last executing test programs:

14.057397069s ago: executing program 2 (id=1420):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0x7, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x87, 0x0, 0x3, 0x8d], 0xe000, 0x2c08c6})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x3ff, 0x80000000000005, 0x41, 0x2000003, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x805, 0x0, 0x7, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

12.399433133s ago: executing program 2 (id=1427):
r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/tcp\x00')
read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020)

12.153544402s ago: executing program 2 (id=1429):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000840)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a40)={0x0, 0xd, 0x6, "287ef2f0e58f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.828868107s ago: executing program 2 (id=1439):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x7102})
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)

6.605786646s ago: executing program 3 (id=1441):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

6.583308756s ago: executing program 2 (id=1442):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

6.450599692s ago: executing program 3 (id=1443):
syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x4, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0xf, 0x2, {0x7, 0x25, 0x1, 0x8, 0x28, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0xd, 0x1, 0xac, 0x6}, @as_header={0x7, 0x24, 0x1, 0xfe, 0x0, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x4, 0xd, {0x7, 0x25, 0x1, 0x8, 0x7, 0x3}}}}}}}}]}}, 0x0)

6.278424378s ago: executing program 2 (id=1445):
r0 = syz_open_dev$ndb(&(0x7f0000001540), 0x0, 0xc0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0)

3.829999552s ago: executing program 3 (id=1453):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, 0x0, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
read$FUSE(r3, &(0x7f0000001b40)={0x2020}, 0x205c)
timer_create(0x2, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)

3.363198981s ago: executing program 0 (id=1458):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x4, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd96", 0x1e}, {&(0x7f0000000800)="b56380b7487ff3b0", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="a724f62f362cbf2eb314123dfde22125a5285e5e9ab141e1f62433d0c3e58c93ccbc70ca8fed20ce356f89a808c5ce4cfaf700aabb2c21a21899177b9cb87383f48d453dabf1dc3b87d273704b579f4e7398a4a1e03127a7ffdee4ba3af6c2ddfad7d5ba0c67eed7cc5e048e3f84281e8c325aab535368c9bed46170a2476256c9609679ea97ef1c98fa86176dc4f80e74800ec18379c3773a9a6fa007bf4832dbd9761b4cbadbb83221759e6b8d58ed89c75f9d09190f3b55129d0ba3337c9c4ce12a331a2755610df63e81c74a4b243737dd958ceb54bdb4a18469df6500ca5a5a421679b802e723bc5ce6e0f110179c7b2e87d23785fa487b1e144119dea004161e4f9e9bc8b628617715674501fcc8c49f53806e3d421061642eacde65f1c09fafd53d80bb9cd0102323799f83587dbeabffba1b7b88f4efbfedbeed8c1aa61c4d96a2ad9f9a17023e6a91427bfe5d2688f244e1e35967f16977ffa72a65b33e1d8e5bc2852adb7247c71f8275671ffbacf849312604418ef3c20702425324d79c5a65ab416b9cde0ed44b46340168bebe51b0bf297798d5170be634490a654bc20d3c78d7f869c4fd26b24a96d561af83cb4fd15620e882ba184d9cd6215544d200228e93635f6e9d83a5aca6e28c8cdc2ed3984fbbdc8e5249e934b5c117f7b4ac4af0616bd17301ba5b6ffd5708b65cb00991b515b6279019580013a04633e0c2ceb928f7d9433a301591a16659bce8941b6f901cc3d38b417f78109ab4fae944baf9aedbe6cfaf26539aa3d19c527bec09d996eff60e6a13971767e141d984effa556e9ecc12718feeff0dd508fa2158811df8d4abd0541747ffd023235355bf1f0310966e7a2e665920cdcf8d119db8409ca47c4f0f420aadac1541238fc53be569005c74ca36fb88d54f3c4a25825887874e5905b45aaa8cbec9298fadfc69438dfbb1490b4562628583bda309eca33f641fd6d64d7e371d742891ac376990333da8227fed11fa9d76ba6353afef26548b585137c0de3fca07026f432305c6c6c3b5e8b562a5bf0ee1422a4126b838250d689c0541140979a4a2d8317fd1a96be449e8362cc5fca6b1ee9d67a5d1eadbddf47e0a764ede63922eee4883ef03bb70d09d130154528bcb9d47d1929075300eb6627c6b398f8b5465fd2bde68b4a50bc0b9ab52754a05a82f045d70605726804fb61aeb26b2a8cc9f12eb2649c0f349d4213522e5bb5d48fc99e8c2a7d62d5c4520f8d2a8da44be128d6e3de7db38fb39758c7232bbaa30049200cf8e7f5761f1f54b34b8f5e915eff65898bc25062622655c431eebed08bc264f17a0404b27e663a2b383450a8ceb36fcc0974865c48efb481e159eb992dc478c592fb3c25941eab073b018fddfc9df3bf00955d295f7f53045942985ff096a2e0175b686ef3b4dbdcd6d8bf457eba8750434f4b0fc05d1600268c75310790388b44b207ac105326af14513987dd243e13aa5f3796f4153eca7faf48a0974ba7b24b1c39c0b2cad2b654b3d87418cb43e863eda66927988d67d2595ff89ac6db4888f72465a2177e03c6ccd4b194975373d322e104e7828fa541c3c444933f8ced4bb642f836697f4c16465346de3b194d10761cfdb382cf0a8f9fc74e88faee0a92af0b4ceeb2f03f786c9d31112466c85be89d4c500be07bcc3a7f4f6eaf7f07af03d43fffacd35b05a66ebbe2be07aa5d7bf435bbd55ddd01adc66d75c78489978d8e40a40de0a8b29c34acfd3ffd75195151dc2b5b6b5e76f38ed4c1b1405be4891dc20effcaa8af021e84f2998182a6bb84382a08559032fd01177158eb162a77458d0d3dc1ede3a853c7ba1263af2447e5e23e485207cebe28a53e126f3d160fa7fd1c17814cbe7c4fc8c79b8dd81eb788751f3e20fd125591eca6bcedbf6be64e7ce2e7fcaea869e39a162ddec8631fa568f4357a3a638127f3ab6b01b08280e0c05cc829f48327fcf72387b7cbed777d5002179994914ef30d1b4b4432447386f863eb4972a378551dae6bb8c485ecffb7487978278428b72021670b6ccdce409247c1aaa2e6f6b749309d61e39a3217b041c897cb62786ab5e9b7965cab52f74b1d41d7fcd513c46d4f34e62d4ce65d1ed770fb800ea6edd584ddd4274acc1e34eb7fe854c40c876dd2aa57679b0b86bb7df2ae54238dc493a5dfcad124f49aa0d39e7cb1bfa347cf41818c22d7f6aa506d8a00e94f8d094e8c254331c16fd26328f76c7f2bea9f56dc405f6a8b952377267c39eb0af7d5c19b10a72e1d20feb6e61ed9f8e8233b1daaeb3a5ea9137a7abbc5bc2ae48e8b9d090517e97ebc1fca17d4e58b92a993dbd89432cb3a02e82738201ad4cdfe5869b31bc85f33a82feaecae90e1432bdbf360efd479a431cbba4291dec68d3ee468da4bb784daee8fbed33814c766fc66bb3b5a88cd8aad99e6a67edae15f15480a1259298eb06ab824be054b56d5e218320472b274574df1f287fbf4c82c4d8061ae50695ce598defa6b277cdc0bdad16d14f38d532ef9cfe264db2ccbbfd9a2f629b5685f01f8778af129d7fc31352b9af12b975f5acc8218f1779c6d5a624f7c7c3eb18997f1580c3c98d56c37c67088234de6838db5f8e02537f72717caecbddbced9e0ed2250b7bf40748f8b4df4d6e90c79923437a83433f34c9be6dbcb9ed5550d9dfddd6b605cfa0e0e22a33cb4423717771684cbb7b733fc66d85115e394903fc0a348ba609c475e3bc1d043ea5659c8b60eaf9e6e67cf968d8ffb95bf8d870db3421751611346d748f0e0b00c5c85b6c9356d6f608f20004ecbea1463a25ee2308968250736a8867485f0544b072da47db102ee3f2d11e094d9796a6d4fa2de7b48ed3af1b9d0756cefb0663781cfb764b9b3572f8ca2f9178ee2c198a65580ef46c2a80863d6ee2bcd66953de49f36a29119a8c94388f53a749bfb1552877842b252179f5ac96471712edf8eb1625c0e7ff5102f7d2818e403259bf5660775215f9beae4601d8cbb23af38cf58232674fc73ddceaa6da4981d4fd19aa6b3ed9e86dee88bc2b0a4fc4f2eab0d105187e584a83dc8ea6dd35d9b2be1c8d98568e8e6f8f7f4bf13b3185167a7e233f40abb55d6cfd0dcc632693397a1df0b0d87e5d70d56848d31c88ea0bb0930aab7d5b6c6cc821d36df71bbd78c8dc911646f25755527874564aba2e86fc5ed07e52a1c43718f5d37517d5462de5a1756df8cd825e0fdcaedcdf333c0a56cdb4d242c82ad04978d8388a6f29bd41940833954925339622a57a17a5003e59e0ce32f130b9cd0a95e873ec84d411570a7871e2df50d494e56de8eefcb2c8cce0f88150bdf80b444af9b5f9190bef1907def2abf41974eef8b56ea0414cee482b0f8e35a942b2f8e5fcf8cd5cc84d6955274b082386d73fedef88269d5dd48ead2b63e13485b18e7d9f36f1e0f6e9eab174bd1eb2fd6ecb46a51cfca1b240bb41506b018e69edfd91d2ca64acae33e1583b10de4f7edb69e8f214155bdb7287e9aeb749fcc2d8f319a77c9ddbf5a7c59ee95b855d384222cef0734eda45f1430c00028eb85ba410cdecb31db83f40e436a8d37a5dd64fdd22ba4859d4f34a6c8b0712f859b77b44f659a745b832f5664fa525ad76e9a0e75bac46ad197d35bd075d63a0299ffb2a9f15a67e0464a2849405bc56fac73b1e7eff71db35e3da55087d52b8bdef7fb887b78cf23b93486ea1da2668054bcbba60e7000bc81512539224da69f68f4fe6e7c2e40018307907d390679c29166c337e236adb896b32a0489f1bb531342063d3257edbcde71c85e3d6a3e80c59a72a842a367d09f3e3e1d5c89a7d05b24f70c21827aa3dd40b0011a1c7be1788289b4393ab9517e6a1c0d6db6e772d16bcb7538fcc5e9730d88c3155ec913269b060b044b2cc61cee05896a402d9dea8bc1fb174cea9278c040dd1a557911d27ea245bbf27e5a2cebabf0775e87f30ba434deaef1e6fec0d6d685c3bdf9056c98de38dca752f30c4e38971fb23811ae3b2c1bac9a4616b9246114f1ea356f77ef1749ff56060ad8a60015512585e1a31e030f1f317462162c97bca7575203b1cff5b666496bf2e46ea1623741def93d595439398716f358557a75cc6b9238e2a26728c61da8901568a59d606829855f721011cf10fefaf9bc23d19ba81fa0606c906d1bc147b8e95b3fc7e652760e0179ef12339235089f80ceac0c7738e9779a0472531b869f72c1d370fa0d77100c9800d973c603f5d6450f7e721e391fe0456a9a6dbb56abc6bbf86b895362117e3f82e00e63692c24bb892cd53c2b4d74c7302c4cd716f5b6848455e3da6e5fa0a257cf62623d393d6b013fa185337fe0b232c40ff05794a5f9557161485db522ebda68b09675024d7898173cc8080ba5d0581b22d177ea65cd5521151ac5cb29c8fbf60521318a0ed6f96aa298cb5356a0e03eb3a4ceb396ccf5483dc6dced7b661f5b40da94ff224ad39bb492193d833bdf0f0d9468bed6a435e04c066e2c38954c58733e0dfeda4db1e5f925c7c5f91169f018dcc45d28af0caba6b733fea85be51bd5daf500ed70455d7a5cd2cacacd2ffd92445eb659c4c9f0f9a30691de660880a0932d0997033f0c7773d01876dfdfe300217eaaa8f05989603d715c61e6829cf25b78251d9f0a35d5c7d427bbe0e7c5836643f86a52c8e5a67d1c76726bc351aec78ae4467685ae726fbbe6e23a5690fa2bb3ab9359687ee6990814ebac377bb0c5e9caa23ecc6ac03a5b745038f6deb3dd5c91e0530202575a55e28767cb6f680d63f0bab6aa7f768e3c9849dc0eb7f8738b6e75aad770c92a8bc7078b7f9f209a938f9a7d42b8f626dc4976499eebf293cd914d5ae1e34dfca3c768bf577ba953ab11d347c927ca8175e61b5fdf4bbe7948d694ea63030b7f177ae40c1079218d4eea79b05ba3f2f8cae5be9e124b5541ddd96f9ed27c9f494600241f065984a947b70bc44a965c8bebe944459ede9e592332723c909f7491092f9a96f19f040f1c7856dcc1e5218fdde1b902539e6e3a0461805d56f0884bc5e5a19af31b67c86ee389390ec55cdf66841076de167d3556fdb619e78fabf97fc88ee303da670e1199f0a2c7ea9d2fa8e85a4646a5370771b0769a9a55ce324bd9b3d328f5422cf9814d797fd73e82a7caa9b78418467f032a753f1c8e49e4eddd4a91ab711a35acb8c976ea8905fcaa7c894a5f7f9f883f3988effea3f153ec0f3550b25f7277a61b19d5621eab55f85997c0da7a5d113e10ef3868ee42904c9faf0745d47ce00347bd9e45059bd6c26e1bd43ad42de040e5a76f08897adfe6364bcdf92315ea40f024432a970eb886d93bf32e13eded681e5b31a4869cbab8248e909e020c9c480d80342299c54c670240f4871a7bd85c3517537878ac657e763d9e1e3979533af1d1c5aad14d5b0680b2c198855fc68ec8a85329f878637144fa18f78eb99a3efe00e5165f037c01f6a85ec613fbd5a8ca8a5a2c38180e8c0adeece338f0bf3c8f4f80c0701da269f7ba9ba8bc6b861563d4165f16445af91a367d1932efc16349910aed8eedf5dbc007a132959ccde1400231e5c1121e019628b0b600458942e178455aceee5cc83c482c2f762cdf19866e1bd7c97901388fb163303287c111f8c789a7ef6c7f38966bbdbf4e47f85e78f2950f0e3027adc9f99b736b6eb17fdb62fa280eb047295c8feaa9fbf6e38b8e5b06267883b27fff98936ec76788ff4b5624697f1802a0d37467c00"/4093, 0xffd}, {&(0x7f0000000dc0)}], 0x2, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xe}}], 0x48}}], 0x4, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.165275868s ago: executing program 0 (id=1459):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x7102})
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)

3.156925409s ago: executing program 1 (id=1460):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000440))
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x29, 0x1f, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x10, 0x8020, 0x0, 0x4, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4, 0xe6, 0x1, 0x1}, @rr={0x7, 0x17, 0xb7, [@local, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @timestamp={0x44, 0x24, 0x42, 0x0, 0x5, [0x8, 0x4, 0xcb5, 0x7fff, 0x1, 0x2, 0x1, 0x4]}, @noop]}}}}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000f76d81180001801400000000000000000000000400000000000000b2ec9eef5c4ceb69db546f07ca04ba09b0ee04d222e0683cf871a7e069ab728cf170e526f010e030ae57d7236e99f68e1a3c67ddc9165b31cac21f01e73bf207106456c95c62ca85b665ec9e531aceef11f77d70ef88f13690d39994c627b6978285a227d33f1be952c4295d2211f9491df0"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')

2.201883145s ago: executing program 0 (id=1461):
fsopen(&(0x7f0000000380)='btrfs\x00', 0x1)

2.130690168s ago: executing program 1 (id=1462):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9)

2.049109201s ago: executing program 1 (id=1463):
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x80000001, 0x0, 0x0, 0x10000004, {0x40, 0xd08, 0x0, 0xfe, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, 0x0)
ioctl$TIOCGPTPEER(r4, 0x40140921, 0x200000000005)
ioctl$TIOCGPTPEER(r3, 0x40480923, 0x9e)
sendmsg$NL80211_CMD_NEW_MPATH(r0, 0x0, 0x40815)
syz_genetlink_get_family_id$nl80211(0x0, r0)

2.048677171s ago: executing program 0 (id=1464):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil)
r5 = shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
shmdt(r5)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000000)
listen(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0)

1.997969043s ago: executing program 3 (id=1465):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f56", 0xe5}, {&(0x7f0000000fc0)}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe87", 0x14}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f", 0xb7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de5464", 0x55}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be4", 0xcc}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0)
syz_open_dev$evdev(&(0x7f0000000500), 0x2, 0x189801)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000040)={0x3a, &(0x7f0000000180)=[{0xd, '\x00', @st={0x4, [{0x1, @uvalue=0x401}, {0x2, @svalue=0x6}, {0x3, @svalue=0xffffffffffffffff}, {0x3, @uvalue=0x3}]}, 0xffffffff}]})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.733528403s ago: executing program 1 (id=1466):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

1.04051844s ago: executing program 0 (id=1467):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd96", 0x1e}, {&(0x7f0000000800)="b56380b7487ff3b0", 0x8}], 0x3, &(0x7f00000014c0)}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003840)="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"/4093, 0xffd}, {&(0x7f0000000dc0)}], 0x2, &(0x7f0000000bc0)=[@mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0xe}}], 0x48}}], 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

979.158612ms ago: executing program 1 (id=1468):
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)=<r4=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc)
r6 = socket$kcm(0xa, 0x2, 0x0)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000440)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000000380)=0xe8)
getresgid(&(0x7f0000000540)=<r9=>0x0, &(0x7f0000000600), &(0x7f0000000640))
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x0, 0x0, 0x0, r8, r9, 0x4, 0x40}, 0x0, 0x0, 0x327b, 0x8000000000000000, 0x8000000000000000, 0x400, 0x6, 0x6, 0x1, 0x6e3, r4, r1})
r10 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r10, 0x8983, &(0x7f00000002c0)={0x1, 'sit0\x00', {}, 0x9})
sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x8001, 0x46, 0x1, 0xee, 0x1, 0xcc7, 0x8, 0x7, 0x100a, 0x100, 0x1002, 0x8, 0xd, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x86, 0x5, 0xf27, 0x6, 0x7, 0x8, 0x5, 0x3, 0x6, 0xfffe, 0xfffffff8]})

902.120345ms ago: executing program 0 (id=1469):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad1", 0x42}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f56", 0xe5}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c1", 0xcd}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe87", 0x14}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4a994def6599287fb0f8d61029188945e9b273cded03bf8a0c2da5168461dafc53f", 0xb7}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de54", 0x54}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df532", 0x66}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

861.875837ms ago: executing program 3 (id=1470):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x7102})
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)

665.174854ms ago: executing program 3 (id=1471):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000440))
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4)
r4 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x29, 0x1f, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x10, 0x8020, 0x0, 0x4, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4, 0xe6, 0x1, 0x1}, @rr={0x7, 0x17, 0xb7, [@local, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @end, @timestamp={0x44, 0x24, 0x42, 0x0, 0x5, [0x8, 0x4, 0xcb5, 0x7fff, 0x1, 0x2, 0x1, 0x4]}, @noop]}}}}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0700000000000000000005000000f76d81180001801400000000000000000000000400000000000000b2ec9eef5c4ceb69db546f07ca04ba09b0ee04d222e0683cf871a7e069ab728cf170e526f010e030ae57d7236e99f68e1a3c67ddc9165b31cac21f01e73bf207106456c95c62ca85b665ec9e531aceef11f77d70ef88f13690d39994c627b6978285a227d33f1be952c4295d2211f9491df0"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00')

0s ago: executing program 1 (id=1472):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r1, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000000)={0x28, 0x3, r1, r1, 0x3, 0xfffffffffffffffa, 0x3ffd})

kernel console output (not intermixed with test programs):

sb 1-1: config 0 descriptor??
[  239.988731][   T42] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  240.025798][   T42] usb 2-1: Using ep0 maxpacket: 16
[  240.033578][   T42] usb 2-1: unable to read config index 0 descriptor/start: -61
[  240.041802][   T42] usb 2-1: can't read configurations, error -61
[  240.048371][   T42] usb usb2-port1: unable to enumerate USB device
[  240.187377][ T5751] usb 1-1: USB disconnect, device number 26
[  240.775084][ T5751] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  241.199816][ T8451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  242.045221][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  242.258720][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.280702][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  242.290825][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.302058][    T9] usb 2-1: Product: syz
[  242.307116][    T9] usb 2-1: Manufacturer: syz
[  242.312168][    T9] usb 2-1: SerialNumber: syz
[  242.522251][ T5751] usb 1-1: unable to get BOS descriptor or descriptor too short
[  242.554644][ T5751] usb 1-1: unable to read config index 0 descriptor/start: -71
[  242.573909][ T5751] usb 1-1: can't read configurations, error -71
[  242.655828][ T8502] can0: slcan on ttyS3.
[  242.715830][ T8502] can0 (unregistered): slcan off ttyS3.
[  243.476188][ T5751] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  243.591470][    T9] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  243.598135][    T9] cdc_ncm 2-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048
[  243.605600][    T9] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  243.657136][ T5751] usb 1-1: Using ep0 maxpacket: 16
[  243.665768][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.676784][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.686588][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  243.700228][ T5751] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  243.709392][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.719632][ T5751] usb 1-1: config 0 descriptor??
[  243.803933][    T9] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  243.825355][    T9] usb 2-1: USB disconnect, device number 31
[  243.835611][    T9] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  244.135644][ T5751] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max
[  244.144137][ T5751] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max
[  244.338112][ T5751] microsoft 0003:045E:07DA.000A: No inputs registered, leaving
[  244.360384][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'.
[  244.365839][ T5751] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  244.390082][ T5751] microsoft 0003:045E:07DA.000A: no inputs found
[  244.401445][ T5751] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  244.439093][ T5751] usb 1-1: USB disconnect, device number 28
[  244.501152][ T8515] fido_id[8515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  245.001824][ T1059] block nbd3: Possible stuck request ffff888022129a00: control (read@0,1024B). Runtime 120 seconds
[  245.013154][ T1059] block nbd3: Possible stuck request ffff888022129c00: control (read@1024,1024B). Runtime 120 seconds
[  245.024646][ T1059] block nbd3: Possible stuck request ffff888022129e00: control (read@2048,1024B). Runtime 120 seconds
[  245.455349][  T787] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  245.517625][ T8497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  245.669956][  T787] usb 1-1: config 0 has no interfaces?
[  245.676381][  T787] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  245.702704][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.731705][  T787] usb 1-1: config 0 descriptor??
[  245.756742][ T8542] syzkaller0: entered promiscuous mode
[  245.762256][ T8542] syzkaller0: entered allmulticast mode
[  245.966815][   T23] usb 1-1: USB disconnect, device number 29
[  245.996165][   T42] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  246.215371][   T42] usb 2-1: Using ep0 maxpacket: 32
[  246.229872][   T42] usb 2-1: unable to get BOS descriptor or descriptor too short
[  246.256702][   T42] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  246.279522][   T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.312334][   T42] usb 2-1: config 0 has no interface number 0
[  246.337135][   T42] usb 2-1: config 0 interface 251 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  246.362391][   T42] usb 2-1: config 0 interface 251 has no altsetting 0
[  246.384664][   T42] usb 2-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2
[  246.419027][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.454987][   T42] usb 2-1: Product: syz
[  246.467266][   T42] usb 2-1: Manufacturer: syz
[  246.471902][   T42] usb 2-1: SerialNumber: syz
[  246.504194][   T42] usb 2-1: config 0 descriptor??
[  246.565795][   T23] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  246.745201][   T42] usb 2-1: USB disconnect, device number 32
[  246.825097][  T788] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  246.955077][ T5751] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  247.016666][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.028108][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.039311][  T788] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  247.049305][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.060792][  T788] usb 3-1: config 0 descriptor??
[  247.174518][ T5751] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  247.183775][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.191962][ T5751] usb 4-1: Product: syz
[  247.196496][ T5751] usb 4-1: Manufacturer: syz
[  247.201172][ T5751] usb 4-1: SerialNumber: syz
[  247.209578][ T5751] usb 4-1: config 0 descriptor??
[  247.420126][ T5751] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  247.478942][  T788] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  247.489092][  T788] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  247.496620][  T788] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  247.504129][  T788] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  247.511633][  T788] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  247.523611][  T788] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[  247.665112][   T42] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  247.846734][   T42] usb 2-1: Using ep0 maxpacket: 32
[  247.853781][   T42] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  247.863956][   T42] usb 2-1: config 0 has no interface number 0
[  247.873660][   T42] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  247.882942][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.892139][   T42] usb 2-1: Product: syz
[  247.897683][   T42] usb 2-1: Manufacturer: syz
[  247.899694][  T788] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 32: -71
[  247.902324][   T42] usb 2-1: SerialNumber: syz
[  247.905294][   T42] usb 2-1: config 0 descriptor??
[  247.913552][  T788] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense firmware info: -71
[  247.929666][   T42] smsc95xx v2.0.0
[  247.938207][  T788] playstation 0003:054C:0DF2.000B: Failed to get firmware info from DualSense
[  247.947585][  T788] playstation 0003:054C:0DF2.000B: Failed to create dualsense.
[  247.962799][  T788] playstation: probe of 0003:054C:0DF2.000B failed with error -71
[  247.985577][  T788] usb 3-1: USB disconnect, device number 32
[  248.210768][   T23] usb 1-1: unable to get BOS descriptor or descriptor too short
[  248.235904][   T23] usb 1-1: unable to read config index 0 descriptor/start: -71
[  248.243524][   T23] usb 1-1: can't read configurations, error -71
[  248.272149][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.833'.
[  248.336176][   T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  248.347806][   T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  248.364282][ T8605] syzkaller0: entered promiscuous mode
[  248.370634][ T8605] syzkaller0: entered allmulticast mode
[  248.513977][   T27] audit: type=1326 audit(1774650881.256:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  248.556590][   T27] audit: type=1326 audit(1774650881.256:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  248.566400][   T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  248.585709][   T27] audit: type=1326 audit(1774650881.266:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  248.621570][   T42] smsc95xx: probe of 2-1:0.67 failed with error -71
[  248.633334][   T42] usb 2-1: USB disconnect, device number 33
[  248.663300][   T27] audit: type=1326 audit(1774650881.266:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  248.707309][ T5751] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  248.729172][ T5751] usb 4-1: USB disconnect, device number 38
[  248.749145][   T27] audit: type=1326 audit(1774650881.266:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  248.779054][   T27] audit: type=1326 audit(1774650881.266:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  248.806531][   T27] audit: type=1326 audit(1774650881.266:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  248.838389][   T27] audit: type=1326 audit(1774650881.266:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  248.861322][   T27] audit: type=1326 audit(1774650881.266:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  248.884618][   T27] audit: type=1326 audit(1774650881.266:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.0.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499bf9c799 code=0x7ffc0000
[  249.005114][    T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  249.185622][    T9] usb 3-1: Using ep0 maxpacket: 16
[  249.198870][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.213253][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  249.224772][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  249.235799][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  249.258514][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  249.286461][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  249.304950][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  249.323278][    T9] usb 3-1: Manufacturer: syz
[  249.344201][    T9] usb 3-1: config 0 descriptor??
[  249.644981][    T9] rc_core: IR keymap rc-hauppauge not found
[  249.650914][    T9] Registered IR keymap rc-empty
[  249.665022][ T5751] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  249.672909][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  249.705045][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  249.736670][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  249.757204][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41
[  249.773037][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  249.805291][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  249.835046][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  249.854975][ T5751] usb 4-1: Using ep0 maxpacket: 16
[  249.862843][ T5751] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.874430][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  249.882082][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  249.893698][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  249.905173][ T5751] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  249.915294][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  249.922970][ T5751] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  249.938028][ T5751] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  249.947538][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  249.956009][ T5751] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  249.964170][ T5751] usb 4-1: Manufacturer: syz
[  249.976226][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  249.984498][ T5751] usb 4-1: config 0 descriptor??
[  249.993342][ T8631] syzkaller0: entered promiscuous mode
[  250.001499][ T8631] syzkaller0: entered allmulticast mode
[  250.015288][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  250.045104][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  250.076895][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  250.109281][    T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  250.133094][    T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  250.163527][    T9] usb 3-1: USB disconnect, device number 33
[  250.305015][ T5751] rc_core: IR keymap rc-hauppauge not found
[  250.325011][ T5751] Registered IR keymap rc-empty
[  250.330059][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.365036][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.416922][ T5751] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1
[  250.446452][ T8642] syz.1.849[8642]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[  250.447810][ T5751] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input42
[  250.474782][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.499032][ T8642] loop1: detected capacity change from 0 to 16
[  250.505225][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.535585][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.562674][ T8642] erofs: (device loop1): mounted with root inode @ nid 36.
[  250.577036][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.615550][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.645285][ T8642] syz.1.849: attempt to access beyond end of device
[  250.645285][ T8642] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  250.665199][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.697986][ T8642] syz.1.849: attempt to access beyond end of device
[  250.697986][ T8642] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16
[  250.711796][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.719085][ T8642] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  250.772431][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.815794][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.865365][ T5751] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  250.916987][ T5751] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  250.942019][ T5751] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  250.971861][ T5751] usb 4-1: USB disconnect, device number 39
[  251.176126][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'.
[  251.325493][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'.
[  251.511167][ T8678] syzkaller0: entered promiscuous mode
[  253.418275][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'.
[  253.585540][  T787] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  253.702851][ T8728] syzkaller0: entered promiscuous mode
[  253.788338][  T787] usb 2-1: Using ep0 maxpacket: 16
[  253.796434][  T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.819308][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  253.839063][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  253.849160][  T787] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  253.879508][  T787] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  253.916739][  T787] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  253.931482][  T787] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  253.950990][  T787] usb 2-1: Manufacturer: syz
[  253.963141][  T787] usb 2-1: config 0 descriptor??
[  254.285207][  T787] rc_core: IR keymap rc-hauppauge not found
[  254.300861][  T787] Registered IR keymap rc-empty
[  254.311092][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.362228][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.416591][  T787] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  254.432009][  T787] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input43
[  254.448286][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.488168][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.528423][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.580180][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.622229][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.668479][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.705520][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.755848][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.794979][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.834842][  T787] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  254.885006][  T787] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  254.901710][  T787] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  254.929248][  T787] usb 2-1: USB disconnect, device number 34
[  255.865285][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'.
[  255.888356][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  255.899395][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  255.944173][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.885'.
[  256.385469][ T8773] loop1: detected capacity change from 0 to 8192
[  256.502386][ T8773] process 'syz.1.891' launched './file1' with NULL argv: empty string added
[  256.694744][ T8781] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  256.985019][ T5800] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  257.065183][ T5751] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  257.167376][ T5800] usb 4-1: Using ep0 maxpacket: 32
[  257.175119][ T5800] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  257.183332][ T5800] usb 4-1: config 0 has no interface number 0
[  257.189778][ T5800] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  257.202188][ T5800] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  257.211349][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.219708][ T5800] usb 4-1: Product: syz
[  257.223992][ T5800] usb 4-1: Manufacturer: syz
[  257.228653][ T5800] usb 4-1: SerialNumber: syz
[  257.235164][ T5800] usb 4-1: config 0 descriptor??
[  257.243264][ T8784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  257.247492][ T5751] usb 1-1: config 0 has no interfaces?
[  257.258730][ T5751] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  257.269583][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.285601][ T5751] usb 1-1: config 0 descriptor??
[  257.461037][ T8784] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  257.497337][   T42] usb 1-1: USB disconnect, device number 32
[  258.054988][   T42] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  258.258198][   T42] usb 1-1: unable to get BOS descriptor or descriptor too short
[  258.276973][   T42] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  258.298462][   T42] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  258.324226][   T42] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  258.344265][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.357293][   T42] usb 1-1: Product: syz
[  258.361526][   T42] usb 1-1: Manufacturer: syz
[  258.371438][   T42] usb 1-1: SerialNumber: syz
[  258.495779][ T5800] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  258.514841][ T5800] asix: probe of 4-1:0.188 failed with error -32
[  258.604525][   T42] usb 1-1: Can't get UAC3 power state for id 10
[  258.615555][   T42] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[  258.627415][   T42] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  258.657158][   T42] usb 1-1: USB disconnect, device number 33
[  259.727831][ T5751] usb 4-1: USB disconnect, device number 40
[  259.896230][ T8841] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  260.048530][ T8793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  260.116202][ T8845] syzkaller0: entered promiscuous mode
[  260.124993][ T8845] syzkaller0: entered allmulticast mode
[  260.745085][ T5800] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  260.765093][ T5751] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  260.835072][    T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  260.938950][ T5800] usb 3-1: config 0 has no interfaces?
[  260.944449][ T5800] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  260.953684][ T5751] usb 4-1: Using ep0 maxpacket: 32
[  260.958964][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.969688][ T5751] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  260.978960][ T5800] usb 3-1: config 0 descriptor??
[  260.984061][ T5751] usb 4-1: config 0 has no interface number 0
[  260.990497][ T5751] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  261.010389][ T5751] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  261.035194][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.043346][ T5751] usb 4-1: Product: syz
[  261.055052][ T5751] usb 4-1: Manufacturer: syz
[  261.059740][ T5751] usb 4-1: SerialNumber: syz
[  261.065460][    T9] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  261.074508][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.098233][ T5751] usb 4-1: config 0 descriptor??
[  261.104386][    T9] usb 2-1: config 0 descriptor??
[  261.104410][ T8868] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  261.208363][   T42] usb 3-1: USB disconnect, device number 34
[  261.334784][ T8868] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  261.774982][   T42] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  261.957566][   T42] usb 3-1: unable to get BOS descriptor or descriptor too short
[  261.967766][   T42] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  261.978903][   T42] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  261.993761][   T42] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  262.002974][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.011101][   T42] usb 3-1: Product: syz
[  262.015406][   T42] usb 3-1: Manufacturer: syz
[  262.020021][   T42] usb 3-1: SerialNumber: syz
[  262.244383][   T42] usb 3-1: Can't get UAC3 power state for id 10
[  262.252771][   T42] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  262.264646][   T42] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  262.295755][   T42] usb 3-1: USB disconnect, device number 35
[  262.320180][ T5755] udevd[5755]: setting mode of /dev/bus/usb/003/035 to 020664 failed: No such file or directory
[  262.331248][ T5755] udevd[5755]: setting owner of /dev/bus/usb/003/035 to uid=0, gid=0 failed: No such file or directory
[  262.360652][ T5751] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  262.378027][ T6118] udevd[6118]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  262.387762][ T5751] asix: probe of 4-1:0.188 failed with error -32
[  262.573835][    T9] usb 2-1: Cannot set autoneg
[  262.578740][    T9] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[  262.596552][    T9] usb 2-1: USB disconnect, device number 35
[  263.253781][ T8895] syzkaller0: entered promiscuous mode
[  263.259352][ T8895] syzkaller0: entered allmulticast mode
[  263.440849][ T8899] syzkaller0: entered promiscuous mode
[  263.447092][ T8899] syzkaller0: entered allmulticast mode
[  263.491400][ T5751] usb 4-1: USB disconnect, device number 41
[  263.815291][ T8910] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  264.106098][ T8914] loop2: detected capacity change from 0 to 8192
[  264.399535][ T8918] syzkaller0: entered promiscuous mode
[  264.407845][ T8918] syzkaller0: entered allmulticast mode
[  264.569553][ T8880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  264.724026][ T8924] syzkaller0: entered promiscuous mode
[  264.733332][ T8924] syzkaller0: entered allmulticast mode
[  264.915118][ T5751] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  265.037327][ T8927] syzkaller0: entered promiscuous mode
[  265.124993][ T5751] usb 3-1: Using ep0 maxpacket: 32
[  265.149393][ T5751] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  265.174986][ T5751] usb 3-1: config 0 has no interface number 0
[  265.181112][ T5751] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  265.229823][ T5751] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  265.245997][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.254028][ T5751] usb 3-1: Product: syz
[  265.258368][ T5751] usb 3-1: Manufacturer: syz
[  265.283596][ T5751] usb 3-1: SerialNumber: syz
[  265.296758][ T5751] usb 3-1: config 0 descriptor??
[  265.310734][ T8922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  265.538097][ T8922] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  266.576454][ T5751] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  266.587128][ T5751] asix: probe of 3-1:0.188 failed with error -32
[  266.808718][ T8943] syzkaller0: entered promiscuous mode
[  266.814208][ T8943] syzkaller0: entered allmulticast mode
[  267.216563][ T8963] syzkaller0: entered promiscuous mode
[  267.222190][ T8963] syzkaller0: entered allmulticast mode
[  267.657883][ T5751] usb 3-1: USB disconnect, device number 36
[  267.803783][ T8973] syzkaller0: entered promiscuous mode
[  268.618860][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  268.618874][   T27] audit: type=1326 audit(1774650901.366:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  268.656624][   T27] audit: type=1326 audit(1774650901.366:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  268.685026][   T27] audit: type=1326 audit(1774650901.406:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  268.718861][   T27] audit: type=1326 audit(1774650901.406:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  268.755041][   T27] audit: type=1326 audit(1774650901.406:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  268.783578][   T27] audit: type=1326 audit(1774650901.406:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  268.810162][   T27] audit: type=1326 audit(1774650901.406:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  268.856067][   T27] audit: type=1326 audit(1774650901.406:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  268.887730][   T27] audit: type=1326 audit(1774650901.406:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  268.911286][   T27] audit: type=1326 audit(1774650901.406:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8988 comm="syz.1.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  269.186066][ T5751] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  269.381406][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.398094][ T5751] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  269.409692][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.427773][ T5751] usb 2-1: config 0 descriptor??
[  269.851424][ T5751] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor
[  269.873280][ T5751] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000C/input/input44
[  270.024808][ T5751] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  270.046619][ T8993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.108625][ T8993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.466605][  T787] usb 2-1: USB disconnect, device number 36
[  270.535084][   T42] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  270.615029][ T5751] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  270.715910][   T42] usb 3-1: Using ep0 maxpacket: 16
[  270.729497][   T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  270.740025][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  270.751301][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  270.761020][   T42] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  270.778952][   T42] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  270.793925][   T42] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  270.803274][   T42] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  270.812355][   T42] usb 3-1: Manufacturer: syz
[  270.815051][ T5751] usb 4-1: Using ep0 maxpacket: 32
[  270.822286][   T42] usb 3-1: config 0 descriptor??
[  270.830917][ T5751] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  270.845185][ T5751] usb 4-1: config 0 has no interface number 0
[  270.851321][ T5751] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  270.877371][ T5751] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  270.896016][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.904069][ T5751] usb 4-1: Product: syz
[  270.915079][ T5751] usb 4-1: Manufacturer: syz
[  270.919708][ T5751] usb 4-1: SerialNumber: syz
[  270.936859][ T5751] usb 4-1: config 0 descriptor??
[  270.950335][ T9002] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  271.159404][   T42] rc_core: IR keymap rc-hauppauge not found
[  271.171268][   T42] Registered IR keymap rc-empty
[  271.182921][ T9002] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  271.191844][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.235052][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.272961][   T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  271.289986][   T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input45
[  271.312573][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.345187][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.375150][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.419837][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.465134][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.515181][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.560550][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.617691][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.665082][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.695147][   T42] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.736779][   T42] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  271.747922][   T42] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  271.785386][   T42] usb 3-1: USB disconnect, device number 37
[  271.853677][ T9017] syzkaller0: entered promiscuous mode
[  272.215817][ T5751] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  272.238710][ T5751] asix: probe of 4-1:0.188 failed with error -61
[  273.478691][ T5751] usb 4-1: USB disconnect, device number 42
[  274.886250][  T788] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  275.082464][ T1059] block nbd3: Possible stuck request ffff888022129a00: control (read@0,1024B). Runtime 150 seconds
[  275.087965][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.094026][ T1059] block nbd3: Possible stuck request ffff888022129c00: control (read@1024,1024B). Runtime 150 seconds
[  275.115970][ T1059] block nbd3: Possible stuck request ffff888022129e00: control (read@2048,1024B). Runtime 150 seconds
[  275.157005][  T788] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  275.174960][  T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.201971][  T788] usb 1-1: config 0 descriptor??
[  275.641593][  T788] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  275.670228][  T788] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000D/input/input46
[  275.726665][ T9061] syzkaller0: entered promiscuous mode
[  275.729168][ T9063] program syz.1.980 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  275.797756][  T788] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  275.842457][ T9045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.883224][ T9045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.298264][   T42] usb 1-1: USB disconnect, device number 34
[  276.299110][    C0] keytouch 0003:0926:3333.000D: usb_submit_urb(ctrl) failed: -19
[  276.312826][    C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  277.513449][ T9077] syzkaller0: entered promiscuous mode
[  277.519080][ T9077] syzkaller0: entered allmulticast mode
[  277.819419][ T9052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  278.045936][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.989'.
[  278.111494][ T9105] 8021q: adding VLAN 0 to HW filter on device bond1
[  278.534991][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  278.727347][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.765008][    T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  278.791427][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.808686][    T9] usb 2-1: config 0 descriptor??
[  279.078725][ T9120] syzkaller0: entered promiscuous mode
[  279.084241][ T9120] syzkaller0: entered allmulticast mode
[  279.210048][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.995'.
[  279.245619][    T9] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor
[  279.295890][    T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input47
[  279.412826][    T9] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  279.469052][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.495002][  T788] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  279.504501][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.686955][  T788] usb 1-1: Using ep0 maxpacket: 16
[  279.708574][  T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  279.735264][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  279.762282][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  279.773408][  T788] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  279.786429][  T788] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.809182][  T788] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  279.818879][  T788] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  279.827279][  T788] usb 1-1: Manufacturer: syz
[  279.839481][  T788] usb 1-1: config 0 descriptor??
[  279.859248][ T9136] nbd2: detected capacity change from 0 to 63
[  279.869306][ T9140] nbd: must specify an index to disconnect
[  279.877015][ T5767] block nbd2: Receive control failed (result -104)
[  279.957344][   T42] usb 2-1: USB disconnect, device number 37
[  280.175248][  T788] rc_core: IR keymap rc-hauppauge not found
[  280.181321][  T788] Registered IR keymap rc-empty
[  280.191565][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.245060][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.286002][  T788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  280.319799][  T788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input48
[  280.356747][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.391757][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.435329][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.475832][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.515192][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.585108][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.616017][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.655052][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.697947][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.745089][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  280.778814][  T788] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  280.788492][  T788] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  280.804834][  T788] usb 1-1: USB disconnect, device number 35
[  280.858686][ T9164] syzkaller0: entered promiscuous mode
[  280.888583][ T9164] syzkaller0: entered allmulticast mode
[  281.364734][ T9178] nbd: nbd2 already in use
[  281.370254][ T9178] nbd: must specify an index to disconnect
[  281.590156][ T9189] fuse: root generation should be zero
[  281.596311][ T9188] syzkaller0: entered promiscuous mode
[  281.602147][ T9188] syzkaller0: entered allmulticast mode
[  281.608257][   T23] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  281.806694][   T23] usb 4-1: config 0 has no interfaces?
[  281.812218][   T23] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  281.822561][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.833424][   T23] usb 4-1: config 0 descriptor??
[  281.955059][  T787] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  282.035128][  T788] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  282.049520][   T23] usb 4-1: USB disconnect, device number 43
[  282.137311][  T787] usb 3-1: Using ep0 maxpacket: 32
[  282.143775][  T787] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[  282.152059][  T787] usb 3-1: config 0 has no interface number 0
[  282.158344][  T787] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  282.171476][  T787] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  282.180636][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.188768][  T787] usb 3-1: Product: syz
[  282.192941][  T787] usb 3-1: Manufacturer: syz
[  282.197691][  T787] usb 3-1: SerialNumber: syz
[  282.203831][  T787] usb 3-1: config 0 descriptor??
[  282.209807][ T9192] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  282.225943][  T788] usb 1-1: Using ep0 maxpacket: 16
[  282.233032][  T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.243894][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  282.255017][  T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  282.270828][  T788] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  282.283292][  T788] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  282.301128][  T788] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  282.310672][  T788] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  282.318821][  T788] usb 1-1: Manufacturer: syz
[  282.326093][  T788] usb 1-1: config 0 descriptor??
[  282.423006][ T9192] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  282.516842][ T9196] syzkaller0: entered promiscuous mode
[  282.522437][ T9196] syzkaller0: entered allmulticast mode
[  282.545117][    T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  282.635510][  T788] rc_core: IR keymap rc-hauppauge not found
[  282.641453][  T788] Registered IR keymap rc-empty
[  282.654817][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  282.705255][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  282.755837][  T788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  282.787190][  T788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input49
[  282.801911][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  282.812857][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  282.830488][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  282.837927][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  282.864674][    T9] usb 4-1: string descriptor 0 read error: -22
[  282.875193][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  282.886296][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  282.905824][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.918508][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  282.965342][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  283.000622][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  283.045201][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  283.075219][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  283.086721][ T9209] nbd1: detected capacity change from 0 to 63
[  283.093901][ T9210] nbd: must specify an index to disconnect
[  283.101410][ T5767] block nbd1: Receive control failed (result -104)
[  283.116663][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  283.140471][    T9] usb 4-1: Can't get UAC3 power state for id 10
[  283.160820][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  283.225189][  T788] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  283.272029][  T788] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  283.282147][  T788] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  283.309464][  T788] usb 1-1: USB disconnect, device number 36
[  283.756714][ T9229] syzkaller0: entered promiscuous mode
[  283.762384][ T9229] syzkaller0: entered allmulticast mode
[  283.782275][    T9] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  283.795317][ T9230] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  283.992984][    T9] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  284.422396][ T9248] syzkaller0: entered promiscuous mode
[  284.428863][ T9248] syzkaller0: entered allmulticast mode
[  284.465608][  T787] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  284.491357][  T787] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  284.513134][  T787] asix: probe of 3-1:0.188 failed with error -71
[  284.541376][  T787] usb 3-1: USB disconnect, device number 38
[  285.037141][    T9] usb 4-1: USB disconnect, device number 44
[  286.846236][ T9278] syzkaller0: entered promiscuous mode
[  286.851760][ T9278] syzkaller0: entered allmulticast mode
[  286.936196][ T9285] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  287.054819][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'.
[  287.765107][ T9309] syzkaller0: entered promiscuous mode
[  287.770636][ T9309] syzkaller0: entered allmulticast mode
[  289.403867][ T9326] syzkaller0: entered promiscuous mode
[  289.415902][ T9326] syzkaller0: entered allmulticast mode
[  289.469433][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'.
[  289.521789][   T27] kauditd_printk_skb: 53 callbacks suppressed
[  289.521804][   T27] audit: type=1326 audit(1774650922.266:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.3.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e00f9c799 code=0x7ffc0000
[  289.574508][   T27] audit: type=1326 audit(1774650922.306:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.3.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e00f9c799 code=0x7ffc0000
[  289.604069][   T27] audit: type=1326 audit(1774650922.306:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.3.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e00f9c799 code=0x7ffc0000
[  289.631001][   T27] audit: type=1326 audit(1774650922.306:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.3.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6e00f9c799 code=0x7ffc0000
[  289.654238][ T9334] usb usb2: usbfs: process 9334 (syz.3.1052) did not claim interface 0 before use
[  289.658411][   T27] audit: type=1326 audit(1774650922.306:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.3.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e00f9c799 code=0x7ffc0000
[  289.688595][   T27] audit: type=1326 audit(1774650922.306:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.3.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e00f9c799 code=0x7ffc0000
[  289.711529][   T27] audit: type=1326 audit(1774650922.306:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.3.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6e00f9c799 code=0x7ffc0000
[  289.742644][   T27] audit: type=1326 audit(1774650922.306:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9329 comm="syz.3.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6e00f9c799 code=0x7ffc0000
[  290.055121][   T23] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  290.245008][   T23] usb 3-1: Using ep0 maxpacket: 16
[  290.251939][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  290.262210][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  290.273192][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  290.282936][   T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  290.292721][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  290.306688][   T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  290.315859][   T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  290.323847][   T23] usb 3-1: Manufacturer: syz
[  290.330317][   T23] usb 3-1: config 0 descriptor??
[  290.456405][ T9301] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  290.588232][   T27] audit: type=1326 audit(1774650923.326:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  290.615010][   T27] audit: type=1326 audit(1774650923.356:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9341 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19ab9c799 code=0x7ffc0000
[  290.644344][   T23] rc_core: IR keymap rc-hauppauge not found
[  290.654303][   T23] Registered IR keymap rc-empty
[  290.669171][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  290.725046][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  290.736987][ T9346] syzkaller0: entered promiscuous mode
[  290.766027][   T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  290.785082][   T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input50
[  290.800923][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  290.835457][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  290.869940][ T9350] syzkaller0: entered promiscuous mode
[  290.875609][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  290.882964][ T9350] syzkaller0: entered allmulticast mode
[  290.890353][ T9352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1058'.
[  290.906162][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  290.945117][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  291.006049][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  291.048237][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  291.072452][ T9355] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  291.090526][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  291.135800][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  291.178274][   T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  291.231941][   T23] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  291.255634][   T23] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  291.306205][   T23] usb 3-1: USB disconnect, device number 39
[  293.258450][ T9389] syzkaller0: entered promiscuous mode
[  293.263952][ T9389] syzkaller0: entered allmulticast mode
[  293.320165][ T9400] loop2: detected capacity change from 0 to 256
[  293.459243][ T9402] syzkaller0: entered promiscuous mode
[  293.476286][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1068'.
[  294.088647][ T9430] syzkaller0: entered promiscuous mode
[  294.094366][ T9430] syzkaller0: entered allmulticast mode
[  294.326399][   T23] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  294.491941][   T23] usb 4-1: device descriptor read/64, error -71
[  294.508957][ T5950] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  294.546002][ T9435] syzkaller0: entered promiscuous mode
[  294.552418][ T9435] syzkaller0: entered allmulticast mode
[  294.704561][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.713599][ T9439] syzkaller0: entered promiscuous mode
[  294.724645][ T5950] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  294.734338][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.751647][ T5950] usb 2-1: config 0 descriptor??
[  294.785306][   T23] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  294.873033][ T9444] xt_hashlimit: size too large, truncated to 1048576
[  294.945079][   T23] usb 4-1: device descriptor read/64, error -71
[  295.075490][   T23] usb usb4-port1: attempt power cycle
[  295.187608][ T5950] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor
[  295.219842][ T5950] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input51
[  295.345825][ T5950] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  295.387842][ T9432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.408936][ T9432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  295.495644][   T23] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  295.568221][   T23] usb 4-1: device descriptor read/8, error -71
[  295.855024][   T23] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  295.862504][    T9] usb 2-1: USB disconnect, device number 38
[  295.862688][    C1] keytouch 0003:0926:3333.000F: usb_submit_urb(ctrl) failed: -19
[  295.876881][    C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[  295.945743][   T23] usb 4-1: device descriptor read/8, error -71
[  296.085219][   T23] usb usb4-port1: unable to enumerate USB device
[  297.143232][ T9462] loop3: detected capacity change from 0 to 128
[  298.024253][ T9470] syzkaller0: entered promiscuous mode
[  298.033851][ T9470] syzkaller0: entered allmulticast mode
[  298.209315][ T9479] syzkaller0: entered promiscuous mode
[  299.524077][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'.
[  299.763411][ T9488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1092'.
[  299.987456][ T9511] syzkaller0: entered promiscuous mode
[  299.993088][ T9513] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  300.003562][ T9511] syzkaller0: entered allmulticast mode
[  300.096871][ T9517] syzkaller0: entered promiscuous mode
[  300.102416][ T9517] syzkaller0: entered allmulticast mode
[  301.024468][ T9538] syzkaller0: entered promiscuous mode
[  301.149788][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'.
[  301.280399][ T9544] syzkaller0: entered promiscuous mode
[  301.310923][ T9544] syzkaller0: entered allmulticast mode
[  301.421875][ T9548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'.
[  301.527855][ T9559] fuse: Bad value for 'fd'
[  301.722725][ T5950] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  301.885215][ T5950] usb 4-1: device descriptor read/64, error -71
[  302.175120][ T5950] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  302.245243][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1121'.
[  302.338581][ T5950] usb 4-1: device descriptor read/64, error -71
[  302.470270][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1122'.
[  302.475233][ T5950] usb usb4-port1: attempt power cycle
[  302.617394][ T9583] syzkaller0: entered promiscuous mode
[  302.623384][ T9583] syzkaller0: entered allmulticast mode
[  302.925024][ T5950] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  302.931079][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'.
[  302.987556][ T5950] usb 4-1: device descriptor read/8, error -71
[  303.114177][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'.
[  303.215420][ T9610] loop0: detected capacity change from 0 to 16
[  303.226672][ T9610] erofs: (device loop0): mounted with root inode @ nid 36.
[  303.265038][ T5950] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  303.280177][ T9610] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  303.327869][ T9612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1132'.
[  303.335471][ T9610] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  303.350167][ T5950] usb 4-1: device descriptor read/8, error -71
[  303.476612][ T5950] usb usb4-port1: unable to enumerate USB device
[  304.366949][ T9639] random: crng reseeded on system resumption
[  304.626450][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'.
[  304.713583][ T9646] syzkaller0: entered promiscuous mode
[  304.786837][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'.
[  305.155611][ T1059] block nbd3: Possible stuck request ffff888022129a00: control (read@0,1024B). Runtime 180 seconds
[  305.166579][ T1059] block nbd3: Possible stuck request ffff888022129c00: control (read@1024,1024B). Runtime 180 seconds
[  305.177628][ T1059] block nbd3: Possible stuck request ffff888022129e00: control (read@2048,1024B). Runtime 180 seconds
[  305.415047][ T5950] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  305.565113][ T5950] usb 3-1: device descriptor read/64, error -71
[  305.835050][ T5950] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  305.985009][ T5950] usb 3-1: device descriptor read/64, error -71
[  306.105352][ T5950] usb usb3-port1: attempt power cycle
[  306.458958][ T9620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  306.529974][ T5950] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  306.581018][ T5950] usb 3-1: device descriptor read/8, error -71
[  306.619281][ T9666] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  306.715948][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'.
[  306.778732][ T9672] syzkaller0: entered promiscuous mode
[  306.855051][ T5950] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  306.892662][ T5950] usb 3-1: device descriptor read/8, error -71
[  307.016844][ T5950] usb usb3-port1: unable to enumerate USB device
[  307.788487][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'.
[  308.026267][ T9699] syzkaller0: entered promiscuous mode
[  308.448865][ T9717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1171'.
[  308.615035][ T9723] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  310.107798][ T9752] syzkaller0: entered promiscuous mode
[  310.126794][ T9752] syzkaller0: entered allmulticast mode
[  310.276660][ T1059] block nbd2: Possible stuck request ffff8880220e0000: control (read@0,4096B). Runtime 30 seconds
[  311.588298][ T9783] syzkaller0: entered promiscuous mode
[  311.596364][ T9783] syzkaller0: entered allmulticast mode
[  311.675097][ T5950] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  311.904134][ T5950] usb 2-1: config 0 has no interfaces?
[  311.911965][ T5950] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  311.928664][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.953328][ T5950] usb 2-1: config 0 descriptor??
[  312.185067][ T5950] usb 2-1: USB disconnect, device number 39
[  312.205024][  T787] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  312.414696][  T787] usb 4-1: Using ep0 maxpacket: 32
[  312.426994][  T787] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  312.453104][  T787] usb 4-1: config 0 has no interface number 0
[  312.467281][  T787] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  312.480229][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.500722][  T787] usb 4-1: Product: syz
[  312.508751][  T787] usb 4-1: Manufacturer: syz
[  312.523598][  T787] usb 4-1: SerialNumber: syz
[  312.544181][  T787] usb 4-1: config 0 descriptor??
[  312.564581][  T787] smsc95xx v2.0.0
[  312.795063][ T5950] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  313.004064][  T787] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  313.015428][  T787] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  313.036524][ T5950] usb 2-1: unable to get BOS descriptor or descriptor too short
[  313.047001][ T5950] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  313.065815][ T5950] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  313.103043][ T5950] usb 2-1: string descriptor 0 read error: -22
[  313.115182][ T5950] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  313.124467][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.364163][ T5950] usb 2-1: Can't get UAC3 power state for id 10
[  313.475249][ T1059] block nbd1: Possible stuck request ffff8880220c8000: control (read@0,1024B). Runtime 30 seconds
[  313.486167][ T1059] block nbd1: Possible stuck request ffff8880220c8200: control (read@1024,1024B). Runtime 30 seconds
[  313.497568][ T1059] block nbd1: Possible stuck request ffff8880220c8400: control (read@2048,1024B). Runtime 30 seconds
[  313.508782][ T1059] block nbd1: Possible stuck request ffff8880220c8600: control (read@3072,1024B). Runtime 30 seconds
[  314.055182][ T5950] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  314.079568][ T9819] syzkaller0: entered promiscuous mode
[  314.085386][ T9819] syzkaller0: entered allmulticast mode
[  314.239074][  T787] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  314.265932][  T787] smsc95xx: probe of 4-1:0.67 failed with error -61
[  314.322560][ T9824] syzkaller0: entered promiscuous mode
[  314.329339][ T9824] syzkaller0: entered allmulticast mode
[  314.475674][ T5950] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  315.495048][ T5950] usb 4-1: USB disconnect, device number 53
[  315.519473][  T788] usb 2-1: USB disconnect, device number 40
[  315.623604][ T9856] netlink: 'syz.3.1210': attribute type 1 has an invalid length.
[  315.730032][ T9856] macvlan2: entered promiscuous mode
[  315.735522][ T9856] macvlan2: entered allmulticast mode
[  315.741676][ T9856] bond1: entered promiscuous mode
[  315.748414][ T9856] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  315.758462][ T9856] bond1: left promiscuous mode
[  315.835387][ T9866] syzkaller0: entered promiscuous mode
[  315.846022][ T9866] syzkaller0: entered allmulticast mode
[  316.875147][  T787] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  316.893497][ T9886] syzkaller0: entered promiscuous mode
[  316.908400][ T9886] syzkaller0: entered allmulticast mode
[  317.080006][  T787] usb 1-1: Using ep0 maxpacket: 32
[  317.100991][  T787] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  317.130748][  T787] usb 1-1: config 0 has no interface number 0
[  317.142759][  T787] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  317.153345][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.161744][  T787] usb 1-1: Product: syz
[  317.166735][  T787] usb 1-1: Manufacturer: syz
[  317.171357][  T787] usb 1-1: SerialNumber: syz
[  317.191576][  T787] usb 1-1: config 0 descriptor??
[  317.207869][  T787] smsc95xx v2.0.0
[  317.335652][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  317.342103][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  317.455016][ T5950] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  317.633091][  T787] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  317.644413][  T787] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  317.656919][ T5950] usb 3-1: config 0 has no interfaces?
[  317.662690][ T5950] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  317.672910][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.690126][ T5950] usb 3-1: config 0 descriptor??
[  317.925902][ T5950] usb 3-1: USB disconnect, device number 44
[  318.485079][ T5950] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  318.681954][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short
[  318.691461][ T5950] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  318.703148][ T5950] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  318.720131][ T5950] usb 3-1: string descriptor 0 read error: -22
[  318.726717][ T5950] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  318.736287][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.875279][  T787] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  318.895422][  T787] smsc95xx: probe of 1-1:0.67 failed with error -61
[  318.957831][ T5950] usb 3-1: Can't get UAC3 power state for id 10
[  319.477693][    T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  319.601643][ T5950] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  320.074362][ T5950] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  320.142289][ T5800] usb 1-1: USB disconnect, device number 37
[  320.281971][    T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  320.300797][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.331997][    T9] usb 4-1: config 0 descriptor??
[  320.363435][    T9] cp210x 4-1:0.0: cp210x converter detected
[  320.786933][    T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  321.130061][  T787] usb 3-1: USB disconnect, device number 45
[  321.218304][    T9] usb 4-1: cp210x converter now attached to ttyUSB0
[  321.309675][    T9] usb 4-1: USB disconnect, device number 54
[  321.336078][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  321.361423][    T9] cp210x 4-1:0.0: device disconnected
[  321.735987][  T787] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  322.161686][  T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.285301][  T787] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  322.294395][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.411910][  T787] usb 3-1: config 0 descriptor??
[  322.471394][ T9935] syzkaller0: entered promiscuous mode
[  322.477117][ T9935] syzkaller0: entered allmulticast mode
[  322.780668][ T5950] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  322.827169][  T787] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor
[  322.851009][  T787] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0010/input/input52
[  322.936402][   T42] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  322.980664][ T5950] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  322.993858][  T787] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  323.024454][ T5950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.037201][ T9919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  323.060987][ T9919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  323.101749][ T5950] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= d.40
[  323.120842][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.135056][ T5950] usb 2-1: Product: syz
[  323.139288][ T5950] usb 2-1: Manufacturer: syz
[  323.175838][   T42] usb 1-1: Using ep0 maxpacket: 32
[  323.181273][ T5950] usb 2-1: SerialNumber: syz
[  323.195751][   T42] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  323.231117][ T5950] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[  323.245132][   T42] usb 1-1: config 0 has no interface number 0
[  323.262960][ T5950] cdc_ncm 2-1:1.0: bind() failure
[  323.272027][   T42] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  323.299795][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.312445][   T42] usb 1-1: Product: syz
[  323.316874][   T42] usb 1-1: Manufacturer: syz
[  323.321608][   T42] usb 1-1: SerialNumber: syz
[  323.332444][   T42] usb 1-1: config 0 descriptor??
[  323.351858][   T42] smsc95xx v2.0.0
[  323.594116][ T5950] usb 3-1: USB disconnect, device number 46
[  323.795267][   T42] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  323.807705][   T42] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  324.475103][ T5950] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  324.665127][ T5950] usb 3-1: Using ep0 maxpacket: 16
[  324.679267][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.693854][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  324.709844][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  324.719791][ T5950] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  324.732205][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  324.752765][ T5950] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  324.769038][ T5950] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  324.777573][ T5950] usb 3-1: Manufacturer: syz
[  324.790422][ T5950] usb 3-1: config 0 descriptor??
[  325.051828][   T42] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  325.120283][   T42] smsc95xx: probe of 1-1:0.67 failed with error -61
[  325.219144][ T5950] rc_core: IR keymap rc-hauppauge not found
[  325.249565][ T5950] Registered IR keymap rc-empty
[  325.263111][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.315301][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.332229][  T787] usb 2-1: USB disconnect, device number 41
[  325.355979][ T5950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  325.374434][ T5950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input53
[  325.397401][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.435515][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.471358][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.506459][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.535050][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.542993][   T42] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  325.575059][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.612937][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.645088][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.685306][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.725434][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  325.734205][   T42] usb 4-1: config 0 has no interfaces?
[  325.740328][   T42] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  325.749757][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.767454][ T5950] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  325.784451][   T42] usb 4-1: config 0 descriptor??
[  325.791456][ T5950] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  325.826516][ T5950] usb 3-1: USB disconnect, device number 47
[  326.053725][   T42] usb 4-1: USB disconnect, device number 55
[  326.070247][ T9976] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  326.504254][ T5800] usb 1-1: USB disconnect, device number 38
[  326.734995][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  326.927643][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  327.143832][T10000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1242'.
[  327.544348][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  327.586073][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  327.668238][    T9] usb 4-1: string descriptor 0 read error: -22
[  327.687696][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  327.723629][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.248289][    T9] usb 4-1: Can't get UAC3 power state for id 10
[  329.009988][    T9] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  329.252943][T10033] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  329.422128][    T9] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  329.516883][ T5800] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  329.735170][ T5800] usb 2-1: Using ep0 maxpacket: 16
[  329.744644][ T5800] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  329.776446][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  329.805264][ T5800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  329.817481][ T5800] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  329.837320][ T5800] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  329.862166][ T5800] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  329.873451][ T5800] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  329.894226][ T5800] usb 2-1: Manufacturer: syz
[  329.907465][ T5800] usb 2-1: config 0 descriptor??
[  330.102993][T10067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'.
[  330.236049][ T5800] rc_core: IR keymap rc-hauppauge not found
[  330.241996][ T5800] Registered IR keymap rc-empty
[  330.266751][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.302594][   T42] usb 4-1: USB disconnect, device number 56
[  330.315661][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.356451][ T5800] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  330.418674][ T5800] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input54
[  330.435232][ T5772] Bluetooth: hci2: command 0x0406 tx timeout
[  330.486115][T10080] syzkaller0: entered promiscuous mode
[  330.491613][T10080] syzkaller0: entered allmulticast mode
[  330.505303][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.557597][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.612091][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.655031][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.687350][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.745024][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.778648][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.835466][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.885322][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.926796][ T5800] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  330.982478][ T5800] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  331.014443][ T5800] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  331.059859][ T5800] usb 2-1: USB disconnect, device number 42
[  331.355244][   T42] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  331.544958][   T42] usb 1-1: Using ep0 maxpacket: 16
[  331.562242][   T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  331.581674][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  331.612911][   T42] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  331.633208][   T42] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  331.643515][   T42] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  331.652281][   T42] usb 1-1: Manufacturer: syz
[  331.675874][   T42] usb 1-1: config 0 descriptor??
[  332.173690][T10120] mmap: syz.1.1263 (10120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  332.767226][T10123] syzkaller0: entered promiscuous mode
[  332.772841][T10123] syzkaller0: entered allmulticast mode
[  332.977053][T10130] syzkaller0: entered promiscuous mode
[  332.982584][T10130] syzkaller0: entered allmulticast mode
[  333.217028][    T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  333.410169][    T9] usb 3-1: Using ep0 maxpacket: 16
[  333.423251][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  333.434607][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  333.449786][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  333.459558][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  333.474939][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  333.489736][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  333.499126][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  333.507597][    T9] usb 3-1: Manufacturer: syz
[  333.515791][    T9] usb 3-1: config 0 descriptor??
[  333.825060][    T9] rc_core: IR keymap rc-hauppauge not found
[  333.834165][    T9] Registered IR keymap rc-empty
[  333.842473][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  333.888280][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  333.939394][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  333.954020][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input55
[  333.978550][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.035896][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.063261][ T5800] usb 1-1: USB disconnect, device number 39
[  334.095035][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.139591][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.182058][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.233149][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.277766][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.315959][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.358967][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.407244][    T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  334.444084][    T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  334.453638][    T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  334.470776][    T9] usb 3-1: USB disconnect, device number 48
[  335.870690][ T1059] block nbd3: Possible stuck request ffff888022129a00: control (read@0,1024B). Runtime 210 seconds
[  335.881893][ T1059] block nbd3: Possible stuck request ffff888022129c00: control (read@1024,1024B). Runtime 210 seconds
[  335.915155][ T1059] block nbd3: Possible stuck request ffff888022129e00: control (read@2048,1024B). Runtime 210 seconds
[  337.336717][T10138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  337.983943][T10175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1281'.
[  338.155003][ T5950] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  338.397896][ T5950] usb 3-1: Using ep0 maxpacket: 16
[  338.496376][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.609501][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  338.813236][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  338.913439][ T5950] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  338.924608][ T5950] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  338.933024][ T5950] usb 3-1: Manufacturer: syz
[  338.940021][ T5950] usb 3-1: config 0 descriptor??
[  339.373509][T10208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'.
[  339.385049][ T5800] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  340.801503][   T42] usb 3-1: USB disconnect, device number 49
[  340.966225][ T5800] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.024183][ T5800] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  341.062850][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.096255][ T5800] usb 4-1: config 0 descriptor??
[  341.114462][ T1059] block nbd2: Possible stuck request ffff8880220e0000: control (read@0,4096B). Runtime 60 seconds
[  341.455043][ T5950] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  341.475901][   T42] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  341.534100][ T5800] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor
[  341.546409][ T5800] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0011/input/input56
[  341.637624][ T5950] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  341.644118][ T5800] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  341.650378][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.682833][   T42] usb 3-1: config 0 has no interfaces?
[  341.691578][   T42] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  341.705587][   T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.725405][ T5950] usb 2-1: config 0 descriptor??
[  341.732813][ T5950] cp210x 2-1:0.0: cp210x converter detected
[  341.760577][   T42] usb 3-1: config 0 descriptor??
[  341.776508][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.799402][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.978238][ T5800] usb 3-1: USB disconnect, device number 50
[  342.135074][ T5950] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  342.162445][    T9] usb 4-1: USB disconnect, device number 57
[  342.397165][ T5950] usb 2-1: cp210x converter now attached to ttyUSB0
[  342.620502][ T5800] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  342.792928][ T5751] usb 2-1: USB disconnect, device number 43
[  342.869941][ T5751] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  342.882710][ T5800] usb 3-1: unable to get BOS descriptor or descriptor too short
[  342.900818][ T5800] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  342.917815][ T5751] cp210x 2-1:0.0: device disconnected
[  342.924030][ T5800] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  342.962643][ T5800] usb 3-1: string descriptor 0 read error: -22
[  342.970426][ T5800] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  342.979356][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1300'.
[  343.000817][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.177170][T10244] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  343.223127][ T5800] usb 3-1: Can't get UAC3 power state for id 10
[  343.410377][   T42] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  343.606962][   T42] usb 1-1: Using ep0 maxpacket: 32
[  343.614466][   T42] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  343.655500][ T1059] block nbd1: Possible stuck request ffff8880220c8000: control (read@0,1024B). Runtime 60 seconds
[  343.666241][ T1059] block nbd1: Possible stuck request ffff8880220c8200: control (read@1024,1024B). Runtime 60 seconds
[  343.677221][ T1059] block nbd1: Possible stuck request ffff8880220c8400: control (read@2048,1024B). Runtime 60 seconds
[  343.688174][ T1059] block nbd1: Possible stuck request ffff8880220c8600: control (read@3072,1024B). Runtime 60 seconds
[  343.699887][   T42] usb 1-1: config 0 has no interface number 0
[  343.961930][T10258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1306'.
[  344.064267][ T5800] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  344.445430][   T42] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  344.454735][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.463090][   T42] usb 1-1: Product: syz
[  344.467643][   T42] usb 1-1: Manufacturer: syz
[  344.472255][   T42] usb 1-1: SerialNumber: syz
[  344.479333][   T42] usb 1-1: config 0 descriptor??
[  344.493645][   T42] smsc95xx v2.0.0
[  344.771667][ T5800] usb 3-1: 2:0: failed to get current value for ch 1 (-32)
[  344.872456][ T5800] usb 3-1: USB disconnect, device number 51
[  344.899293][   T42] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  345.475062][ T5950] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  345.495719][   T42] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  345.584230][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1310'.
[  345.687442][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.729759][ T5950] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  345.745173][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.804347][ T5950] usb 4-1: config 0 descriptor??
[  346.289612][ T5950] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor
[  346.343833][ T5950] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0012/input/input57
[  346.464280][ T5950] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  346.481247][T10265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.506968][T10265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.845167][   T42] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[  346.856238][   T42] smsc95xx: probe of 1-1:0.67 failed with error -32
[  346.971009][   T42] usb 4-1: USB disconnect, device number 58
[  347.265141][  T788] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  347.445055][  T788] usb 2-1: Using ep0 maxpacket: 16
[  347.453538][  T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.463710][  T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  347.474725][  T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  347.484660][  T788] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  347.494480][  T788] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  347.508936][  T788] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  347.527936][  T788] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  347.536500][  T788] usb 2-1: Manufacturer: syz
[  347.545376][  T788] usb 2-1: config 0 descriptor??
[  347.733527][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'.
[  347.845606][  T788] rc_core: IR keymap rc-hauppauge not found
[  347.851592][  T788] Registered IR keymap rc-empty
[  347.867419][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  347.890954][ T5800] usb 1-1: USB disconnect, device number 40
[  347.925631][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  347.939419][ T5950] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  347.965932][  T788] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  348.012733][  T788] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input58
[  348.059535][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  348.092672][    C0] rc rc0: IR event FIFO is full!
[  348.097667][    C0] rc rc0: IR event FIFO is full!
[  348.102622][    C0] rc rc0: IR event FIFO is full!
[  348.108087][    C0] rc rc0: IR event FIFO is full!
[  348.113054][    C0] rc rc0: IR event FIFO is full!
[  348.118003][    C0] rc rc0: IR event FIFO is full!
[  348.123039][    C0] rc rc0: IR event FIFO is full!
[  348.127994][    C0] rc rc0: IR event FIFO is full!
[  348.133610][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  348.140900][    C0] rc rc0: IR event FIFO is full!
[  348.140919][    C0] rc rc0: IR event FIFO is full!
[  348.146419][    C0] rc rc0: IR event FIFO is full!
[  348.146436][    C0] rc rc0: IR event FIFO is full!
[  348.146450][    C0] rc rc0: IR event FIFO is full!
[  348.146463][    C0] rc rc0: IR event FIFO is full!
[  348.146476][    C0] rc rc0: IR event FIFO is full!
[  348.146488][    C0] rc rc0: IR event FIFO is full!
[  348.151553][    C0] rc rc0: IR event FIFO is full!
[  348.161690][    C0] rc rc0: IR event FIFO is full!
[  348.161709][    C0] rc rc0: IR event FIFO is full!
[  348.171855][    C0] rc rc0: IR event FIFO is full!
[  348.171874][    C0] rc rc0: IR event FIFO is full!
[  348.177204][    C0] rc rc0: IR event FIFO is full!
[  348.177221][    C0] rc rc0: IR event FIFO is full!
[  348.177234][    C0] rc rc0: IR event FIFO is full!
[  348.177248][    C0] rc rc0: IR event FIFO is full!
[  348.177261][    C0] rc rc0: IR event FIFO is full!
[  348.177273][    C0] rc rc0: IR event FIFO is full!
[  348.182346][    C0] rc rc0: IR event FIFO is full!
[  348.182361][    C0] rc rc0: IR event FIFO is full!
[  348.182375][    C0] rc rc0: IR event FIFO is full!
[  348.182388][    C0] rc rc0: IR event FIFO is full!
[  348.182400][    C0] rc rc0: IR event FIFO is full!
[  348.182412][    C0] rc rc0: IR event FIFO is full!
[  348.182424][    C0] rc rc0: IR event FIFO is full!
[  348.182437][    C0] rc rc0: IR event FIFO is full!
[  348.182449][    C0] rc rc0: IR event FIFO is full!
[  348.187552][    C0] rc rc0: IR event FIFO is full!
[  348.187568][    C0] rc rc0: IR event FIFO is full!
[  348.187583][    C0] rc rc0: IR event FIFO is full!
[  348.187595][    C0] rc rc0: IR event FIFO is full!
[  348.187608][    C0] rc rc0: IR event FIFO is full!
[  348.187620][    C0] rc rc0: IR event FIFO is full!
[  348.187634][    C0] rc rc0: IR event FIFO is full!
[  348.187646][    C0] rc rc0: IR event FIFO is full!
[  348.187658][    C0] rc rc0: IR event FIFO is full!
[  348.187670][    C0] rc rc0: IR event FIFO is full!
[  348.187682][    C0] rc rc0: IR event FIFO is full!
[  348.198024][    C0] rc rc0: IR event FIFO is full!
[  348.203090][    C0] rc rc0: IR event FIFO is full!
[  348.208184][    C0] rc rc0: IR event FIFO is full!
[  348.208202][    C0] rc rc0: IR event FIFO is full!
[  348.208216][    C0] rc rc0: IR event FIFO is full!
[  348.208230][    C0] rc rc0: IR event FIFO is full!
[  348.208242][    C0] rc rc0: IR event FIFO is full!
[  348.208259][    C0] rc rc0: IR event FIFO is full!
[  348.208272][    C0] rc rc0: IR event FIFO is full!
[  348.208285][    C0] rc rc0: IR event FIFO is full!
[  348.208302][    C0] rc rc0: IR event FIFO is full!
[  348.218463][    C0] rc rc0: IR event FIFO is full!
[  348.218481][    C0] rc rc0: IR event FIFO is full!
[  348.218496][    C0] rc rc0: IR event FIFO is full!
[  348.218510][    C0] rc rc0: IR event FIFO is full!
[  348.218523][    C0] rc rc0: IR event FIFO is full!
[  348.218535][    C0] rc rc0: IR event FIFO is full!
[  348.218549][    C0] rc rc0: IR event FIFO is full!
[  348.223615][    C0] rc rc0: IR event FIFO is full!
[  348.223632][    C0] rc rc0: IR event FIFO is full!
[  348.223648][    C0] rc rc0: IR event FIFO is full!
[  348.223660][    C0] rc rc0: IR event FIFO is full!
[  348.223673][    C0] rc rc0: IR event FIFO is full!
[  348.228814][    C0] rc rc0: IR event FIFO is full!
[  348.228831][    C0] rc rc0: IR event FIFO is full!
[  348.228845][    C0] rc rc0: IR event FIFO is full!
[  348.228858][    C0] rc rc0: IR event FIFO is full!
[  348.228870][    C0] rc rc0: IR event FIFO is full!
[  348.228882][    C0] rc rc0: IR event FIFO is full!
[  348.228894][    C0] rc rc0: IR event FIFO is full!
[  348.234042][    C0] rc rc0: IR event FIFO is full!
[  348.234059][    C0] rc rc0: IR event FIFO is full!
[  348.239142][    C0] rc rc0: IR event FIFO is full!
[  348.239164][    C0] rc rc0: IR event FIFO is full!
[  348.239179][    C0] rc rc0: IR event FIFO is full!
[  348.239192][    C0] rc rc0: IR event FIFO is full!
[  348.239204][    C0] rc rc0: IR event FIFO is full!
[  348.239217][    C0] rc rc0: IR event FIFO is full!
[  348.239229][    C0] rc rc0: IR event FIFO is full!
[  348.244261][    C0] rc rc0: IR event FIFO is full!
[  348.244271][    C0] rc rc0: IR event FIFO is full!
[  348.244277][    C0] rc rc0: IR event FIFO is full!
[  348.244284][    C0] rc rc0: IR event FIFO is full!
[  348.244290][    C0] rc rc0: IR event FIFO is full!
[  348.244297][    C0] rc rc0: IR event FIFO is full!
[  348.244303][    C0] rc rc0: IR event FIFO is full!
[  348.249371][    C0] rc rc0: IR event FIFO is full!
[  348.249385][    C0] rc rc0: IR event FIFO is full!
[  348.249395][    C0] rc rc0: IR event FIFO is full!
[  348.249404][    C0] rc rc0: IR event FIFO is full!
[  348.249413][    C0] rc rc0: IR event FIFO is full!
[  348.249422][    C0] rc rc0: IR event FIFO is full!
[  348.254477][    C0] rc rc0: IR event FIFO is full!
[  348.254488][    C0] rc rc0: IR event FIFO is full!
[  348.254499][    C0] rc rc0: IR event FIFO is full!
[  348.259665][    C0] rc rc0: IR event FIFO is full!
[  348.259680][    C0] rc rc0: IR event FIFO is full!
[  348.259691][    C0] rc rc0: IR event FIFO is full!
[  348.259699][    C0] rc rc0: IR event FIFO is full!
[  348.259709][    C0] rc rc0: IR event FIFO is full!
[  348.259715][    C0] rc rc0: IR event FIFO is full!
[  348.259721][    C0] rc rc0: IR event FIFO is full!
[  348.259727][    C0] rc rc0: IR event FIFO is full!
[  348.259734][    C0] rc rc0: IR event FIFO is full!
[  348.264719][    C0] rc rc0: IR event FIFO is full!
[  348.264727][    C0] rc rc0: IR event FIFO is full!
[  348.264734][    C0] rc rc0: IR event FIFO is full!
[  348.281008][ T5950] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  348.385033][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  348.403102][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.455197][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  348.493455][ T5950] usb 4-1: config 0 descriptor??
[  348.585168][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  348.806274][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  348.836232][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  348.877554][ T5950] cp210x 4-1:0.0: cp210x converter detected
[  348.891860][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  348.925243][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  348.955226][  T788] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  349.014383][  T788] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  349.023928][  T788] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  349.041719][  T788] usb 2-1: USB disconnect, device number 44
[  349.047863][ T5800] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  349.179701][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'.
[  349.239598][ T5800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.252934][ T5800] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  349.262192][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.272357][ T5800] usb 1-1: config 0 descriptor??
[  349.293679][ T5950] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  349.358542][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1330'.
[  349.508017][ T5950] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71
[  349.516406][ T5950] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  349.526003][ T5950] usb 4-1: cp210x converter now attached to ttyUSB0
[  349.536715][ T5950] usb 4-1: USB disconnect, device number 59
[  349.547556][ T5950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  349.556829][ T5950] cp210x 4-1:0.0: device disconnected
[  349.690471][ T5800] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor
[  349.701416][ T5800] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0013/input/input59
[  349.724968][ T5751] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  349.790856][ T5800] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  349.899517][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.911265][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.914963][ T5751] usb 2-1: Using ep0 maxpacket: 32
[  349.940703][ T5751] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  349.954452][ T5751] usb 2-1: config 0 has no interface number 0
[  350.004462][ T5751] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  350.014645][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.023141][ T5751] usb 2-1: Product: syz
[  350.056611][ T5751] usb 2-1: Manufacturer: syz
[  350.061469][ T5751] usb 2-1: SerialNumber: syz
[  350.099285][ T5751] usb 2-1: config 0 descriptor??
[  350.146687][ T5751] smsc95xx v2.0.0
[  350.633653][ T5950] usb 1-1: USB disconnect, device number 41
[  351.076807][ T5751] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  351.119278][ T5751] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  351.948305][T10359] input: syz0 as /devices/virtual/input/input60
[  352.295080][   T42] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  352.485325][   T42] usb 4-1: Using ep0 maxpacket: 16
[  352.492226][   T42] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.502652][   T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  352.513670][   T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  352.523409][   T42] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  352.533138][   T42] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  352.551171][   T42] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  352.560413][   T42] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  352.568796][   T42] usb 4-1: Manufacturer: syz
[  352.576673][   T42] usb 4-1: config 0 descriptor??
[  352.725142][  T787] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  352.855073][   T42] rc_core: IR keymap rc-hauppauge not found
[  352.861151][   T42] Registered IR keymap rc-empty
[  352.869577][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  352.909758][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  352.918453][  T787] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  352.927676][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.938281][  T787] usb 3-1: config 0 descriptor??
[  352.949672][  T787] cp210x 3-1:0.0: cp210x converter detected
[  352.956696][   T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  352.974017][   T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input61
[  352.990757][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.038905][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.086648][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.125181][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.153785][ T5751] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[  353.178986][ T5751] smsc95xx: probe of 2-1:0.67 failed with error -32
[  353.331559][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.352252][  T787] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  353.375209][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.415441][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.453352][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.496603][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.576473][   T42] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  353.626374][  T787] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71
[  353.718756][   T42] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  353.741691][  T787] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  353.842397][   T42] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  353.902544][  T787] usb 3-1: cp210x converter now attached to ttyUSB0
[  353.954522][   T42] usb 4-1: USB disconnect, device number 60
[  353.961728][  T787] usb 3-1: USB disconnect, device number 52
[  353.974270][  T787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  353.989739][  T787] cp210x 3-1:0.0: device disconnected
[  354.252759][ T5804] usb 2-1: USB disconnect, device number 45
[  354.470824][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'.
[  355.085036][ T5751] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  355.295049][ T5751] usb 1-1: Using ep0 maxpacket: 16
[  355.310968][ T5751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  355.335033][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  355.370463][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  355.401846][ T5751] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  355.418899][ T5751] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  355.441835][ T5751] usb 1-1: Manufacturer: syz
[  355.458852][ T5751] usb 1-1: config 0 descriptor??
[  355.705141][ T5950] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  355.894950][ T5950] usb 3-1: Using ep0 maxpacket: 16
[  355.908693][ T5950] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  355.918982][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  355.930282][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  355.940358][ T5950] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  355.950380][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  355.968014][ T5950] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  355.977313][ T5950] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  355.985585][ T5950] usb 3-1: Manufacturer: syz
[  355.999358][ T5950] usb 3-1: config 0 descriptor??
[  356.304968][ T5950] rc_core: IR keymap rc-hauppauge not found
[  356.310951][ T5950] Registered IR keymap rc-empty
[  356.318621][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  356.355446][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  356.441965][ T5950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  356.669195][ T5950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input62
[  356.859833][   T42] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  356.899753][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  357.015506][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  357.058247][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  357.105114][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  357.115292][   T42] usb 2-1: Using ep0 maxpacket: 32
[  357.123311][   T42] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  357.131803][   T42] usb 2-1: config 0 has no interface number 0
[  357.138262][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  357.158374][   T42] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  357.171954][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.181244][   T42] usb 2-1: Product: syz
[  357.185686][   T42] usb 2-1: Manufacturer: syz
[  357.190410][   T42] usb 2-1: SerialNumber: syz
[  357.195626][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  357.203821][ T5751] usb 1-1: USB disconnect, device number 42
[  357.243948][   T42] usb 2-1: config 0 descriptor??
[  357.253109][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  357.264465][   T42] smsc95xx v2.0.0
[  357.295287][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  357.519940][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  357.555105][ T5950] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  358.213515][   T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  358.231670][ T5950] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  358.330655][   T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  358.341481][ T5950] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  358.358365][ T5950] usb 3-1: USB disconnect, device number 53
[  358.537183][T10447] syzkaller0: entered promiscuous mode
[  358.545896][T10447] syzkaller0: entered allmulticast mode
[  358.705229][  T787] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  358.917969][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.936738][  T787] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  358.949069][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.968831][  T787] usb 4-1: config 0 descriptor??
[  359.166481][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1367'.
[  359.828239][  T787] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor
[  359.847173][  T787] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0014/input/input63
[  359.916243][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.935319][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.976562][  T787] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  360.039826][   T42] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[  360.058457][   T42] smsc95xx: probe of 2-1:0.67 failed with error -32
[  360.265088][ T5751] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  360.321549][ T5804] usb 4-1: USB disconnect, device number 61
[  360.455730][ T5751] usb 1-1: Using ep0 maxpacket: 16
[  360.464843][ T5751] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.477674][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  360.488847][ T5751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  360.507351][ T5751] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  360.524180][ T5751] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  360.544447][ T5751] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  360.553961][ T5751] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  360.563111][ T5751] usb 1-1: Manufacturer: syz
[  360.570728][ T5751] usb 1-1: config 0 descriptor??
[  360.844954][ T5751] rc_core: IR keymap rc-hauppauge not found
[  360.850997][ T5751] Registered IR keymap rc-empty
[  360.861957][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  360.895372][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  360.918752][T10482] syzkaller0: entered promiscuous mode
[  360.924413][T10482] syzkaller0: entered allmulticast mode
[  360.938013][ T5751] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  360.958831][ T5751] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input64
[  360.987105][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.036486][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.062756][ T5804] usb 2-1: USB disconnect, device number 46
[  361.088522][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.125096][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.231617][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.285725][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.325019][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.375034][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.394058][T10489] syzkaller0: entered promiscuous mode
[  361.400052][T10489] syzkaller0: entered allmulticast mode
[  361.405967][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.451917][ T5751] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.497660][ T5751] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  361.527711][ T5751] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  361.545173][   T42] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  361.550913][ T5751] usb 1-1: USB disconnect, device number 43
[  361.753206][   T42] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping
[  361.776281][   T42] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  361.798166][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.830235][   T42] usb 4-1: config 0 descriptor??
[  362.211172][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1381'.
[  363.189856][   T42] ath6kl: Failed to submit usb control message: -71
[  363.200959][   T42] ath6kl: unable to send the bmi data to the device: -71
[  363.205225][ T5800] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  363.248515][T10514] syzkaller0: entered promiscuous mode
[  363.254133][T10514] syzkaller0: entered allmulticast mode
[  363.290185][   T42] ath6kl: Unable to send get target info: -71
[  363.300658][   T42] ath6kl: Failed to init ath6kl core: -71
[  363.308481][   T42] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  363.326783][   T42] usb 4-1: USB disconnect, device number 62
[  363.405325][ T5800] usb 1-1: Using ep0 maxpacket: 32
[  363.421228][ T5800] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  363.438000][ T5800] usb 1-1: config 0 has no interface number 0
[  363.467321][ T5800] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  363.478999][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.489610][ T5800] usb 1-1: Product: syz
[  363.493792][ T5800] usb 1-1: Manufacturer: syz
[  363.503677][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'.
[  363.510668][ T5800] usb 1-1: SerialNumber: syz
[  363.521105][ T5800] usb 1-1: config 0 descriptor??
[  363.535753][ T5800] smsc95xx v2.0.0
[  363.562340][T10520] syzkaller0: entered promiscuous mode
[  363.568256][T10520] syzkaller0: entered allmulticast mode
[  364.614822][ T5800] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  364.625619][ T5800] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  366.400669][T10545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1392'.
[  366.738361][T10552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1394'.
[  367.573580][T10558] rdma_op ffff88802e1259f0 conn xmit_rdma 0000000000000000
[  367.764099][ T5800] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  367.777394][ T1059] block nbd3: Possible stuck request ffff888022129a00: control (read@0,1024B). Runtime 240 seconds
[  367.779003][ T5800] smsc95xx: probe of 1-1:0.67 failed with error -71
[  367.794836][ T1059] block nbd3: Possible stuck request ffff888022129c00: control (read@1024,1024B). Runtime 240 seconds
[  367.802586][ T5800] usb 1-1: USB disconnect, device number 44
[  367.806197][ T1059] block nbd3: Possible stuck request ffff888022129e00: control (read@2048,1024B). Runtime 240 seconds
[  368.510311][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1396'.
[  368.612612][T10564] syzkaller0: entered promiscuous mode
[  368.618425][T10564] syzkaller0: entered allmulticast mode
[  370.714903][    C0] sched: RT throttling activated
[  371.715778][T10587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  371.732885][ T1059] block nbd2: Possible stuck request ffff8880220e0000: control (read@0,4096B). Runtime 90 seconds
[  372.085336][ T5950] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  372.241011][T10595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1405'.
[  372.390899][ T5950] usb 1-1: Using ep0 maxpacket: 32
[  372.541126][ T5950] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  372.707189][ T5950] usb 1-1: config 0 has no interface number 0
[  372.735382][ T5950] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  372.744834][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.764943][ T5950] usb 1-1: Product: syz
[  372.769282][ T5950] usb 1-1: Manufacturer: syz
[  372.773884][ T5950] usb 1-1: SerialNumber: syz
[  372.789910][ T5950] usb 1-1: config 0 descriptor??
[  372.822170][ T5950] smsc95xx v2.0.0
[  372.901567][T10599] syzkaller0: entered promiscuous mode
[  372.911279][T10599] syzkaller0: entered allmulticast mode
[  373.246346][ T5950] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  373.280294][ T5950] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  373.890621][T10605] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1410'.
[  373.956169][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'.
[  374.672351][T10630] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'.
[  375.608949][ T1059] block nbd1: Possible stuck request ffff8880220c8000: control (read@0,1024B). Runtime 90 seconds
[  375.620168][ T1059] block nbd1: Possible stuck request ffff8880220c8200: control (read@1024,1024B). Runtime 90 seconds
[  375.631267][ T1059] block nbd1: Possible stuck request ffff8880220c8400: control (read@2048,1024B). Runtime 90 seconds
[  375.642291][ T1059] block nbd1: Possible stuck request ffff8880220c8600: control (read@3072,1024B). Runtime 90 seconds
[  375.754634][T10639] loop7: detected capacity change from 0 to 16384
[  375.814156][T10642] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1416'.
[  376.090586][T10640] syzkaller0: entered promiscuous mode
[  376.177364][T10640] syzkaller0: entered allmulticast mode
[  376.423876][ T5950] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[  376.436317][ T5950] smsc95xx: probe of 1-1:0.67 failed with error -32
[  376.505373][T10646] netlink: 'syz.1.1417': attribute type 4 has an invalid length.
[  376.529079][T10639] loop7: detected capacity change from 16384 to 0
[  376.627968][T10648] syzkaller0: entered promiscuous mode
[  376.653991][T10648] syzkaller0: entered allmulticast mode
[  376.733071][   T42] usb 1-1: USB disconnect, device number 45
[  378.764689][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  379.195244][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  379.397461][ T5800] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  379.595173][ T5800] usb 3-1: Using ep0 maxpacket: 32
[  379.659131][ T5800] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  379.675075][ T5800] usb 3-1: config 0 has no interface number 0
[  379.683768][ T5800] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  379.713231][ T5800] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.738837][ T5800] usb 3-1: Product: syz
[  379.743038][ T5800] usb 3-1: Manufacturer: syz
[  379.771517][ T5800] usb 3-1: SerialNumber: syz
[  379.798550][ T5800] usb 3-1: config 0 descriptor??
[  379.805452][T10694] syzkaller0: entered promiscuous mode
[  379.824062][T10694] syzkaller0: entered allmulticast mode
[  379.831177][ T5800] smsc95xx v2.0.0
[  380.330464][ T5800] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  380.344464][ T5800] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  381.221972][T10714] rdma_op ffff888079bce1f0 conn xmit_rdma 0000000000000000
[  382.910338][ T5800] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[  382.921431][ T5800] smsc95xx: probe of 3-1:0.67 failed with error -32
[  383.247457][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1438'.
[  383.784195][ T5800] usb 3-1: USB disconnect, device number 54
[  384.141041][T10737] syzkaller0: entered promiscuous mode
[  384.151024][T10737] syzkaller0: entered allmulticast mode
[  384.473201][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'.
[  384.495026][T10746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1446'.
[  384.565235][  T787] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  384.603179][T10748] netlink: 'syz.0.1447': attribute type 10 has an invalid length.
[  384.621532][T10748] team0: Device vxcan1 is of different type
[  384.760803][  T787] usb 4-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  384.770079][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.781157][  T787] usb 4-1: Product: syz
[  384.785623][  T787] usb 4-1: Manufacturer: syz
[  384.794586][  T787] usb 4-1: SerialNumber: syz
[  385.068512][  T787] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  385.105071][  T787] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  385.129022][  T787] usb 4-1: USB disconnect, device number 63
[  386.280288][T10759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1449'.
[  386.418871][ T6847] udevd[6847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  386.980573][T10777] syzkaller0: entered promiscuous mode
[  386.986204][T10777] syzkaller0: entered allmulticast mode
[  386.995336][T10773] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  387.910433][T10797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1460'.
[  388.702969][T10808] block device autoloading is deprecated and will be removed.
[  388.840848][T10805] md: could not open device unknown-block(0,0).
[  388.849385][T10805] md: md_import_device returned -6
[  389.493589][T10822] syzkaller0: entered promiscuous mode
[  389.502247][T10822] syzkaller0: entered allmulticast mode
[  390.868615][T10845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'.
[  391.186960][   T28] INFO: task poweroff:8347 blocked for more than 143 seconds.
[  391.209382][   T28]       Not tainted syzkaller #0
[  391.214601][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  391.279152][   T28] task:poweroff        state:D stack:24232 pid:8347  ppid:5121   flags:0x00004002
[  391.309304][   T28] Call Trace:
[  391.312649][   T28]  <TASK>
[  391.315706][   T28]  __schedule+0x1553/0x45a0
[  391.320398][   T28]  ? asan.module_dtor+0x20/0x20
[  391.325419][   T28]  ? __mutex_lock+0x6a4/0xcc0
[  391.332290][   T28]  ? __mutex_trylock_common+0x8a/0x260
[  391.339026][   T28]  ? trace_raw_output_contention_end+0xd0/0xd0
[  391.345366][   T28]  schedule+0xbd/0x170
[  391.349547][   T28]  schedule_preempt_disabled+0x13/0x20
[  391.355196][   T28]  __mutex_lock+0x6a9/0xcc0
[  391.359736][   T28]  ? __mutex_lock+0x4f9/0xcc0
[  391.364481][   T28]  ? sync_bdevs+0x1af/0x330
[  391.369047][   T28]  ? mutex_lock_nested+0x20/0x20
[  391.374009][   T28]  ? _atomic_dec_and_lock+0x93/0x120
[  391.379362][   T28]  ? do_raw_spin_unlock+0x121/0x230
[  391.384585][   T28]  sync_bdevs+0x1af/0x330
[  391.388998][   T28]  ksys_sync+0xc6/0x170
[  391.393164][   T28]  ? sync_filesystem+0x220/0x220
[  391.398156][   T28]  ? syscall_enter_from_user_mode+0x25/0x80
[  391.404099][   T28]  ? lockdep_hardirqs_on+0x98/0x150
[  391.409358][   T28]  __ia32_sys_sync+0xe/0x20
[  391.413871][   T28]  do_syscall_64+0x55/0xa0
[  391.418434][   T28]  ? clear_bhb_loop+0x40/0x90
[  391.423151][   T28]  ? clear_bhb_loop+0x40/0x90
[  391.428052][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  391.433959][   T28] RIP: 0033:0x7f647a694f37
[  391.438470][   T28] RSP: 002b:00007ffddc37a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  391.447022][   T28] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f647a694f37
[  391.455071][   T28] RDX: ffffffffffffff88 RSI: 00007f647a82de51 RDI: 00000000ffffff9c
[  391.463066][   T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  391.471203][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  391.479340][   T28] R13: 00007ffddc37a378 R14: 00007f647a86f000 R15: 00005590dbb5ad98
[  391.487417][   T28]  </TASK>
[  391.490474][   T28] 
[  391.490474][   T28] Showing all locks held in the system:
[  391.514977][   T28] 1 lock held by khungtaskd/28:
[  391.520065][   T28]  #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  391.532401][   T28] 2 locks held by getty/5522:
[  391.537401][   T28]  #0: ffff88814df480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  391.547350][   T28]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  391.557640][   T28] 1 lock held by udevd/5754:
[  391.562311][   T28]  #0: ffff8880220184c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  391.572468][   T28] 1 lock held by udevd/5755:
[  391.577080][   T28]  #0: ffff88802204d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  391.587199][   T28] 2 locks held by kworker/0:4/5800:
[  391.592405][   T28]  #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  391.603519][   T28]  #1: ffffc900048bfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  391.615733][   T28] 3 locks held by kworker/u4:14/5895:
[  391.621113][   T28] 1 lock held by udevd/6849:
[  391.625778][   T28]  #0: ffff8880220484c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  391.636101][   T28] 1 lock held by poweroff/8347:
[  391.640988][   T28]  #0: ffff8880220184c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330
[  391.650613][   T28] 1 lock held by syz.2.1445/10743:
[  391.655824][   T28]  #0: ffff88802204d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  391.665923][   T28] 3 locks held by syz.3.1471/10844:
[  391.671140][   T28]  #0: ffff888076cfee20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230
[  391.681418][   T28]  #1: ffff88807994def0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x2a/0x2e0
[  391.691253][   T28]  #2: ffffffff8d137a78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880
[  391.749303][   T28] 
[  391.751751][   T28] =============================================
[  391.751751][   T28] 
[  391.760999][   T28] NMI backtrace for cpu 1
[  391.765371][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  391.772576][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  391.782638][   T28] Call Trace:
[  391.785920][   T28]  <TASK>
[  391.788861][   T28]  dump_stack_lvl+0x18c/0x250
[  391.793565][   T28]  ? show_regs_print_info+0x20/0x20
[  391.798790][   T28]  ? load_image+0x400/0x400
[  391.803353][   T28]  nmi_cpu_backtrace+0x3a6/0x3e0
[  391.808306][   T28]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  391.814469][   T28]  ? _printk+0xde/0x130
[  391.818627][   T28]  ? load_image+0x400/0x400
[  391.823118][   T28]  ? load_image+0x400/0x400
[  391.827606][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  391.833661][   T28]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  391.839624][   T28]  watchdog+0xf3d/0xf80
[  391.843764][   T28]  ? watchdog+0x1e1/0xf80
[  391.848078][   T28]  kthread+0x2fa/0x390
[  391.852126][   T28]  ? hungtask_pm_notify+0x90/0x90
[  391.857133][   T28]  ? kthread_blkcg+0xd0/0xd0
[  391.861711][   T28]  ret_from_fork+0x48/0x80
[  391.866114][   T28]  ? kthread_blkcg+0xd0/0xd0
[  391.870684][   T28]  ret_from_fork_asm+0x11/0x20
[  391.875442][   T28]  </TASK>
[  391.878986][   T28] Sending NMI from CPU 1 to CPUs 0:
[  391.884395][    C0] NMI backtrace for cpu 0
[  391.884404][    C0] CPU: 0 PID: 59 Comm: kworker/u4:4 Not tainted syzkaller #0
[  391.884420][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  391.884429][    C0] Workqueue: bat_events batadv_nc_worker
[  391.884448][    C0] RIP: 0010:__lock_acquire+0xfd7/0x7d40
[  391.884469][    C0] Code: ff 1f 00 00 41 c1 ec 03 41 81 e4 00 60 00 00 41 09 c4 4c 89 fe 48 c1 ee 20 89 f0 c1 c0 04 41 29 f4 44 31 e0 44 01 fe 41 29 c7 <89> c1 c1 c1 06 44 31 f9 01 f0 89 ca c1 c2 08 29 ce 31 f2 01 c1 29
[  391.884483][    C0] RSP: 0018:ffffc900015a77c0 EFLAGS: 00000893
[  391.884495][    C0] RAX: 00000000d79ec93b RBX: 00000000000606ed RCX: ffffffff81683d13
[  391.884506][    C0] RDX: 0000000000000000 RSI: 000000007429665c RDI: ffffffff911c3500
[  391.884516][    C0] RBP: ffffc900015a7a08 R08: dffffc0000000000 R09: 1ffffffff22386a0
[  391.884527][    C0] R10: dffffc0000000000 R11: fffffbfff22386a1 R12: 00000000fd53655b
[  391.884538][    C0] R13: ffff88801ee90000 R14: ffff88801ee90ae0 R15: 0000000099ddc25b
[  391.884549][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  391.884562][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  391.884577][    C0] CR2: 00007f6e011e7158 CR3: 000000002f3ca000 CR4: 00000000003506f0
[  391.884591][    C0] Call Trace:
[  391.884596][    C0]  <TASK>
[  391.884605][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  391.884629][    C0]  ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0
[  391.884653][    C0]  ? verify_lock_unused+0x140/0x140
[  391.884673][    C0]  ? rcu_read_unlock_special+0x4d0/0x4d0
[  391.884698][    C0]  lock_acquire+0x19e/0x420
[  391.884713][    C0]  ? batadv_nc_worker+0xd2/0x610
[  391.884729][    C0]  ? batadv_nc_worker+0xd2/0x610
[  391.884743][    C0]  ? read_lock_is_recursive+0x20/0x20
[  391.884759][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  391.884777][    C0]  ? batadv_nc_worker+0xd2/0x610
[  391.884790][    C0]  ? batadv_nc_worker+0xd2/0x610
[  391.884804][    C0]  batadv_nc_worker+0xef/0x610
[  391.884817][    C0]  ? batadv_nc_worker+0xd2/0x610
[  391.884832][    C0]  ? process_scheduled_works+0x96f/0x15d0
[  391.884851][    C0]  process_scheduled_works+0xa5d/0x15d0
[  391.884882][    C0]  ? worker_attach_to_pool+0x380/0x380
[  391.884902][    C0]  ? assign_work+0x3d2/0x5d0
[  391.884921][    C0]  worker_thread+0xa55/0xfc0
[  391.884950][    C0]  kthread+0x2fa/0x390
[  391.884964][    C0]  ? pr_cont_work+0x560/0x560
[  391.884983][    C0]  ? kthread_blkcg+0xd0/0xd0
[  391.884998][    C0]  ret_from_fork+0x48/0x80
[  391.885017][    C0]  ? kthread_blkcg+0xd0/0xd0
[  391.885033][    C0]  ret_from_fork_asm+0x11/0x20
[  391.885060][    C0]  </TASK>
[  391.891551][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  391.891563][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  391.891578][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  391.891587][   T28] Call Trace:
[  391.891593][   T28]  <TASK>
[  391.891600][   T28]  dump_stack_lvl+0x18c/0x250
[  391.891629][   T28]  ? show_regs_print_info+0x20/0x20
[  391.891652][   T28]  ? load_image+0x400/0x400
[  391.891682][   T28]  panic+0x2dc/0x730
[  391.891700][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  391.891725][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  391.891742][   T28]  ? __irq_work_queue_local+0x13a/0x3b0
[  391.891765][   T28]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  391.891787][   T28]  watchdog+0xf7c/0xf80
[  391.891807][   T28]  ? watchdog+0x1e1/0xf80
[  391.891832][   T28]  kthread+0x2fa/0x390
[  391.891847][   T28]  ? hungtask_pm_notify+0x90/0x90
[  391.891866][   T28]  ? kthread_blkcg+0xd0/0xd0
[  391.891881][   T28]  ret_from_fork+0x48/0x80
[  391.891899][   T28]  ? kthread_blkcg+0xd0/0xd0
[  391.891915][   T28]  ret_from_fork_asm+0x11/0x20
[  391.891946][   T28]  </TASK>
[  391.897328][   T28] Kernel Offset: disabled
[  392.249599][   T28] Rebooting in 86400 seconds..