last executing test programs:

1m43.913589563s ago: executing program 0 (id=144):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f00000000c0))
r1 = syz_open_dev$video(&(0x7f0000000180), 0x800000000, 0x0)
ptrace(0x10, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0003560000000003"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000880)={0x24, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0)
socket$key(0xf, 0x3, 0x2)
futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0)
ioctl$VIDIOC_G_SELECTION(r1, 0xc0405668, &(0x7f0000000000)={0x0, 0x100, 0x2})
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000000c0)=0x28)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x4000)

1m41.815985195s ago: executing program 0 (id=150):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0)
socket$netlink(0x10, 0x3, 0xf)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r0 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0)
migrate_pages(0x0, 0x8, 0x0, &(0x7f0000000100)=0x2)
inotify_init1(0x800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
userfaultfd(0x80001)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfe, 0x3a, '/_', 0x3a, ':$@K-^{', 0x3a, './file0'}, 0x30)
syz_usb_control_io$printer(r2, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x34}], 0x1}, 0x20000000)

1m41.291893761s ago: executing program 0 (id=151):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x7fff}, &(0x7f0000000000)=0x100000000, 0x0, 0x80000000, 0x3, 0x8001, 0x9, 0x4c, 0x100000001}}], 0x58}, 0x200000000000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x70]}}]})

1m41.236384057s ago: executing program 0 (id=152):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
unlink(&(0x7f0000000040)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x41c480, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18)
utimensat(r1, 0x0, 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0)

1m41.106743142s ago: executing program 0 (id=153):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2, 0x3}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$vhost_msg_v2(r3, 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000203c0)={0x0, 0x0, &(0x7f0000020380)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000d75bb37e2b519c3354d231755d30c3699bd24c7e2f50ca4d7af0ce49b8528c46622ffa9b75376bac7b0e2cd0ecc59232a31770afaa7b909f2ed5337696072e1df306dc0ca10e68178b5984f5be8e378897ff230390d71eea2bf9ba4d16450a96ed7f876aed26c62c507ba0287d052b30383453446feeb40c9f8064cccc869afd877700000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250f0000000c0007800800020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000854)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
socket$netlink(0x10, 0x3, 0xb)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000040))

1m40.878620891s ago: executing program 0 (id=156):
openat$nci(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, &(0x7f0000000280)="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")
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x35}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xc0001, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100032c8}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100032c8}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
write$nci(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000091b2d34083a5cec58775d647e5420000f404d14a846d0f7d2908ec4531cc74358c9ac3"], 0x5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000003, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1001, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0x7fffffff, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3d, 0x8f, 0x4006, 0x6, 0x7ffffffd, 0x0, 0x5, 0x8, 0xff, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x3, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x0, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x5, 0xd74d, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10004, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffb, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2eb, 0x4, 0x28], [0x9, 0xbb35, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x9, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x7, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x7, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000003, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1001, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0x7fffffff, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3d, 0x8f, 0x4006, 0x6, 0x7ffffffd, 0x0, 0x5, 0x8, 0xff, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x3, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x0, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x5, 0xd74d, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10004, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffb, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2eb, 0x4, 0x28], [0x9, 0xbb35, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x9, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x7, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x7, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0xfffffffffffffe79}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10, 0x0, 0x2, 0xff, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x54b301, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xfd, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xeb8}, {0xd, 0x24, 0xf, 0x1, 0xffff68e5, 0x100, 0x6, 0xa}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xfc, 0x62, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x10, 0x2, 0xf}}}}}]}}]}}, &(0x7f0000001900)={0x0, 0x0, 0xf, &(0x7f0000001400)=ANY=[@ANYBLOB="050ff7ffffffffffffff003b9fb953d00f726a048feddf9ca8bbf5e2d0bc033d0b181d79845dd73db22618446d905bf9513bc99c630c2c1e85267a46802ec91e1083bf45a0be04d60d75f26858e571ad0dd692c19af52e416edbe71ba1c31ef66516bb4245abad756e55ed27561717a8d6ebfd6e0591c2a213fd577f5309c38d1138b75e229c6bd7b6a9a3904a5a0a00000089717cbca6908a3a60076b2f0ec89289f01764564198790294f3fa0b7009fa9fead4e6b9a27d05c98d"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
read$nci(r0, &(0x7f00000015c0)=""/48, 0x30)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

1m40.676331346s ago: executing program 32 (id=156):
openat$nci(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, &(0x7f0000000280)="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")
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x35}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xc0001, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r5)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100032c8}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000001380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100032c8}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x4c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
write$nci(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="00000091b2d34083a5cec58775d647e5420000f404d14a846d0f7d2908ec4531cc74358c9ac3"], 0x5)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000003, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1001, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0x7fffffff, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3d, 0x8f, 0x4006, 0x6, 0x7ffffffd, 0x0, 0x5, 0x8, 0xff, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x3, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x0, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x5, 0xd74d, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10004, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffb, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2eb, 0x4, 0x28], [0x9, 0xbb35, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x9, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x7, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x7, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x2, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000003, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1001, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0x7fffffff, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3d, 0x8f, 0x4006, 0x6, 0x7ffffffd, 0x0, 0x5, 0x8, 0xff, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x3, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x0, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x5, 0xd74d, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10004, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffb, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2eb, 0x4, 0x28], [0x9, 0xbb35, 0x7, 0x8000b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x9, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x7, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x7, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0xfffffffffffffe79}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x3, 0xc, 0x0, 0x80000000, 0x0, 0x10, 0x0, 0x2, 0xff, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x54b301, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xfd, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xeb8}, {0xd, 0x24, 0xf, 0x1, 0xffff68e5, 0x100, 0x6, 0xa}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xfc, 0x62, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x10, 0x2, 0xf}}}}}]}}]}}, &(0x7f0000001900)={0x0, 0x0, 0xf, &(0x7f0000001400)=ANY=[@ANYBLOB="050ff7ffffffffffffff003b9fb953d00f726a048feddf9ca8bbf5e2d0bc033d0b181d79845dd73db22618446d905bf9513bc99c630c2c1e85267a46802ec91e1083bf45a0be04d60d75f26858e571ad0dd692c19af52e416edbe71ba1c31ef66516bb4245abad756e55ed27561717a8d6ebfd6e0591c2a213fd577f5309c38d1138b75e229c6bd7b6a9a3904a5a0a00000089717cbca6908a3a60076b2f0ec89289f01764564198790294f3fa0b7009fa9fead4e6b9a27d05c98d"], 0x2, [{0x0, 0x0}, {0x0, 0x0}]})
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0)
read$nci(r0, &(0x7f00000015c0)=""/48, 0x30)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

6.624135074s ago: executing program 1 (id=745):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async, rerun: 32)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000180)={0xa0554ea, 0x2, "ea3fd43b5f83bdc98960ff893b8f3628e3751a63bd15a67dacaf12033caeed56c0c8e43865a01953dbba6733a1f5c260987448265718a9cea23806a8527462f4f2a2274c0a94e1aab7bf41a721a06e3e99b8699f250bc900d0785053b67e6b48724955d891bc6f4e44c8dd0f4953a2d3109c24e53dba8e01bad36ec9922a09d2274bac0143a97c76fe97ae326085242452d38417a12f7abda152ea696dd01d18eeabaf4e1510c5f90e902ba90c4ff9fb63bcc838c4693160ec7e371c564696efa4d1836451f9e8a16df3bd0182f0a252daef5c0a5ca32b78634d91951b01ec46fbb129ff4f147c5426a20e9bc7c0fd25214e917a72646d40d12a781b763d3a33"}) (rerun: 32)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
getpeername$qrtr(r0, &(0x7f00000000c0), &(0x7f00000002c0)=0xc)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async)
r3 = fanotify_init(0x8, 0x0)
fanotify_mark(r3, 0x52, 0x4800002a, r2, 0x0) (async)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffbfff, '\x00', @p_u8=&(0x7f0000000040)}}) (async)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'})

6.615604545s ago: executing program 1 (id=746):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0be}}, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="92027262c389e62c728fc4f237b0d19478962b0c63e99b63344166b5b71488b5bc723206cd12b6d203d6992b45111405879ee027eb3eb52adf82084ec470e289ce9dd9cb45e359c02ee88b5b656939f4fa48", 0x52}], 0x1}, 0x20048005)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800a1e70fd1448ec575855bc3c0398ca40000001900010000000000fbdbdf0006805c0000000000295e8d8fe4fe937caf7b7149e60e07f2be82b2ac17950177ce874f89e21945dd4dbaf6a69ddfd446b5e43f25474845ec9ee306ed5d89a4cef936d11c0d4e12b1adc1594c4a0dcbbdd4d3d8486144e9d4862fb446657340f3ede9aeccd4cd082f8e1498b3e753471c819b26a6da33a569dc6a45a96289cbc3c5175a5bfcd06c405e4920d57f3e4f0502ade680832316ae36863bd1f19d894cd0805e35d9220513f6e86bbeddccce9d14f0cc58423fdf"], 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x68, {0x2, 0x4e24, @loopback}, 'syzkaller0\x00'})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x164, &(0x7f0000000200)=ANY=[])

6.254960374s ago: executing program 2 (id=752):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xe73b, 0x10040)
ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f00000000c0)={0x11, 0x54, &(0x7f0000000040)="f46d5295732ea40876268cf8b9ef95b08e772228c904a62c5f39d031cb8410b0cea72cfb75b0a13141b182b98e9eace63c3197cb3b1b40003b792cee3faaecb18a3737e22374ca22f8fb28ae69a27d4294011fe8673db9eafd429c74441a3a575c0c67c6814b57b994e1209524507698b0813c25cc30a369488afec645a6", {0x0, 0x4, 0x4f565559, 0x4, 0x4, 0x0, 0xa}})
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x2, @pix_mp={0xacea, 0x49, 0x4f565559, 0x0, 0x6, [{0x80000000, 0x5}, {0x4d08, 0xfffffffc}, {0x6, 0x400}, {0x8000, 0x4}, {0xf, 0x81}, {0x5, 0xaa1a}, {0x6, 0x9}, {0xc, 0x9}], 0x8, 0xd, 0x3, 0x2}})
r1 = syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, '\x00', @bt={0x5, 0xfffffffe, 0x6, 0x2, 0x6, 0x4, 0x2, 0x1}})
ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3)
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000300)={0x3})
r2 = pidfd_getfd(r1, r1, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)={0x2, 0x0, [{0xffff1000, 0xb6, &(0x7f0000000340)=""/182}, {0xeeef0000, 0x7e, &(0x7f0000000400)=""/126}]})
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000500)={0x0, @bt={0x4, 0x40, 0x0, 0x3, 0x3, 0x800, 0x7, 0x1, 0x6, 0x4, 0x9, 0x9af, 0xe, 0x8, 0x8, 0x20, {0x5, 0x7fff}, 0x4f, 0xe}})
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000005c0)={0xffffff7f, 0x72cc41f5, 0x1497, 0xb84a, 0x1, @discrete={0x82, 0x10001}})
getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=<r3=>0x0)
quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r3, &(0x7f00000006c0))
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000700)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x6, @remote}, 0x40, {0x2, 0x4e23, @remote}, 'bond0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000780)={'wlan1\x00'})
write$binfmt_elf32(r2, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xff, 0x6, 0x0, 0x5, 0x3, 0x3e, 0x8000, 0x130, 0x38, 0x196, 0x9, 0x0, 0x20, 0x3, 0x4000, 0x9, 0xa}, [{0x7, 0x7, 0x9, 0x40, 0x4, 0x4, 0x200, 0x3}, {0x60000000, 0x0, 0x0, 0x7, 0x9, 0x9, 0x2, 0x4}, {0x3, 0x2cde, 0xffff0001, 0x48, 0x1bd9e1cb, 0xf313, 0x7, 0x1}], "12617a269df2fc36764f269956ed51f17f67407b9617c55920010531f514fc1291471d69683ad12c0a349fa8e85f76decc0743", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6cb)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000ec0)={0x4000000c})
read$FUSE(r2, &(0x7f0000000f00)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
wait4(r4, &(0x7f0000002f40), 0x80000000, &(0x7f0000002f80))
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000003200)={0xa, @win={{0x66c, 0xa, 0x0, 0x6}, 0x8, 0x4, &(0x7f00000030c0)={{0x2, 0x3, 0x800, 0xa}, &(0x7f0000003080)={{0x9, 0x10, 0xef, 0x1}, &(0x7f0000003040)={{0x6f7, 0x9, 0x5, 0x81}}}}, 0x68dfd4ea, &(0x7f0000003100)="6396df7c47afb0114ccdefaa7017d58db1bfb698cbc89c30c855c38ab5e7ea6b0ba354c5c0815ea14e35dde10fd105cb430f1ab64384ad02e1a1010a9abe27ef671e452ce335f5e1767bb891fedde5f96d7e888883bb9aa1291ae1d95acbd87064475b44ed2b1b69d6fab5eae0c492b1fea23406947c4593c49aa13cb4f3c00b05771ba136f0bcabfe8cc4a6c89c094c6335514a70f5305dba3b902f5677165f8c1cf92cd22aad22510c98cf10e955293e730436992fe81ae2681ed286a1c8a2a7b091106fa9324617dfa97e14cb9262b5b46c18465bf4c108f171ef658a54e06ab4dc2fd275c60f9325e889679811c4c0d3188215bb", 0xfe}})
mount$overlay(0x0, &(0x7f0000003300)='./file0\x00', &(0x7f0000003340), 0x10000, &(0x7f0000003380)={[{@userxattr}, {@userxattr}, {@redirect_dir_off}, {@userxattr}], [{@dont_measure}, {@smackfsdef}, {@obj_role={'obj_role', 0x3d, '/dev/vbi#\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x12,'}}]})
ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000003440)={0x28, 0x2, 0x0, 0x0, <r5=>0x0, 0x0, 0x0, 0xd, &(0x7f0000003400)="43ffe46cf7b777defc70500d20"})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f00000034c0)={0x30, r5, 0x1, 0x0, 0xb, 0x80000001, 0x0, &(0x7f0000003480)=""/1})
ppoll(&(0x7f0000003500)=[{r0, 0x1}, {r2, 0x5}, {r2, 0x300}, {r0, 0x1000}], 0x4, &(0x7f0000003540)={0x77359400}, &(0x7f0000003580)={[0x4]}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r2)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000003600)=0x81, 0x4)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000003640)={0x40000000})
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000003680)=0x4)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000036c0)=0x1)

5.321442623s ago: executing program 2 (id=760):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2501000000000000000741000000030018"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

5.155658044s ago: executing program 2 (id=763):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d00)={'wlan0\x00'})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x259, 0x0, 0x1}]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00228ac935f1fbffffa3683ff364775e"], 0x0}, 0x0)

4.100122907s ago: executing program 1 (id=768):
keyctl$join(0x1, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000700)='.dead\x00', &(0x7f0000000800)=@chain)
r0 = syz_usb_connect(0x5, 0x4f, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0xe6, 0x85, 0xa, 0x8, 0x424, 0x7801, 0x7954, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x7, 0xe, 0x80, 0x6c, [{{0x9, 0x4, 0x3f, 0x0, 0x3, 0xf6, 0x95, 0x7f, 0xc9, [], [{{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x0, 0x6, 0x6}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x2, 0xa, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7b, 0x7d}]}}, {{0x9, 0x5, 0x1, 0x8, 0x8, 0x0, 0x4, 0x6}}]}}, {{0x9, 0x4, 0xd4, 0x43, 0x0, 0xaa, 0xf2, 0x48, 0xd1}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x22, 0x43, {0x43, 0xb, "2f65ccf609dde529f25e42d9bcf3b0f9d6f6043e913f4da54130140d5e8d25a168b66208f20d143e2f040807264450de6fe0f878fe4c8a54f798c946198b332da2"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x40, 0x10, 0xdc, "7e098687fda554c1d00735f778c58265622fb92374000b61ea997bcda7dad15a97c56541c8840e4109ede2ab9547e604da6b52be66d7beea19311e0bc8dc127c7299cc68e8b2e286a71355479e60ec762d35f7eea68b9c330af244c6279d7d647cd6c46d75d597f9c9f509901d7cf0b9b035611d4a515bbd46787e1ddc1acb33e90af91d5dbe2ceabf2cc2986de8813b4a7dab0fa3b07a5af90856738716fc56162ec3436a106810f145e22e8d8d10b50eab2cb49a6234de700c0bcc18e4736d68a8968bf265646d6d400cbd769510a0c23753ec99edcf0c5f8c23ca"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}})
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
pipe2$watch_queue(0x0, 0x80)
syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0)
r1 = add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$read(0xb, r1, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090505cf"], 0x0)

2.400061919s ago: executing program 3 (id=777):
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0xf, @private2, 0x5}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x6, 0x8, 0xff}, 0x9c)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a2230102030100fe1200010000e74c09040000005733190024dac1f91054296f0e"], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000400)={0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="851606"], 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x8842)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6d91ba7171b827"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.157844207s ago: executing program 1 (id=778):
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000))
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b15, &(0x7f0000000000)={'wlan0\x00'})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000002780))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x6083, 0x3)
bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x2, @none}, 0xe)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000100))
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431)

2.062475172s ago: executing program 2 (id=779):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={0x0, 0x6, r1, 0xb42, 0x80000})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})

1.833508968s ago: executing program 3 (id=782):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0)
landlock_restrict_self(r2, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)
ioctl$sock_ifreq(r1, 0x8922, &(0x7f0000000080)={'bond0\x00', @ifru_settings={0x81, 0x10000, @sync=0x0}})

1.719679427s ago: executing program 3 (id=783):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mlockall(0x1)
mlockall(0x7)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208402, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x7}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8100}, 0x45)
connect$netrom(r3, &(0x7f0000000300)={{0x6, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x1e)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)
bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r4, 0x80)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000003c0)={'erspan0\x00', <r7=>0x0, 0x40, 0x10, 0x401, 0x5e2, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x65, 0x0, 0x7, 0x0, 0x0, @rand_addr=0x64010101, @multicast1, {[@end, @end]}}}}})
statx(0xffffffffffffffff, &(0x7f0000000440)='./cgroup\x00', 0x6000, 0xf7b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@delpolicy={0x58, 0x14, 0x10, 0x70bd2c, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, 0x4e22, 0xfffd, 0x4e23, 0x22, 0xa, 0x40, 0x20, 0x0, r7, r8}, 0x6e6bb9}, [@etimer_thresh={0x8, 0xc, 0x3ff}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x0)

1.4865153s ago: executing program 4 (id=787):
r0 = socket(0x2, 0x3, 0x67) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
r4 = dup3(r2, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x29, 0x0, &(0x7f0000001380)) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000032c00048028000180080001006c6f67001c0002800500e13f00000000060001400004000008000340000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async, rerun: 64)
close(r1) (async, rerun: 64)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) (async)
sendto$unix(r0, 0x0, 0x0, 0x8840, 0x0, 0x0) (async)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e)

1.451725255s ago: executing program 3 (id=788):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000)=0x1, 0x4)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='cgroup\x00', 0x2208080, 0x0)

1.347935147s ago: executing program 4 (id=789):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x50, 0xffffffffffffffff, 0x11379000)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0) (async)
ptrace(0x10, r0)
ptrace$peekuser(0x3, r0, 0x28)
ptrace$poke(0x5, r0, &(0x7f0000000040), 0x563)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x4c8f03)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4) (async)
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)

1.347337234s ago: executing program 3 (id=790):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="65e6008d99ff"})
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
timer_create(0x3, &(0x7f0000000200)={0x0, 0xb, 0x4, @thr={&(0x7f0000000100)="d6aa054a49ac1d5a25740a71598a75d2612b5f16973af1a2313de5611b1cb2f13a", &(0x7f0000000140)="023b63d708d7fa7306bc64c249a983f21d4bad67d155f3d27f2a4aaa2eb02e9456bd22cff961eb0458b071f68b14e6256cf416d481ff7056c4d8fed1e90b8cc11ce81b202623b09d6e8e222aa9ca6b2a33e3f410d4602aaa1b3faec91948a00bd297fbe9f444c01118933c4db1ff08c41318c404773cd8e32e469b17a88fbeba186caa62c6d46e"}}, &(0x7f0000000440)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000480)={{0x0, 0x3938700}}, 0x0)
r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x3})
close(r3)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
recvfrom(r4, 0x0, 0x0, 0x1, 0x0, 0x0)
mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='ocfs2\x00', 0x0, &(0x7f0000000400)='usrquota')
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)

1.289431978s ago: executing program 4 (id=791):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001800), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000380))
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='dctcp', 0x5)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='reno', 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x86)
sendmmsg$inet(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)="82", 0x1}], 0x1, &(0x7f0000003a80)=ANY=[@ANYBLOB="1100000000000000000000000100000003000000000000001400000000000000000000000100000003000000000000003c0000000000000000000000070000000100831bfd64010102e0000002ffffffff0a010100ac1e0101ac14142d890b71ac1e01010000000001000000000000001c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac1e00010a01010000000000140000000000000000000000010000000800000000000000140000000000000000000000020000002809000000000000280000000000000000000000070000000186160000000006103d2f6229b90b2dd4c011ddbab7c2001c"], 0x108}}], 0x1, 0xc1)

1.129278278s ago: executing program 2 (id=792):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mincore(&(0x7f000051f000/0x3000)=nil, 0x3000, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioperm(0x0, 0x6, 0x2da3b9f3)
prctl$PR_SET_NO_NEW_PRIVS(0x38, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = getpid()
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r3, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfc, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000002, 0x100, 0x0, 0x180, 0x1, 0x7d, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x0, 0xbdb], 0x8080000, 0x144652})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioperm(0x6, 0x0, 0x5)
r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
mmap$KVM_VCPU(&(0x7f0000456000/0x1000)=nil, r6, 0x100000c, 0x16831, 0xffffffffffffffff, 0x0)
mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, r6, 0x2, 0x12, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.035925235s ago: executing program 1 (id=793):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000100)='./bus/../file0\x00', 0x200802, 0x128)
mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) (async)
mknodat$loop(r1, &(0x7f0000000240)='./file1\x00', 0x6000, 0x1) (async)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000480)=ANY=[], 0xf0) (async)
sendto$inet6(r2, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) (async)
chdir(&(0x7f00000003c0)='./bus\x00') (async)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0140, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x401c5820, &(0x7f0000000300)={@id={0x18, 0x0, @c}})
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0}, 0x0) (async)
bind$ax25(r3, &(0x7f00000001c0)={{0x3, @bcast, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)

976.379986ms ago: executing program 4 (id=794):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xcb, 0x0, 0x0)
bind$vsock_stream(r1, &(0x7f0000000940), 0x10)
close(0x3)
listen(r1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x40, 0x0, 0x1, 0xfffffffc, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x40}, 0x2, 0x34005, 0x0, 0x4008815}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000080), 0xcc4, 0x208000)
sendmsg$IPSET_CMD_TYPE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0xd, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x4090)
write(r0, &(0x7f0000000040)='3\r', 0x2)
syz_usb_connect(0x3, 0x36, &(0x7f00000028c0)={{0x12, 0x1, 0x110, 0x6b, 0xc8, 0xb4, 0x40, 0x168c, 0x2, 0x5cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x8, 0x180, 0xc3, [{{0x9, 0x4, 0xdf, 0x5, 0x2, 0xf8, 0x2d, 0xd5, 0x4, [], [{{0x9, 0x5, 0xb, 0x2, 0x40, 0x4, 0x1a, 0x3}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0xfb, 0xbf, 0x4}}]}}]}}]}}, 0x0)

842.010177ms ago: executing program 2 (id=795):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
clock_adjtime(0x0, &(0x7f0000000200)={0x7fffffff, 0x8000000000000001, 0x80000001, 0xd6, 0x9c7, 0x2, 0x100, 0xd5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e8, 0x8000000000000001, 0x6, 0x8, 0x9, 0x1fc00000000, 0x100, 0x6, 0x2, 0x1, 0x8, 0x200, 0x8001, 0x4}) (async)
syz_usb_connect$uac1(0x0, 0x9f, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x0)

368.465985ms ago: executing program 3 (id=796):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x37, 0xc6, 0xae, 0x20, 0x5e3, 0x502, 0xdb7e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2a, 0x0, 0x0, 0x55, 0x42, 0x89}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto(r1, &(0x7f0000000100)="71c2b06cb8d26b8de23d563510d4b6737ffcaf90ecc18b30286bf9cd39cd6c3e8d89153931", 0x25, 0x40080d0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xc6, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000200)='<', 0x1, 0x805, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)

275.43089ms ago: executing program 4 (id=797):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="d8000000ed032f3b5004180081054e81f782db4cb904021d0800fe007c05e8fe55a10a001500030014600e12080005007f370401a8001600200006000400027c035c0461c1b37f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8009e8dd71c4417421177ac6f2a25e17cbec4c2e98a61e284ce5a7cbf4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e0009a7f36c298cd39aa18a35830ec3dd42360db798262f3d40fad9922e5b1ed91b5667e006dcdf63951fcace81ed0bffece4edef3d93452a92", 0xe3}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000025c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094)

224.656918ms ago: executing program 4 (id=798):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1b, 0x53, 0x2f, 0x40, 0x10b8, 0x1e14, 0xdbf2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9f, 0x0, 0x0, 0x1b, 0x25, 0xa6}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000000c0)={0x0, 0x8, 0x3, "0300fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000)

0s ago: executing program 1 (id=799):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000407d1e323200000000000109022400010000004009040002010300020009210100000122a0000905810308000000045092be81768a31901cd3463398ff5fa335148539"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="200da0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000407d1e323200000000000109022400010000004009040002010300020009210100000122a0000905810308000000045092be81768a31901cd3463398ff5fa335148539"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000840)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="200da0"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)

kernel console output (not intermixed with test programs):

  134.089742][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  134.194737][ T5936] usb 3-1: Using ep0 maxpacket: 8
[  134.212381][ T5936] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67
[  134.230579][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.248318][ T5936] usb 3-1: Product: syz
[  134.252707][ T5936] usb 3-1: Manufacturer: syz
[  134.264799][ T5936] usb 3-1: SerialNumber: syz
[  134.284461][ T5936] usb 3-1: config 0 descriptor??
[  134.332588][   T24] snd-usb-audio 5-1:0.126: probe with driver snd-usb-audio failed with error -12
[  134.354299][ T5936] ipw 3-1:0.0: IPWireless converter converter detected
[  134.483258][ T5936] usb 5-1: USB disconnect, device number 14
[  134.584720][ T5948] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  134.747560][ T5948] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  134.756101][ T5948] usb 2-1: config 0 has no interface number 0
[  134.766599][ T5948] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  134.777831][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.788094][   T24] tipc: Node number set to 2886997007
[  134.794858][ T5948] usb 2-1: Product: syz
[  134.799241][ T5948] usb 2-1: Manufacturer: syz
[  134.808359][ T5948] usb 2-1: SerialNumber: syz
[  134.819299][ T5948] usb 2-1: config 0 descriptor??
[  134.987426][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'.
[  134.998765][ T7086] openvswitch: netlink: Flow actions attr not present in new flow.
[  135.010976][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.023560][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.028949][ T7090] loop9: detected capacity change from 0 to 7
[  135.041168][ T7090] buffer_io_error: 23 callbacks suppressed
[  135.041182][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.055912][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.063976][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.081392][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.089939][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.098773][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.108735][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.117919][ T7090] ldm_validate_partition_table(): Disk read failed.
[  135.125420][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.134225][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.154181][ T7090] Buffer I/O error on dev loop9, logical block 0, async page read
[  135.162770][ T7090] Dev loop9: unable to read RDB block 0
[  135.168704][ T7090]  loop9: unable to read partition table
[  135.174839][ T7090] loop9: partition table beyond EOD, truncated
[  135.191825][ T7090] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  135.191825][ T7090] 
) failed (rc=-5)
[  135.239483][ T5948] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2)
[  135.247619][ T5948] usb 2-1: Firmware version (0.0) predates our first public release.
[  135.265551][ T5948] usb 2-1: Please update to version 0.2 or newer
[  135.279896][ T7101] netlink: 96 bytes leftover after parsing attributes in process `syz.4.310'.
[  135.480535][ T5948] usb 2-1: USB disconnect, device number 34
[  135.584803][ T5899] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  135.714764][ T5899] usb 5-1: device descriptor read/64, error -71
[  135.964684][ T5899] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  136.105872][ T5899] usb 5-1: device descriptor read/64, error -71
[  136.141792][ T7115] netlink: 'syz.1.314': attribute type 4 has an invalid length.
[  136.215658][ T5899] usb usb5-port1: attempt power cycle
[  136.554704][ T5899] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  136.575384][ T5899] usb 5-1: device descriptor read/8, error -71
[  136.634189][ T7126] nbd: must specify an index to disconnect
[  136.656007][ T5906] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  136.734700][ T5936] usb 3-1: USB disconnect, device number 34
[  136.746981][ T5936] ipw 3-1:0.0: device disconnected
[  136.814763][ T5899] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  136.826678][ T5906] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  136.835858][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.843898][ T5906] usb 2-1: Product: syz
[  136.848542][ T5899] usb 5-1: device descriptor read/8, error -71
[  136.855426][ T5906] usb 2-1: Manufacturer: syz
[  136.860042][ T5906] usb 2-1: SerialNumber: syz
[  136.866789][ T5906] usb 2-1: config 0 descriptor??
[  136.974920][ T5899] usb usb5-port1: unable to enumerate USB device
[  137.074442][ T5906] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  137.105174][ T5936] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  137.267081][ T5936] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  137.276946][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.287781][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.288323][ T5936] usb 3-1: config 1 has no interface number 0
[  137.302452][ T5936] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  137.314055][ T5936] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  137.324344][   T30] audit: type=1326 audit(1759672717.477:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.3.323" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05cbb8eec9 code=0x0
[  137.346175][ T5936] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[  137.356742][ T5936] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.370427][ T5936] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  137.379657][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.387721][ T5936] usb 3-1: Product: syz
[  137.391906][ T5936] usb 3-1: Manufacturer: syz
[  137.396559][ T5936] usb 3-1: SerialNumber: syz
[  137.405170][ T7132] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  137.412391][ T7132] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  137.624061][ T7132] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  137.631443][ T7132] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  137.840273][ T7132] program syz.2.320 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.190819][   T50] Bluetooth: hci4: Frame reassembly failed (-84)
[  138.219485][ T5936] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  138.237799][    C0] sierra_net 3-1:1.7 wwan0: : unexpected notification 42!
[  138.400309][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.4.325'.
[  138.457550][ T7153] befs: (nbd4): No write support. Marking filesystem read-only
[  138.475019][ T5936] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71
[  138.482432][ T5936] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71
[  138.497180][ T5936] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71
[  138.504411][ T5936] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71
[  138.517449][ T5936] usb 3-1: USB disconnect, device number 35
[  138.526989][ T5936] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem
[  138.545765][ T5906] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  138.583511][ T5906] usb 2-1: USB disconnect, device number 35
[  138.625867][ T5936] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  138.814724][ T5948] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  138.944751][ T5948] usb 5-1: device descriptor read/64, error -71
[  139.184691][ T5948] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[  139.274900][   T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  139.314704][ T5948] usb 5-1: device descriptor read/64, error -71
[  139.334687][ T5892] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  139.414800][   T24] usb 3-1: device descriptor read/64, error -71
[  139.425038][ T5948] usb usb5-port1: attempt power cycle
[  139.464931][ T5892] usb 2-1: device descriptor read/64, error -71
[  139.654719][   T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  139.704738][ T5892] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  139.764734][ T5948] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  139.784764][   T24] usb 3-1: device descriptor read/64, error -71
[  139.791309][ T5948] usb 5-1: device descriptor read/8, error -71
[  139.834743][ T5892] usb 2-1: device descriptor read/64, error -71
[  139.895105][   T24] usb usb3-port1: attempt power cycle
[  139.945000][ T5892] usb usb2-port1: attempt power cycle
[  140.034948][ T5948] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[  140.055133][ T5948] usb 5-1: device descriptor read/8, error -71
[  140.167002][ T5948] usb usb5-port1: unable to enumerate USB device
[  140.234760][   T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  140.244768][ T5852] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  140.251088][ T5850] Bluetooth: hci4: command 0x1003 tx timeout
[  140.258182][   T24] usb 3-1: device descriptor read/8, error -71
[  140.284708][ T5892] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  140.313679][ T5892] usb 2-1: device descriptor read/8, error -71
[  140.332144][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.341278][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.504725][   T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  140.525186][   T24] usb 3-1: device descriptor read/8, error -71
[  140.564808][ T5892] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  140.585100][ T5892] usb 2-1: device descriptor read/8, error -71
[  140.635003][   T24] usb usb3-port1: unable to enumerate USB device
[  140.696312][ T5892] usb usb2-port1: unable to enumerate USB device
[  140.976473][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  140.989138][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.632561][ T7174] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  141.644001][ T7174] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  141.658394][ T7174] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  141.681630][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.693210][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.706483][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.715341][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.044688][ T5899] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  142.229583][ T5899] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  142.239345][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.248528][ T5899] usb 5-1: Product: syz
[  142.252698][ T5899] usb 5-1: Manufacturer: syz
[  142.257744][ T5899] usb 5-1: SerialNumber: syz
[  142.435173][ T5892] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  142.494707][   T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  142.588118][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short
[  142.597356][ T5892] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  142.610842][ T5892] usb 3-1: string descriptor 0 read error: -22
[  142.617177][ T5892] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  142.626405][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.644807][   T24] usb 2-1: Using ep0 maxpacket: 32
[  142.652119][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.665064][   T24] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  142.674101][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.684461][   T24] usb 2-1: config 0 descriptor??
[  142.765941][ T5892] usb 3-1: reset high-speed USB device number 40 using dummy_hcd
[  142.851522][ T7185] dvmrp0: entered allmulticast mode
[  142.878026][ T7181] delete_channel: no stack
[  143.116585][   T24] steelseries 0003:1038:1410.000B: item fetching failed at offset 2/5
[  143.138758][   T24] steelseries 0003:1038:1410.000B: parse failed
[  143.155056][   T24] steelseries 0003:1038:1410.000B: probe with driver steelseries failed with error -22
[  143.311894][ T5936] usb 2-1: USB disconnect, device number 40
[  143.454839][ T5892] usb 3-1: device descriptor read/64, error -71
[  143.694738][ T5892] usb 3-1: reset high-speed USB device number 40 using dummy_hcd
[  143.852273][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.875195][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.880545][ T7194] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  143.893508][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short
[  143.906263][ T5892] usb 3-1: device firmware changed
[  143.933535][ T5892] usb 3-1: USB disconnect, device number 40
[  144.453804][ T7199] tmpfs: Unknown parameter 'nr'
[  144.579761][ T7205] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  144.596696][ T7205] (syz.1.345,7205,1):ocfs2_get_sector:1714 ERROR: status = -5
[  144.606764][ T7205] (syz.1.345,7205,1):ocfs2_sb_probe:753 ERROR: status = -5
[  144.613998][ T7205] (syz.1.345,7205,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  144.644865][ T7205] (syz.1.345,7205,1):ocfs2_fill_super:1177 ERROR: status = -5
[  144.656268][ T7205] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  144.693194][ T7205] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  144.950755][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'.
[  144.977205][ T7223] openvswitch: netlink: Flow key attr not present in new flow.
[  145.105736][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.226150][ T5892] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  145.263962][ T7233] block nbd2: NBD_DISCONNECT
[  145.384698][ T5892] usb 2-1: Using ep0 maxpacket: 32
[  145.391364][ T5892] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  145.404248][ T5892] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  145.414142][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.454638][ T5892] usb 2-1: Product: syz
[  145.458838][ T5892] usb 2-1: Manufacturer: syz
[  145.463431][ T5892] usb 2-1: SerialNumber: syz
[  145.499015][ T5892] usb 2-1: config 0 descriptor??
[  145.505281][ T7226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  145.530059][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -EPROTO
[  145.532656][ T5892] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15
[  145.572751][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  145.593850][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  145.608694][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  145.627356][ T5899] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  145.640131][ T7245] sctp: [Deprecated]: syz.2.356 (pid 7245) Use of int in max_burst socket option.
[  145.640131][ T7245] Use struct sctp_assoc_value instead
[  145.658048][ T5899] usb 5-1: USB disconnect, device number 23
[  145.710474][ T7250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.710859][ T7250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.756672][   T24] usb 2-1: USB disconnect, device number 41
[  145.756774][    C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  145.944705][ T5892] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  146.094707][ T5892] usb 3-1: Using ep0 maxpacket: 16
[  146.108229][ T5892] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  146.124451][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.133377][ T5892] usb 3-1: Product: syz
[  146.141030][ T5892] usb 3-1: Manufacturer: syz
[  146.146022][ T5892] usb 3-1: SerialNumber: syz
[  146.156667][ T5892] usb 3-1: config 0 descriptor??
[  146.166013][ T5892] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  146.365707][ T5892] usb 3-1: clie_3_5_startup: get config number failed: -71
[  146.386936][ T5892] visor 3-1:0.0: probe with driver visor failed with error -71
[  146.417436][ T5892] usb 3-1: USB disconnect, device number 41
[  146.530505][ T7266] netlink: 276 bytes leftover after parsing attributes in process `syz.1.363'.
[  146.658676][ T7273] netlink: 'syz.1.365': attribute type 2 has an invalid length.
[  146.666963][ T7273] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.365'.
[  146.694709][   T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  146.844704][   T24] usb 5-1: Using ep0 maxpacket: 8
[  146.851876][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.861869][   T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  146.876443][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  146.887273][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.895791][   T24] usb 5-1: Product: syz
[  146.900066][   T24] usb 5-1: Manufacturer: syz
[  146.904978][   T24] usb 5-1: SerialNumber: syz
[  146.924729][ T5948] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  147.054706][ T5948] usb 2-1: device descriptor read/64, error -71
[  147.119975][ T7264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.132267][ T7264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.148977][   T24] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  147.170403][   T24] usb 5-1: USB disconnect, device number 24
[  147.190636][   T24] usblp1: removed
[  147.295494][ T5948] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  147.337075][ T7278] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  147.348437][ T7278] exFAT-fs (nullb0): invalid boot record signature
[  147.355917][ T7278] exFAT-fs (nullb0): failed to read boot sector
[  147.362296][ T7278] exFAT-fs (nullb0): failed to recognize exfat type
[  147.434713][ T5948] usb 2-1: device descriptor read/64, error -71
[  147.545077][ T5948] usb usb2-port1: attempt power cycle
[  147.604751][ T5899] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  147.690271][ T7280] tmpfs: Cannot retroactively limit inodes
[  147.784706][ T5899] usb 3-1: Using ep0 maxpacket: 16
[  147.793499][ T5899] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  147.803290][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.812487][ T5899] usb 3-1: Product: syz
[  147.817080][ T5899] usb 3-1: Manufacturer: syz
[  147.821749][ T5899] usb 3-1: SerialNumber: syz
[  147.829751][ T5899] usb 3-1: config 0 descriptor??
[  147.843798][ T5899] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  147.884692][ T5948] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  147.906118][ T5948] usb 2-1: device descriptor read/8, error -71
[  148.154682][ T5948] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  148.195352][ T5948] usb 2-1: device descriptor read/8, error -71
[  148.250656][ T7278] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  148.263291][ T7278] exFAT-fs (nullb0): invalid boot record signature
[  148.273626][ T7278] exFAT-fs (nullb0): failed to read boot sector
[  148.286809][ T7278] exFAT-fs (nullb0): failed to recognize exfat type
[  148.297462][ T7299] netlink: 148 bytes leftover after parsing attributes in process `syz.4.371'.
[  148.314856][ T5948] usb usb2-port1: unable to enumerate USB device
[  148.327662][ T5899] usb 3-1: clie_3_5_startup: get interface number failed: -71
[  148.344184][ T5899] visor 3-1:0.0: probe with driver visor failed with error -71
[  148.388055][ T5899] usb 3-1: USB disconnect, device number 42
[  148.531979][ T7312] syzkaller1: entered promiscuous mode
[  148.538471][ T7312] syzkaller1: entered allmulticast mode
[  148.705161][ T7318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.722007][ T7318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.755094][ T5899] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  148.924775][ T5899] usb 3-1: Using ep0 maxpacket: 8
[  148.932562][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.944862][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  148.959235][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  148.971315][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  148.983767][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  148.994707][ T5948] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  148.994902][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.020556][ T5899] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  149.029992][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.039245][ T5899] usb 3-1: Product: syz
[  149.043726][ T5899] usb 3-1: Manufacturer: syz
[  149.049177][ T5899] usb 3-1: SerialNumber: syz
[  149.058054][ T5899] usb 3-1: config 0 descriptor??
[  149.064364][ T7305] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  149.166603][ T5948] usb 5-1: config 0 has an invalid interface number: 71 but max is 0
[  149.184660][ T5948] usb 5-1: config 0 has no interface number 0
[  149.190823][ T5948] usb 5-1: config 0 interface 71 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  149.214679][ T5948] usb 5-1: config 0 interface 71 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[  149.224869][ T5948] usb 5-1: config 0 interface 71 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  149.249736][ T5948] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0
[  149.258885][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.266946][ T5948] usb 5-1: Product: syz
[  149.271137][ T5948] usb 5-1: Manufacturer: syz
[  149.275824][ T5948] usb 5-1: SerialNumber: syz
[  149.286093][ T5948] usb 5-1: config 0 descriptor??
[  149.291812][ T7317] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  149.315914][ T5948] kvaser_usb 5-1:0.71: error -ENODEV: Cannot get usb endpoint(s)
[  149.338436][ T7318] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  149.348258][ T7321] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  149.661164][ T7305] netlink: 'syz.2.373': attribute type 1 has an invalid length.
[  149.669564][ T7305] netlink: 248 bytes leftover after parsing attributes in process `syz.2.373'.
[  149.685110][   T30] audit: type=1326 audit(1759672729.827:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  149.723403][   T30] audit: type=1326 audit(1759672729.827:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  149.750327][   T30] audit: type=1326 audit(1759672729.827:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  149.786949][   T30] audit: type=1326 audit(1759672729.827:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  149.791202][ T7327] netlink: 184 bytes leftover after parsing attributes in process `syz.1.378'.
[  149.819609][   T30] audit: type=1326 audit(1759672729.827:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  149.846143][   T30] audit: type=1326 audit(1759672729.827:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  149.870491][   T30] audit: type=1326 audit(1759672729.827:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  149.893136][   T30] audit: type=1326 audit(1759672729.827:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  149.932197][   T30] audit: type=1326 audit(1759672729.827:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  149.977598][   T30] audit: type=1326 audit(1759672729.827:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7302 comm="syz.2.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x7fc00000
[  150.271144][ T7342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.295471][ T7342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.303411][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.312296][ T5948] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[  150.325261][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.444723][ T5948] usb 2-1: device descriptor read/64, error -71
[  150.452435][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.463498][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.684732][ T5948] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  150.777135][ T5899] rc_core: IR keymap rc-snapstream-firefly not found
[  150.783982][ T5899] Registered IR keymap rc-empty
[  150.790156][ T5899] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  150.800929][ T5899] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16
[  150.817989][ T5899] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input17
[  150.835375][ T5948] usb 2-1: device descriptor read/64, error -71
[  150.840735][ T5899] usb 3-1: USB disconnect, device number 43
[  150.840787][    C0] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  150.948443][ T5948] usb usb2-port1: attempt power cycle
[  151.098138][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.117765][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.152430][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.169142][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.268104][ T7376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.278222][ T7376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.311140][ T5948] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  151.385634][ T5948] usb 2-1: device descriptor read/8, error -71
[  151.424687][ T5899] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[  151.576217][ T5899] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  151.584405][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.596062][ T5899] usb 3-1: config 0 has no interface number 0
[  151.604374][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  151.613688][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.621741][ T5899] usb 3-1: Product: syz
[  151.626072][ T5899] usb 3-1: Manufacturer: syz
[  151.630678][ T5899] usb 3-1: SerialNumber: syz
[  151.635529][ T5948] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  151.638805][ T5899] usb 3-1: config 0 descriptor??
[  151.653324][ T5899] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  151.660822][ T5899] uvcvideo 3-1:0.105: No valid video chain found.
[  151.665437][ T5948] usb 2-1: device descriptor read/8, error -71
[  151.774989][ T5948] usb usb2-port1: unable to enumerate USB device
[  151.858776][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.868668][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.878628][ T5892] usb 3-1: USB disconnect, device number 44
[  151.939957][ T7382] kvm: pic: single mode not supported
[  151.940043][ T7382] kvm: pic: level sensitive irq not supported
[  151.945965][ T7382] kvm: pic: non byte read
[  151.956827][ T7382] kvm: pic: non byte read
[  151.961367][ T7382] kvm: pic: non byte read
[  151.966195][ T7382] kvm: pic: non byte read
[  151.971058][ T7382] kvm: pic: non byte read
[  151.976350][ T7382] kvm: pic: non byte read
[  151.981045][ T7382] kvm: pic: single mode not supported
[  151.981108][ T7382] kvm: pic: non byte read
[  151.992052][ T7382] kvm: pic: non byte read
[  152.008019][ T7382] kvm: pic: non byte read
[  152.012663][ T7382] kvm: pic: level sensitive irq not supported
[  152.012728][ T7382] kvm: pic: non byte read
[  152.033140][ T7382] kvm: pic: level sensitive irq not supported
[  152.033530][ T7382] kvm: pic: single mode not supported
[  152.042442][ T7382] kvm: pic: single mode not supported
[  152.049238][ T7382] kvm: pic: single mode not supported
[  152.055508][ T7382] kvm: pic: single mode not supported
[  152.060911][ T7382] kvm: pic: level sensitive irq not supported
[  152.067426][ T7382] kvm: pic: single mode not supported
[  152.073799][ T7382] kvm: pic: level sensitive irq not supported
[  152.080013][ T7382] kvm: pic: single mode not supported
[  152.087648][ T7382] kvm: pic: single mode not supported
[  152.093058][ T7382] kvm: pic: level sensitive irq not supported
[  152.099133][ T7382] kvm: pic: single mode not supported
[  152.105234][ T7382] kvm: pic: level sensitive irq not supported
[  152.112732][ T7382] kvm: pic: level sensitive irq not supported
[  152.119192][ T7382] kvm: pic: level sensitive irq not supported
[  152.125739][ T7382] kvm: pic: level sensitive irq not supported
[  152.193828][ T7388] netlink: 10 bytes leftover after parsing attributes in process `syz.4.397'.
[  152.213118][ T7388] No source specified
[  152.414106][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.427831][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.468774][ T7402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.479362][ T7402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.684718][ T5892] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  152.834685][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  152.841449][ T5892] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  152.849626][ T5892] usb 3-1: config 0 has no interface number 0
[  152.855790][ T5892] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.866776][ T5892] usb 3-1: config 0 interface 85 has no altsetting 0
[  152.875116][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  152.884144][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.892589][ T5892] usb 3-1: Product: syz
[  152.897233][ T5892] usb 3-1: Manufacturer: syz
[  152.901829][ T5892] usb 3-1: SerialNumber: syz
[  152.908433][ T5892] usb 3-1: config 0 descriptor??
[  153.061330][ T7407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.089022][ T7407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.107727][ T7409] netlink: 316 bytes leftover after parsing attributes in process `syz.1.405'.
[  153.173922][ T5892] appletouch 3-1:0.85: Geyser mode initialized.
[  153.189893][ T5892] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input18
[  153.301187][ T5899] IPVS: starting estimator thread 0...
[  153.311417][ T7420] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  153.324978][ T7419] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  153.346727][    C0] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  153.357142][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.370208][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.386208][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.404768][ T7421] IPVS: using max 32 ests per chain, 76800 per kthread
[  153.416024][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.462086][ T7429] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.410' sets config #-235
[  153.491923][ T7429] netlink: 52 bytes leftover after parsing attributes in process `syz.1.410'.
[  153.510789][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.411'.
[  153.568387][ T7435] vivid-000: =================  START STATUS  =================
[  153.576932][ T7435] vivid-000: Enable Output Cropping: true
[  153.583525][ T7435] vivid-000: Enable Output Composing: true
[  153.589554][ T7435] vivid-000: Enable Output Scaler: true
[  153.595169][ T7435] vivid-000: Tx RGB Quantization Range: Automatic
[  153.601601][ T7435] vivid-000: Transmit Mode: HDMI
[  153.606869][ T7435] vivid-000: Hotplug Present: 0x00000000
[  153.612608][ T7435] vivid-000: RxSense Present: 0x00000000
[  153.618295][ T7435] vivid-000: EDID Present: 0x00000000
[  153.624510][ T7435] vivid-000: ==================  END STATUS  ==================
[  153.715724][ T7441] netlink: 52 bytes leftover after parsing attributes in process `syz.3.413'.
[  153.730796][ T7441] input: syz1 as /devices/virtual/input/input19
[  153.974286][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.985311][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.169648][ T7465] pim6reg1: entered promiscuous mode
[  154.175389][ T7465] pim6reg1: entered allmulticast mode
[  154.404291][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.414750][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.544703][ T5892] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  154.605414][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.614264][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.700061][ T5892] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  154.709279][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.717381][ T5892] usb 2-1: Product: syz
[  154.721566][ T5892] usb 2-1: Manufacturer: syz
[  154.726367][ T5892] usb 2-1: SerialNumber: syz
[  154.734857][ T5892] usb 2-1: config 0 descriptor??
[  154.942478][ T5892] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  154.965898][ T5892] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  154.998308][ T5892] usb 2-1: USB disconnect, device number 50
[  155.029194][ T7483] Mount JFS Failure: -5
[  155.065998][ T7485] pim6reg9: entered allmulticast mode
[  155.202149][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.214075][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.412558][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.421267][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.444735][ T5892] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  155.570565][ T5899] usb 3-1: USB disconnect, device number 45
[  155.592274][ T5899] appletouch 3-1:0.85: input: appletouch disconnected
[  155.597464][ T5892] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  155.620382][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.632485][ T5892] usb 2-1: config 0 descriptor??
[  155.641242][ T5892] cp210x 2-1:0.0: cp210x converter detected
[  155.645263][ T7499] C: renamed from team_slave_0 (while UP)
[  155.656688][ T7499] netlink: 'syz.2.430': attribute type 2 has an invalid length.
[  155.664493][ T7499] netlink: 128 bytes leftover after parsing attributes in process `syz.2.430'.
[  155.674402][ T7499] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  155.740191][ T7501] Unsupported ieee802154 address type: 0
[  155.851819][ T7503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.863829][ T7503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.006669][ T7505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  156.056153][ T5892] usb 2-1: cp210x converter now attached to ttyUSB0
[  156.091346][ T7511] comedi comedi0: Minor 3 specified more than once!
[  156.106698][ T7511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.117442][ T7511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.252740][ T7492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.427'.
[  156.270385][ T5892] usb 2-1: USB disconnect, device number 51
[  156.280499][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  156.288010][ T7513] netlink: 'syz.2.435': attribute type 4 has an invalid length.
[  156.303162][ T5892] cp210x 2-1:0.0: device disconnected
[  156.470128][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.479097][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.064705][ T7523] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  157.124050][ T7525] overlayfs: overlapping lowerdir path
[  157.414688][ T5948] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  157.566205][ T5948] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  157.575391][ T5948] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  157.584423][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.595573][ T5948] usb 3-1: config 0 descriptor??
[  158.074742][ T5892] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  158.226194][ T5892] usb 2-1: config 0 has an invalid descriptor of length 81, skipping remainder of the config
[  158.236504][ T5892] usb 2-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  158.249826][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0
[  158.257381][ T5892] usb 2-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00
[  158.266569][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.278933][ T5892] usb 2-1: config 0 descriptor??
[  158.287536][ T5892] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  158.848897][ T5899] usb 2-1: USB disconnect, device number 52
[  158.975958][   T30] kauditd_printk_skb: 729 callbacks suppressed
[  158.975974][   T30] audit: type=1326 audit(1759672739.127:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz.3.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cbb8eec9 code=0x7fc00000
[  159.080892][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.090097][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.100146][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.109034][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.224730][ T5899] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  159.380376][ T5899] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  159.389647][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.397768][ T5899] usb 2-1: Product: syz
[  159.401933][ T5899] usb 2-1: Manufacturer: syz
[  159.406596][ T5899] usb 2-1: SerialNumber: syz
[  159.413313][ T5899] usb 2-1: config 0 descriptor??
[  159.580679][   T30] audit: type=1326 audit(1759672739.727:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea598eec9 code=0x7ffc0000
[  159.603690][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  159.613367][   T30] audit: type=1326 audit(1759672739.757:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ea592af79 code=0x7ffc0000
[  159.708178][   T30] audit: type=1326 audit(1759672739.757:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ea592af79 code=0x7ffc0000
[  159.745743][   T30] audit: type=1326 audit(1759672739.757:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ea592af79 code=0x7ffc0000
[  159.768580][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  159.778894][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.787833][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.788381][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  159.812813][   T30] audit: type=1326 audit(1759672739.757:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ea592af79 code=0x7ffc0000
[  159.835906][   T30] audit: type=1326 audit(1759672739.757:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ea592af79 code=0x7ffc0000
[  159.860008][   T30] audit: type=1326 audit(1759672739.757:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ea592af79 code=0x7ffc0000
[  159.891040][   T30] audit: type=1326 audit(1759672739.757:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ea592af79 code=0x7ffc0000
[  159.913201][    C1] vkms_vblank_simulate: vblank timer overrun
[  159.919918][   T30] audit: type=1326 audit(1759672739.757:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7552 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ea592af79 code=0x7ffc0000
[  159.942103][    C1] vkms_vblank_simulate: vblank timer overrun
[  159.977350][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.987530][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.178273][ T5906] usb 3-1: USB disconnect, device number 46
[  160.222410][ T7560] nfs: Unknown parameter 'defcontext'
[  160.532572][ T5899] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  160.575412][ T5899] asix 2-1:0.0: probe with driver asix failed with error -71
[  160.612685][ T7579] program syz.1.456 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  160.637977][ T5899] usb 2-1: USB disconnect, device number 53
[  160.664495][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.687115][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.765039][ T7587] [U] @
[  160.882811][ T7597] netlink: 64 bytes leftover after parsing attributes in process `syz.4.461'.
[  160.964407][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.973983][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.019451][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'.
[  161.029415][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'.
[  161.115752][ T5906] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  161.199661][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.208695][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.275583][ T5906] usb 2-1: Using ep0 maxpacket: 8
[  161.282367][ T5906] usb 2-1: config 127 has an invalid interface number: 171 but max is 1
[  161.290888][ T5906] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  161.304786][ T5906] usb 2-1: config 127 has no interface number 1
[  161.311104][ T5906] usb 2-1: config 127 interface 171 has no altsetting 0
[  161.320917][ T5906] usb 2-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  161.331146][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.339473][ T5906] usb 2-1: Product: syz
[  161.343664][ T5906] usb 2-1: Manufacturer: syz
[  161.348349][ T5906] usb 2-1: SerialNumber: syz
[  161.541874][ T7620] CIFS mount error: No usable UNC path provided in device string!
[  161.541874][ T7620] 
[  161.552586][ T7620] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  161.559483][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.571035][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.581061][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.589985][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.598995][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.608926][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.621141][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.630485][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.642380][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.652849][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.735923][ T5948] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  161.783018][ T5906] xr_serial 2-1:127.171: xr_serial converter detected
[  161.791291][ T5906] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  161.797913][ T5906] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  161.813050][ T5906] usb 2-1: USB disconnect, device number 54
[  161.826961][ T5906] xr_serial 2-1:127.171: device disconnected
[  161.842050][ T7626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.853525][ T7626] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.874474][ T7626] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  161.926785][ T5948] usb 3-1: config 0 has an invalid interface number: 29 but max is 0
[  161.935258][ T5948] usb 3-1: config 0 has no interface number 0
[  161.942765][ T5948] usb 3-1: config 0 interface 29 has no altsetting 0
[  161.956514][ T5948] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  161.974709][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.987618][ T5948] usb 3-1: Product: syz
[  161.990471][ T7630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.999319][ T5948] usb 3-1: Manufacturer: syz
[  162.001038][ T7630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.007871][ T5948] usb 3-1: SerialNumber: syz
[  162.027754][ T7630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.028183][ T5948] usb 3-1: config 0 descriptor??
[  162.037024][ T7630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.249945][ T5948] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v207 fw v188.0.0 (2 channels)
[  162.321168][ T7632] loop3: detected capacity change from 0 to 7
[  162.332541][ T7632] Dev loop3: unable to read RDB block 7
[  162.338625][ T7632]  loop3: unable to read partition table
[  162.344524][ T7632] loop3: partition table beyond EOD, truncated
[  162.351299][ T7632] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  162.451601][ T5948] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71
[  162.460337][ T5948] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71)
[  162.515665][ T5948] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71
[  162.528127][ T5948] usb 3-1: USB disconnect, device number 47
[  162.581323][ T5211] Dev loop3: unable to read RDB block 7
[  162.590747][ T5211]  loop3: unable to read partition table
[  162.596722][ T5211] loop3: partition table beyond EOD, truncated
[  162.604739][ T5899] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  162.650732][ T7634] binder: 7633:7634 ioctl c0306201 2000000003c0 returned -14
[  162.676049][ T5211] Dev loop3: unable to read RDB block 7
[  162.681730][ T5211]  loop3: unable to read partition table
[  162.688347][ T5211] loop3: partition table beyond EOD, truncated
[  162.699493][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz.3.475'.
[  162.756717][ T5211] Dev loop3: unable to read RDB block 7
[  162.763690][ T5211]  loop3: unable to read partition table
[  162.770809][ T5211] loop3: partition table beyond EOD, truncated
[  162.777737][ T5899] usb 2-1: Using ep0 maxpacket: 32
[  162.788292][ T5899] usb 2-1: too many configurations: 124, using maximum allowed: 8
[  162.816855][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61
[  162.824466][ T5899] usb 2-1: can't read configurations, error -61
[  162.856397][ T5211] Dev loop3: unable to read RDB block 7
[  162.863351][ T5211]  loop3: unable to read partition table
[  162.869486][ T5211] loop3: partition table beyond EOD, truncated
[  162.887599][ T7645] can0: slcan on ttyS3.
[  162.955376][ T7644] can0 (unregistered): slcan off ttyS3.
[  162.965677][ T5899] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  163.025061][ T5211] Dev loop3: unable to read RDB block 7
[  163.030684][ T5211]  loop3: unable to read partition table
[  163.043881][ T5211] loop3: partition table beyond EOD, truncated
[  163.090681][ T7649] netlink: 14 bytes leftover after parsing attributes in process `syz.3.480'.
[  163.102895][ T7649] hsr_slave_0: left promiscuous mode
[  163.111124][ T7649] hsr_slave_1: left promiscuous mode
[  163.145864][ T5899] usb 2-1: Using ep0 maxpacket: 32
[  163.153924][ T5899] usb 2-1: too many configurations: 124, using maximum allowed: 8
[  163.168866][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61
[  163.180023][ T5899] usb 2-1: can't read configurations, error -61
[  163.189683][ T5899] usb usb2-port1: attempt power cycle
[  163.228609][ T7657] netlink: 'syz.2.482': attribute type 10 has an invalid length.
[  163.236806][ T7658] netlink: 'syz.2.482': attribute type 10 has an invalid length.
[  163.247090][ T7657] netlink: 55 bytes leftover after parsing attributes in process `syz.2.482'.
[  163.257228][ T7658] netlink: 55 bytes leftover after parsing attributes in process `syz.2.482'.
[  163.268088][ T5211] Dev loop3: unable to read RDB block 7
[  163.279308][ T5211]  loop3: unable to read partition table
[  163.285839][ T5211] loop3: partition table beyond EOD, truncated
[  163.349600][ T5211] Dev loop3: unable to read RDB block 7
[  163.366437][ T5211]  loop3: unable to read partition table
[  163.380753][ T5211] loop3: partition table beyond EOD, truncated
[  163.383600][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.398143][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.534700][ T5899] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  163.556116][ T5899] usb 2-1: Using ep0 maxpacket: 32
[  163.561780][ T5899] usb 2-1: too many configurations: 124, using maximum allowed: 8
[  163.573452][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61
[  163.582742][ T5899] usb 2-1: can't read configurations, error -61
[  163.681308][ T7677] program syz.2.488 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.725139][ T5899] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  163.756934][ T5899] usb 2-1: Using ep0 maxpacket: 32
[  163.775447][ T5899] usb 2-1: too many configurations: 124, using maximum allowed: 8
[  163.793701][ T5899] usb 2-1: unable to read config index 0 descriptor/start: -61
[  163.801757][ T5899] usb 2-1: can't read configurations, error -61
[  163.809792][ T5899] usb usb2-port1: unable to enumerate USB device
[  163.943857][ T5211] Dev loop3: unable to read RDB block 7
[  163.960627][ T5211]  loop3: unable to read partition table
[  163.967886][ T5211] loop3: partition table beyond EOD, truncated
[  164.060605][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.071517][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.081832][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.092076][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.101995][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.111629][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.121110][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.129829][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.194697][ T5899] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  164.346416][ T5899] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  164.354612][ T5899] usb 3-1: config 0 has no interface number 0
[  164.363220][ T5899] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  164.372461][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.380491][ T5899] usb 3-1: Product: syz
[  164.384706][ T5899] usb 3-1: Manufacturer: syz
[  164.389390][ T5899] usb 3-1: SerialNumber: syz
[  164.398015][ T5899] usb 3-1: config 0 descriptor??
[  164.607730][ T5899] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  164.615231][ T5899] uvcvideo 3-1:0.31: No streaming interface found for terminal 6.
[  164.627537][ T5899] usb 3-1: USB disconnect, device number 48
[  164.665500][ T5211] Dev loop3: unable to read RDB block 7
[  164.671121][ T5211]  loop3: unable to read partition table
[  164.679380][ T5211] loop3: partition table beyond EOD, truncated
[  164.698424][ T7696] 8021q: VLANs not supported on syzkaller1
[  164.712141][ T7697] syzkaller1: left promiscuous mode
[  164.717642][ T7697] syzkaller1: left allmulticast mode
[  164.739530][ T5211] Dev loop3: unable to read RDB block 7
[  164.745308][ T5211]  loop3: unable to read partition table
[  164.754887][ T5211] loop3: partition table beyond EOD, truncated
			






		


		


	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	

	




	

	

	

	

	

	

	

	




		


		


	
	

	
	

	

	
		




		

	
	

		

	
	


	


	
	
	


	
		

				
	


	



	


	
	
	


	
		
			
		
		
	

	
				
		
				
			

		



[  166.072589][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.081472][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.114772][   T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  166.219504][ T7752] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  166.230705][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.240755][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.266778][   T24] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  166.276879][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.288985][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.299445][ T5948] pwc: recv_control_msg error -32 req 02 val 2b00
[  166.308134][   T24] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  166.317633][   T24] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  166.326017][   T24] usb 2-1: Manufacturer: syz
[  166.343740][   T24] usb 2-1: config 0 descriptor??
[  166.361771][   T24] igorplugusb 2-1:0.0: endpoint incorrect
[  166.377750][ T5948] pwc: recv_control_msg error -32 req 02 val 2700
[  166.386293][ T5948] pwc: recv_control_msg error -32 req 02 val 2c00
[  166.393274][ T5948] pwc: recv_control_msg error -32 req 04 val 1000
[  166.416606][ T5948] pwc: recv_control_msg error -32 req 04 val 1300
[  166.436248][ T7759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.445932][ T7759] misc raw-gadget: fail, usb_gadget_register_driver returned -16

syzkaller
syzkaller login: [  167.284728][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  167.578991][ T7777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.589379][ T7777] new mount options do not match the existing superblock, will be ignored
[  167.600983][ T7777] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  167.813787][ T7778] can0: slcan on ttyS3.
[  167.876564][ T7776] can0 (unregistered): slcan off ttyS3.
[  168.099444][ T7787] 8021q: VLANs not supported on syzkaller1
[  168.108076][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.126058][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.526461][ T5948] pwc: recv_control_msg error -71 req 02 val 2000
[  168.533762][ T5948] pwc: recv_control_msg error -71 req 02 val 2100
[  168.547540][ T5948] pwc: recv_control_msg error -71 req 04 val 1500
[  168.573083][ T5948] pwc: recv_control_msg error -71 req 02 val 2500
[  168.582623][ T5948] pwc: recv_control_msg error -71 req 02 val 2400
[  168.590182][ T5948] pwc: recv_control_msg error -71 req 02 val 2600
[  168.599735][ T5948] pwc: recv_control_msg error -71 req 02 val 2900
[  168.617782][ T5948] pwc: recv_control_msg error -71 req 02 val 2800
[  168.628850][ T5948] pwc: recv_control_msg error -71 req 04 val 1100
[  168.638844][ T5948] pwc: recv_control_msg error -71 req 04 val 1200
[  168.653672][ T5948] pwc: Registered as video103.
[  168.668173][ T5948] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20
[  168.721870][ T5948] usb 3-1: USB disconnect, device number 49
[  168.916303][ T5899] usb 2-1: USB disconnect, device number 59
[  169.042845][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.094560][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.112053][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.124429][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.310285][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.320078][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.332032][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.341504][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.343906][ T7834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.358647][ T7834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.424758][ T5948] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  169.434701][ T5899] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  169.564671][ T5899] usb 2-1: device descriptor read/64, error -71
[  169.574667][ T5948] usb 3-1: Using ep0 maxpacket: 16
[  169.581215][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  169.593007][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  169.606463][ T5948] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  169.616097][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.625105][ T5948] usb 3-1: Product: syz
[  169.629275][ T5948] usb 3-1: Manufacturer: syz
[  169.633844][ T5948] usb 3-1: SerialNumber: syz
[  169.641155][ T5948] usb 3-1: config 0 descriptor??
[  169.648623][ T5948] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  169.657914][ T5948] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  169.710085][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.720008][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.732636][ T5852] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  169.804691][ T5899] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  169.849586][ T7839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.858478][ T7839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.914568][ T7842] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.923078][ T5948] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  169.934684][ T5899] usb 2-1: device descriptor read/64, error -71
[  169.935582][ T5948] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  169.964994][ T5948] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  169.985108][ T5948] em28xx 3-1:0.0: No AC97 audio processor
[  169.986416][ T7846] cgroup2: Unknown parameter 'obj_user'
[  169.998117][ T5948] usb 3-1: USB disconnect, device number 50
[  170.021824][ T5948] em28xx 3-1:0.0: Disconnecting em28xx
[  170.041879][ T5948] em28xx 3-1:0.0: Freeing device
[  170.045998][ T5899] usb usb2-port1: attempt power cycle
[  170.424749][ T5899] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  170.454274][ T5899] usb 2-1: device descriptor read/8, error -71
[  170.707883][ T5899] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  170.740560][ T5899] usb 2-1: device descriptor read/8, error -71
[  170.859375][ T5899] usb usb2-port1: unable to enumerate USB device
[  171.112686][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.136547][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.158061][ T7886] netlink: 'syz.2.541': attribute type 21 has an invalid length.
[  171.167290][ T7886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.541'.
[  171.170609][ T7887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.176766][ T7886] netlink: 'syz.2.541': attribute type 5 has an invalid length.
[  171.187785][ T7887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.200554][ T7886] netlink: 3 bytes leftover after parsing attributes in process `syz.2.541'.
[  171.279286][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.293452][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.373970][ T7891] dlm: Unknown command passed to DLM device : 0
[  171.373970][ T7891] 
[  171.685292][   T24] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  171.821926][ T7901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.831855][ T7901] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.836451][   T24] usb 3-1: config 0 has an invalid interface number: 54 but max is 0
[  171.867259][   T24] usb 3-1: config 0 has no interface number 0
[  171.885675][   T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=16fb, bcdDevice=ae.81
[  171.895405][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.903427][   T24] usb 3-1: Product: syz
[  171.908226][   T24] usb 3-1: Manufacturer: syz
[  171.912867][   T24] usb 3-1: SerialNumber: syz
[  171.920902][   T24] usb 3-1: config 0 descriptor??
[  171.959360][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.969516][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.249370][   T24] option 3-1:0.54: GSM modem (1-port) converter detected
[  172.271810][   T24] usb 3-1: USB disconnect, device number 51
[  172.286317][   T24] option 3-1:0.54: device disconnected
[  172.434772][ T5899] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  172.475570][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.484330][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.507547][ T7918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.516913][ T7918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.525551][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.534342][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.604769][   T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  172.605087][ T5899] usb 2-1: Using ep0 maxpacket: 16
[  172.619422][ T5899] usb 2-1: config 3 has an invalid interface number: 63 but max is 0
[  172.627600][ T5899] usb 2-1: config 3 has no interface number 0
[  172.634065][ T5899] usb 2-1: config 3 interface 63 has no altsetting 0
[  172.643152][ T5899] usb 2-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=8c.fc
[  172.652393][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.660539][ T5899] usb 2-1: Product: syz
[  172.664806][ T5899] usb 2-1: Manufacturer: syz
[  172.669410][ T5899] usb 2-1: SerialNumber: syz
[  172.770974][ T7925] fuse: Unknown parameter 'fD'
[  172.778965][   T24] usb 3-1: Using ep0 maxpacket: 8
[  172.790320][   T24] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  172.800072][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.812731][   T24] usb 3-1: config 0 has no interface number 0
[  172.819839][   T24] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  172.832038][   T24] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  172.848319][   T24] usb 3-1: config 0 interface 52 has no altsetting 0
[  172.857790][   T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  172.867295][   T24] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  172.881875][   T24] usb 3-1: Manufacturer: syz
[  172.890485][ T5899] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  172.892751][   T24] usb 3-1: config 0 descriptor??
[  172.933028][ T5899] usb 2-1: USB disconnect, device number 64
[  173.153671][   T24] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input21
[  173.597811][ T7945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.609270][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.644642][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  173.663971][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.694364][ T7945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.780546][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'.
[  173.825202][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'.
[  174.062095][ T7955] kvm: user requested TSC rate below hardware speed
[  174.160380][ T7963] pimreg: entered allmulticast mode
[  174.348792][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.378860][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.389174][   T24] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  174.524750][   T24] usb 2-1: device descriptor read/64, error -71
[  174.732544][ T7980] comedi comedi4: bad chanlist[0]=0x00080002 chan=2 range length=2
[  174.784791][   T24] usb 2-1: new full-speed USB device number 66 using dummy_hcd
[  174.917755][ T7985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.928631][ T7985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.946075][   T24] usb 2-1: device descriptor read/64, error -71
[  175.004078][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.017511][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.027954][ T7988] netlink: 256 bytes leftover after parsing attributes in process `syz.4.569'.
[  175.075893][   T24] usb usb2-port1: attempt power cycle
[  175.323160][ T1949] usb 3-1: USB disconnect, device number 52
[  175.323212][    C1] synaptics_usb 3-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  175.414684][   T24] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[  175.435247][   T24] usb 2-1: device descriptor read/8, error -71
[  175.552643][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.585992][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.674761][   T24] usb 2-1: new full-speed USB device number 68 using dummy_hcd
[  175.705370][   T24] usb 2-1: device descriptor read/8, error -71
[  175.742256][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.751975][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.824937][   T24] usb usb2-port1: unable to enumerate USB device
[  175.872490][ T8013] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  175.882984][ T8013] overlayfs: failed to set xattr on upper
[  175.889393][ T8013] overlayfs: ...falling back to redirect_dir=nofollow.
[  175.896321][ T8013] overlayfs: ...falling back to index=off.
[  175.902121][ T8013] overlayfs: ...falling back to uuid=null.
[  175.912377][ T8013] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  176.047022][   T30] kauditd_printk_skb: 65 callbacks suppressed
[  176.047038][   T30] audit: type=1326 audit(1759672756.197:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.2.580" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x0
[  176.269212][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.288725][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.397978][ T8036] sock: sock_set_timeout: `syz.4.583' (pid 8036) tries to set negative timeout
[  176.408504][ T8036] rdma_op ffff88807d0c69f0 conn xmit_rdma 0000000000000000
[  176.840803][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.849815][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.870271][   T24] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  176.883398][   T24] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  177.129105][ T8053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.587'.
[  177.483546][ T8069] netlink: 'syz.4.593': attribute type 21 has an invalid length.
[  177.493932][ T8069] IPv6: NLM_F_CREATE should be specified when creating new route
[  177.506761][ T8069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  177.514241][ T8069] IPv6: NLM_F_CREATE should be set when creating new route
[  177.521517][ T8069] IPv6: NLM_F_CREATE should be set when creating new route
[  177.528763][ T8069] IPv6: NLM_F_CREATE should be set when creating new route
[  177.664701][   T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  177.826695][   T24] usb 3-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config
[  177.837071][   T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  177.846197][   T24] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[  177.855310][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.865318][   T24] usb 3-1: config 0 descriptor??
[  177.934924][ T1949] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  178.074254][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.083323][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.095924][ T1949] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  178.106079][ T1949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.114154][ T1949] usb 2-1: Product: syz
[  178.123877][ T1949] usb 2-1: Manufacturer: syz
[  178.130453][ T1949] usb 2-1: SerialNumber: syz
[  178.137422][ T1949] usb 2-1: config 0 descriptor??
[  178.358338][ T1949] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  178.365563][ T1949] f81604 2-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO
[  178.373456][ T1949] f81604 2-1:0.0: probe with driver f81604 failed with error -121
[  178.609019][ T1949] usb 2-1: USB disconnect, device number 69
[  179.042644][ T8080] sp0: Synchronizing with TNC
[  179.624235][ T8096] binder: 8095:8096 ioctl ae03 a000000000 returned -22
[  179.768864][ T5852] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  179.778229][ T5852] Bluetooth: hci0: Injecting HCI hardware error event
[  179.786575][ T5850] Bluetooth: hci0: hardware error 0x00
[  179.928654][ T8105] Bluetooth: MGMT ver 1.23
[  179.950660][ T8108] XFS (nullb0): Invalid superblock magic number
[  180.092877][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.117891][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.212991][ T8126] xt_HMARK: spi-set and port-set can't be combined
[  180.447884][ T1949] usb 3-1: USB disconnect, device number 53
[  180.504669][ T5936] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  180.664782][ T5936] usb 2-1: Using ep0 maxpacket: 32
[  180.681983][ T5936] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  180.724756][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.732792][ T5936] usb 2-1: Product: syz
[  180.767945][ T5936] usb 2-1: Manufacturer: syz
[  180.773071][ T5936] usb 2-1: SerialNumber: syz
[  180.804407][ T5936] usb 2-1: config 0 descriptor??
[  180.995625][   T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  181.013100][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.025171][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.068891][ T8147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.078247][ T8147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.154749][   T24] usb 3-1: Using ep0 maxpacket: 16
[  181.164981][   T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  181.174064][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.182405][   T24] usb 3-1: Product: syz
[  181.186689][   T24] usb 3-1: Manufacturer: syz
[  181.191873][   T24] usb 3-1: SerialNumber: syz
[  181.199037][   T24] usb 3-1: config 0 descriptor??
[  181.206733][   T24] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  181.222795][ T8128] netlink: 'syz.1.610': attribute type 2 has an invalid length.
[  181.230702][ T8128] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.610'.
[  181.240023][ T8128] nbd: must specify a device to reconfigure
[  181.582232][ T8150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.591365][ T8150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.612211][ T8150] fuse: Invalid rootmode
[  181.844773][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  182.013735][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.022562][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.437610][   T24] usb 3-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[  182.557218][   T30] audit: type=1326 audit(1759672762.707:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8157 comm="syz.4.622" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ea598eec9 code=0x0
[  182.638501][   T24] usb 3-1: USB disconnect, device number 54
[  182.654466][   T24] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[  182.677323][   T24] ssu100 3-1:0.0: device disconnected
[  182.846467][ T8164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.856431][ T8164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.923319][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.937003][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.287182][ T5936] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  183.335736][ T5936] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  183.350488][ T5936] usb 2-1: USB disconnect, device number 70
[  183.414702][   T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  183.510624][ T8178] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  183.566025][ T8183] netlink: 260 bytes leftover after parsing attributes in process `syz.4.629'.
[  183.576848][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.589919][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'.
[  183.598915][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.610343][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'.
[  183.619315][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  183.644338][   T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  183.654961][ T5936] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  183.655244][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.673416][   T24] usb 3-1: config 0 descriptor??
[  183.824732][ T5936] usb 2-1: Using ep0 maxpacket: 8
[  183.834231][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.865497][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.881048][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  183.894126][ T5936] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  183.916842][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.938190][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.959143][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.961879][ T5936] usb 2-1: config 0 descriptor??
[  184.029397][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.066697][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.166938][   T24] plantronics 0003:047F:FFFF.000D: item 0 0 0 9 parsing failed
[  184.169922][ T8214] 
@0�: renamed from bond_slave_1 (while UP)
[  184.198888][   T24] plantronics 0003:047F:FFFF.000D: parse failed
[  184.215244][   T24] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22
[  184.316112][   T30] audit: type=1326 audit(1759672764.467:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cbb8eec9 code=0x7ffc0000
[  184.350817][   T30] audit: type=1326 audit(1759672764.467:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cbb8eec9 code=0x7ffc0000
[  184.382845][ T5892] usb 3-1: USB disconnect, device number 55
[  184.388124][   T30] audit: type=1326 audit(1759672764.467:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cbb8eec9 code=0x7ffc0000
[  184.411818][ T5850] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  184.418306][   T30] audit: type=1326 audit(1759672764.467:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05cbb8eec9 code=0x7ffc0000
[  184.425608][ T5936] hid (null): report_id 918307361 is invalid
[  184.448827][ T5850] Bluetooth: hci3: Injecting HCI hardware error event
[  184.457321][ T5850] Bluetooth: hci3: hardware error 0x00
[  184.475046][   T30] audit: type=1326 audit(1759672764.487:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cbb8eec9 code=0x7ffc0000
[  184.500306][   T30] audit: type=1326 audit(1759672764.487:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cbb8eec9 code=0x7ffc0000
[  184.500411][ T5936] nzxt-kraken2 0003:1E71:170E.000E: report_id 918307361 is invalid
[  184.525972][   T30] audit: type=1326 audit(1759672764.487:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cbb8eec9 code=0x7ffc0000
[  184.553176][   T30] audit: type=1326 audit(1759672764.487:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f05cbb8eec9 code=0x7ffc0000
[  184.577649][   T30] audit: type=1326 audit(1759672764.487:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.3.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cbb8eec9 code=0x7ffc0000
[  184.611161][ T5936] nzxt-kraken2 0003:1E71:170E.000E: item 0 4 1 8 parsing failed
[  184.623997][ T5936] nzxt-kraken2 0003:1E71:170E.000E: hid parse failed with -22
[  184.632968][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.643728][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.653157][ T5936] nzxt-kraken2 0003:1E71:170E.000E: probe with driver nzxt-kraken2 failed with error -22
[  184.668432][ T5936] usb 2-1: USB disconnect, device number 71
[  184.702930][ T8226] netlink: 256 bytes leftover after parsing attributes in process `syz.3.639'.
[  184.821739][ T8234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.832196][ T8234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.866579][ T8235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.876511][ T8235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.214661][ T5899] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  185.368930][ T5899] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  185.378169][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.386376][ T5899] usb 3-1: Product: syz
[  185.391163][ T5899] usb 3-1: Manufacturer: syz
[  185.396039][ T5899] usb 3-1: SerialNumber: syz
[  185.403586][ T5899] usb 3-1: config 0 descriptor??
[  185.419139][ T5899] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  185.454730][   T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  185.504150][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.513299][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.527946][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.537308][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.549934][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'.
[  185.604837][   T24] usb 2-1: Using ep0 maxpacket: 8
[  185.613707][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  185.622866][   T24] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  185.631005][   T24] usb 2-1: Product: syz
[  185.635290][   T24] usb 2-1: Manufacturer: syz
[  185.639887][   T24] usb 2-1: SerialNumber: syz
[  185.648087][   T24] usb 2-1: config 0 descriptor??
[  185.656062][   T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  185.836861][ T5899] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[  186.199355][ T8255] nbd: must specify a size in bytes for the device
[  186.244845][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.253661][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.269049][   T24] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23
[  186.283230][   T24] videodev: could not get a free minor
[  186.289489][   T24] gspca_main: video_register_device err -23
[  186.301096][   T24] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -23
[  186.470992][ T5899] usb 2-1: USB disconnect, device number 72
[  186.484732][ T5850] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  186.833492][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.843620][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.244676][ T1209] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  187.394189][ T8267] netlink: 92 bytes leftover after parsing attributes in process `syz.3.652'.
[  187.402424][ T1209] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  187.412342][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.414490][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.420477][ T1209] usb 2-1: Product: syz
[  187.420496][ T1209] usb 2-1: Manufacturer: syz
[  187.420509][ T1209] usb 2-1: SerialNumber: syz
[  187.445274][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.736713][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.750004][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.752366][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.760210][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.903967][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.912845][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.969147][   T24] usb 3-1: USB disconnect, device number 56
[  188.082434][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.103536][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.160416][ T1209] rtl8150 2-1:1.0: couldn't reset the device
[  188.176091][ T8283] netlink: 'syz.2.656': attribute type 1 has an invalid length.
[  188.188344][ T1209] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  188.198301][ T8283] netlink: 'syz.2.656': attribute type 2 has an invalid length.
[  188.231045][ T8283] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  188.240710][ T1209] usb 2-1: USB disconnect, device number 73
[  188.317956][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.335002][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.503244][ T8298] could not allocate digest TFM handle hmac(sha1-avx2)
[  188.574898][ T1209] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  188.594727][ T5899] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  188.737328][ T1209] usb 2-1: Using ep0 maxpacket: 32
[  188.747257][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.751611][ T1209] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  188.764007][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  188.776141][ T1209] usb 2-1: config 0 has no interface number 0
[  188.781394][ T5899] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  188.782519][ T1209] usb 2-1: config 0 interface 184 has no altsetting 0
[  188.794060][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  188.803510][ T1209] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  188.806864][ T5899] usb 3-1: SerialNumber: syz
[  188.817714][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.829193][ T1209] usb 2-1: Product: syz
[  188.833364][ T1209] usb 2-1: Manufacturer: syz
[  188.838374][ T1209] usb 2-1: SerialNumber: syz
[  188.855355][ T1209] usb 2-1: config 0 descriptor??
[  188.870916][ T1209] smsc75xx v1.0.0
[  188.963771][ T8310] netlink: 32 bytes leftover after parsing attributes in process `syz.3.664'.
[  189.025802][ T8312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.036206][ T8312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.042974][ T5899] usb 3-1: 0:2 : does not exist
[  189.055694][ T5899] usb 3-1: unit 5: unexpected type 0x0a
[  189.077836][ T5899] usb 3-1: USB disconnect, device number 57
[  189.111621][ T6265] udevd[6265]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.904660][ T5936] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  190.066596][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  190.076515][ T5936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  190.077151][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.087334][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  190.104246][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.106232][ T5936] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  190.127198][ T5936] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  190.144641][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.152662][ T5936] usb 3-1: Product: syz
[  190.157298][ T5936] usb 3-1: Manufacturer: syz
[  190.161921][ T5936] usb 3-1: SerialNumber: syz
[  190.162036][ T1209] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[  190.178213][ T5936] usb 3-1: config 0 descriptor??
[  190.191288][ T5936] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  190.206933][ T1209] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  190.221237][ T1209] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  190.232263][ T1209] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  190.246228][ T1209] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  190.262699][ T1209] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  190.276770][ T1209] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  190.299483][ T1209] usb 2-1: USB disconnect, device number 74
[  190.330641][ T8329] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  190.337217][ T8329] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  190.343730][ T8329] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  190.351171][ T8329] comedi comedi3: 8255: I/O port conflict (0xd,4)
[  190.358013][ T8329] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  190.364773][ T8329] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  190.371566][ T8329] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  190.378099][ T8329] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  190.385925][ T8329] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  190.392528][ T8329] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  190.399096][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  190.399112][   T30] audit: type=1800 audit(1759672770.537:1795): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.666" name="bus" dev="tmpfs" ino=2 res=0 errno=0
[  190.425668][    C1] vkms_vblank_simulate: vblank timer overrun
[  190.440285][ T5936] scsi host1: usb-storage 3-1:0.0
[  190.454479][ T5936] usb 3-1: USB disconnect, device number 58
[  190.878576][ T8343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.887981][ T8343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.994745][ T1209] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  191.169021][ T1209] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  191.178270][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.186364][ T1209] usb 2-1: Product: syz
[  191.190604][ T1209] usb 2-1: Manufacturer: syz
[  191.195248][ T1209] usb 2-1: SerialNumber: syz
[  191.201970][ T1209] usb 2-1: config 0 descriptor??
[  191.210083][ T1209] usb 2-1: Waiting for MOTU Microbook II to boot up...
[  191.217036][ T1209] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22
[  191.225642][ T1209] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  191.235605][ T5936] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  191.404707][ T5936] usb 3-1: Using ep0 maxpacket: 32
[  191.415859][ T5936] usb 3-1: config 0 has no interfaces?
[  191.425767][ T5936] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  191.436108][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.438149][ T8341] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  191.447089][ T5936] usb 3-1: config 0 descriptor??
[  191.458970][ T8341] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  191.475164][ T1209] usb 2-1: USB disconnect, device number 75
[  191.571025][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'.
[  191.680463][ T5936] usb 3-1: USB disconnect, device number 59
[  191.779396][ T8357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.790966][ T8357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.146709][ T8361] nfs: Unknown parameter 'defcontext'
[  192.264760][ T1209] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  192.401477][ T8377] input: syz1 as /devices/virtual/input/input25
[  192.428931][ T1209] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  192.429556][ T8377] ieee802154 phy0 wpan0: encryption failed: -22
[  192.463397][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.492455][ T1209] usb 2-1: Product: syz
[  192.502572][ T1209] usb 2-1: Manufacturer: syz
[  192.507298][ T1209] usb 2-1: SerialNumber: syz
[  192.541876][ T1209] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  192.581417][ T5892] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  192.583171][ T8384] program syz.3.686 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  192.740326][ T8389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.750588][ T8389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.763869][ T8389] input: syz0 as /devices/virtual/input/input26
[  193.001969][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.010798][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.020246][ T8359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.029667][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.030004][ T8359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.041564][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.125240][ T1209] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  193.312314][   T24] usb 2-1: USB disconnect, device number 76
[  193.336132][ T1209] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  193.344239][ T1209] usb 3-1: config 0 has no interface number 0
[  193.350550][ T1209] usb 3-1: config 0 interface 41 has no altsetting 0
[  193.360084][ T1209] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  193.369355][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.378139][ T1209] usb 3-1: Product: syz
[  193.382456][ T1209] usb 3-1: Manufacturer: syz
[  193.387137][ T1209] usb 3-1: SerialNumber: syz
[  193.396007][ T1209] usb 3-1: config 0 descriptor??
[  193.476378][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.485077][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805cc76400: rx timeout, send abort
[  193.498086][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.688758][ T5892] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  193.698929][ T5892] ath9k_htc: Failed to initialize the device
[  193.705578][   T24] usb 2-1: ath9k_htc: USB layer deinitialized
[  193.800211][ T8410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.695'.
[  193.986092][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805cc76400: abort rx timeout. Force session deactivation
[  194.009322][ T1209] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[  194.023584][ T1209] usb 3-1: USB disconnect, device number 60
[  194.065847][ T8421] netlink: 'syz.3.696': attribute type 3 has an invalid length.
[  194.260655][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.268522][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.783263][ T8440] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1570122502 (3140245004 ns) > initial count (1281806000 ns). Using initial count to start timer.
[  195.063436][ T8454] syzkaller1: entered promiscuous mode
[  195.070172][ T8454] syzkaller1: entered allmulticast mode
[  195.139277][ T1209] usb 2-1: new full-speed USB device number 77 using dummy_hcd
[  195.274993][ T1209] usb 2-1: device descriptor read/64, error -71
[  195.424689][ T5899] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  195.514697][ T1209] usb 2-1: new full-speed USB device number 78 using dummy_hcd
[  195.586845][ T5899] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  195.595233][ T5899] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  195.604091][ T5899] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  195.614625][ T5899] usb 3-1: config 220 has no interface number 2
[  195.620915][ T5899] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  195.634795][ T5899] usb 3-1: config 220 interface 0 has no altsetting 0
[  195.641579][ T5899] usb 3-1: config 220 interface 76 has no altsetting 0
[  195.649364][ T5899] usb 3-1: config 220 interface 1 has no altsetting 0
[  195.650011][ T1209] usb 2-1: device descriptor read/64, error -71
[  195.665186][ T5899] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  195.674295][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.682542][ T5899] usb 3-1: Product: syz
[  195.688517][ T5899] usb 3-1: Manufacturer: syz
[  195.693532][ T5899] usb 3-1: SerialNumber: syz
[  195.716864][ T8468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.727556][ T8468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.765522][ T1209] usb usb2-port1: attempt power cycle
[  195.929325][ T8470] netlink: 76 bytes leftover after parsing attributes in process `syz.4.710'.
[  195.939637][ T5899] usb 3-1: selecting invalid altsetting 0
[  195.943678][ T8470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.948120][ T5899] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  195.955803][ T8470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.969484][ T5899] uvcvideo 3-1:220.0: No valid video chain found.
[  195.981820][ T5899] usb 3-1: selecting invalid altsetting 0
[  195.987906][ T5899] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  196.004248][ T5899] usb 3-1: USB disconnect, device number 61
[  196.104714][ T1209] usb 2-1: new full-speed USB device number 79 using dummy_hcd
[  196.125349][ T1209] usb 2-1: device descriptor read/8, error -71
[  196.276230][ T8472] netlink: 'syz.3.711': attribute type 2 has an invalid length.
[  196.334978][ T5850] Bluetooth: hci2: command 0x206a tx timeout
[  196.338957][ T8474] netlink: 56 bytes leftover after parsing attributes in process `syz.3.712'.
[  196.355816][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.364713][ T1209] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  196.390046][ T1209] usb 2-1: device descriptor read/8, error -71
[  196.394426][ T8475] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  196.409362][ T8474] bridge_slave_0 (unregistering): left allmulticast mode
[  196.416622][ T8474] bridge_slave_0 (unregistering): left promiscuous mode
[  196.423733][ T8474] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.509985][ T1209] usb usb2-port1: unable to enumerate USB device
[  196.676833][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.685811][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.714369][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.724417][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.824725][ T1209] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  196.977913][ T1209] usb 3-1: not running at top speed; connect to a high speed hub
[  196.986819][ T1209] usb 3-1: config 129 has an invalid interface number: 95 but max is 1
[  196.995425][ T1209] usb 3-1: config 129 has an invalid interface number: 176 but max is 1
[  197.003844][ T1209] usb 3-1: config 129 contains an unexpected descriptor of type 0x2, skipping
[  197.012815][ T1209] usb 3-1: config 129 has no interface number 0
[  197.019168][ T1209] usb 3-1: config 129 has no interface number 1
[  197.025593][ T1209] usb 3-1: config 129 interface 176 altsetting 3 endpoint 0x9 has invalid maxpacket 975, setting to 64
[  197.036692][ T1209] usb 3-1: config 129 interface 95 has no altsetting 0
[  197.043558][ T1209] usb 3-1: config 129 interface 176 has no altsetting 0
[  197.053028][ T1209] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=11.11
[  197.062910][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.071503][ T1209] usb 3-1: Manufacturer: ⽁
[  197.076242][ T1209] usb 3-1: SerialNumber:  
[  197.301636][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.720'.
[  197.425770][ T1209] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.95/input/input27
[  197.491634][ T1209] usb 3-1: USB disconnect, device number 62
[  197.802485][ T8506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.815299][ T8506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.844895][ T1209] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  197.966296][ T8515] binder: 8514:8515 ioctl c0306201 0 returned -14
[  197.983766][ T8519] netlink: 'syz.1.724': attribute type 10 has an invalid length.
[  198.005592][ T8519] team0: Cannot enslave team device to itself
[  198.025277][ T1209] usb 3-1: Using ep0 maxpacket: 8
[  198.039319][ T1209] usb 3-1: unable to get BOS descriptor or descriptor too short
[  198.052193][ T1209] usb 3-1: config 190 has an invalid interface number: 42 but max is 0
[  198.061628][ T1209] usb 3-1: config 190 has no interface number 0
[  198.069815][ T1209] usb 3-1: config 190 interface 42 has no altsetting 0
[  198.079828][ T1209] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=77.12
[  198.095044][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.103360][ T1209] usb 3-1: Product: syz
[  198.108964][ T1209] usb 3-1: Manufacturer: syz
[  198.113755][ T1209] usb 3-1: SerialNumber: syz
[  198.369639][ T8527] fuse: Unknown parameter 'user_i'
[  198.376831][ T8527] netlink: 'syz.1.729': attribute type 5 has an invalid length.
[  198.384510][ T8527] netlink: 176 bytes leftover after parsing attributes in process `syz.1.729'.
[  198.455964][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.492348][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.493242][ T8534] netlink: 'syz.1.732': attribute type 4 has an invalid length.
[  198.763317][ T5936] IPVS: starting estimator thread 0...
[  198.769301][ T5899] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  198.822902][ T8542] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  198.829457][ T8542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  198.838337][ T8542] vhci_hcd vhci_hcd.0: Device attached
[  198.859982][ T8543] vhci_hcd: connection closed
[  198.864859][ T8540] IPVS: using max 32 ests per chain, 76800 per kthread
[  198.876580][ T3561] vhci_hcd: stop threads
[  198.880852][ T3561] vhci_hcd: release socket
[  198.901821][ T3561] vhci_hcd: disconnect device
[  198.926145][ T5899] usb 2-1: Using ep0 maxpacket: 32
[  198.932518][ T1209] uvcvideo 3-1:190.42: Found multiple Units with ID 1
[  198.939078][ T5899] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  198.963500][ T1209] uvcvideo 3-1:190.42: Found UVC 0.00 device syz (046d:0821)
[  198.965546][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.981410][ T1209] uvcvideo 3-1:190.42: No valid video chain found.
[  198.983716][ T5899] usb 2-1: config 0 has no interface number 0
[  199.003796][ T5899] usb 2-1: config 0 interface 184 has no altsetting 0
[  199.008421][ T1209] usb 3-1: USB disconnect, device number 63
[  199.012959][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.038063][ T5899] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  199.049950][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.059402][ T5899] usb 2-1: Product: syz
[  199.063660][ T5899] usb 2-1: Manufacturer: syz
[  199.069673][ T5899] usb 2-1: SerialNumber: syz
[  199.078197][ T5899] usb 2-1: config 0 descriptor??
[  199.088900][ T5899] smsc75xx v1.0.0
[  199.454705][ T1209] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  199.610484][ T1209] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  199.619741][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.628975][ T1209] usb 3-1: Product: syz
[  199.633259][ T1209] usb 3-1: Manufacturer: syz
[  199.638198][ T1209] usb 3-1: SerialNumber: syz
[  199.686588][ T8559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.695250][ T5899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  199.696355][ T8559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  199.708030][ T5899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  200.320364][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.330261][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.941290][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.951435][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.063944][ T1209] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  201.277962][ T1209] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  201.291074][ T1209] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  201.303201][ T1209] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  201.314339][ T1209] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  201.326021][ T1209] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  201.343157][ T5899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71
[  201.346171][ T1209] usb 3-1: USB disconnect, device number 64
[  201.363352][ T5899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71
[  201.374525][ T5899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  201.385524][ T5899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  201.395929][ T5899] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  201.408621][ T5899] usb 2-1: USB disconnect, device number 81
[  201.493514][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.507206][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.748687][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.758232][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.159119][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.169762][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.214953][ T5936] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  202.394823][ T5936] usb 2-1: Using ep0 maxpacket: 32
[  202.400562][ T5936] usb 2-1: too many configurations: 17, using maximum allowed: 8
[  202.409771][ T5936] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  202.421160][ T5936] usb 2-1: config 0 has no interface number 0
[  202.428631][ T5936] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  202.437495][ T5936] usb 2-1: config 0 has no interface number 0
[  202.444517][ T5936] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  202.452618][ T5936] usb 2-1: config 0 has no interface number 0
[  202.460971][ T5936] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  202.470080][ T5936] usb 2-1: config 0 has no interface number 0
[  202.478168][ T5936] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  202.487109][ T5936] usb 2-1: config 0 has no interface number 0
[  202.505885][ T5936] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  202.514086][ T5936] usb 2-1: config 0 has no interface number 0
[  202.521967][ T5936] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  202.531475][ T5936] usb 2-1: config 0 has no interface number 0
[  202.539770][ T5936] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  202.544449][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.549887][ T5936] usb 2-1: config 0 has no interface number 0
[  202.560466][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.566663][ T5936] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  202.582144][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.590199][ T5936] usb 2-1: Product: syz
[  202.595023][ T5936] usb 2-1: Manufacturer: syz
[  202.599603][ T5936] usb 2-1: SerialNumber: syz
[  202.607536][ T5936] usb 2-1: config 0 descriptor??
[  202.614243][ T5936] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz)
[  202.820742][ T5936] etas_es58x 2-1:0.2: could not parse product info: ''
[  202.873704][ T8615] Mount JFS Failure: -5
[  203.097069][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.116596][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.145194][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.168521][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.188858][ T8625] IPVS: ip_vs_edit_dest(): server weight less than zero
[  203.212032][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.245252][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.633738][    C0] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0000.
[  203.644932][    C0] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  203.652919][    C0] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG
[  203.661753][ T5506] etas_es58x 2-1:0.2 can0: bit-timing not yet defined
[  203.684819][ T5892] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  203.814804][ T5892] usb 3-1: device descriptor read/64, error -71
[  203.835950][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  203.837060][ T1209] usb 2-1: USB disconnect, device number 82
[  203.845199][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  203.845281][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  203.845355][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  203.845421][    C0] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  203.888102][    C0] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -ESHUTDOWN
[  203.896452][ T1209] etas_es58x 2-1:0.2: Disconnecting syz syz
[  203.896491][    C0] vkms_vblank_simulate: vblank timer overrun
[  203.902912][ T5506] etas_es58x 2-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL
[  203.908622][    C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[  203.930587][ T8654] netlink: 'syz.3.764': attribute type 29 has an invalid length.
[  203.954036][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.981931][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.054894][ T5892] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  204.204727][ T5892] usb 3-1: device descriptor read/64, error -71
[  204.315946][ T5892] usb usb3-port1: attempt power cycle
[  204.392142][ T5850] Bluetooth: hci1: unexpected event for opcode 0x0c7b
[  204.405296][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  204.413944][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  204.657554][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  204.664795][ T5892] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  204.711653][ T8686] veth1_to_bridge: entered promiscuous mode
[  204.724554][ T8686] veth1_to_bridge: left promiscuous mode
[  204.732575][ T5892] usb 3-1: device descriptor read/8, error -71
[  204.756066][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  204.765418][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  204.824721][ T1209] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  204.969426][ T8693] loop6: detected capacity change from 0 to 524288000
[  204.985447][ T5892] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  204.994688][ T1209] usb 2-1: Using ep0 maxpacket: 8
[  205.049837][ T1209] usb 2-1: unable to get BOS descriptor or descriptor too short
[  205.067044][ T5892] usb 3-1: device descriptor read/8, error -71
[  205.073992][ T1209] usb 2-1: config 7 has an invalid interface number: 63 but max is 1
[  205.091252][ T1209] usb 2-1: config 7 has an invalid interface number: 212 but max is 1
[  205.111809][ T1209] usb 2-1: config 7 has no interface number 0
[  205.142128][ T1209] usb 2-1: config 7 has no interface number 1
[  205.146711][ T8699] loop6: detected capacity change from 524288000 to 1
[  205.166968][ T1209] usb 2-1: config 7 interface 63 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  205.195015][ T5892] usb usb3-port1: unable to enumerate USB device
[  205.208227][ T1209] usb 2-1: config 7 interface 63 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  205.240829][ T1209] usb 2-1: config 7 interface 212 has no altsetting 0
[  205.272734][ T1209] usb 2-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=79.54
[  205.279450][ T5211] Dev loop6: unable to read RDB block 1
[  205.302165][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.324901][ T5211]  loop6: unable to read partition table
[  205.325928][ T1209] usb 2-1: Product: syz
[  205.342939][ T5211] loop6: partition table beyond EOD, truncated
[  205.369227][ T1209] usb 2-1: Manufacturer: syz
[  205.383798][ T1209] usb 2-1: SerialNumber: syz
[  205.421890][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.448464][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.533314][ T8720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.542515][ T8720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.846756][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.860186][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.917038][ T1209] usb 2-1: USB disconnect, device number 83
[  206.073011][ T8738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.082964][ T8738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.141885][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.153522][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.173316][ T8741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.186868][ T8741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.524446][   T30] audit: type=1326 audit(1759672786.667:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.2.779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a4cd8eec9 code=0x0
[  206.546282][    C0] vkms_vblank_simulate: vblank timer overrun
[  206.782971][ T8755] devpts: Bad value for 'max'
[  206.890827][ T8761] netlink: 196 bytes leftover after parsing attributes in process `syz.4.784'.
[  207.291119][ T8780] ocfs2: Unknown parameter 'usrquota��]w:�'g�D���-j3ȿ��j��Y7~�͡LwB+їA:'
[  207.407302][ T8782] syzkaller1: entered promiscuous mode
[  207.421891][ T8782] syzkaller1: entered allmulticast mode
[  207.685844][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.715514][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.775567][ T1209] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  207.944868][ T1209] usb 2-1: Using ep0 maxpacket: 16
[  207.954459][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.974693][ T1209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.994708][ T1209] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  208.007736][ T5948] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  208.034639][ T1209] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  208.053772][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.065285][ T1209] usb 2-1: config 0 descriptor??
[  208.157246][ T5948] usb 3-1: device descriptor read/64, error -71
[  208.160631][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.176609][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.191258][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.200499][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.358471][ T8799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.368521][ T8799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.394838][ T5948] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  208.405056][ T5850] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  208.413757][ T5850] Bluetooth: hci1: Injecting HCI hardware error event
[  208.422320][ T5850] Bluetooth: hci1: hardware error 0x00
[  208.474397][ T8786] overlayfs: failed to resolve './file0': -2
[  208.497507][ T1209] usbhid 2-1:0.0: can't add hid device: -71
[  208.503682][ T1209] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  208.526816][ T1209] usb 2-1: USB disconnect, device number 84
[  208.537847][ T5948] usb 3-1: device descriptor read/64, error -71
[  208.568000][ T8799] 
[  208.570367][ T8799] ======================================================
[  208.577402][ T8799] WARNING: possible circular locking dependency detected
[  208.584407][ T8799] syzkaller #0 Not tainted
[  208.588795][ T8799] ------------------------------------------------------
[  208.595788][ T8799] syz.4.798/8799 is trying to acquire lock:
[  208.601650][ T8799] ffffffff8e245220 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710
[  208.611463][ T8799] 
[  208.611463][ T8799] but task is already holding lock:
[  208.618802][ T8799] ffffffff8f851428 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  208.629301][ T8799] 
[  208.629301][ T8799] which lock already depends on the new lock.
[  208.629301][ T8799] 
[  208.639702][ T8799] 
[  208.639702][ T8799] the existing dependency chain (in reverse order) is:
[  208.648699][ T8799] 
[  208.648699][ T8799] -> #9 (uevent_sock_mutex){+.+.}-{4:4}:
[  208.656500][ T8799]        lock_acquire+0x120/0x360
[  208.661509][ T8799]        __mutex_lock+0x187/0x1350
[  208.666608][ T8799]        kobject_uevent_net_broadcast+0x27e/0x560
[  208.673008][ T8799]        kobject_uevent_env+0x55b/0x8c0
[  208.678537][ T8799]        device_add+0x557/0xb50
[  208.683367][ T8799]        device_create+0x25b/0x2f0
[  208.688457][ T8799]        msr_device_create+0x33/0x50
[  208.693724][ T8799]        cpuhp_invoke_callback+0x445/0x860
[  208.699572][ T8799]        cpuhp_thread_fun+0x3f4/0x850
[  208.704932][ T8799]        smpboot_thread_fn+0x542/0xa60
[  208.710372][ T8799]        kthread+0x711/0x8a0
[  208.714942][ T8799]        ret_from_fork+0x4bc/0x870
[  208.720032][ T8799]        ret_from_fork_asm+0x1a/0x30
[  208.725301][ T8799] 
[  208.725301][ T8799] -> #8 (cpuhp_state-up){+.+.}-{0:0}:
[  208.732837][ T8799]        lock_acquire+0x120/0x360
[  208.737844][ T8799]        cpuhp_thread_fun+0x182/0x850
[  208.743204][ T8799]        smpboot_thread_fn+0x542/0xa60
[  208.748743][ T8799]        kthread+0x711/0x8a0
[  208.753322][ T8799]        ret_from_fork+0x4bc/0x870
[  208.758419][ T8799]        ret_from_fork_asm+0x1a/0x30
[  208.763699][ T8799] 
[  208.763699][ T8799] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  208.771406][ T8799]        lock_acquire+0x120/0x360
[  208.776415][ T8799]        cpus_read_lock+0x42/0x160
[  208.781512][ T8799]        static_key_slow_inc+0x12/0x30
[  208.786955][ T8799]        setup_udp_tunnel_sock+0x34f/0x550
[  208.792749][ T8799]        l2tp_tunnel_register+0xcb6/0x1320
[  208.798581][ T8799]        pppol2tp_connect+0x87c/0x1750
[  208.804050][ T8799]        __sys_connect+0x316/0x440
[  208.809148][ T8799]        __x64_sys_connect+0x7a/0x90
[  208.814416][ T8799]        do_syscall_64+0xfa/0xfa0
[  208.819429][ T8799]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.825843][ T8799] 
[  208.825843][ T8799] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}:
[  208.833494][ T8799]        lock_acquire+0x120/0x360
[  208.838512][ T8799]        lock_sock_nested+0x48/0x100
[  208.843785][ T8799]        inet_shutdown+0x6a/0x390
[  208.848795][ T8799]        nbd_mark_nsock_dead+0x2e9/0x560
[  208.854416][ T8799]        recv_work+0x2138/0x24f0
[  208.859344][ T8799]        process_scheduled_works+0xae1/0x17b0
[  208.865397][ T8799]        worker_thread+0x8a0/0xda0
[  208.870498][ T8799]        kthread+0x711/0x8a0
[  208.875085][ T8799]        ret_from_fork+0x4bc/0x870
[  208.880246][ T8799]        ret_from_fork_asm+0x1a/0x30
[  208.885519][ T8799] 
[  208.885519][ T8799] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  208.893153][ T8799]        lock_acquire+0x120/0x360
[  208.898207][ T8799]        __mutex_lock+0x187/0x1350
[  208.903304][ T8799]        nbd_queue_rq+0x257/0xf10
[  208.908331][ T8799]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  208.914387][ T8799]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  208.921235][ T8799]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  208.927728][ T8799]        blk_mq_run_hw_queue+0x348/0x4f0
[  208.933355][ T8799]        blk_mq_dispatch_list+0xd0c/0xe00
[  208.939059][ T8799]        blk_mq_flush_plug_list+0x469/0x550
[  208.944940][ T8799]        __blk_flush_plug+0x3d3/0x4b0
[  208.950301][ T8799]        __submit_bio+0x2d3/0x5a0
[  208.955307][ T8799]        submit_bio_noacct_nocheck+0x2fb/0xa50
[  208.961445][ T8799]        block_read_full_folio+0x7b7/0x830
[  208.967238][ T8799]        filemap_read_folio+0x117/0x380
[  208.972765][ T8799]        do_read_cache_folio+0x350/0x590
[  208.978382][ T8799]        read_part_sector+0xb6/0x2b0
[  208.983649][ T8799]        adfspart_check_ICS+0xa4/0xa50
[  208.989088][ T8799]        bdev_disk_changed+0x75f/0x14b0
[  208.994618][ T8799]        blkdev_get_whole+0x380/0x510
[  208.999972][ T8799]        bdev_open+0x31e/0xd30
[  209.004718][ T8799]        blkdev_open+0x457/0x600
[  209.009640][ T8799]        do_dentry_open+0x953/0x13f0
[  209.014910][ T8799]        vfs_open+0x3b/0x340
[  209.019486][ T8799]        path_openat+0x2ee5/0x3830
[  209.024584][ T8799]        do_filp_open+0x1fa/0x410
[  209.029590][ T8799]        do_sys_openat2+0x121/0x1c0
[  209.034774][ T8799]        __x64_sys_openat+0x138/0x170
[  209.040131][ T8799]        do_syscall_64+0xfa/0xfa0
[  209.045140][ T8799]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.051536][ T8799] 
[  209.051536][ T8799] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  209.058745][ T8799]        lock_acquire+0x120/0x360
[  209.063755][ T8799]        __mutex_lock+0x187/0x1350
[  209.068848][ T8799]        nbd_queue_rq+0xc8/0xf10
[  209.073773][ T8799]        blk_mq_dispatch_rq_list+0x4c0/0x1900
[  209.079825][ T8799]        __blk_mq_sched_dispatch_requests+0xda4/0x1570
[  209.086659][ T8799]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  209.093150][ T8799]        blk_mq_run_hw_queue+0x348/0x4f0
[  209.098777][ T8799]        blk_mq_dispatch_list+0xd0c/0xe00
[  209.104487][ T8799]        blk_mq_flush_plug_list+0x469/0x550
[  209.110370][ T8799]        __blk_flush_plug+0x3d3/0x4b0
[  209.115731][ T8799]        __submit_bio+0x2d3/0x5a0
[  209.120745][ T8799]        submit_bio_noacct_nocheck+0x2fb/0xa50
[  209.126882][ T8799]        block_read_full_folio+0x7b7/0x830
[  209.132673][ T8799]        filemap_read_folio+0x117/0x380
[  209.138207][ T8799]        do_read_cache_folio+0x350/0x590
[  209.143825][ T8799]        read_part_sector+0xb6/0x2b0
[  209.149096][ T8799]        adfspart_check_ICS+0xa4/0xa50
[  209.154540][ T8799]        bdev_disk_changed+0x75f/0x14b0
[  209.160077][ T8799]        blkdev_get_whole+0x380/0x510
[  209.165449][ T8799]        bdev_open+0x31e/0xd30
[  209.170199][ T8799]        blkdev_open+0x457/0x600
[  209.175121][ T8799]        do_dentry_open+0x953/0x13f0
[  209.180395][ T8799]        vfs_open+0x3b/0x340
[  209.184976][ T8799]        path_openat+0x2ee5/0x3830
[  209.190069][ T8799]        do_filp_open+0x1fa/0x410
[  209.195074][ T8799]        do_sys_openat2+0x121/0x1c0
[  209.200259][ T8799]        __x64_sys_openat+0x138/0x170
[  209.205618][ T8799]        do_syscall_64+0xfa/0xfa0
[  209.210628][ T8799]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.217026][ T8799] 
[  209.217026][ T8799] -> #3 (set->srcu){.+.+}-{0:0}:
[  209.224133][ T8799]        lock_sync+0xba/0x160
[  209.228791][ T8799]        __synchronize_srcu+0x96/0x3a0
[  209.234232][ T8799]        elevator_switch+0x12b/0x640
[  209.239497][ T8799]        elevator_change+0x315/0x4c0
[  209.244762][ T8799]        elevator_set_default+0x186/0x260
[  209.250464][ T8799]        blk_register_queue+0x34e/0x3f0
[  209.256001][ T8799]        __add_disk+0x677/0xd50
[  209.260838][ T8799]        add_disk_fwnode+0xfc/0x480
[  209.266025][ T8799]        nbd_dev_add+0x717/0xae0
[  209.270963][ T8799]        nbd_init+0x168/0x1f0
[  209.275625][ T8799]        do_one_initcall+0x236/0x820
[  209.280892][ T8799]        do_initcall_level+0x104/0x190
[  209.286331][ T8799]        do_initcalls+0x59/0xa0
[  209.291164][ T8799]        kernel_init_freeable+0x334/0x4b0
[  209.296862][ T8799]        kernel_init+0x1d/0x1d0
[  209.301699][ T8799]        ret_from_fork+0x4bc/0x870
[  209.306792][ T8799]        ret_from_fork_asm+0x1a/0x30
[  209.312065][ T8799] 
[  209.312065][ T8799] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  209.319866][ T8799]        lock_acquire+0x120/0x360
[  209.324937][ T8799]        __mutex_lock+0x187/0x1350
[  209.330033][ T8799]        elevator_change+0x1e5/0x4c0
[  209.335302][ T8799]        elevator_set_none+0x42/0xb0
[  209.340573][ T8799]        blk_mq_update_nr_hw_queues+0x598/0x1ab0
[  209.346885][ T8799]        nbd_start_device+0x17f/0xb10
[  209.352249][ T8799]        nbd_genl_connect+0x135b/0x18f0
[  209.357781][ T8799]        genl_family_rcv_msg_doit+0x215/0x300
[  209.363836][ T8799]        genl_rcv_msg+0x60e/0x790
[  209.368846][ T8799]        netlink_rcv_skb+0x208/0x470
[  209.374111][ T8799]        genl_rcv+0x28/0x40
[  209.378597][ T8799]        netlink_unicast+0x82f/0x9e0
[  209.383863][ T8799]        netlink_sendmsg+0x805/0xb30
[  209.389131][ T8799]        __sock_sendmsg+0x21c/0x270
[  209.394322][ T8799]        ____sys_sendmsg+0x505/0x830
[  209.399601][ T8799]        ___sys_sendmsg+0x21f/0x2a0
[  209.404795][ T8799]        __x64_sys_sendmsg+0x19b/0x260
[  209.410247][ T8799]        do_syscall_64+0xfa/0xfa0
[  209.415272][ T8799]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.421680][ T8799] 
[  209.421680][ T8799] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  209.430272][ T8799]        lock_acquire+0x120/0x360
[  209.435290][ T8799]        blk_alloc_queue+0x538/0x620
[  209.440567][ T8799]        __blk_mq_alloc_disk+0x15c/0x340
[  209.446199][ T8799]        nbd_dev_add+0x46c/0xae0
[  209.451153][ T8799]        nbd_init+0x168/0x1f0
[  209.455824][ T8799]        do_one_initcall+0x236/0x820
[  209.461101][ T8799]        do_initcall_level+0x104/0x190
[  209.466549][ T8799]        do_initcalls+0x59/0xa0
[  209.471383][ T8799]        kernel_init_freeable+0x334/0x4b0
[  209.477083][ T8799]        kernel_init+0x1d/0x1d0
[  209.481919][ T8799]        ret_from_fork+0x4bc/0x870
[  209.487014][ T8799]        ret_from_fork_asm+0x1a/0x30
[  209.492288][ T8799] 
[  209.492288][ T8799] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  209.499481][ T8799]        validate_chain+0xb9b/0x2140
[  209.504754][ T8799]        __lock_acquire+0xab9/0xd20
[  209.509941][ T8799]        lock_acquire+0x120/0x360
[  209.514948][ T8799]        fs_reclaim_acquire+0x72/0x100
[  209.520389][ T8799]        kmem_cache_alloc_node_noprof+0x48/0x710
[  209.526703][ T8799]        __alloc_skb+0x112/0x2d0
[  209.531621][ T8799]        alloc_uevent_skb+0x7d/0x230
[  209.536895][ T8799]        kobject_uevent_net_broadcast+0x2fa/0x560
[  209.543294][ T8799]        kobject_uevent_env+0x55b/0x8c0
[  209.548824][ T8799]        set_disk_ro+0x19e/0x1f0
[  209.553754][ T8799]        nbd_start_device+0x272/0xb10
[  209.559123][ T8799]        nbd_genl_connect+0x135b/0x18f0
[  209.564659][ T8799]        genl_family_rcv_msg_doit+0x215/0x300
[  209.570713][ T8799]        genl_rcv_msg+0x60e/0x790
[  209.575726][ T8799]        netlink_rcv_skb+0x208/0x470
[  209.580999][ T8799]        genl_rcv+0x28/0x40
[  209.585574][ T8799]        netlink_unicast+0x82f/0x9e0
[  209.590837][ T8799]        netlink_sendmsg+0x805/0xb30
[  209.596104][ T8799]        __sock_sendmsg+0x21c/0x270
[  209.601289][ T8799]        ____sys_sendmsg+0x505/0x830
[  209.606562][ T8799]        ___sys_sendmsg+0x21f/0x2a0
[  209.611779][ T8799]        __x64_sys_sendmsg+0x19b/0x260
[  209.617228][ T8799]        do_syscall_64+0xfa/0xfa0
[  209.622242][ T8799]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.628641][ T8799] 
[  209.628641][ T8799] other info that might help us debug this:
[  209.628641][ T8799] 
[  209.638849][ T8799] Chain exists of:
[  209.638849][ T8799]   fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex
[  209.638849][ T8799] 
[  209.651524][ T8799]  Possible unsafe locking scenario:
[  209.651524][ T8799] 
[  209.658953][ T8799]        CPU0                    CPU1
[  209.664299][ T8799]        ----                    ----
[  209.669647][ T8799]   lock(uevent_sock_mutex);
[  209.674222][ T8799]                                lock(cpuhp_state-up);
[  209.681100][ T8799]                                lock(uevent_sock_mutex);
[  209.688210][ T8799]   lock(fs_reclaim);
[  209.692188][ T8799] 
[  209.692188][ T8799]  *** DEADLOCK ***
[  209.692188][ T8799] 
[  209.700320][ T8799] 4 locks held by syz.4.798/8799:
[  209.705320][ T8799]  #0: ffffffff8f558090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  209.713492][ T8799]  #1: ffffffff8f557ea8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  209.722442][ T8799]  #2: ffff888025611270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_start_device+0x189/0xb10
[  209.732348][ T8799]  #3: ffffffff8f851428 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560
[  209.743294][ T8799] 
[  209.743294][ T8799] stack backtrace:
[  209.749180][ T8799] CPU: 1 UID: 0 PID: 8799 Comm: syz.4.798 Not tainted syzkaller #0 PREEMPT(full) 
[  209.749196][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  209.749211][ T8799] Call Trace:
[  209.749222][ T8799]  <TASK>
[  209.749229][ T8799]  dump_stack_lvl+0x189/0x250
[  209.749247][ T8799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.749261][ T8799]  ? __pfx__printk+0x10/0x10
[  209.749273][ T8799]  ? print_lock_name+0xde/0x100
[  209.749293][ T8799]  print_circular_bug+0x2ee/0x310
[  209.749314][ T8799]  check_noncircular+0x134/0x160
[  209.749334][ T8799]  validate_chain+0xb9b/0x2140
[  209.749354][ T8799]  ? __lock_acquire+0xab9/0xd20
[  209.749371][ T8799]  ? __mutex_trylock_common+0x153/0x260
[  209.749391][ T8799]  __lock_acquire+0xab9/0xd20
[  209.749408][ T8799]  ? kmem_cache_alloc_node_noprof+0x48/0x710
[  209.749428][ T8799]  lock_acquire+0x120/0x360
[  209.749442][ T8799]  ? kmem_cache_alloc_node_noprof+0x48/0x710
[  209.749463][ T8799]  ? __lock_acquire+0xab9/0xd20
[  209.749479][ T8799]  fs_reclaim_acquire+0x72/0x100
[  209.749493][ T8799]  ? kmem_cache_alloc_node_noprof+0x48/0x710
[  209.749511][ T8799]  kmem_cache_alloc_node_noprof+0x48/0x710
[  209.749531][ T8799]  ? __alloc_skb+0x112/0x2d0
[  209.749547][ T8799]  __alloc_skb+0x112/0x2d0
[  209.749561][ T8799]  alloc_uevent_skb+0x7d/0x230
[  209.749581][ T8799]  kobject_uevent_net_broadcast+0x2fa/0x560
[  209.749601][ T8799]  kobject_uevent_env+0x55b/0x8c0
[  209.749621][ T8799]  set_disk_ro+0x19e/0x1f0
[  209.749640][ T8799]  ? __pfx_set_disk_ro+0x10/0x10
[  209.749662][ T8799]  nbd_start_device+0x272/0xb10
[  209.749682][ T8799]  ? device_create_file+0xf4/0x1c0
[  209.749696][ T8799]  nbd_genl_connect+0x135b/0x18f0
[  209.749717][ T8799]  ? __pfx_nbd_genl_connect+0x10/0x10
[  209.749737][ T8799]  ? rcu_is_watching+0x15/0xb0
[  209.749755][ T8799]  ? __nla_parse+0x40/0x60
[  209.749771][ T8799]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  209.749793][ T8799]  genl_family_rcv_msg_doit+0x215/0x300
[  209.749813][ T8799]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  209.749835][ T8799]  ? stack_trace_save+0x9c/0xe0
[  209.749849][ T8799]  genl_rcv_msg+0x60e/0x790
[  209.749868][ T8799]  ? __pfx_genl_rcv_msg+0x10/0x10
[  209.749884][ T8799]  ? __pfx_nbd_genl_connect+0x10/0x10
[  209.749906][ T8799]  netlink_rcv_skb+0x208/0x470
[  209.749920][ T8799]  ? __lock_acquire+0xab9/0xd20
[  209.749935][ T8799]  ? __pfx_genl_rcv_msg+0x10/0x10
[  209.749952][ T8799]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  209.749971][ T8799]  ? down_read+0x1ad/0x2e0
[  209.749988][ T8799]  genl_rcv+0x28/0x40
[  209.750009][ T8799]  netlink_unicast+0x82f/0x9e0
[  209.750024][ T8799]  ? __pfx_netlink_unicast+0x10/0x10
[  209.750036][ T8799]  ? netlink_sendmsg+0x642/0xb30
[  209.750050][ T8799]  ? skb_put+0x11b/0x210
[  209.750064][ T8799]  netlink_sendmsg+0x805/0xb30
[  209.750082][ T8799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.750097][ T8799]  ? aa_sock_msg_perm+0xf1/0x1d0
[  209.750113][ T8799]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.750127][ T8799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.750142][ T8799]  __sock_sendmsg+0x21c/0x270
[  209.750162][ T8799]  ____sys_sendmsg+0x505/0x830
[  209.750179][ T8799]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.750197][ T8799]  ? import_iovec+0x74/0xa0
[  209.750214][ T8799]  ___sys_sendmsg+0x21f/0x2a0
[  209.750230][ T8799]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.750256][ T8799]  ? __fget_files+0x2a/0x420
[  209.750273][ T8799]  ? __fget_files+0x3a0/0x420
[  209.750291][ T8799]  __x64_sys_sendmsg+0x19b/0x260
[  209.750308][ T8799]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  209.750328][ T8799]  ? do_syscall_64+0xbe/0xfa0
[  209.750344][ T8799]  do_syscall_64+0xfa/0xfa0
[  209.750357][ T8799]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.750372][ T8799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.750384][ T8799]  ? clear_bhb_loop+0x60/0xb0
[  209.750399][ T8799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.750413][ T8799] RIP: 0033:0x7f0ea598eec9
[  209.750433][ T8799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.750445][ T8799] RSP: 002b:00007f0ea6759038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.750459][ T8799] RAX: ffffffffffffffda RBX: 00007f0ea5be5fa0 RCX: 00007f0ea598eec9
[  209.750470][ T8799] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000005
[  209.750479][ T8799] RBP: 00007f0ea5a11f91 R08: 0000000000000000 R09: 0000000000000000
[  209.750488][ T8799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.750496][ T8799] R13: 00007f0ea5be6038 R14: 00007f0ea5be5fa0 R15: 00007ffc856711d8
[  209.750511][ T8799]  </TASK>
[  210.198973][ T5948] usb usb3-port1: attempt power cycle
[  210.234807][ T8799] nbd0: detected capacity change from 0 to 127
[  210.242238][ T5852] block nbd0: Receive control failed (result -32)
[  210.242977][ T6265] block nbd0: Send control failed (result -32)
[  210.255118][   T52] block nbd0: Receive control failed (result -32)
[  210.255830][ T6265] block nbd0: Request send failed, requeueing
[  210.267907][   T97] block nbd0: Dead connection, failed to find a fallback
[  210.275346][   T97] block nbd0: shutting down sockets
[  210.275814][ T6265] blk_print_req_error: 24 callbacks suppressed
[  210.275828][ T6265] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.280564][   T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.287603][ T6265] buffer_io_error: 9 callbacks suppressed
[  210.287615][ T6265] Buffer I/O error on dev nbd0, logical block 1, async page read
[  210.297501][   T97] Buffer I/O error on dev nbd0, logical block 0, async page read
[  210.327529][ T6265] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.336672][ T6265] Buffer I/O error on dev nbd0, logical block 2, async page read
[  210.344712][ T6265] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.353780][ T6265] Buffer I/O error on dev nbd0, logical block 3, async page read
[  210.361745][ T6265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.370990][ T6265] Buffer I/O error on dev nbd0, logical block 0, async page read
[  210.379363][ T6265] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.388464][ T6265] Buffer I/O error on dev nbd0, logical block 1, async page read
[  210.396360][ T6265] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.406103][ T6265] Buffer I/O error on dev nbd0, logical block 2, async page read
[  210.413921][ T6265] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.423048][ T6265] Buffer I/O error on dev nbd0, logical block 3, async page read
[  210.430905][ T6265] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.441087][ T6265] Buffer I/O error on dev nbd0, logical block 0, async page read
[  210.448995][ T6265] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  210.458119][ T6265] Buffer I/O error on dev nbd0, logical block 1, async page read
[  210.466912][ T6265] ldm_validate_partition_table(): Disk read failed.
[  210.474214][ T6265] Dev nbd0: unable to read RDB block 0
[  210.481026][ T6265]  nbd0: unable to read partition table
[  210.486637][ T5850] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  210.496808][ T6265] ldm_validate_partition_table(): Disk read failed.
[  210.504235][ T6265] Dev nbd0: unable to read RDB block 0
[  210.510593][ T6265]  nbd0: unable to read partition table
[  210.514646][ T1209] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  210.554699][ T5948] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  210.575291][ T5948] usb 3-1: device descriptor read/8, error -71
[  210.675967][ T1209] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.687577][ T1209] usb 2-1: config 0 interface 0 has no altsetting 0
[  210.694186][ T1209] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00
[  210.703338][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.712364][ T1209] usb 2-1: config 0 descriptor??
[  210.824686][ T5948] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  211.034706][ T5948] usb 3-1: device not accepting address 72, error -71
[  211.041744][ T5948] usb usb3-port1: unable to enumerate USB device
[  211.120987][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.127907][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.134784][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.141566][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.148389][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.155192][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.161961][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.168759][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.175761][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.182536][ T1209] ryos 0003:1E7D:3232.000F: unknown main item tag 0x0
[  211.192015][ T1209] ryos 0003:1E7D:3232.000F: hidraw0: USB HID v0.01 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0
[  211.321076][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.329672][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.351856][ T1949] usb 2-1: USB disconnect, device number 85