x7f0000002740)=<r2=>0x0, &(0x7f0000002780)=<r3=>0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000027c0)=@IORING_OP_BIND=@ipv4={0x38, 0x4, 0x0, r4, 0x0, 0x0})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000002840)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000028c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)

8.790443419s ago: executing program 8 (id=2682):
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x22000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0)

8.638025708s ago: executing program 5 (id=2683):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba00090400000903000000092100"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000095"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)

8.091469475s ago: executing program 7 (id=2685):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000100)=""/231, 0xe7)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)

7.089287964s ago: executing program 8 (id=2689):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)

6.964016802s ago: executing program 2 (id=2690):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)="aefdda9d241001005a90f57f07", 0xd}, {&(0x7f0000000380)="aa", 0x1}], 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
r4 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x8000000000000000, 0xa400)
ioctl$DVB_DVR_DMX_QBUF(r4, 0xc0186f3f, &(0x7f0000000400)={0x5a, 0x8000, 0xbed, 0x800, 0x1b, 0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

6.247040554s ago: executing program 2 (id=2691):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_connect$midi(0x1, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.328009401s ago: executing program 5 (id=2692):
r0 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000002700)=<r1=>0x0, &(0x7f0000002740)=<r2=>0x0, &(0x7f0000002780)=<r3=>0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000027c0)=@IORING_OP_BIND=@ipv4={0x38, 0x4, 0x0, r4, 0x0, 0x0})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000002840)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000028c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)

5.160600893s ago: executing program 8 (id=2693):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="b23d"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000480), 0x3, 0x1)
write$P9_RVERSION(r0, &(0x7f00000004c0)=ANY=[], 0xfffffcd9)

4.826244435s ago: executing program 5 (id=2694):
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r0, 0x2)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000f80)="06b02b6c752a9a17fd38", 0xa)

4.008036651s ago: executing program 2 (id=2695):
mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001980)='./proc\x00', &(0x7f00000019c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0)
write(r0, &(0x7f0000001a40)='100', 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x2c3)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

3.914494428s ago: executing program 9 (id=2612):
mkdirat(0xffffffffffffff9c, &(0x7f0000001580)='./proc\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./configfs\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./configfs/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./configfs/usb_gadget/g1/functions/uvc.0/control/extensions/ext0\x00', 0x1ff)

3.660041496s ago: executing program 2 (id=2696):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180))
r1 = syz_open_pts(r0, 0x2)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)=0xf)
ioctl$TCSBRK(r1, 0x400455c8, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xc0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x2f)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xc0)

3.515370847s ago: executing program 9 (id=2697):
mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000019c0)='./proc\x00', &(0x7f0000001a00)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0)
mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil)

3.423686412s ago: executing program 9 (id=2698):
r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000840)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f00000008c0)={0x0, 0x18, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

2.973225005s ago: executing program 7 (id=2699):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000320001ff7f00000000"], 0x14}}, 0x10)

2.832914571s ago: executing program 7 (id=2700):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)="aefdda9d241001005a90f57f07", 0xd}, {&(0x7f0000000380)="aa", 0x1}], 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
r4 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x8000000000000000, 0xa400)
ioctl$DVB_DVR_DMX_QBUF(r4, 0xc0186f3f, &(0x7f0000000400)={0x5a, 0x8000, 0xbed, 0x800, 0x1b, 0x3})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.699276619s ago: executing program 9 (id=2701):
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x180)
mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000980)='100', 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x62040200)

2.391425088s ago: executing program 5 (id=2702):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b31ce93ee907000000002990"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0)

2.193642725s ago: executing program 7 (id=2703):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000002680)={0x0, 0x0, 0x100, 0x6, 0x1e5}, 0x0, &(0x7f0000002740)=<r1=>0x0, &(0x7f0000002780)=<r2=>0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_submit(0x0, r1, r2, &(0x7f00000027c0)=@IORING_OP_BIND=@ipv4={0x38, 0x4, 0x0, r3, 0x0, 0x0})
syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000002840)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000028c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)

1.882562109s ago: executing program 7 (id=2704):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x40000, 0x0)
memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet(0x2, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

1.828133513s ago: executing program 8 (id=2705):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x1a0001)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x750, 0x0, 0x0, 'queue0\x00', 0x5})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
ioctl(0xffffffffffffffff, 0x40104d04, &(0x7f0000000180)="9c81")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')

410.043552ms ago: executing program 7 (id=2706):
socket$kcm(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1f7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='usbip-vudc.0', 0xc)
write(r0, &(0x7f0000000500)='\n', 0x1)

405.899017ms ago: executing program 8 (id=2707):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB], 0x17)

232.336672ms ago: executing program 2 (id=2708):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000004c0)={<r0=>0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000540)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={r0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c)

2.656648ms ago: executing program 2 (id=2709):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000100)=""/231, 0xe7)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)

0s ago: executing program 5 (id=2710):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000320001ff7f000000000000"], 0x14}}, 0x10)

kernel console output (not intermixed with test programs):

msc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[ 1558.652698][ T5762] usb 3-1: USB disconnect, device number 37
[ 1558.744714][   T11] usb 8-1: USB disconnect, device number 49
[ 1560.110773][ T5787] usb 9-1: USB disconnect, device number 37
[ 1560.365021][T19499] syz.8.2333 (pid 19499) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[ 1560.478166][T19494] syzkaller1: entered promiscuous mode
[ 1560.478184][T19494] syzkaller1: entered allmulticast mode
[ 1560.634824][T19505] net_ratelimit: 63 callbacks suppressed
[ 1560.864139][   T11] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1561.013507][   T11] usb 6-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1561.014966][   T11] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.015017][   T11] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1561.015042][   T11] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1561.015154][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.083811][   T11] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1561.143183][ T5787] usb 8-1: new high-speed USB device number 50 using dummy_hcd
[ 1561.235287][   T11] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1561.256665][T16456] udevd[16456]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1561.306795][ T5787] usb 8-1: New USB device found: idVendor=060b, idProduct=500a, bcdDevice=0.00
[ 1561.308386][ T5787] usb 8-1: too many endpoints for config 0 interface 0 altsetting 5: 102, using maximum allowed: 30
[ 1561.308435][ T5787] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1561.308465][ T5787] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1561.308497][ T5787] usb 8-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 102
[ 1561.308517][ T5787] usb 8-1: config 0 interface 0 has no altsetting 0
[ 1561.308558][ T5787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.405900][T12949] usb 6-1: USB disconnect, device number 30
[ 1561.428360][ T5787] usb 8-1: config 0 descriptor??
[ 1561.524545][   T11] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[ 1561.676115][   T11] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1561.676175][   T11] usb 3-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80
[ 1561.689949][   T11] usb 3-1: config 169 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.689989][   T11] usb 3-1: config 169 has 0 interfaces, different from the descriptor's value: 1
[ 1561.735338][   T11] usb 3-1: string descriptor 0 read error: -22
[ 1561.736076][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1561.851537][ T5787] usbhid 8-1:0.0: can't add hid device: -71
[ 1561.853425][ T5787] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1561.900704][ T5787] usb 8-1: USB disconnect, device number 50
[ 1562.136555][T19539] netlink: 'syz.9.2342': attribute type 8 has an invalid length.
[ 1562.136584][T19539] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2342'.
[ 1562.433745][T19551] bond1: option mode: unable to set because the bond device has slaves
[ 1562.455991][T19551] bond1: (slave macvlan4): Error -98 calling set_mac_address
[ 1562.992056][T12949] usb 8-1: new high-speed USB device number 51 using dummy_hcd
[ 1563.143503][T12949] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1563.143540][T12949] usb 8-1: too many configurations: 87, using maximum allowed: 8
[ 1563.179926][T12949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1563.179942][T12949] usb 8-1: Product: syz
[ 1563.179954][T12949] usb 8-1: Manufacturer: syz
[ 1563.179966][T12949] usb 8-1: SerialNumber: syz
[ 1563.591603][T19583] rxe_eth0 speed is unknown, defaulting to 1000
[ 1563.631122][T12949] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1563.643095][T12949] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1563.644030][T12949] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1563.650210][T12949] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[ 1564.328258][   T11] usb 3-1: USB disconnect, device number 38
[ 1564.392792][ T8883] Bluetooth: hci0: command 0x1003 tx timeout
[ 1564.392929][ T5651] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1564.658105][T19606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2354'.
[ 1564.987353][T19612] bond1: option mode: unable to set because the bond device has slaves
[ 1565.029840][T19612] bond1: (slave macvlan3): Error -98 calling set_mac_address
[ 1565.567289][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2358'.
[ 1565.567317][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2358'.
[ 1565.832457][T14379] net_ratelimit: 137 callbacks suppressed
[ 1566.022847][   T33] usb 8-1: USB disconnect, device number 51
[ 1566.114535][T19634] syzkaller1: entered promiscuous mode
[ 1566.114554][T19634] syzkaller1: entered allmulticast mode
[ 1566.251943][T12949] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1566.353718][ T5651] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1566.413223][T12949] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[ 1566.419801][T12949] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1566.419857][T12949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1566.419881][T12949] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1566.419908][T12949] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1566.419974][T12949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1567.015657][T19663] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2366'.
[ 1567.172009][T12949] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1567.332823][T12949] usb 9-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1567.335893][T12949] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1567.335918][T12949] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1567.336003][T12949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1567.516811][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2370'.
[ 1567.516835][T19678] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2370'.
[ 1567.608073][ T5643] usb 9-1: USB disconnect, device number 38
[ 1567.691752][T12949] usb 8-1: new high-speed USB device number 52 using dummy_hcd
[ 1567.853060][T12949] usb 8-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1567.854531][T12949] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1567.854607][T12949] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1567.858173][T12949] usb 8-1: config 0 descriptor??
[ 1567.913540][T12949] pwc: Askey VC010 type 2 USB webcam detected.
[ 1567.984210][   T11] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1568.132782][   T11] usb 3-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1568.132832][   T11] usb 3-1: too many configurations: 87, using maximum allowed: 8
[ 1568.176075][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1568.176100][   T11] usb 3-1: Product: syz
[ 1568.176118][   T11] usb 3-1: Manufacturer: syz
[ 1568.176135][   T11] usb 3-1: SerialNumber: syz
[ 1568.307343][T12949] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1568.310728][T12949] pwc: recv_control_msg error -32 req 02 val 2700
[ 1568.311779][T12949] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1568.325020][T12949] pwc: recv_control_msg error -32 req 04 val 1000
[ 1568.330697][T12949] pwc: recv_control_msg error -32 req 04 val 1300
[ 1568.345721][T12949] pwc: recv_control_msg error -32 req 04 val 1400
[ 1568.350792][T12949] pwc: recv_control_msg error -32 req 02 val 2000
[ 1568.361405][T12949] pwc: recv_control_msg error -32 req 02 val 2100
[ 1568.371041][T12949] pwc: recv_control_msg error -32 req 04 val 1500
[ 1568.384816][T12949] pwc: recv_control_msg error -32 req 02 val 2500
[ 1568.586822][T12949] pwc: recv_control_msg error -71 req 02 val 2600
[ 1568.587461][T12949] pwc: recv_control_msg error -71 req 02 val 2900
[ 1568.588012][T12949] pwc: recv_control_msg error -71 req 02 val 2800
[ 1568.588730][T12949] pwc: recv_control_msg error -71 req 04 val 1100
[ 1568.591819][T12949] pwc: recv_control_msg error -71 req 04 val 1200
[ 1568.618113][T12949] pwc: Registered as video103.
[ 1568.637500][   T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1568.639908][   T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1568.667565][   T11] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1568.670220][T12949] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15
[ 1568.702555][   T11] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[ 1568.706852][   T33] usb 9-1: new low-speed USB device number 39 using dummy_hcd
[ 1568.807536][T12949] usb 8-1: USB disconnect, device number 52
[ 1568.885049][   T33] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1568.885089][   T33] usb 9-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80
[ 1568.889492][   T33] usb 9-1: config 169 has an invalid interface number: 251 but max is 0
[ 1568.889512][   T33] usb 9-1: config 169 has no interface number 0
[ 1568.889544][   T33] usb 9-1: config 169 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1568.889566][   T33] usb 9-1: config 169 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt
[ 1568.889585][   T33] usb 9-1: config 169 interface 251 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[ 1568.889603][   T33] usb 9-1: config 169 interface 251 has no altsetting 0
[ 1568.989054][   T33] usb 9-1: string descriptor 0 read error: -22
[ 1568.989223][   T33] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1569.036824][T19699] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[ 1569.052664][   T33] cypress_m8 9-1:169.251: HID->COM RS232 Adapter converter detected
[ 1569.062301][   T33] cyphidcom ttyUSB0: required endpoint is missing
[ 1569.165867][   T33] usb 6-1: USB disconnect, device number 31
[ 1569.693637][   T33] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1569.843079][   T33] usb 6-1: Using ep0 maxpacket: 16
[ 1569.844567][   T33] usb 6-1: New USB device found: idVendor=05ac, idProduct=027c, bcdDevice=0.00
[ 1569.849048][   T33] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1569.849099][   T33] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1569.849170][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1569.877547][   T33] usb 6-1: config 0 descriptor??
[ 1569.962468][T19732] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2378'.
[ 1570.185913][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2379'.
[ 1570.185940][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2379'.
[ 1570.309966][   T33] apple 0003:05AC:027C.0006: unknown main item tag 0x4
[ 1570.310020][   T33] apple 0003:05AC:027C.0006: reserved main item tag 0xd
[ 1570.345218][   T33] apple 0003:05AC:027C.0006: hidraw0: USB HID v0.81 Device [HID 05ac:027c] on usb-dummy_hcd.5-1/input0
[ 1570.513442][T13235] usb 6-1: USB disconnect, device number 32
[ 1570.791389][T13235] usb 3-1: USB disconnect, device number 39
[ 1570.932638][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'.
[ 1570.932661][T19760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'.
[ 1570.952895][   T54] net_ratelimit: 53 callbacks suppressed
[ 1571.140371][ T5651] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1571.428683][   T33] usb 9-1: USB disconnect, device number 39
[ 1571.458326][   T33] cypress_m8 9-1:169.251: device disconnected
[ 1571.551949][T19780] ieee802154 phy0 wpan0: encryption failed: -22
[ 1572.027455][T13235] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1572.175530][T13235] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1572.179541][T13235] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1572.179645][T13235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1572.210504][   T33] usb 9-1: new low-speed USB device number 40 using dummy_hcd
[ 1572.221205][T13235] usb 3-1: config 0 descriptor??
[ 1572.250774][T13235] pwc: Askey VC010 type 2 USB webcam detected.
[ 1572.355982][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2393'.
[ 1572.356012][T19806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2393'.
[ 1572.389533][   T33] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1572.389589][   T33] usb 9-1: New USB device found: idVendor=6737, idProduct=0001, bcdDevice=91.80
[ 1572.409812][   T33] usb 9-1: config 169 has an invalid interface number: 251 but max is 0
[ 1572.409838][   T33] usb 9-1: config 169 has an invalid descriptor of length 0, skipping remainder of the config
[ 1572.409860][   T33] usb 9-1: config 169 has no interface number 0
[ 1572.409923][   T33] usb 9-1: config 169 interface 251 altsetting 11 has an invalid descriptor for endpoint zero, skipping
[ 1572.409949][   T33] usb 9-1: config 169 interface 251 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1572.409981][   T33] usb 9-1: config 169 interface 251 has no altsetting 0
[ 1572.473877][   T33] usb 9-1: string descriptor 0 read error: -22
[ 1572.474135][   T33] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1572.502772][   T33] cypress_m8 9-1:169.251: HID->COM RS232 Adapter converter detected
[ 1572.504392][   T33] cyphidcom ttyUSB0: required endpoint is missing
[ 1572.564389][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2394'.
[ 1572.564414][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2394'.
[ 1572.744846][T13235] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1572.747337][T13235] pwc: recv_control_msg error -32 req 02 val 2700
[ 1572.749850][T13235] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1572.760255][T13235] pwc: recv_control_msg error -32 req 04 val 1000
[ 1572.781103][T13235] pwc: recv_control_msg error -32 req 04 val 1300
[ 1572.787138][T13235] pwc: recv_control_msg error -32 req 04 val 1400
[ 1572.806289][T13235] pwc: recv_control_msg error -32 req 02 val 2000
[ 1572.808735][T13235] pwc: recv_control_msg error -32 req 02 val 2100
[ 1572.809631][T13235] pwc: recv_control_msg error -32 req 04 val 1500
[ 1572.820069][T13235] pwc: recv_control_msg error -32 req 02 val 2500
[ 1573.049620][T13235] pwc: recv_control_msg error -71 req 02 val 2600
[ 1573.051913][T13235] pwc: recv_control_msg error -71 req 02 val 2900
[ 1573.056632][T13235] pwc: recv_control_msg error -71 req 02 val 2800
[ 1573.063317][T13235] pwc: recv_control_msg error -71 req 04 val 1100
[ 1573.070069][T13235] pwc: recv_control_msg error -71 req 04 val 1200
[ 1573.090647][T13235] pwc: Registered as video103.
[ 1573.117442][T13235] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16
[ 1573.198661][T13235] usb 3-1: USB disconnect, device number 40
[ 1573.272896][ T8118] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1573.423188][ T8118] usb 6-1: Using ep0 maxpacket: 8
[ 1573.424834][ T8118] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1573.427533][ T8118] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[ 1573.427560][ T8118] usb 6-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config
[ 1573.427641][ T8118] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1573.427711][ T8118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1573.508727][ T8118] usbtmc 6-1:16.0: bulk endpoints not found
[ 1573.736225][T19834] ieee802154 phy0 wpan0: encryption failed: -22
[ 1574.028780][T13235] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[ 1574.035864][   T33] usb 6-1: USB disconnect, device number 33
[ 1574.284757][T13235] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[ 1574.645444][T19839] ceph: No mds server is up or the cluster is laggy
[ 1574.861400][T19869] 0x000000000000-0x000000010000 : ""
[ 1574.885540][T19869] ftl_cs: FTL header not found.
[ 1575.078527][T13235] usb 9-1: USB disconnect, device number 40
[ 1575.098040][T13235] cypress_m8 9-1:169.251: device disconnected
[ 1575.143015][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'.
[ 1575.143044][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2405'.
[ 1575.270889][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2406'.
[ 1575.270915][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2406'.
[ 1575.583569][T13235] usb 8-1: new high-speed USB device number 53 using dummy_hcd
[ 1575.736093][T13235] usb 8-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00
[ 1575.737499][T13235] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1575.737530][T13235] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1575.777106][T13235] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1575.777130][T13235] usb 8-1: Product: syz
[ 1575.777148][T13235] usb 8-1: Manufacturer: syz
[ 1575.777165][T13235] usb 8-1: SerialNumber: syz
[ 1576.073187][    C0] net_ratelimit: 62 callbacks suppressed
[ 1576.094783][T13235] kaweth 8-1:1.0: Firmware present in device.
[ 1576.131379][ T8118] wiimote 0005:057E:0306.0007: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0
[ 1576.206572][ T8118] wiimote 0005:057E:0306.0007: New device registered (Wiimote 1)
[ 1576.270829][T13235] kaweth 8-1:1.0: Statistics collection: 0
[ 1576.270853][T13235] kaweth 8-1:1.0: Multicast filter limit: 0
[ 1576.270870][T13235] kaweth 8-1:1.0: MTU: 0
[ 1576.270887][T13235] kaweth 8-1:1.0: Read MAC address 00:00:00:00:00:00
[ 1576.358844][T19907] wiimote 0005:057E:0306.0007: Device removed
[ 1576.528197][T19912] fido_id[19912]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1576.673448][T13235] kaweth 8-1:1.0: Error setting SOFS wait
[ 1576.673699][T13235] kaweth 8-1:1.0: probe with driver kaweth failed with error -5
[ 1576.708211][T13235] usb 8-1: USB disconnect, device number 53
[ 1576.730730][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'.
[ 1576.730755][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'.
[ 1577.077621][T19936] 0x000000000000-0x000000010000 : ""
[ 1577.117975][T19936] ftl_cs: FTL header not found.
[ 1577.275146][ T5859] wiimote 0005:057E:0306.0007: detected device: Nintendo Wii Remote (Gen 1) (1)
[ 1577.602100][T12949] usb 8-1: new high-speed USB device number 54 using dummy_hcd
[ 1577.764720][T12949] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1577.764767][T12949] usb 8-1: too many configurations: 87, using maximum allowed: 8
[ 1577.814586][T12949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1577.814611][T12949] usb 8-1: Product: syz
[ 1577.814628][T12949] usb 8-1: Manufacturer: syz
[ 1577.814645][T12949] usb 8-1: SerialNumber: syz
[ 1578.033441][ T5859] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input18
[ 1578.155818][ T5859] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input19
[ 1578.216424][ T5859] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0007/input/input17
[ 1578.300130][T12949] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1578.301128][T12949] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1578.322835][T12949] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1578.334677][T12949] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[ 1578.335683][T13235] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1578.504661][T13235] usb 9-1: New USB device found: idVendor=060b, idProduct=500a, bcdDevice=0.00
[ 1578.506199][T13235] usb 9-1: too many endpoints for config 0 interface 0 altsetting 5: 102, using maximum allowed: 30
[ 1578.506245][T13235] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1578.506274][T13235] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1578.506298][T13235] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 102
[ 1578.506327][T13235] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1578.506386][T13235] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1578.511125][T13235] usb 9-1: config 0 descriptor??
[ 1579.166718][T13235] usbhid 9-1:0.0: can't add hid device: -71
[ 1579.166915][T13235] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1579.171373][T13235] usb 9-1: USB disconnect, device number 41
[ 1579.286954][ T5651] Bluetooth: hci1: unexpected event for opcode 0x202a
[ 1579.810658][T20001] ubi0: attaching mtd1
[ 1579.886891][T20001] ubi0: scanning is finished
[ 1579.886904][T20001] ubi0: empty MTD device detected
[ 1580.256361][T20001] ubi0: attached mtd1 (name "", size 0 MiB)
[ 1580.256392][T20001] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 1580.256413][T20001] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 1580.256433][T20001] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[ 1580.256454][T20001] ubi0: good PEBs: 16, bad PEBs: 0, corrupted PEBs: 0
[ 1580.256474][T20001] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 1580.256494][T20001] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1104383881
[ 1580.256519][T20001] ubi0: available PEBs: 12, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 1580.269261][T20012] ubi0: background thread "ubi_bgt0d" started, PID 20012
[ 1580.506908][   T11] usb 8-1: USB disconnect, device number 54
[ 1580.686166][T20017] 0x000000000000-0x000000010000 : ""
[ 1580.729220][T20017] ftl_cs: FTL header not found.
[ 1581.195140][ T1400] net_ratelimit: 63 callbacks suppressed
[ 1581.441835][T12949] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1581.669569][T12949] usb 9-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[ 1581.708329][T12949] usb 9-1: config 1 has an invalid interface number: 3 but max is 0
[ 1581.708425][T12949] usb 9-1: config 1 has no interface number 0
[ 1581.814451][T12949] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1581.814518][T12949] usb 9-1: Product: syz
[ 1581.814577][T12949] usb 9-1: Manufacturer: syz
[ 1581.814636][T12949] usb 9-1: SerialNumber: syz
[ 1582.349860][T12949] usb 9-1: 3:0 : does not exist
[ 1582.349884][T12949] usb 9-1: 3:0 : does not exist
[ 1582.548061][T12949] usb 9-1: USB disconnect, device number 42
[ 1582.747751][   T11] usb 8-1: new high-speed USB device number 55 using dummy_hcd
[ 1582.905026][   T11] usb 8-1: Using ep0 maxpacket: 32
[ 1582.906043][   T11] usb 8-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1582.909984][   T11] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[ 1582.910012][   T11] usb 8-1: config 0 has no interface number 0
[ 1582.956700][   T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1582.956727][   T11] usb 8-1: Product: syz
[ 1582.956746][   T11] usb 8-1: Manufacturer: syz
[ 1582.956765][   T11] usb 8-1: SerialNumber: syz
[ 1582.987298][   T11] usb 8-1: config 0 descriptor??
[ 1582.998681][   T11] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1583.307423][   T11] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1583.424254][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[ 1583.425355][   T11] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1583.458052][T12949] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1583.633223][T12949] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1583.633267][T12949] usb 9-1: too many configurations: 87, using maximum allowed: 8
[ 1583.675251][T12949] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1583.675276][T12949] usb 9-1: Product: syz
[ 1583.675294][T12949] usb 9-1: Manufacturer: syz
[ 1583.675311][T12949] usb 9-1: SerialNumber: syz
[ 1584.139369][T12949] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1584.140460][T12949] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1584.158423][T12949] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1584.193852][T12949] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32
[ 1584.247608][T12949] usb 8-1: USB disconnect, device number 55
[ 1584.255107][    C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -108
[ 1584.478693][T20058] 0x000000000000-0x000000010000 : ""
[ 1584.516504][T20058] ftl_cs: FTL header not found.
[ 1584.624233][T12949] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1584.659957][T12949] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1584.690825][T12949] quatech2 8-1:0.51: device disconnected
[ 1585.593113][ T8118] usb 8-1: new high-speed USB device number 56 using dummy_hcd
[ 1585.593319][T12949] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1585.754417][ T8118] usb 8-1: Using ep0 maxpacket: 32
[ 1585.754833][T12949] usb 6-1: Using ep0 maxpacket: 32
[ 1585.765254][ T8118] usb 8-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1585.766646][T12949] usb 6-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1585.768039][ T8118] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[ 1585.768109][ T8118] usb 8-1: config 0 has no interface number 0
[ 1585.787007][T12949] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1585.815825][T12949] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1585.815850][T12949] usb 6-1: Product: syz
[ 1585.815870][T12949] usb 6-1: Manufacturer: syz
[ 1585.815888][T12949] usb 6-1: SerialNumber: syz
[ 1585.819716][T12949] usb 6-1: config 0 descriptor??
[ 1585.820787][T20078] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1585.865688][T12949] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1585.865713][T12949] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1585.871322][ T8118] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1585.871347][ T8118] usb 8-1: Product: syz
[ 1585.871365][ T8118] usb 8-1: Manufacturer: syz
[ 1585.871382][ T8118] usb 8-1: SerialNumber: syz
[ 1585.900731][ T8118] usb 8-1: config 0 descriptor??
[ 1586.250058][    C1] net_ratelimit: 58 callbacks suppressed
[ 1586.306444][   T33] usb 9-1: USB disconnect, device number 43
[ 1586.348779][ T8118] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1586.348830][ T8118] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1586.454681][T20090] 0x000000000000-0x000000010000 : ""
[ 1586.481893][T20090] ftl_cs: FTL header not found.
[ 1586.559923][ T8118] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1586.560295][ T8118] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32
[ 1587.494613][ T1400] raw-gadget.2 gadget.5: failed to queue suspend event
[ 1587.572038][T20078] raw-gadget.2 gadget.5: failed to queue resume event
[ 1587.627506][ T1400] raw-gadget.2 gadget.5: failed to queue suspend event
[ 1587.734868][T20078] raw-gadget.2 gadget.5: failed to queue resume event
[ 1587.759814][ T1400] raw-gadget.2 gadget.5: failed to queue suspend event
[ 1587.822340][T20078] raw-gadget.2 gadget.5: failed to queue resume event
[ 1587.850092][ T6642] raw-gadget.2 gadget.5: failed to queue suspend event
[ 1587.912590][T20078] raw-gadget.2 gadget.5: failed to queue resume event
[ 1587.952948][  T989] raw-gadget.2 gadget.5: failed to queue suspend event
[ 1588.022821][T20078] raw-gadget.2 gadget.5: failed to queue resume event
[ 1588.053689][  T989] raw-gadget.2 gadget.5: failed to queue suspend event
[ 1588.074079][T12949] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1588.160101][T20078] raw-gadget.2 gadget.5: failed to queue resume event
[ 1588.190475][ T6642] raw-gadget.2 gadget.5: failed to queue suspend event
[ 1588.242844][T12949] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1588.242901][T12949] usb 9-1: too many configurations: 87, using maximum allowed: 8
[ 1588.268930][T20078] raw-gadget.2 gadget.5: failed to queue resume event
[ 1588.297204][ T6642] raw-gadget.2 gadget.5: failed to queue suspend event
[ 1588.297264][T12949] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.297287][T12949] usb 9-1: Product: syz
[ 1588.297301][T12949] usb 9-1: Manufacturer: syz
[ 1588.297315][T12949] usb 9-1: SerialNumber: syz
[ 1588.421893][T20078] raw-gadget.2 gadget.5: failed to queue resume event
[ 1588.446882][T15015] raw-gadget.2 gadget.5: failed to queue suspend event
[ 1588.474894][   T33] usb 8-1: USB disconnect, device number 56
[ 1588.613765][T20144] overlayfs: failed to clone upperpath
[ 1588.630713][T20144] overlayfs: missing 'workdir'
[ 1588.649971][T20078] raw-gadget.2 gadget.5: failed to queue disconnect event
[ 1588.707256][ T5787] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1588.752336][T12949] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1588.754690][ T8691] usb 6-1: USB disconnect, device number 34
[ 1588.766867][T12949] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1588.866738][T12949] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1588.892581][ T5787] usb 3-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00
[ 1588.898127][ T5787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1588.898160][ T5787] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1588.898226][ T5787] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1588.923329][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.923434][ T5787] usb 3-1: Product: syz
[ 1588.923479][ T5787] usb 3-1: Manufacturer: syz
[ 1588.923529][ T5787] usb 3-1: SerialNumber: syz
[ 1588.942381][T12949] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32
[ 1588.988254][T20150] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1589.005684][T20140] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1589.005849][T20140] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1589.117663][ T5787] ims_pcu 3-1:1.1: Control endpoint is not INTERRUPT IN
[ 1589.117698][ T5787] ims_pcu 3-1:1.1: probe with driver ims_pcu failed with error -22
[ 1589.167818][T20155] md: could not open device unknown-block(1,1).
[ 1589.220532][ T8118] usb 3-1: USB disconnect, device number 41
[ 1590.341761][ T8118] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1590.509623][ T8118] usb 3-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1590.522475][ T8118] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1590.522529][ T8118] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1590.522560][ T8118] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1590.522586][ T8118] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1590.522659][ T8118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1590.687743][ T8118] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1590.697356][ T8118] usb 3-1: invalid MIDI out EP 0
[ 1591.101929][   T11] usb 9-1: USB disconnect, device number 44
[ 1591.369525][    C0] net_ratelimit: 62 callbacks suppressed
[ 1591.432157][ T8691] usb 8-1: new high-speed USB device number 57 using dummy_hcd
[ 1591.600930][ T8118] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1591.611103][ T8691] usb 8-1: Using ep0 maxpacket: 32
[ 1591.639215][ T8691] usb 8-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1591.639691][ T8118] usb 3-1: USB disconnect, device number 42
[ 1591.660838][ T8691] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1591.679502][ T8691] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1591.679527][ T8691] usb 8-1: Product: syz
[ 1591.679544][ T8691] usb 8-1: Manufacturer: syz
[ 1591.679562][ T8691] usb 8-1: SerialNumber: syz
[ 1591.742346][ T8691] usb 8-1: config 0 descriptor??
[ 1591.750421][T20202] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1591.775673][ T8691] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1591.775698][ T8691] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1593.287259][   T54] raw-gadget.0 gadget.7: failed to queue suspend event
[ 1593.403918][T20202] raw-gadget.0 gadget.7: failed to queue resume event
[ 1593.434757][   T54] raw-gadget.0 gadget.7: failed to queue suspend event
[ 1593.531091][T20202] raw-gadget.0 gadget.7: failed to queue resume event
[ 1593.570867][  T981] raw-gadget.0 gadget.7: failed to queue suspend event
[ 1593.674444][T20202] raw-gadget.0 gadget.7: failed to queue resume event
[ 1593.697474][  T981] raw-gadget.0 gadget.7: failed to queue suspend event
[ 1593.799651][T20202] raw-gadget.0 gadget.7: failed to queue resume event
[ 1593.801842][ T8118] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1593.866211][ T1400] raw-gadget.0 gadget.7: failed to queue suspend event
[ 1593.942784][T20202] raw-gadget.0 gadget.7: failed to queue resume event
[ 1593.970156][ T8118] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1593.970200][ T8118] usb 9-1: too many configurations: 87, using maximum allowed: 8
[ 1594.031561][   T54] raw-gadget.0 gadget.7: failed to queue suspend event
[ 1594.049930][ T8118] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1594.049955][ T8118] usb 9-1: Product: syz
[ 1594.049973][ T8118] usb 9-1: Manufacturer: syz
[ 1594.049988][ T8118] usb 9-1: SerialNumber: syz
[ 1594.162238][T20202] raw-gadget.0 gadget.7: failed to queue resume event
[ 1594.195935][  T981] raw-gadget.0 gadget.7: failed to queue suspend event
[ 1594.265494][T20202] raw-gadget.0 gadget.7: failed to queue disconnect event
[ 1594.381795][   T11] usb 8-1: USB disconnect, device number 57
[ 1594.558636][ T8118] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1594.559565][ T8118] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1594.560463][ T8118] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1594.617804][ T8118] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32
[ 1595.881566][   T11] libceph: connect (1)127.0.0.1:6789 error -101
[ 1595.885465][   T11] libceph: mon0 (1)127.0.0.1:6789 connect error
[ 1595.901392][   T11] libceph: connect (1)127.0.0.1:6789 error -101
[ 1595.910993][   T11] libceph: mon0 (1)127.0.0.1:6789 connect error
[ 1596.177371][   T11] libceph: connect (1)127.0.0.1:6789 error -101
[ 1596.177618][   T11] libceph: mon0 (1)127.0.0.1:6789 connect error
[ 1596.601411][T20257] ceph: No mds server is up or the cluster is laggy
[ 1596.621851][   T11] usb 9-1: USB disconnect, device number 45
[ 1596.642263][    C1] net_ratelimit: 70 callbacks suppressed
[ 1596.682039][ T8118] libceph: connect (1)127.0.0.1:6789 error -101
[ 1596.682270][ T8118] libceph: mon0 (1)127.0.0.1:6789 connect error
[ 1597.266369][T20210] rxe_eth0 speed is unknown, defaulting to 1000
[ 1597.676052][T20289] use of bytesused == 0 is deprecated and will be removed in the future,
[ 1597.676094][T20289] use the actual size instead.
[ 1597.913003][ T8691] usb 8-1: new high-speed USB device number 58 using dummy_hcd
[ 1598.064205][ T8691] usb 8-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80
[ 1598.065901][ T8691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1598.065934][ T8691] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1598.066000][ T8691] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1598.102631][ T8691] usb 8-1: config 0 descriptor??
[ 1598.705244][T20321] FAULT_INJECTION: forcing a failure.
[ 1598.705244][T20321] name failslab, interval 1, probability 0, space 0, times 0
[ 1598.705283][T20321] CPU: 1 UID: 0 PID: 20321 Comm: syz.5.2528 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1598.705317][T20321] Tainted: [L]=SOFTLOCKUP
[ 1598.705330][T20321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1598.705345][T20321] Call Trace:
[ 1598.705357][T20321]  <TASK>
[ 1598.705370][T20321]  dump_stack_lvl+0xe8/0x150
[ 1598.705420][T20321]  should_fail_ex+0x3eb/0x540
[ 1598.705461][T20321]  should_failslab+0xa8/0x100
[ 1598.705506][T20321]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[ 1598.705541][T20321]  ? __d_alloc+0x37/0x820
[ 1598.705573][T20321]  ? __d_alloc+0x37/0x820
[ 1598.705612][T20321]  __d_alloc+0x37/0x820
[ 1598.705652][T20321]  d_alloc+0x4b/0x190
[ 1598.705689][T20321]  vfs_tmpfile+0x2f2/0xa00
[ 1598.705739][T20321]  kernel_tmpfile_open+0x4d/0x90
[ 1598.705776][T20321]  ovl_get_workdir+0x5ea/0x1980
[ 1598.705909][T20321]  ? __lock_acquire+0x747/0x2de0
[ 1598.705954][T20321]  ? __pfx_ovl_get_workdir+0x10/0x10
[ 1598.705988][T20321]  ? pcpu_memcg_post_alloc_hook+0x8c/0x630
[ 1598.706028][T20321]  ? pcpu_alloc_noprof+0x100f/0x1900
[ 1598.706074][T20321]  ? rcu_is_watching+0x16/0xb0
[ 1598.706129][T20321]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1598.706173][T20321]  ? do_raw_spin_unlock+0xf5/0x200
[ 1598.706203][T20321]  ? _raw_spin_unlock+0x28/0x50
[ 1598.706231][T20321]  ? ovl_inuse_trylock+0x177/0x230
[ 1598.706261][T20321]  ovl_fill_super+0x1671/0x4370
[ 1598.706304][T20321]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1598.706346][T20321]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1598.706394][T20321]  ? __pfx_ovl_fill_super+0x10/0x10
[ 1598.706418][T20321]  ? shrinker_register+0x158/0x210
[ 1598.706450][T20321]  ? sget_fc+0x1b47/0x1ce0
[ 1598.706505][T20321]  ? __pfx_ovl_next_opt+0x10/0x10
[ 1598.706543][T20321]  ? __pfx_ovl_fill_super+0x10/0x10
[ 1598.706570][T20321]  get_tree_nodev+0xbe/0x150
[ 1598.706606][T20321]  vfs_get_tree+0x92/0x2a0
[ 1598.706645][T20321]  do_new_mount+0x325/0xb00
[ 1598.706683][T20321]  ? __pfx_do_new_mount+0x10/0x10
[ 1598.706715][T20321]  ? ns_capable+0x84/0xe0
[ 1598.706751][T20321]  ? path_mount+0x647/0x1050
[ 1598.706784][T20321]  ? user_path_at+0xd4/0x160
[ 1598.706819][T20321]  __se_sys_mount+0x31d/0x420
[ 1598.706857][T20321]  ? __pfx___se_sys_mount+0x10/0x10
[ 1598.706894][T20321]  ? __x64_sys_mount+0x20/0xc0
[ 1598.706928][T20321]  do_syscall_64+0x166/0x520
[ 1598.706957][T20321]  ? trace_irq_disable+0x3b/0x140
[ 1598.706993][T20321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1598.707018][T20321]  ? clear_bhb_loop+0x70/0xc0
[ 1598.707047][T20321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1598.707071][T20321] RIP: 0033:0x7fd7b179f559
[ 1598.707104][T20321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1598.707127][T20321] RSP: 002b:00007fd7b261c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1598.707155][T20321] RAX: ffffffffffffffda RBX: 00007fd7b1a25fa0 RCX: 00007fd7b179f559
[ 1598.707172][T20321] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000
[ 1598.707188][T20321] RBP: 00007fd7b1836b20 R08: 0000200000000580 R09: 0000000000000000
[ 1598.707207][T20321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1598.707221][T20321] R13: 00007fd7b1a26038 R14: 00007fd7b1a25fa0 R15: 00007ffd4a609148
[ 1598.707261][T20321]  </TASK>
[ 1598.893756][ T8691] usbhid 8-1:0.0: can't add hid device: -71
[ 1598.893975][ T8691] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[ 1598.998148][T20321] overlayfs: upper fs does not support tmpfile.
[ 1599.090172][ T8691] usb 8-1: USB disconnect, device number 58
[ 1599.419659][T20332] sctp: [Deprecated]: syz.5.2531 (pid 20332) Use of int in max_burst socket option deprecated.
[ 1599.419659][T20332] Use struct sctp_assoc_value instead
[ 1599.572512][T12949] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1599.723476][T12949] usb 3-1: New USB device found: idVendor=056a, idProduct=0030, bcdDevice=0.00
[ 1599.725095][T12949] usb 3-1: config 0 interface 0 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11
[ 1599.725129][T12949] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1599.725188][T12949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1599.758727][T12949] usb 3-1: config 0 descriptor??
[ 1600.243548][T12949] wacom 0003:056A:0030.0008: ignoring exceeding usage max
[ 1600.246414][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x4
[ 1600.246671][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x0
[ 1600.246699][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x0
[ 1600.246726][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x0
[ 1600.246759][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x0
[ 1600.246787][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x0
[ 1600.246817][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x0
[ 1600.246849][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x0
[ 1600.246875][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x0
[ 1600.246900][T12949] wacom 0003:056A:0030.0008: unknown main item tag 0x0
[ 1600.422533][T12949] wacom 0003:056A:0030.0008: hidraw0: USB HID v0.81 Device [HID 056a:0030] on usb-dummy_hcd.2-1/input0
[ 1600.472731][T12949] usb 3-1: USB disconnect, device number 43
[ 1600.632517][ T5787] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1600.797181][ T5787] usb 9-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1600.797227][ T5787] usb 9-1: too many configurations: 87, using maximum allowed: 8
[ 1600.862276][ T5787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1600.862302][ T5787] usb 9-1: Product: syz
[ 1600.862320][ T5787] usb 9-1: Manufacturer: syz
[ 1600.862337][ T5787] usb 9-1: SerialNumber: syz
[ 1601.027947][T20355] rxe_eth0 speed is unknown, defaulting to 1000
[ 1601.066749][T20359] fido_id[20359]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1601.346718][ T5787] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1601.363393][ T5787] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1601.374956][ T5787] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1601.384631][ T8118] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1601.420496][ T5787] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -32
[ 1601.567418][ T8118] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1601.567476][ T8118] usb 3-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40
[ 1601.582131][ T8118] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1601.582206][ T8118] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1601.683876][ T8118] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[ 1601.683917][ T8118] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[ 1601.683963][ T8118] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1601.683996][ T8118] usb 3-1: config 1 interface 1 has no altsetting 0
[ 1601.728858][ T8118] usb 3-1: string descriptor 0 read error: -22
[ 1601.729362][ T8118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1601.911705][    C1] net_ratelimit: 124 callbacks suppressed
[ 1602.296543][T20395] fuse: Bad value for 'fd'
[ 1602.463397][ T8118] usb 3-1: 2:0: failed to get current value for ch 1 (-71)
[ 1602.918641][ T8118] usb 3-1: USB disconnect, device number 44
[ 1603.060570][ T5651] Bluetooth: hci1: unexpected event for opcode 0x202a
[ 1603.207414][T20421] macvlan1: entered allmulticast mode
[ 1603.224622][T20421] veth1_vlan: entered allmulticast mode
[ 1603.224761][T20421] macvlan1: entered promiscuous mode
[ 1605.042289][ T5787] usb 9-1: USB disconnect, device number 46
[ 1605.396033][T20441] fuse: Bad value for 'fd'
[ 1605.814657][T20455] FAULT_INJECTION: forcing a failure.
[ 1605.814657][T20455] name failslab, interval 1, probability 0, space 0, times 0
[ 1605.814701][T20455] CPU: 1 UID: 0 PID: 20455 Comm: syz.8.2561 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1605.814733][T20455] Tainted: [L]=SOFTLOCKUP
[ 1605.814743][T20455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1605.814758][T20455] Call Trace:
[ 1605.814768][T20455]  <TASK>
[ 1605.814779][T20455]  dump_stack_lvl+0xe8/0x150
[ 1605.814841][T20455]  should_fail_ex+0x3eb/0x540
[ 1605.814878][T20455]  should_failslab+0xa8/0x100
[ 1605.814920][T20455]  __kmalloc_noprof+0xf9/0x710
[ 1605.814948][T20455]  ? rcu_is_watching+0x16/0xb0
[ 1605.814982][T20455]  ? tomoyo_realpath_from_path+0xf2/0x640
[ 1605.815008][T20455]  ? tomoyo_realpath_from_path+0xf2/0x640
[ 1605.815038][T20455]  tomoyo_realpath_from_path+0xf2/0x640
[ 1605.815075][T20455]  tomoyo_mount_permission+0x3e9/0x9e0
[ 1605.815109][T20455]  ? tomoyo_mount_permission+0x2b5/0x9e0
[ 1605.815147][T20455]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 1605.815180][T20455]  ? kasan_save_track+0x4f/0x80
[ 1605.815260][T20455]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1605.815292][T20455]  security_sb_mount+0xe4/0x320
[ 1605.815331][T20455]  path_mount+0xbc/0x1050
[ 1605.815363][T20455]  ? user_path_at+0xd4/0x160
[ 1605.815398][T20455]  __se_sys_mount+0x31d/0x420
[ 1605.815431][T20455]  ? __pfx___se_sys_mount+0x10/0x10
[ 1605.815484][T20455]  ? __x64_sys_mount+0x20/0xc0
[ 1605.815540][T20455]  do_syscall_64+0x166/0x520
[ 1605.815573][T20455]  ? trace_irq_disable+0x3b/0x140
[ 1605.815606][T20455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1605.815631][T20455]  ? clear_bhb_loop+0x70/0xc0
[ 1605.815659][T20455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1605.815682][T20455] RIP: 0033:0x7f0158d9f559
[ 1605.815706][T20455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1605.815728][T20455] RSP: 002b:00007f0159b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1605.815755][T20455] RAX: ffffffffffffffda RBX: 00007f0159025fa0 RCX: 00007f0158d9f559
[ 1605.815774][T20455] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000000000000000
[ 1605.815791][T20455] RBP: 00007f0158e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1605.815807][T20455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1605.815821][T20455] R13: 00007f0159026038 R14: 00007f0159025fa0 R15: 00007ffda2c95dd8
[ 1605.815859][T20455]  </TASK>
[ 1605.815936][T20455] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1606.099040][T20455] 0x000000000000-0x000000010000 : ""
[ 1606.138375][T20455] ftl_cs: FTL header not found.
[ 1606.262880][T20461] bond1: option mode: unable to set because the bond device has slaves
[ 1606.783841][ T5787] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1606.943136][ T5787] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1606.943187][ T5787] usb 6-1: too many configurations: 87, using maximum allowed: 8
[ 1606.988733][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1606.988758][ T5787] usb 6-1: Product: syz
[ 1606.988775][ T5787] usb 6-1: Manufacturer: syz
[ 1606.988794][ T5787] usb 6-1: SerialNumber: syz
[ 1607.088230][ T5651] Bluetooth: hci3: unexpected event for opcode 0x202a
[ 1607.111698][    C1] net_ratelimit: 57 callbacks suppressed
[ 1607.254179][T20486] fuse: Bad value for 'fd'
[ 1607.434293][ T5787] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1607.434382][ T5787] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1609.762120][ T5787] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1609.765126][ T5787] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1609.799839][ T5787] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[ 1609.971054][T20509] bond1: option mode: unable to set because the bond device has slaves
[ 1609.983765][T20497] rxe_eth0 speed is unknown, defaulting to 1000
[ 1610.041791][   T11] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1610.192902][   T11] usb 3-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[ 1610.194604][   T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1610.197081][   T11] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[ 1610.197106][   T11] usb 3-1: Product: syz
[ 1610.197123][   T11] usb 3-1: Manufacturer: syz
[ 1610.263414][   T11] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4)
[ 1610.263517][   T11] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770.
[ 1610.516096][ T5787] usb 3-1: USB disconnect, device number 45
[ 1610.637015][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1610.637072][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1610.811340][T12949] usb 6-1: USB disconnect, device number 35
[ 1610.843107][   T11] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1610.992166][   T11] usb 9-1: Using ep0 maxpacket: 32
[ 1610.993204][   T11] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1610.994652][   T11] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1610.998573][   T11] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1610.998599][   T11] usb 9-1: Product: syz
[ 1610.998616][   T11] usb 9-1: Manufacturer: syz
[ 1610.998634][   T11] usb 9-1: SerialNumber: syz
[ 1611.053135][   T11] usb 9-1: config 0 descriptor??
[ 1611.055402][T20525] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1611.058957][   T11] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1611.058981][   T11] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1611.495642][T20544] fuse: Invalid rootmode
[ 1611.694592][T20551] ceph: No source
[ 1612.075413][  T981] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1612.174219][T20525] raw-gadget.1 gadget.8: failed to queue resume event
[ 1612.183315][ T5787] usb 8-1: new high-speed USB device number 59 using dummy_hcd
[ 1612.218647][  T981] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1612.221874][   T33] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[ 1612.295108][T20539] raw-gadget.1 gadget.8: failed to queue resume event
[ 1612.341522][ T1400] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1612.366845][ T5787] usb 8-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1612.368331][ T5787] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1612.368412][ T5787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.412373][ T5787] usb 8-1: config 0 descriptor??
[ 1612.426450][T20525] raw-gadget.1 gadget.8: failed to queue resume event
[ 1612.428718][   T33] usb 3-1: New USB device found: idVendor=0457, idProduct=07da, bcdDevice=0.00
[ 1612.435624][   T33] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1612.435696][   T33] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1612.435767][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.496173][  T981] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1612.535731][ T5787] pwc: Askey VC010 type 2 USB webcam detected.
[ 1612.551931][    C0] net_ratelimit: 82 callbacks suppressed
[ 1612.567016][   T33] usb 3-1: config 0 descriptor??
[ 1612.577543][T20525] raw-gadget.1 gadget.8: failed to queue resume event
[ 1612.615176][ T3330] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1612.616651][T20569] bond1: option mode: unable to set because the bond device has slaves
[ 1612.652961][   T33] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1612.696915][T20539] raw-gadget.1 gadget.8: failed to queue resume event
[ 1612.743720][  T981] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1612.864273][T20525] raw-gadget.1 gadget.8: failed to queue resume event
[ 1612.878965][ T5787] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1612.909450][ T3330] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1612.919313][ T5787] pwc: recv_control_msg error -32 req 02 val 2700
[ 1612.935411][ T5787] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1612.938617][ T5787] pwc: recv_control_msg error -32 req 04 val 1000
[ 1612.944003][ T5787] pwc: recv_control_msg error -32 req 04 val 1300
[ 1612.971843][T20525] raw-gadget.1 gadget.8: failed to queue resume event
[ 1612.982518][ T5787] pwc: recv_control_msg error -32 req 04 val 1400
[ 1612.987619][ T5787] pwc: recv_control_msg error -32 req 02 val 2000
[ 1612.988697][ T5787] pwc: recv_control_msg error -32 req 02 val 2100
[ 1613.005012][ T5787] pwc: recv_control_msg error -32 req 04 val 1500
[ 1613.019571][ T5787] pwc: recv_control_msg error -32 req 02 val 2500
[ 1613.100368][ T3330] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1613.162198][T20539] raw-gadget.1 gadget.8: failed to queue resume event
[ 1613.213130][T14379] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1613.230917][ T5787] pwc: recv_control_msg error -71 req 02 val 2600
[ 1613.246686][ T5787] pwc: recv_control_msg error -71 req 02 val 2900
[ 1613.247297][ T5787] pwc: recv_control_msg error -71 req 02 val 2800
[ 1613.249280][ T5787] pwc: recv_control_msg error -71 req 04 val 1100
[ 1613.250714][ T5787] pwc: recv_control_msg error -71 req 04 val 1200
[ 1613.285002][T20539] raw-gadget.1 gadget.8: failed to queue resume event
[ 1613.290144][ T5787] pwc: Registered as video103.
[ 1613.310916][ T5787] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input23
[ 1613.335820][ T5787] usb 8-1: USB disconnect, device number 59
[ 1613.368089][ T1400] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1613.449070][T20525] raw-gadget.1 gadget.8: failed to queue resume event
[ 1613.475699][ T3330] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1613.547476][T20539] raw-gadget.1 gadget.8: failed to queue resume event
[ 1613.565320][  T981] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1613.647304][T20525] raw-gadget.1 gadget.8: failed to queue resume event
[ 1613.664900][T14379] raw-gadget.1 gadget.8: failed to queue suspend event
[ 1613.691835][   T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 1613.718040][T20525] raw-gadget.1 gadget.8: failed to queue disconnect event
[ 1613.842128][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 1613.848395][   T10] usb 6-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1613.876659][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1613.876688][   T10] usb 6-1: Product: syz
[ 1613.876706][   T10] usb 6-1: Manufacturer: syz
[ 1613.876726][   T10] usb 6-1: SerialNumber: syz
[ 1613.911099][   T10] usb 6-1: config 0 descriptor??
[ 1613.929055][   T10] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1614.025019][ T5787] usb 9-1: reset high-speed USB device number 47 using dummy_hcd
[ 1614.044877][ T5787] usb 9-1: device reset changed ep0 maxpacket size!
[ 1614.097045][ T5787] usb 9-1: USB disconnect, device number 47
[ 1614.325330][T20599] fuse: fd is not a fuse device
[ 1614.473107][ T5787] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1614.625485][ T5787] usb 9-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=b3.a4
[ 1614.627088][ T5787] usb 9-1: config 255 has an invalid interface number: 122 but max is 0
[ 1614.627115][ T5787] usb 9-1: config 255 has no interface number 0
[ 1614.627147][ T5787] usb 9-1: config 255 interface 122 has no altsetting 0
[ 1614.641549][ T5787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1614.641574][ T5787] usb 9-1: Product: syz
[ 1614.641668][ T5787] usb 9-1: Manufacturer: syz
[ 1614.641686][ T5787] usb 9-1: SerialNumber: syz
[ 1614.770940][T20611] bond1: option mode: unable to set because the bond device has slaves
[ 1614.882604][   T33] usb 8-1: new high-speed USB device number 60 using dummy_hcd
[ 1614.908043][T20615] overlayfs: failed to clone upperpath
[ 1614.944847][T12949] usb 3-1: USB disconnect, device number 46
[ 1615.041718][   T33] usb 8-1: Using ep0 maxpacket: 32
[ 1615.045667][   T33] usb 8-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1615.048717][   T33] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1615.048754][   T33] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1615.048833][   T33] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1615.048858][   T33] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1615.048887][   T33] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1615.142209][   T33] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.142235][   T33] usb 8-1: Product: syz
[ 1615.142251][   T33] usb 8-1: Manufacturer: syz
[ 1615.142278][   T33] usb 8-1: SerialNumber: syz
[ 1615.151821][   T33] usb 8-1: config 0 descriptor??
[ 1615.186120][   T10] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71
[ 1615.240330][   T10] usb 6-1: USB disconnect, device number 36
[ 1615.464000][   T11] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1615.577918][   T33] iforce 8-1:0.0: usb_submit_urb failed: -32
[ 1615.577974][   T33] input input24: Device does not respond to id packet M
[ 1615.579830][   T33] iforce 8-1:0.0: usb_submit_urb failed: -32
[ 1615.579885][   T33] input input24: Device does not respond to id packet P
[ 1615.580745][   T33] iforce 8-1:0.0: usb_submit_urb failed: -32
[ 1615.580778][   T33] input input24: Device does not respond to id packet B
[ 1615.581507][   T33] iforce 8-1:0.0: usb_submit_urb failed: -32
[ 1615.620873][   T11] usb 3-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00
[ 1615.623624][   T33] input input24: Device does not respond to id packet N
[ 1615.630881][   T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1615.630970][   T11] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1615.640184][   T33] iforce 8-1:0.0: usb_submit_urb failed: -71
[ 1615.676152][   T33] iforce 8-1:0.0: usb_submit_urb failed: -71
[ 1615.683728][   T33] iforce 8-1:0.0: usb_submit_urb failed: -71
[ 1615.685027][   T33] iforce 8-1:0.0: usb_submit_urb failed: -71
[ 1615.689269][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.689293][   T11] usb 3-1: Product: syz
[ 1615.689310][   T11] usb 3-1: Manufacturer: syz
[ 1615.689328][   T11] usb 3-1: SerialNumber: syz
[ 1615.690758][   T33] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input24
[ 1615.790480][ T5787] usb 9-1: f81604_read: reg: 100f failed: -EPROTO
[ 1615.810298][   T33] usb 8-1: USB disconnect, device number 60
[ 1615.842409][ T5787] usb 9-1: f81604_read: reg: 200f failed: -EPROTO
[ 1615.859714][ T5787] usb 9-1: USB disconnect, device number 48
[ 1615.875618][ T5787] usb 9-1: f81604_read: reg: 100f failed: -ENODEV
[ 1615.997095][ T5787] usb 9-1: f81604_read: reg: 200f failed: -ENODEV
[ 1616.050023][   T11] kaweth 3-1:1.0: Firmware present in device.
[ 1616.189435][   T11] kaweth 3-1:1.0: Error reading configuration (-32), no net device created
[ 1616.189697][   T11] kaweth 3-1:1.0: probe with driver kaweth failed with error -5
[ 1616.234446][   T11] usb 3-1: USB disconnect, device number 47
[ 1616.657779][T20648] fuse: Invalid rootmode
[ 1616.845459][T14379] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1617.171809][   T11] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1617.335103][   T11] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1617.335171][   T11] usb 3-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40
[ 1617.336653][   T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1617.336681][   T11] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1617.336799][   T11] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[ 1617.336846][   T11] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[ 1617.336896][   T11] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1617.336933][   T11] usb 3-1: config 1 interface 1 has no altsetting 0
[ 1617.340509][   T11] usb 3-1: string descriptor 0 read error: -22
[ 1617.340675][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1617.672714][  T981] net_ratelimit: 75 callbacks suppressed
[ 1617.836474][   T11] usb 3-1: 2:0: cannot get RANGE values for control 2 (id 2)
[ 1617.836504][   T11] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[ 1617.836525][   T11] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[ 1617.973331][T19545] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1617.997940][T19545] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1617.999341][T19545] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1618.019802][T19545] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1618.029397][T19545] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1618.367136][   T11] usb 3-1: 2:0: cannot get RANGE values for control 2 (id 2)
[ 1618.458233][   T11] usb 3-1: 2:0: cannot get RANGE values for control 2 (id 2)
[ 1618.566706][   T11] usb 3-1: USB disconnect, device number 48
[ 1618.873712][ T8883] Bluetooth: hci0: command 0x1003 tx timeout
[ 1618.873868][ T5651] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1619.075663][T20680] FAULT_INJECTION: forcing a failure.
[ 1619.075663][T20680] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1619.075712][T20680] CPU: 0 UID: 0 PID: 20680 Comm: syz.2.2613 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1619.075748][T20680] Tainted: [L]=SOFTLOCKUP
[ 1619.075757][T20680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1619.075773][T20680] Call Trace:
[ 1619.075784][T20680]  <TASK>
[ 1619.075797][T20680]  dump_stack_lvl+0xe8/0x150
[ 1619.075847][T20680]  should_fail_ex+0x3eb/0x540
[ 1619.075885][T20680]  _copy_to_user+0x31/0xb0
[ 1619.075922][T20680]  dma_heap_ioctl+0x590/0x6d0
[ 1619.076022][T20680]  ? __pfx_dma_heap_ioctl+0x10/0x10
[ 1619.076081][T20680]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1619.076122][T20680]  ? __pfx_dma_heap_ioctl+0x10/0x10
[ 1619.076159][T20680]  __se_sys_ioctl+0xfc/0x170
[ 1619.076203][T20680]  do_syscall_64+0x166/0x520
[ 1619.076234][T20680]  ? trace_irq_disable+0x3b/0x140
[ 1619.076270][T20680]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1619.076295][T20680]  ? clear_bhb_loop+0x70/0xc0
[ 1619.076325][T20680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1619.076350][T20680] RIP: 0033:0x7f810499f559
[ 1619.076375][T20680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1619.076397][T20680] RSP: 002b:00007f8105805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1619.076425][T20680] RAX: ffffffffffffffda RBX: 00007f8104c25fa0 RCX: 00007f810499f559
[ 1619.076444][T20680] RDX: 00002000000108c0 RSI: 000000004008af00 RDI: 0000000000000005
[ 1619.076461][T20680] RBP: 00007f8104a36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1619.076477][T20680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1619.076492][T20680] R13: 00007f8104c26038 R14: 00007f8104c25fa0 R15: 00007ffcd714b5f8
[ 1619.076530][T20680]  </TASK>
[ 1619.726563][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2616'.
[ 1619.726589][T20701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2616'.
[ 1619.802666][   T11] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1619.954995][   T11] usb 3-1: Using ep0 maxpacket: 32
[ 1619.955868][   T11] usb 3-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1619.957376][   T11] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1619.957412][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1619.957448][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1619.957479][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1619.957527][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1619.960548][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1619.960577][   T11] usb 3-1: Product: syz
[ 1619.960597][   T11] usb 3-1: Manufacturer: syz
[ 1619.960618][   T11] usb 3-1: SerialNumber: syz
[ 1620.062103][   T11] usb 3-1: config 0 descriptor??
[ 1620.153005][   T10] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 1620.159602][ T5651] Bluetooth: hci5: command tx timeout
[ 1620.322809][   T10] usb 9-1: New USB device found: idVendor=2c42, idProduct=1709, bcdDevice=b3.a4
[ 1620.337480][   T10] usb 9-1: config 255 has an invalid interface number: 122 but max is 0
[ 1620.337511][   T10] usb 9-1: config 255 has no interface number 0
[ 1620.337545][   T10] usb 9-1: config 255 interface 122 has no altsetting 0
[ 1620.383595][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1620.383617][   T10] usb 9-1: Product: syz
[ 1620.383631][   T10] usb 9-1: Manufacturer: syz
[ 1620.383647][   T10] usb 9-1: SerialNumber: syz
[ 1620.501105][   T11] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 1620.501161][   T11] input input25: Device does not respond to id packet M
[ 1620.529226][   T11] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 1620.529288][   T11] input input25: Device does not respond to id packet P
[ 1620.530253][   T11] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 1620.530289][   T11] input input25: Device does not respond to id packet B
[ 1620.559375][   T11] iforce 3-1:0.0: usb_submit_urb failed: -32
[ 1620.559579][   T11] input input25: Device does not respond to id packet N
[ 1620.572998][   T11] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1620.574457][   T11] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1620.575917][   T11] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1620.576616][   T11] iforce 3-1:0.0: usb_submit_urb failed: -71
[ 1620.630461][   T11] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25
[ 1620.657221][   T11] usb 3-1: USB disconnect, device number 49
[ 1621.367264][T20712] fuse: Bad value for 'rootmode'
[ 1621.890599][ T5787] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1622.094867][ T5787] usb 3-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00
[ 1622.109003][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1622.109095][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1622.118267][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1622.118330][ T5787] usb 3-1: Product: syz
[ 1622.118386][ T5787] usb 3-1: Manufacturer: syz
[ 1622.118435][ T5787] usb 3-1: SerialNumber: syz
[ 1622.233667][ T5651] Bluetooth: hci5: command tx timeout
[ 1622.275422][T20720] FAULT_INJECTION: forcing a failure.
[ 1622.275422][T20720] name failslab, interval 1, probability 0, space 0, times 0
[ 1622.275461][T20720] CPU: 1 UID: 0 PID: 20720 Comm: syz.8.2623 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1622.275505][T20720] Tainted: [L]=SOFTLOCKUP
[ 1622.275517][T20720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1622.275536][T20720] Call Trace:
[ 1622.275548][T20720]  <TASK>
[ 1622.275561][T20720]  dump_stack_lvl+0xe8/0x150
[ 1622.275615][T20720]  should_fail_ex+0x3eb/0x540
[ 1622.275658][T20720]  should_failslab+0xa8/0x100
[ 1622.275706][T20720]  __kmalloc_noprof+0xf9/0x710
[ 1622.275750][T20720]  ? __get_acl+0xa5/0x410
[ 1622.275789][T20720]  ? security_inode_init_security+0x102/0x3e0
[ 1622.275820][T20720]  ? security_inode_init_security+0x102/0x3e0
[ 1622.275860][T20720]  security_inode_init_security+0x102/0x3e0
[ 1622.275893][T20720]  ? __pfx_shmem_initxattrs+0x10/0x10
[ 1622.275932][T20720]  ? __pfx_security_inode_init_security+0x10/0x10
[ 1622.275962][T20720]  ? set_cached_acl+0xd2/0x180
[ 1622.276006][T20720]  ? simple_acl_create+0x184/0x1b0
[ 1622.276042][T20720]  shmem_mknod+0x1ea/0x340
[ 1622.276078][T20720]  vfs_create+0x2f4/0x4a0
[ 1622.276127][T20720]  ovl_do_create+0x81/0xf0
[ 1622.276170][T20720]  ovl_create_real+0x1a8/0x730
[ 1622.276217][T20720]  ovl_create_temp+0x169/0x240
[ 1622.276259][T20720]  ? __pfx_ovl_create_temp+0x10/0x10
[ 1622.276300][T20720]  ? __fput_deferred+0x222/0x390
[ 1622.276334][T20720]  ? __pfx___fput_deferred+0x10/0x10
[ 1622.276381][T20720]  ovl_get_workdir+0x73a/0x1980
[ 1622.276413][T20720]  ? __lock_acquire+0x747/0x2de0
[ 1622.276462][T20720]  ? __pfx_ovl_get_workdir+0x10/0x10
[ 1622.276529][T20720]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1622.276573][T20720]  ? do_raw_spin_unlock+0xf5/0x200
[ 1622.276608][T20720]  ? _raw_spin_unlock+0x28/0x50
[ 1622.276639][T20720]  ? ovl_inuse_trylock+0x177/0x230
[ 1622.276674][T20720]  ovl_fill_super+0x1671/0x4370
[ 1622.276725][T20720]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1622.276780][T20720]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1622.276836][T20720]  ? __pfx_ovl_fill_super+0x10/0x10
[ 1622.276865][T20720]  ? shrinker_register+0x158/0x210
[ 1622.276902][T20720]  ? sget_fc+0x1b47/0x1ce0
[ 1622.276965][T20720]  ? __pfx_ovl_next_opt+0x10/0x10
[ 1622.277009][T20720]  ? __pfx_ovl_fill_super+0x10/0x10
[ 1622.277043][T20720]  get_tree_nodev+0xbe/0x150
[ 1622.277086][T20720]  vfs_get_tree+0x92/0x2a0
[ 1622.277129][T20720]  do_new_mount+0x325/0xb00
[ 1622.277173][T20720]  ? __pfx_do_new_mount+0x10/0x10
[ 1622.277210][T20720]  ? ns_capable+0x84/0xe0
[ 1622.277252][T20720]  ? path_mount+0x647/0x1050
[ 1622.277291][T20720]  ? user_path_at+0xd4/0x160
[ 1622.277333][T20720]  __se_sys_mount+0x31d/0x420
[ 1622.277375][T20720]  ? __pfx___se_sys_mount+0x10/0x10
[ 1622.277417][T20720]  ? __x64_sys_mount+0x20/0xc0
[ 1622.277453][T20720]  do_syscall_64+0x166/0x520
[ 1622.277491][T20720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1622.277522][T20720]  ? clear_bhb_loop+0x70/0xc0
[ 1622.277558][T20720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1622.277586][T20720] RIP: 0033:0x7f0158d9f559
[ 1622.277613][T20720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1622.277640][T20720] RSP: 002b:00007f0159b97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1622.277670][T20720] RAX: ffffffffffffffda RBX: 00007f0159025fa0 RCX: 00007f0158d9f559
[ 1622.277693][T20720] RDX: 0000200000000540 RSI: 0000200000000500 RDI: 0000000000000000
[ 1622.277715][T20720] RBP: 00007f0158e36b20 R08: 0000200000000580 R09: 0000000000000000
[ 1622.277736][T20720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1622.277755][T20720] R13: 00007f0159026038 R14: 00007f0159025fa0 R15: 00007ffda2c95dd8
[ 1622.277813][T20720]  </TASK>
[ 1622.642107][ T5787] kaweth 3-1:1.0: Firmware present in device.
[ 1622.691419][ T5787] kaweth 3-1:1.0: Error reading configuration (-32), no net device created
[ 1622.710004][ T5787] kaweth 3-1:1.0: probe with driver kaweth failed with error -5
[ 1622.718130][ T3330] net_ratelimit: 55 callbacks suppressed
[ 1622.736269][ T5787] usb 3-1: USB disconnect, device number 50
[ 1623.387433][T20655] bond1: option mode: unable to set because the bond device has slaves
[ 1623.552203][ T8118] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1623.562988][   T10] usb 9-1: f81604_read: reg: 100f failed: -EPROTO
[ 1623.617298][   T10] usb 9-1: f81604_read: reg: 200f failed: -EPROTO
[ 1623.629884][   T10] usb 9-1: USB disconnect, device number 49
[ 1623.704089][ T8118] usb 3-1: Using ep0 maxpacket: 8
[ 1623.705613][ T8118] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1623.707859][ T8118] usb 3-1: config index 0 descriptor too short (expected 74, got 45)
[ 1623.707937][ T8118] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1623.707969][ T8118] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1623.707999][ T8118] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64
[ 1623.708032][ T8118] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1623.708103][ T8118] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1623.798106][ T8118] usbtmc 3-1:16.0: bulk endpoints not found
[ 1623.814692][   T10] usb 9-1: f81604_read: reg: 100f failed: -ENODEV
[ 1623.833448][ T5651] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1623.975980][   T10] usb 9-1: f81604_read: reg: 200f failed: -ENODEV
[ 1624.101798][ T8691] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 1624.121323][   T11] usb 3-1: USB disconnect, device number 51
[ 1624.166477][T20741] fuse: Bad value for 'rootmode'
[ 1624.282256][ T8691] usb 6-1: Using ep0 maxpacket: 32
[ 1624.284202][ T8691] usb 6-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1624.285675][ T8691] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 1624.285703][ T8691] usb 6-1: config 0 has no interface number 0
[ 1624.313359][ T5651] Bluetooth: hci5: command tx timeout
[ 1624.327839][ T8691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.327862][ T8691] usb 6-1: Product: syz
[ 1624.327878][ T8691] usb 6-1: Manufacturer: syz
[ 1624.327907][ T8691] usb 6-1: SerialNumber: syz
[ 1624.362646][ T8691] usb 6-1: config 0 descriptor??
[ 1624.489916][ T3330] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1624.489955][ T3330] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1624.817491][ T8691] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1624.817528][ T8691] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1624.871043][ T3330] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1624.877392][ T3330] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1625.019920][ T8691] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1625.020180][ T8691] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32
[ 1625.152602][ T3330] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1625.152641][ T3330] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1625.281926][   T10] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1625.389884][T20671] rxe_eth0 speed is unknown, defaulting to 1000
[ 1625.452619][   T10] usb 9-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00
[ 1625.454015][   T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1625.454044][   T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1625.454100][   T10] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1625.456956][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.456979][   T10] usb 9-1: Product: syz
[ 1625.456997][   T10] usb 9-1: Manufacturer: syz
[ 1625.457023][   T10] usb 9-1: SerialNumber: syz
[ 1625.461034][T20758] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1625.461195][T20758] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1625.575244][   T10] ims_pcu 9-1:1.1: Control endpoint is not INTERRUPT IN
[ 1625.575286][   T10] ims_pcu 9-1:1.1: probe with driver ims_pcu failed with error -22
[ 1625.661810][ T5787] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1625.772405][ T8691] usb 9-1: USB disconnect, device number 50
[ 1625.813784][ T5787] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[ 1625.817883][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1625.817914][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1625.817940][ T5787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1625.818009][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1625.904738][ T5787] usb 3-1: config 0 descriptor??
[ 1626.392008][ T5651] Bluetooth: hci5: command tx timeout
[ 1626.444699][ T5787] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd
[ 1626.571739][ T8118] usb 8-1: new high-speed USB device number 61 using dummy_hcd
[ 1626.724122][ T8118] usb 8-1: Using ep0 maxpacket: 16
[ 1626.725432][ T5787] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1626.753717][ T8118] usb 8-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[ 1626.766659][ T8118] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1626.766712][ T8118] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1626.766766][ T8118] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1626.766792][ T8118] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1626.766819][ T8118] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1626.769114][ T8118] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1626.769137][ T8118] usb 8-1: Manufacturer: syz
[ 1626.794277][ T8118] usb 8-1: config 0 descriptor??
[ 1626.913747][   T10] usb 6-1: USB disconnect, device number 37
[ 1627.015192][ T8691] usb 3-1: USB disconnect, device number 52
[ 1627.141736][ T8118] rc_core: IR keymap rc-hauppauge not found
[ 1627.141754][ T8118] Registered IR keymap rc-empty
[ 1627.142054][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.163506][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.208779][T20793] fido_id[20793]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 1627.210445][ T8118] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[ 1627.246244][ T8118] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input27
[ 1627.263935][T20796] fuse: Bad value for 'rootmode'
[ 1627.265011][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.297665][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.337943][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.368600][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.388088][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.402627][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.422135][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.441936][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.462075][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.481902][ T8118] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[ 1627.531252][ T8118] mceusb 8-1:0.0: Registered 42 with mce emulator interface version 1
[ 1627.531302][ T8118] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1627.788823][T12949] usb 8-1: USB disconnect, device number 61
[ 1627.911699][    C0] net_ratelimit: 83 callbacks suppressed
[ 1628.448667][ T5651] Bluetooth: hci4: ACL packet for unknown connection handle 201
[ 1628.470871][ T3330] bond1 (unregistering): (slave macvlan5): Releasing backup interface
[ 1628.497446][ T3330] bond0 (unregistering): Released all slaves
[ 1628.527740][ T3330] bond1 (unregistering): Released all slaves
[ 1628.594396][ T3330] bond2 (unregistering): Released all slaves
[ 1628.697550][ T3330] bond3 (unregistering): Released all slaves
[ 1629.412027][   T33] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1629.434216][ T3330] IPVS: stopping backup sync thread 15359 ...
[ 1629.582482][   T33] usb 9-1: Using ep0 maxpacket: 32
[ 1629.589496][   T33] usb 9-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1629.591084][   T33] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1629.616615][   T33] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1629.616641][   T33] usb 9-1: Product: syz
[ 1629.616658][   T33] usb 9-1: Manufacturer: syz
[ 1629.616673][   T33] usb 9-1: SerialNumber: syz
[ 1629.620308][   T33] usb 9-1: config 0 descriptor??
[ 1629.621446][T20828] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1629.666424][   T33] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1629.666449][   T33] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1629.971725][T12949] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1630.122416][T12949] usb 3-1: Using ep0 maxpacket: 32
[ 1630.123711][T12949] usb 3-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1630.125283][T12949] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1630.125307][T12949] usb 3-1: config 0 has no interface number 0
[ 1630.128364][T12949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1630.128387][T12949] usb 3-1: Product: syz
[ 1630.128405][T12949] usb 3-1: Manufacturer: syz
[ 1630.128421][T12949] usb 3-1: SerialNumber: syz
[ 1630.169771][T12949] usb 3-1: config 0 descriptor??
[ 1630.240758][T20843] fuse: Unknown parameter 'use00000000000000000000'
[ 1630.623331][T12949] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1630.623361][T12949] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1630.825161][T12949] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1630.825487][T12949] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32
[ 1630.862080][ T8659] usb 8-1: new high-speed USB device number 62 using dummy_hcd
[ 1631.011985][ T8659] usb 8-1: Using ep0 maxpacket: 32
[ 1631.014205][ T8659] usb 8-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1631.019071][ T8659] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[ 1631.019099][ T8659] usb 8-1: config 0 has no interface number 0
[ 1631.049184][ T8659] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1631.049239][ T8659] usb 8-1: Product: syz
[ 1631.049282][ T8659] usb 8-1: Manufacturer: syz
[ 1631.049324][ T8659] usb 8-1: SerialNumber: syz
[ 1631.141383][ T8659] usb 8-1: config 0 descriptor??
[ 1631.168020][ T8659] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1631.418616][ T8659] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1631.487131][ T8659] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1631.804770][    C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1631.812834][T12949] usb 8-1: USB disconnect, device number 62
[ 1631.970261][T12949] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1632.078895][T12949] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1632.094583][T12949] quatech2 8-1:0.51: device disconnected
[ 1632.154234][ T3330] hsr_slave_0: left promiscuous mode
[ 1632.156842][ T3330] hsr_slave_1: left promiscuous mode
[ 1632.236686][ T3330] veth1_macvtap: left promiscuous mode
[ 1632.236730][ T3330] veth0_macvtap: left promiscuous mode
[ 1632.236871][ T3330] veth1_vlan: left promiscuous mode
[ 1632.237114][ T3330] veth0_vlan: left promiscuous mode
[ 1632.776305][ T8691] usb 3-1: USB disconnect, device number 53
[ 1632.811714][T12949] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1632.953263][ T6642] net_ratelimit: 49 callbacks suppressed
[ 1632.964022][T12949] usb 6-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[ 1632.967438][T12949] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.972512][T12949] usb 6-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[ 1632.972571][T12949] usb 6-1: Product: syz
[ 1632.972610][T12949] usb 6-1: Manufacturer: syz
[ 1633.025467][T12949] uvcvideo 6-1:1.0: Found UVC 1.00 device syz (225a:e1d4)
[ 1633.211031][T12949] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[ 1633.222880][T12949] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[ 1633.224736][T12949] uvcvideo 6-1:1.1: Failed to initialize the device (-71).
[ 1633.253737][T12949] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71
[ 1633.303289][T12949] usb 6-1: USB disconnect, device number 38
[ 1633.696015][T20671] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1633.700023][T20671] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1633.700568][T20671] bridge_slave_0: entered allmulticast mode
[ 1633.718627][T20671] bridge_slave_0: entered promiscuous mode
[ 1633.734984][T20671] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1633.735094][T20671] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1633.735268][T20671] bridge_slave_1: entered allmulticast mode
[ 1633.751365][T20671] bridge_slave_1: entered promiscuous mode
[ 1633.773636][   T33] usb 9-1: USB disconnect, device number 51
[ 1634.127288][T20894] FAULT_INJECTION: forcing a failure.
[ 1634.127288][T20894] name failslab, interval 1, probability 0, space 0, times 0
[ 1634.127325][T20894] CPU: 1 UID: 0 PID: 20894 Comm: syz.7.2658 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1634.127381][T20894] Tainted: [L]=SOFTLOCKUP
[ 1634.127391][T20894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1634.127407][T20894] Call Trace:
[ 1634.127429][T20894]  <TASK>
[ 1634.127440][T20894]  dump_stack_lvl+0xe8/0x150
[ 1634.127487][T20894]  should_fail_ex+0x3eb/0x540
[ 1634.127521][T20894]  should_failslab+0xa8/0x100
[ 1634.127560][T20894]  __kmalloc_cache_noprof+0x9e/0x600
[ 1634.127608][T20894]  ? snd_seq_queue_alloc+0x5d/0x740
[ 1634.127693][T20894]  ? snd_seq_queue_alloc+0x5d/0x740
[ 1634.127719][T20894]  ? snd_seq_ioctl_create_port+0x769/0x980
[ 1634.127759][T20894]  snd_seq_queue_alloc+0x5d/0x740
[ 1634.127783][T20894]  ? __pfx_snd_seq_ioctl_create_port+0x10/0x10
[ 1634.127821][T20894]  snd_seq_ioctl_create_queue+0x7f/0x3c0
[ 1634.127859][T20894]  snd_seq_oss_open+0x657/0xf80
[ 1634.127900][T20894]  ? __pfx_snd_seq_oss_open+0x10/0x10
[ 1634.127979][T20894]  ? rcu_is_watching+0x16/0xb0
[ 1634.128017][T20894]  ? trace_contention_end+0x3d/0x140
[ 1634.128083][T20894]  ? __pfx___mutex_lock+0x10/0x10
[ 1634.128121][T20894]  ? __pfx_snd_seq_oss_event_input+0x10/0x10
[ 1634.128156][T20894]  ? __pfx_free_devinfo+0x10/0x10
[ 1634.128187][T20894]  ? do_raw_spin_unlock+0xf5/0x200
[ 1634.128217][T20894]  ? soundcore_open+0x2da/0x490
[ 1634.128255][T20894]  odev_open+0x67/0xa0
[ 1634.128287][T20894]  chrdev_open+0x4d9/0x600
[ 1634.128314][T20894]  ? __pfx_chrdev_open+0x10/0x10
[ 1634.128337][T20894]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 1634.128374][T20894]  ? devcgroup_check_permission+0x31/0x8f0
[ 1634.128409][T20894]  ? __pfx_chrdev_open+0x10/0x10
[ 1634.128431][T20894]  do_dentry_open+0x80e/0x1360
[ 1634.128469][T20894]  vfs_open_consume+0x4a/0x350
[ 1634.128492][T20894]  ? path_openat+0x16e1/0x20f0
[ 1634.128529][T20894]  path_openat+0x16fc/0x20f0
[ 1634.128584][T20894]  do_file_open+0x23e/0x4a0
[ 1634.128624][T20894]  ? __pfx_do_file_open+0x10/0x10
[ 1634.128682][T20894]  ? _raw_spin_unlock+0x28/0x50
[ 1634.128705][T20894]  ? alloc_fd+0x6af/0x760
[ 1634.128747][T20894]  do_sys_openat2+0x115/0x200
[ 1634.128784][T20894]  ? __se_sys_futex+0x3a8/0x450
[ 1634.128810][T20894]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1634.128841][T20894]  ? rcu_is_watching+0x16/0xb0
[ 1634.128881][T20894]  __x64_sys_openat+0x138/0x170
[ 1634.128913][T20894]  do_syscall_64+0x166/0x520
[ 1634.128939][T20894]  ? trace_irq_disable+0x3b/0x140
[ 1634.128997][T20894]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.129023][T20894]  ? clear_bhb_loop+0x70/0xc0
[ 1634.129064][T20894]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1634.129087][T20894] RIP: 0033:0x7f0ab4f9f559
[ 1634.129108][T20894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1634.129129][T20894] RSP: 002b:00007f0ab5e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1634.129153][T20894] RAX: ffffffffffffffda RBX: 00007f0ab5225fa0 RCX: 00007f0ab4f9f559
[ 1634.129170][T20894] RDX: 0000000000000002 RSI: 0000200000000540 RDI: ffffffffffffff9c
[ 1634.129187][T20894] RBP: 00007f0ab5036b20 R08: 0000000000000000 R09: 0000000000000000
[ 1634.129201][T20894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1634.129216][T20894] R13: 00007f0ab5226038 R14: 00007f0ab5225fa0 R15: 00007ffc606a8158
[ 1634.129272][T20894]  </TASK>
[ 1634.197882][T20896] fuse: Unknown parameter 'use00000000000000000000'
[ 1634.354745][   T33] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[ 1634.551746][   T33] usb 9-1: Using ep0 maxpacket: 32
[ 1634.553045][   T33] usb 9-1: New USB device found: idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1634.562964][   T33] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1634.631532][   T33] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1634.728272][T20671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1634.783144][T20671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1635.062628][   T33] gspca_nw80x: reg_r err -71
[ 1635.062735][   T33] nw80x 9-1:3.0: probe with driver nw80x failed with error -71
[ 1635.107854][   T33] usb 9-1: USB disconnect, device number 52
[ 1635.210139][T20671] team0: Port device team_slave_0 added
[ 1635.229815][T20671] team0: Port device team_slave_1 added
[ 1635.473584][T12949] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1635.496881][T20671] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1635.496895][T20671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1635.496926][T20671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1635.499545][T20671] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1635.499558][T20671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1635.499589][T20671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1635.611731][   T11] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[ 1635.632708][T12949] usb 6-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1635.634219][T12949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1635.634301][T12949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.640349][T12949] usb 6-1: config 0 descriptor??
[ 1635.691755][T12949] pwc: Askey VC010 type 2 USB webcam detected.
[ 1635.766588][   T11] usb 3-1: New USB device found: idVendor=0457, idProduct=07da, bcdDevice=0.00
[ 1635.771371][   T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1635.771446][   T11] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1635.771520][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.830300][   T11] usb 3-1: config 0 descriptor??
[ 1635.847699][   T11] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1635.975492][T20671] hsr_slave_0: entered promiscuous mode
[ 1635.977042][T20671] hsr_slave_1: entered promiscuous mode
[ 1635.978058][T20671] debugfs: 'hsr0' already exists in 'hsr'
[ 1635.978667][T20671] Cannot create hsr debugfs directory
[ 1636.113634][T12949] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1636.114619][T12949] pwc: recv_control_msg error -32 req 02 val 2700
[ 1636.133003][T12949] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1636.133865][T12949] pwc: recv_control_msg error -32 req 04 val 1000
[ 1636.158457][T12949] pwc: recv_control_msg error -32 req 04 val 1300
[ 1636.164647][T12949] pwc: recv_control_msg error -32 req 04 val 1400
[ 1636.177906][T12949] pwc: recv_control_msg error -32 req 02 val 2000
[ 1636.180939][T12949] pwc: recv_control_msg error -32 req 02 val 2100
[ 1636.207004][T12949] pwc: recv_control_msg error -32 req 04 val 1500
[ 1636.207913][T12949] pwc: recv_control_msg error -32 req 02 val 2500
[ 1636.282335][   T11] usb 8-1: new high-speed USB device number 63 using dummy_hcd
[ 1636.412965][T12949] pwc: recv_control_msg error -71 req 02 val 2600
[ 1636.414025][T12949] pwc: recv_control_msg error -71 req 02 val 2900
[ 1636.417977][T12949] pwc: recv_control_msg error -71 req 02 val 2800
[ 1636.419846][T12949] pwc: recv_control_msg error -71 req 04 val 1100
[ 1636.421724][T12949] pwc: recv_control_msg error -71 req 04 val 1200
[ 1636.450353][   T11] usb 8-1: Using ep0 maxpacket: 16
[ 1636.463534][   T11] usb 8-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1636.469555][   T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1636.469581][   T11] usb 8-1: Product: syz
[ 1636.469599][   T11] usb 8-1: Manufacturer: syz
[ 1636.469617][   T11] usb 8-1: SerialNumber: syz
[ 1636.507234][   T11] usb 8-1: config 0 descriptor??
[ 1636.511011][   T11] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1636.593148][T12949] pwc: Registered as video103.
[ 1636.640430][T12949] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28
[ 1636.691389][T12949] usb 6-1: USB disconnect, device number 39
[ 1637.098205][T20942] 0x000000000000-0x000000010000 : ""
[ 1637.115557][T20946] fuse: Unknown parameter 'use00000000000000000000'
[ 1637.136828][T20942] ftl_cs: FTL header not found.
[ 1637.268233][T20942] FAULT_INJECTION: forcing a failure.
[ 1637.268233][T20942] name failslab, interval 1, probability 0, space 0, times 0
[ 1637.268273][T20942] CPU: 1 UID: 0 PID: 20942 Comm: syz.8.2669 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1637.268308][T20942] Tainted: [L]=SOFTLOCKUP
[ 1637.268318][T20942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1637.268334][T20942] Call Trace:
[ 1637.268345][T20942]  <TASK>
[ 1637.268357][T20942]  dump_stack_lvl+0xe8/0x150
[ 1637.268406][T20942]  should_fail_ex+0x3eb/0x540
[ 1637.268445][T20942]  should_failslab+0xa8/0x100
[ 1637.268485][T20942]  ? __kernfs_new_node+0xe6/0x980
[ 1637.268515][T20942]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1637.268548][T20942]  ? __kernfs_new_node+0xe6/0x980
[ 1637.268584][T20942]  __kernfs_new_node+0xe6/0x980
[ 1637.268627][T20942]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1637.268653][T20942]  ? lock_acquire+0x115/0x350
[ 1637.268685][T20942]  ? kernfs_root+0x1c/0x230
[ 1637.268718][T20942]  ? kernfs_root+0x1c/0x230
[ 1637.268741][T20942]  ? kernfs_root+0x1c/0x230
[ 1637.268762][T20942]  ? kernfs_root+0x1c/0x230
[ 1637.268792][T20942]  kernfs_new_node+0xeb/0x140
[ 1637.268823][T20942]  __kernfs_create_file+0x4b/0x2e0
[ 1637.268860][T20942]  sysfs_add_file_mode_ns+0x237/0x300
[ 1637.268904][T20942]  internal_create_group+0x679/0x1180
[ 1637.268941][T20942]  ? kernfs_create_dir_ns+0x1c0/0x220
[ 1637.268974][T20942]  ? __pfx_internal_create_group+0x10/0x10
[ 1637.268998][T20942]  ? sysfs_create_dir_ns+0x16a/0x2a0
[ 1637.269036][T20942]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1637.269082][T20942]  sysfs_create_groups+0x59/0x120
[ 1637.269110][T20942]  kobject_add_internal+0x669/0xcd0
[ 1637.269154][T20942]  kobject_add+0x163/0x240
[ 1637.269192][T20942]  ? kobject_add+0x163/0x240
[ 1637.269231][T20942]  ? __pfx_kobject_add+0x10/0x10
[ 1637.269273][T20942]  ? __kmalloc_cache_noprof+0x31c/0x600
[ 1637.269306][T20942]  ? __kmalloc_cache_noprof+0x148/0x600
[ 1637.269335][T20942]  ? kobject_create_and_add+0x58/0x230
[ 1637.269377][T20942]  blk_register_queue+0x83/0x4f0
[ 1637.269408][T20942]  ? kobject_create_and_add+0x16f/0x230
[ 1637.269451][T20942]  __add_disk+0x6b8/0xdb0
[ 1637.269491][T20942]  add_disk_fwnode+0x100/0x3a0
[ 1637.269527][T20942]  add_mtd_blktrans_dev+0xe79/0x14b0
[ 1637.269580][T20942]  ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[ 1637.269636][T20942]  ? __kmalloc_cache_noprof+0x31c/0x600
[ 1637.269668][T20942]  ? __kmalloc_cache_noprof+0x148/0x600
[ 1637.269697][T20942]  ? mtdblock_add_mtd+0x57/0x240
[ 1637.269738][T20942]  mtdblock_add_mtd+0x18a/0x240
[ 1637.269775][T20942]  blktrans_notify_add+0x9f/0xf0
[ 1637.269809][T20942]  add_mtd_device+0x117f/0x17b0
[ 1637.269856][T20942]  ? __pfx_add_mtd_device+0x10/0x10
[ 1637.269896][T20942]  ? __pfx_mtd_nvmem_reg_read+0x10/0x10
[ 1637.269927][T20942]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1637.269978][T20942]  mtd_add_partition+0x388/0x590
[ 1637.270015][T20942]  ? __pfx_mtd_add_partition+0x10/0x10
[ 1637.270051][T20942]  ? __might_fault+0xaf/0x130
[ 1637.270086][T20942]  mtdchar_blkpg_ioctl+0x28a/0x2c0
[ 1637.270119][T20942]  ? __pfx___dynamic_pr_debug+0x10/0x10
[ 1637.270162][T20942]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 1637.270217][T20942]  ? __might_fault+0xaf/0x130
[ 1637.270253][T20942]  mtdchar_ioctl+0x14f7/0x1bc0
[ 1637.270292][T20942]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 1637.270335][T20942]  ? __lock_acquire+0x747/0x2de0
[ 1637.270387][T20942]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1637.270435][T20942]  ? __mutex_trylock_common+0x15f/0x270
[ 1637.270476][T20942]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1637.270516][T20942]  ? rcu_is_watching+0x16/0xb0
[ 1637.270555][T20942]  ? trace_contention_end+0x3d/0x140
[ 1637.270594][T20942]  ? __mutex_lock+0x305/0x15a0
[ 1637.270625][T20942]  ? do_futex+0x3e7/0x4e0
[ 1637.270656][T20942]  ? mtdchar_unlocked_ioctl+0xa1/0xd0
[ 1637.270689][T20942]  ? __pfx___mutex_lock+0x10/0x10
[ 1637.270732][T20942]  ? __fget_files+0x2a/0x420
[ 1637.270764][T20942]  ? __fget_files+0x2a/0x420
[ 1637.270800][T20942]  mtdchar_unlocked_ioctl+0xae/0xd0
[ 1637.270832][T20942]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 1637.270864][T20942]  __se_sys_ioctl+0xfc/0x170
[ 1637.270915][T20942]  do_syscall_64+0x166/0x520
[ 1637.270944][T20942]  ? trace_irq_disable+0x3b/0x140
[ 1637.270978][T20942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1637.271003][T20942]  ? clear_bhb_loop+0x70/0xc0
[ 1637.271034][T20942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1637.271059][T20942] RIP: 0033:0x7f0158d9f559
[ 1637.271082][T20942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1637.271104][T20942] RSP: 002b:00007f0159b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1637.271132][T20942] RAX: ffffffffffffffda RBX: 00007f0159025fa0 RCX: 00007f0158d9f559
[ 1637.271183][T20942] RDX: 00002000000006c0 RSI: 0000000000001269 RDI: 0000000000000007
[ 1637.271200][T20942] RBP: 00007f0158e36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1637.271215][T20942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1637.271230][T20942] R13: 00007f0159026038 R14: 00007f0159025fa0 R15: 00007ffda2c95dd8
[ 1637.271270][T20942]  </TASK>
[ 1637.537878][T20942] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock14)
[ 1637.837825][   T11] ssu100 8-1:0.0: probe with driver ssu100 failed with error -71
[ 1637.896115][   T11] usb 8-1: USB disconnect, device number 63
[ 1638.164578][ T5763] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1638.322039][ T5763] usb 6-1: Using ep0 maxpacket: 32
[ 1638.324144][ T5763] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1638.325851][ T5763] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1638.325879][ T5763] usb 6-1: config 0 has no interface number 0
[ 1638.337689][ T5763] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1638.337711][ T5763] usb 6-1: Product: syz
[ 1638.337729][ T5763] usb 6-1: Manufacturer: syz
[ 1638.337745][ T5763] usb 6-1: SerialNumber: syz
[ 1638.414162][ T5763] usb 6-1: config 0 descriptor??
[ 1638.444699][ T5763] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1638.472523][ T5787] usb 3-1: USB disconnect, device number 54
[ 1638.688145][ T5763] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1638.748635][ T5763] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1638.794607][T14379] net_ratelimit: 55 callbacks suppressed
[ 1639.033133][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[ 1639.033207][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[ 1639.033230][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xd341 instead
[ 1639.033254][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x7494 instead
[ 1639.033274][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[ 1639.033294][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[ 1639.033313][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[ 1639.033337][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[ 1639.033373][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[ 1639.033408][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[ 1639.033452][T20975] jffs2: Further such events for this erase block will not be printed
[ 1639.033922][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[ 1639.039872][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[ 1639.039901][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xd341 instead
[ 1639.039926][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x7494 instead
[ 1639.039946][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[ 1639.039967][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[ 1639.039988][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[ 1639.040014][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[ 1639.040053][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[ 1639.040089][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[ 1639.040109][T20975] jffs2: Further such events for this erase block will not be printed
[ 1639.050227][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1639.054556][ T5763] usb 6-1: USB disconnect, device number 40
[ 1639.200880][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[ 1639.200911][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[ 1639.200931][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xd341 instead
[ 1639.200953][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x7494 instead
[ 1639.201006][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[ 1639.201025][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[ 1639.201044][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0xd341 instead
[ 1639.201075][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x7494 instead
[ 1639.201128][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[ 1639.201147][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[ 1639.201167][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xd341 instead
[ 1639.201188][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x7494 instead
[ 1639.201236][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[ 1639.201254][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[ 1639.201274][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xd341 instead
[ 1639.201297][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x7494 instead
[ 1639.201352][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[ 1639.201373][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[ 1639.201394][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0xd341 instead
[ 1639.201417][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x7494 instead
[ 1639.201472][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[ 1639.201489][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[ 1639.201509][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0xd341 instead
[ 1639.201528][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x7494 instead
[ 1639.201645][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[ 1639.201667][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[ 1639.201689][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xd341 instead
[ 1639.201711][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x7494 instead
[ 1639.201764][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[ 1639.201783][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[ 1639.201802][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0xd341 instead
[ 1639.201824][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x7494 instead
[ 1639.618041][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[ 1639.618111][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[ 1639.618172][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0xd341 instead
[ 1639.618235][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x7494 instead
[ 1639.618630][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[ 1639.618691][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[ 1639.618735][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xd341 instead
[ 1639.618756][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x7494 instead
[ 1639.618808][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[ 1639.618826][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[ 1639.618847][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0xd341 instead
[ 1639.618871][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x7494 instead
[ 1639.618962][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[ 1639.619094][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[ 1639.619148][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0xd341 instead
[ 1639.619206][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x7494 instead
[ 1639.619344][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[ 1639.619395][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[ 1639.619447][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xd341 instead
[ 1639.638647][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x7494 instead
[ 1639.638855][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[ 1639.638911][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[ 1639.638965][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0xd341 instead
[ 1639.639028][T20975] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x7494 instead
[ 1639.639366][T20975] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1639.639421][T20975] jffs2: empty_blocks 16, bad_blocks 0, c->nr_blocks 32
[ 1639.800987][ T5763] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1639.969941][ T5763] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1639.980117][ T5763] quatech2 6-1:0.51: device disconnected
[ 1640.690038][T20671] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1640.749501][T20990] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1640.765120][T20671] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1640.775160][T20671] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1640.847972][T20671] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1640.863729][T20671] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1640.919161][T20671] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1640.929806][T20671] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1640.998027][T20671] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1641.071726][ T5787] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[ 1641.231722][ T5787] usb 9-1: Using ep0 maxpacket: 16
[ 1641.237753][ T5787] usb 9-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[ 1641.250201][ T5787] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.250227][ T5787] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1641.278997][ T5787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1641.279020][ T5787] usb 9-1: Product: syz
[ 1641.279036][ T5787] usb 9-1: Manufacturer: syz
[ 1641.279053][ T5787] usb 9-1: SerialNumber: syz
[ 1641.288481][ T8689] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[ 1641.340929][ T5787] usb 9-1: 0:2 : does not exist
[ 1641.376778][T20671] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1641.440403][T20671] 8021q: adding VLAN 0 to HW filter on device team0
[ 1641.449080][ T8689] usb 6-1: New USB device found: idVendor=0457, idProduct=07da, bcdDevice=0.00
[ 1641.461431][ T8689] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.461529][ T8689] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1641.461723][ T8689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1641.499292][ T1400] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1641.499407][ T1400] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1641.502961][ T8689] usb 6-1: config 0 descriptor??
[ 1641.548422][ T6642] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1641.548550][ T6642] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1641.548685][ T5787] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1641.594703][ T8689] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1641.675247][ T5787] usb 9-1: USB disconnect, device number 53
[ 1641.793240][ T8659] usb 8-1: new high-speed USB device number 64 using dummy_hcd
[ 1641.797808][T16456] udevd[16456]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1641.952107][ T8659] usb 8-1: Using ep0 maxpacket: 32
[ 1641.953106][ T8659] usb 8-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1641.954767][ T8659] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1641.957687][ T8659] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1641.957709][ T8659] usb 8-1: Product: syz
[ 1641.957726][ T8659] usb 8-1: Manufacturer: syz
[ 1641.957743][ T8659] usb 8-1: SerialNumber: syz
[ 1642.016687][ T8659] usb 8-1: config 0 descriptor??
[ 1642.019059][T21005] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1642.021165][ T8659] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1642.046967][ T8659] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1642.772380][ T8689] usb 9-1: new full-speed USB device number 54 using dummy_hcd
[ 1642.930110][ T8689] usb 9-1: New USB device found: idVendor=0457, idProduct=07da, bcdDevice=0.00
[ 1642.943497][ T8689] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1642.943544][ T8689] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1642.943573][ T8689] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1642.943655][ T8689] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1642.959660][ T8689] usb 9-1: config 0 descriptor??
[ 1643.060794][T20671] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1643.454057][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.454096][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.454135][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.454169][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.454189][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.454209][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.454229][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.454249][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.454269][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.454289][ T8689] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0
[ 1643.477091][ T8689] hid-multitouch 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.8-1/input0
[ 1643.628125][   T11] usb 9-1: USB disconnect, device number 54
[ 1643.704936][ T8689] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1643.737686][T21055] fido_id[21055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1643.834881][T20671] veth0_vlan: entered promiscuous mode
[ 1643.842919][T14379] net_ratelimit: 54 callbacks suppressed
[ 1643.867683][T20671] veth1_vlan: entered promiscuous mode
[ 1643.879296][ T8689] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1643.889990][ T8689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1643.890223][ T8689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1643.922655][ T8689] usb 3-1: config 0 descriptor??
[ 1643.943235][ T8689] pwc: Askey VC010 type 2 USB webcam detected.
[ 1643.988046][T20671] veth0_macvtap: entered promiscuous mode
[ 1644.008938][T20671] veth1_macvtap: entered promiscuous mode
[ 1644.081521][T20671] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1644.110121][   T33] usb 6-1: USB disconnect, device number 41
[ 1644.119742][T20671] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1644.303891][ T3330] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1644.304951][ T3330] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1644.305022][ T3330] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1644.305062][ T3330] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1644.404165][ T8689] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1644.405418][ T8689] pwc: recv_control_msg error -32 req 02 val 2700
[ 1644.406288][ T8689] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1644.417964][ T8689] pwc: recv_control_msg error -32 req 04 val 1000
[ 1644.436505][ T8689] pwc: recv_control_msg error -32 req 04 val 1300
[ 1644.459764][ T8689] pwc: recv_control_msg error -32 req 04 val 1400
[ 1644.476288][ T8689] pwc: recv_control_msg error -32 req 02 val 2000
[ 1644.478887][ T8689] pwc: recv_control_msg error -32 req 02 val 2100
[ 1644.512777][ T8689] pwc: recv_control_msg error -32 req 04 val 1500
[ 1644.515414][ T8689] pwc: recv_control_msg error -32 req 02 val 2500
[ 1644.714155][ T6642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1644.714174][ T6642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1644.742941][ T8689] pwc: recv_control_msg error -71 req 02 val 2600
[ 1644.749409][ T8689] pwc: recv_control_msg error -71 req 02 val 2900
[ 1644.750431][ T8689] pwc: recv_control_msg error -71 req 02 val 2800
[ 1644.752470][ T8689] pwc: recv_control_msg error -71 req 04 val 1100
[ 1644.765918][ T8689] pwc: recv_control_msg error -71 req 04 val 1200
[ 1644.810173][ T8689] pwc: Registered as video103.
[ 1644.818253][ T8689] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29
[ 1644.849049][ T8689] usb 3-1: USB disconnect, device number 55
[ 1644.911910][T20432] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[ 1645.062806][T20432] usb 9-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1645.064672][T20432] usb 9-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1645.064705][T20432] usb 9-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61
[ 1645.064732][T20432] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1645.068175][T20432] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1645.068198][T20432] usb 9-1: Product: syz
[ 1645.068232][T20432] usb 9-1: Manufacturer: syz
[ 1645.068249][T20432] usb 9-1: SerialNumber: syz
[ 1645.073363][T15015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1645.073382][T15015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1645.148766][T20432] usb 9-1: config 0 descriptor??
[ 1645.158140][T21064] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1645.162025][   T33] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1645.185282][T20432] usb 9-1: selecting invalid altsetting 0
[ 1645.334311][   T33] usb 6-1: Using ep0 maxpacket: 8
[ 1645.336147][   T33] usb 6-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1645.340821][   T33] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[ 1645.340901][   T33] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1645.340932][   T33] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1645.340960][   T33] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1645.340990][   T33] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1645.341019][   T33] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1645.341088][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1645.615799][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.635036][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.635688][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.639413][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.653834][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.669462][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.712109][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.712784][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.714360][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.720235][T21064] usb 9-1: cannot submit urb 0, error -2: endpoint not enabled
[ 1645.970772][T21083] Bluetooth: Short BCSP packet
[ 1646.360594][ T5763] usb 8-1: USB disconnect, device number 64
[ 1646.376617][   T33] usb 6-1: usb_control_msg returned -71
[ 1646.376666][   T33] usbtmc 6-1:16.0: can't read capabilities
[ 1646.450279][   T33] usb 6-1: USB disconnect, device number 42
[ 1647.143938][T21104] rxe_eth0 speed is unknown, defaulting to 1000
[ 1647.501853][   T33] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[ 1647.626587][T20919] usb 9-1: USB disconnect, device number 55
[ 1647.653284][   T33] usb 6-1: New USB device found: idVendor=0457, idProduct=07da, bcdDevice=0.00
[ 1647.654923][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1647.654955][   T33] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1647.654983][   T33] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1647.655053][   T33] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1647.737267][   T33] usb 6-1: config 0 descriptor??
[ 1647.991945][ T5651] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1648.919463][T10242] net_ratelimit: 285 callbacks suppressed
[ 1649.029049][   T33] hid_parser_main: 10 callbacks suppressed
[ 1649.029077][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.029110][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.029139][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.029168][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.029197][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.029225][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.029252][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.029281][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.029307][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.029335][   T33] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0
[ 1649.095127][   T33] hid-multitouch 0003:0457:07DA.000B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0
[ 1649.158243][   T33] usb 6-1: USB disconnect, device number 43
[ 1649.419291][T21130] fido_id[21130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1649.653242][T21132] ------------[ cut here ]------------
[ 1649.653256][T21132] kernel BUG at net/core/dev.c:11597!
[ 1649.668628][T21132] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 1649.674977][T21132] CPU: 1 UID: 0 PID: 21132 Comm: syz.7.2706 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1649.685958][T21132] Tainted: [L]=SOFTLOCKUP
[ 1649.690343][T21132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1649.700457][T21132] RIP: 0010:register_netdevice+0x2225/0x2280
[ 1649.705510][    C0] virtqueue callback for ffff888026dc5e00 (ffffffff86d043b0)
[ 1649.705643][    C0] No more buffers in queue
[ 1649.706945][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 1649.707028][    C0] No more buffers in queue
[ 1649.728518][T21132] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 fe 2d 6f f8 e9 16 fb ff ff e8 34 1a f8 f7 90 0f 0b e8 2c 1a f8 f7 90 <0f> 0b e8 24 1a f8 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9
[ 1649.748173][T21132] RSP: 0018:ffffc90004c67580 EFLAGS: 00010287
[ 1649.752949][    C0] eth0: xmit ffff88807ea543c0 42:01:0a:80:00:01
[ 1649.753059][    C0] Added buffer head 6 to ffff888026dc5c00
[ 1649.753125][    C0] virtqueue callback for ffff888026dc5c00 (ffffffff86d044f0)
[ 1649.754000][    C0] Sent skb ffff88807ea543c0
[ 1649.754107][    C0] No more buffers in queue
[ 1649.754149][    C0] No more buffers in queue
[ 1649.787027][T21132] RAX: ffffffff89d10184 RBX: 1ffff9200098cec4 RCX: 0000000000080000
[ 1649.795052][T21132] RDX: ffffc90010321000 RSI: 00000000000042c9 RDI: 00000000000042ca
[ 1649.803066][T21132] RBP: ffffc90004c676f0 R08: ffffffff91693847 R09: 1ffffffff22d2708
[ 1649.811086][T21132] R10: dffffc0000000000 R11: fffffbfff22d2709 R12: ffff88802cd207a8
[ 1649.819122][T21132] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88802cd20000
[ 1649.827136][T21132] FS:  00007f0ab5e866c0(0000) GS:ffff88812350d000(0000) knlGS:0000000000000000
[ 1649.836116][T21132] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1649.842745][T21132] CR2: 00007f2d2f835a10 CR3: 000000007e54c000 CR4: 00000000003526f0
[ 1649.850769][T21132] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1649.854097][T21132]  <TASK>
[ 1649.857076][T21132]  ? __mutex_lock+0x5cd/0x15a0
[ 1649.857984][ T5626] eth0: xmit ffff88807698bc70 42:01:0a:80:00:01
[ 1649.858081][ T5626] Added buffer head 6 to ffff888026dc5c00
[ 1649.858176][    C0] virtqueue callback for ffff888026dc5c00 (ffffffff86d044f0)
[ 1649.858282][    C0] Sent skb ffff88807698bc70
[ 1649.858334][    C0] No more buffers in queue
[ 1649.858378][    C0] No more buffers in queue
[ 1649.894614][T21132]  ? __pfx___mutex_lock+0x10/0x10
[ 1649.899700][T21132]  ? __pfx_register_netdevice+0x10/0x10
[ 1649.905300][T21132]  ? dev_addr_mod+0x174/0x350
[ 1649.910054][T21132]  ? dev_addr_mod+0x1ba/0x350
[ 1649.913284][    C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001
[ 1649.922331][T21132]  register_netdev+0x40/0x60
[ 1649.926977][T21132]  gether_register_netdev+0x84/0x180
[ 1649.932340][T21132]  ecm_bind+0x201/0xa30
[ 1649.936544][T21132]  usb_add_function+0x2e1/0x9f0
[ 1649.941436][T21132]  ? check_remote_wakeup_config+0x58/0x1c0
[ 1649.947280][T21132]  configfs_composite_bind+0xde0/0x1410
[ 1649.952895][T21132]  ? __pfx_configfs_composite_bind+0x10/0x10
[ 1649.958916][T21132]  gadget_bind_driver+0x2ca/0x9e0
[ 1649.964007][T21132]  ? __pfx_gadget_bind_driver+0x10/0x10
[ 1649.969600][T21132]  really_probe+0x254/0xae0
[ 1649.974154][T21132]  __driver_probe_device+0x1e8/0x360
[ 1649.979498][T21132]  driver_probe_device+0x4f/0x240
[ 1649.984601][T21132]  __driver_attach+0x34e/0x630
[ 1649.989403][T21132]  bus_for_each_dev+0x23b/0x2c0
[ 1649.994306][T21132]  ? __pfx___driver_attach+0x10/0x10
[ 1649.999635][T21132]  ? __pfx_bus_for_each_dev+0x10/0x10
[ 1650.005050][T21132]  ? do_raw_spin_unlock+0xf5/0x200
[ 1650.010206][T21132]  bus_add_driver+0x38f/0x6e0
[ 1650.014940][T21132]  driver_register+0x23a/0x320
[ 1650.019740][T21132]  usb_gadget_register_driver_owner+0xf9/0x270
[ 1650.025951][T21132]  gadget_dev_desc_UDC_store+0x1c9/0x2f0
[ 1650.031622][T21132]  ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10
[ 1650.037901][T21132]  configfs_write_iter+0x337/0x430
[ 1650.043053][T21132]  vfs_write+0x612/0xba0
[ 1650.047332][T21132]  ? __pfx_vfs_write+0x10/0x10
[ 1650.052135][T21132]  ? __fget_files+0x3a2/0x420
[ 1650.056867][T21132]  ? __fget_files+0x2a/0x420
[ 1650.061492][T21132]  ? fdget+0x1ac/0x250
[ 1650.065591][T21132]  ksys_write+0x150/0x270
[ 1650.069964][T21132]  ? __pfx_ksys_write+0x10/0x10
[ 1650.073072][    C0] eth0: xmit ffff88807698bc70 42:01:0a:80:00:01
[ 1650.073195][    C0] Added buffer head 6 to ffff888026dc5c00
[ 1650.073268][    C0] virtqueue callback for ffff888026dc5c00 (ffffffff86d044f0)
[ 1650.081962][    C0] Sent skb ffff88807698bc70
[ 1650.082034][    C0] No more buffers in queue
[ 1650.082079][    C0] No more buffers in queue
[ 1650.107542][T21132]  do_syscall_64+0x166/0x520
[ 1650.112192][T21132]  ? trace_irq_disable+0x3b/0x140
[ 1650.117248][T21132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1650.123427][T21132]  ? clear_bhb_loop+0x70/0xc0
[ 1650.128167][T21132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1650.134090][T21132] RIP: 0033:0x7f0ab4f9f559
[ 1650.138543][T21132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1650.158181][T21132] RSP: 002b:00007f0ab5e86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1650.166635][T21132] RAX: ffffffffffffffda RBX: 00007f0ab5225fa0 RCX: 00007f0ab4f9f559
[ 1650.174627][T21132] RDX: 000000000000000c RSI: 0000200000000380 RDI: 0000000000000004
[ 1650.182627][T21132] RBP: 00007f0ab5036b20 R08: 0000000000000000 R09: 0000000000000000
[ 1650.190618][T21132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1650.198628][T21132] R13: 00007f0ab5226038 R14: 00007f0ab5225fa0 R15: 00007ffc606a8158
[ 1650.206634][T21132]  </TASK>
[ 1650.209710][T21132] Modules linked in:
[ 1650.213829][    C1] virtqueue callback for ffff888026dc5a00 (ffffffff86d043b0)
[ 1650.221372][    C1] wireguard: wg0: Handshake for peer 259 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2)
[ 1650.233174][    C1] wireguard: wg1: Handshake for peer 237 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 11)
[ 1650.248107][T21132] ---[ end trace 0000000000000000 ]---
[ 1650.253678][    C1] No more buffers in queue
[ 1650.258814][    C1] Receiving skb proto 0x0800 len 52 type 0
[ 1650.264151][ T5627] eth0: xmit ffff88807698b9f0 42:01:0a:80:00:01
[ 1650.264247][ T5627] Added buffer head 6 to ffff888026dc5c00
[ 1650.264317][    C0] virtqueue callback for ffff888026dc5c00 (ffffffff86d044f0)
[ 1650.264417][    C0] Sent skb ffff88807698b9f0
[ 1650.264469][    C0] No more buffers in queue
[ 1650.264511][    C0] No more buffers in queue
[ 1650.265032][    C0] virtqueue callback for ffff888026dc5e00 (ffffffff86d043b0)
[ 1650.265136][    C0] No more buffers in queue
[ 1650.266423][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 1650.266497][    C0] No more buffers in queue
[ 1650.266548][    C0] Added buffer head 2025 to ffff888026dc5e00
[ 1650.266591][    C0] Added buffer head 2024 to ffff888026dc5e00
[ 1650.266651][    C0] Added buffer head 2023 to ffff888026dc5e00
[ 1650.266700][    C0] Added buffer head 2022 to ffff888026dc5e00
[ 1650.266751][    C0] Added buffer head 2021 to ffff888026dc5e00
[ 1650.266793][    C0] Added buffer head 2020 to ffff888026dc5e00
[ 1650.266844][    C0] Added buffer head 2019 to ffff888026dc5e00
[ 1650.266885][    C0] Added buffer head 2018 to ffff888026dc5e00
[ 1650.266936][    C0] Added buffer head 2017 to ffff888026dc5e00
[ 1650.266979][    C0] Added buffer head 2016 to ffff888026dc5e00
[ 1650.267028][    C0] Added buffer head 1987 to ffff888026dc5e00
[ 1650.267072][    C0] Added buffer head 1986 to ffff888026dc5e00
[ 1650.267126][    C0] Added buffer head 1985 to ffff888026dc5e00
[ 1650.267169][    C0] Added buffer head 1984 to ffff888026dc5e00
[ 1650.267219][    C0] Added buffer head 1983 to ffff888026dc5e00
[ 1650.267264][    C0] Added buffer head 1982 to ffff888026dc5e00
[ 1650.267308][    C0] Added buffer head 1981 to ffff888026dc5e00
[ 1650.267370][    C0] Added buffer head 1980 to ffff888026dc5e00
[ 1650.267412][    C0] Added buffer head 1979 to ffff888026dc5e00
[ 1650.267460][    C0] Added buffer head 1978 to ffff888026dc5e00
[ 1650.267502][    C0] Added buffer head 1977 to ffff888026dc5e00
[ 1650.267552][    C0] Added buffer head 1976 to ffff888026dc5e00
[ 1650.267632][    C0] Added buffer head 1975 to ffff888026dc5e00
[ 1650.267687][    C0] Added buffer head 1974 to ffff888026dc5e00
[ 1650.267736][    C0] Added buffer head 1973 to ffff888026dc5e00
[ 1650.267778][    C0] Added buffer head 1972 to ffff888026dc5e00
[ 1650.267820][    C0] Added buffer head 1971 to ffff888026dc5e00
[ 1650.267869][    C0] Added buffer head 1970 to ffff888026dc5e00
[ 1650.267912][    C0] Added buffer head 1969 to ffff888026dc5e00
[ 1650.267961][    C0] Added buffer head 1929 to ffff888026dc5e00
[ 1650.268003][    C0] Added buffer head 1928 to ffff888026dc5e00
[ 1650.268046][    C0] Added buffer head 1927 to ffff888026dc5e00
[ 1650.268094][    C0] Added buffer head 1926 to ffff888026dc5e00
[ 1650.272828][ T5626] eth0: xmit ffff88807698b770 42:01:0a:80:00:01
[ 1650.272920][ T5626] Added buffer head 6 to ffff888026dc5c00
[ 1650.272973][    C0] virtqueue callback for ffff888026dc5c00 (ffffffff86d044f0)
[ 1650.273057][    C0] Sent skb ffff88807698b770
[ 1650.273106][    C0] No more buffers in queue
[ 1650.273140][    C0] No more buffers in queue
[ 1650.274084][T21104] kobject: 'ip6gre0' (ffff888077cd07e0): kobject_cleanup, parent 0000000000000000
[ 1650.274149][T21104] kobject: 'ip6gre0' (ffff888077cd07e0): calling ktype release
[ 1650.274278][T21104] kobject: 'ip6gre0': free name
[ 1650.274747][T21104] kobject: 'ip6tnl0' (ffff888075c947e0): kobject_cleanup, parent 0000000000000000
[ 1650.274786][T21104] kobject: 'ip6tnl0' (ffff888075c947e0): calling ktype release
[ 1650.274896][T21104] kobject: 'ip6tnl0': free name
[ 1650.275107][T10028] kcov: kcov_task_exit: t = ffff888032453e80, kcov->t = ffff888032453e80
[ 1650.276748][T13914] kcov: kcov_task_exit: t = ffff88801ff79f40, kcov->t = ffff88801ff79f40
[ 1650.276767][    C1] virtqueue callback for ffff888026dc5a00 (ffffffff86d043b0)
[ 1650.278874][T21104] kobject: 'sit0' (ffff8880233947e0): kobject_cleanup, parent 0000000000000000
[ 1650.278934][T21104] kobject: 'sit0' (ffff8880233947e0): calling ktype release
[ 1650.279044][T21104] kobject: 'sit0': free name
[ 1650.279417][T21104] kobject: 'ip6_vti0' (ffff88807d01c7e0): kobject_cleanup, parent 0000000000000000
[ 1650.279470][T21104] kobject: 'ip6_vti0' (ffff88807d01c7e0): calling ktype release
[ 1650.279570][T21104] kobject: 'ip6_vti0': free name
[ 1650.286624][T21104] kobject: 'ip_vti0' (ffff8880350107e0): kobject_cleanup, parent 0000000000000000
[ 1650.286690][T21104] kobject: 'ip_vti0' (ffff8880350107e0): calling ktype release
[ 1650.286819][T21104] kobject: 'ip_vti0': free name
[ 1650.287327][T21104] kobject: 'erspan0' (ffff88807d1fe7e0): kobject_cleanup, parent 0000000000000000
[ 1650.287388][T21104] kobject: 'erspan0' (ffff88807d1fe7e0): calling ktype release
[ 1650.287508][T21104] kobject: 'erspan0': free name
[ 1650.287966][T21104] kobject: 'gretap0' (ffff88803549e7e0): kobject_cleanup, parent 0000000000000000
[ 1650.288017][T21104] kobject: 'gretap0' (ffff88803549e7e0): calling ktype release
[ 1650.288127][T21104] kobject: 'gretap0': free name
[ 1650.298235][T21104] kobject: 'gre0' (ffff88807c70a7e0): kobject_cleanup, parent 0000000000000000
[ 1650.298307][T21104] kobject: 'gre0' (ffff88807c70a7e0): calling ktype release
[ 1650.298411][T21104] kobject: 'gre0': free name
[ 1650.298832][T21104] kobject: 'tunl0' (ffff88807ba6c7e0): kobject_cleanup, parent 0000000000000000
[ 1650.298891][T21104] kobject: 'tunl0' (ffff88807ba6c7e0): calling ktype release
[ 1650.298990][T21104] kobject: 'tunl0': free name
[ 1650.322118][    C0] eth0: xmit ffff88807698bc70 42:01:0a:80:00:01
[ 1650.322206][    C0] Added buffer head 6 to ffff888026dc5c00
[ 1650.322268][    C0] virtqueue callback for ffff888026dc5c00 (ffffffff86d044f0)
[ 1650.322614][    C0] Sent skb ffff88807698bc70
[ 1650.322666][    C0] No more buffers in queue
[ 1650.322709][    C0] No more buffers in queue
[ 1650.387883][T12393] kcov: kcov_task_exit: t = ffff888029728000, kcov->t = ffff888029728000
[ 1650.644667][    C0] virtqueue callback for ffff888021321200 (ffffffff85702a80)
[ 1650.644922][    C0] virtqueue interrupt with no work for ffff888021321400
[ 1650.644965][    C0] virtqueue interrupt with no work for ffff888021321600
[ 1650.752112][    C0] eth0: xmit ffff88807698bc70 42:01:0a:80:00:01
[ 1650.752236][    C0] Added buffer head 6 to ffff888026dc5c00
[ 1650.752307][    C0] virtqueue callback for ffff888026dc5c00 (ffffffff86d044f0)
[ 1650.761732][    C0] Sent skb ffff88807698bc70
[ 1650.761793][    C0] No more buffers in queue
[ 1650.761843][    C0] No more buffers in queue
[ 1650.861600][    C1] virtqueue callback for ffff888026dc5a00 (ffffffff86d043b0)
[ 1650.869127][    C1] Receiving skb proto 0x0800 len 64 type 0
[ 1650.875092][    C1] Receiving skb proto 0x0806 len 28 type 1
[ 1650.876430][T12794] kcov: kcov_task_exit: t = ffff888035073e80, kcov->t = ffff888035073e80
[ 1650.889485][    C1] Receiving skb proto 0x0800 len 52 type 0
[ 1650.895444][    C1] Receiving skb proto 0x0800 len 88 type 0
[ 1650.901388][    C1] Receiving skb proto 0x0800 len 112 type 0
[ 1650.902024][T20667] kcov: kcov_task_exit: t = ffff8880262b9f40, kcov->t = ffff8880262b9f40
[ 1650.911456][ T6536] Added buffer head 0 to ffff888021321200
[ 1650.921674][    C1] Receiving skb proto 0x0800 len 52 type 0
[ 1650.927609][    C1] Receiving skb proto 0x0800 len 52 type 0
[ 1650.934024][    C1] eth0: xmit ffff8880a3d82dc0 42:01:0a:80:00:01
[ 1650.940349][    C1] Added buffer head 14 to ffff88823bea0000
[ 1650.946233][    C1] virtqueue callback for ffff88823bea0000 (ffffffff86d044f0)
[ 1650.954396][    C1] eth0: xmit ffff8880a3d82280 42:01:0a:80:00:01
[ 1650.960706][    C1] Added buffer head 17 to ffff88823bea0000
[ 1650.960739][    C1] virtqueue callback for ffff88823bea0000 (ffffffff86d044f0)
[ 1650.974199][    C1] Receiving skb proto 0x0800 len 64 type 0
[ 1650.980382][    C1] Receiving skb proto 0x0800 len 148 type 0
[ 1650.986443][    C1] Receiving skb proto 0x0800 len 64 type 0
[ 1650.992330][    C1] No more buffers in queue
[ 1650.997149][    C1] eth0: xmit ffff8880a3d82140 42:01:0a:80:00:01
[ 1651.003482][    C1] Added buffer head 2 to ffff88823bea0000
[ 1651.003514][    C1] virtqueue callback for ffff88823bea0000 (ffffffff86d044f0)
[ 1651.021629][    C1] wireguard: wg1: Handshake for peer 238 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 15)
[ 1651.022294][    C1] Sent skb ffff8880a3d82dc0
[ 1651.022335][    C1] Sent skb ffff8880a3d82280
[ 1651.022375][    C1] Sent skb ffff8880a3d82140
[ 1651.022407][    C1] No more buffers in queue
[ 1651.022426][    C1] No more buffers in queue
[ 1651.022439][    C1] No more buffers in queue
[ 1651.022454][    C1] No more buffers in queue
[ 1651.044152][   T33] hub 3-0:1.0: state 7 ports 1 chg 0002 evt 0000
[ 1651.044342][   T33] usb usb3-port1: status 0101, change 0000, 12 Mb/s
[ 1651.044466][   T33] raw-gadget.0 gadget.2: gadget reset
[ 1651.104516][T12402] ffff88804f6b4000 name hci6 bus 0
[ 1651.139875][T21142] kcov: kcov_task_exit: t = ffff888021f1ddc0, kcov->t = ffff888021f1ddc0
[ 1651.144734][T21133] kcov: kcov_task_exit: t = ffff888032460000, kcov->t = ffff888032460000
[ 1651.168380][ T1729] sd 0:0:1:0: cmd ffff88802cd98810 CDB: 0x2a
[ 1651.168423][ T1729] Added buffer head 401 to ffff888026c1d600
[ 1651.168452][ T1729] sd 0:0:1:0: cmd ffff88802cd98bd0 CDB: 0x2a
[ 1651.168479][ T1729] Added buffer head 286 to ffff888026c1d600
** replaying previous printk message **
[ 1651.168479][ T1729] Added buffer head 286 to ffff888026c1d600
[ 1651.168507][ T1729] sd 0:0:1:0: cmd ffff88802cd98f90 CDB: 0x2a
[ 1651.168530][ T1729] Added buffer head 197 to ffff888026c1d600
[ 1651.168578][ T1729] sd 0:0:1:0: cmd ffff88802cd99350 CDB: 0x2a
[ 1651.168603][ T1729] Added buffer head 364 to ffff888026c1d600
[ 1651.168629][ T1729] sd 0:0:1:0: cmd ffff88802cd99710 CDB: 0x2a
[ 1651.168651][ T1729] Added buffer head 256 to ffff888026c1d600
[ 1651.168677][ T1729] sd 0:0:1:0: cmd ffff88802cd99ad0 CDB: 0x2a
[ 1651.168698][ T1729] Added buffer head 176 to ffff888026c1d600
[ 1651.168723][ T1729] sd 0:0:1:0: cmd ffff88802cd99e90 CDB: 0x2a
[ 1651.168745][ T1729] Added buffer head 556 to ffff888026c1d600
[ 1651.168772][ T1729] sd 0:0:1:0: cmd ffff88802cd9a250 CDB: 0x2a
[ 1651.168793][ T1729] Added buffer head 255 to ffff888026c1d600
[ 1651.168830][ T1729] sd 0:0:1:0: cmd ffff88802cd9a610 CDB: 0x2a
[ 1651.168850][ T1729] Added buffer head 198 to ffff888026c1d600
[ 1651.168873][ T1729] sd 0:0:1:0: cmd ffff88802cd9a9d0 CDB: 0x2a
[ 1651.168893][ T1729] Added buffer head 115 to ffff888026c1d600
[ 1651.168919][ T1729] sd 0:0:1:0: cmd ffff88802cd9ad90 CDB: 0x2a
[ 1651.168941][ T1729] Added buffer head 329 to ffff888026c1d600
[ 1651.168968][ T1729] sd 0:0:1:0: cmd ffff88802cd9b150 CDB: 0x2a
[ 1651.168991][ T1729] Added buffer head 64 to ffff888026c1d600
[ 1651.169015][ T1729] sd 0:0:1:0: cmd ffff88802cd9b510 CDB: 0x2a
[ 1651.169036][ T1729] Added buffer head 160 to ffff888026c1d600
[ 1651.169062][ T1729] sd 0:0:1:0: cmd ffff88802cd9b8d0 CDB: 0x2a
[ 1651.169084][ T1729] Added buffer head 133 to ffff888026c1d600
[ 1651.169109][ T1729] sd 0:0:1:0: cmd ffff88802cd9bc90 CDB: 0x2a
[ 1651.169128][ T1729] Added buffer head 248 to ffff888026c1d600
[ 1651.169155][ T1729] sd 0:0:1:0: cmd ffff88802cd9c050 CDB: 0x2a
[ 1651.169175][ T1729] Added buffer head 172 to ffff888026c1d600
[ 1651.169808][T12402] hci6: Updating devcoredump state from IDLE to IDLE.
[ 1651.169832][T12402] hci6: err 0x13
[ 1651.169854][T12402] hci6 ffff88804f6b4000
[ 1651.169869][T12402] hci6: 
[ 1651.170831][    C1] virtqueue callback for ffff888026c1d600 (ffffffff867e8180)
[ 1651.170867][    C1] sd 0:0:1:0: cmd ffff88802cd9ad90 response 0 status 0x0 sense_len 0
[ 1651.170902][    C1] sd 0:0:1:0: cmd ffff88802cd9b150 response 0 status 0x0 sense_len 0
[ 1651.170926][    C1] No more buffers in queue
[ 1651.171318][    C1] virtqueue callback for ffff888026c1d600 (ffffffff867e8180)
[ 1651.171345][    C1] sd 0:0:1:0: cmd ffff88802cd9a9d0 response 0 status 0x0 sense_len 0
[ 1651.171371][    C1] No more buffers in queue
[ 1651.171708][    C1] virtqueue callback for ffff888026c1d600 (ffffffff867e8180)
[ 1651.171803][    C1] sd 0:0:1:0: cmd ffff88802cd98bd0 response 0 status 0x0 sense_len 0
[ 1651.171899][    C1] sd 0:0:1:0: cmd ffff88802cd9b510 response 0 status 0x0 sense_len 0
[ 1651.171970][    C1] sd 0:0:1:0: cmd ffff88802cd9a610 response 0 status 0x0 sense_len 0
[ 1651.172061][    C1] sd 0:0:1:0: cmd ffff88802cd98f90 response 0 status 0x0 sense_len 0
[ 1651.172126][    C1] sd 0:0:1:0: cmd ffff88802cd99350 response 0 status 0x0 sense_len 0
[ 1651.172189][    C1] No more buffers in queue
[ 1651.193061][T21132] RIP: 0010:register_netdevice+0x2225/0x2280
[ 1651.193195][T21132] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 fe 2d 6f f8 e9 16 fb ff ff e8 34 1a f8 f7 90 0f 0b e8 2c 1a f8 f7 90 <0f> 0b e8 24 1a f8 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9
[ 1651.193256][T21132] RSP: 0018:ffffc90004c67580 EFLAGS: 00010287
[ 1651.193320][    C1] virtqueue callback for ffff888026c1d600 (ffffffff867e8180)
[ 1651.193410][    C1] sd 0:0:1:0: cmd ffff88802cd9a250 response 0 status 0x0 sense_len 0
[ 1651.193495][    C1] sd 0:0:1:0: cmd ffff88802cd99e90 response 0 status 0x0 sense_len 0
[ 1651.193553][    C1] sd 0:0:1:0: cmd ffff88802cd99710 response 0 status 0x0 sense_len 0
[ 1651.193625][    C1] sd 0:0:1:0: cmd ffff88802cd99ad0 response 0 status 0x0 sense_len 0
[ 1651.193702][    C1] sd 0:0:1:0: cmd ffff88802cd9bc90 response 0 status 0x0 sense_len 0
[ 1651.193768][    C1] No more buffers in queue
[ 1651.195222][T21132] 
[ 1651.195248][T21132] RAX: ffffffff89d10184 RBX: 1ffff9200098cec4 RCX: 0000000000080000
[ 1651.195290][T21132] RDX: ffffc90010321000 RSI: 00000000000042c9 RDI: 00000000000042ca
[ 1651.195353][T21132] RBP: ffffc90004c676f0 R08: ffffffff91693847 R09: 1ffffffff22d2708
[ 1651.195396][T21132] R10: dffffc0000000000 R11: fffffbfff22d2709 R12: ffff88802cd207a8
[ 1651.195446][T21132] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88802cd20000
[ 1651.195488][T21132] FS:  00007f0ab5e866c0(0000) GS:ffff88812350d000(0000) knlGS:0000000000000000
[ 1651.195541][T21132] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1651.195576][T21132] CR2: 00007f2d2fb30478 CR3: 000000007e54c000 CR4: 00000000003526f0
[ 1651.195648][T21132] Kernel panic - not syncing: Fatal exception
[ 1651.646134][T21132] Kernel Offset: disabled
[ 1651.650473][T21132] Rebooting in 86400 seconds..