last executing test programs:

22m43.353580529s ago: executing program 1 (id=2):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)

22m35.708005186s ago: executing program 1 (id=10):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x218884, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

22m33.666854981s ago: executing program 1 (id=15):
fsopen(&(0x7f0000000000)='proc\x00', 0x1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000001c00), 0x12)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0)
getpid()
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
write$vga_arbiter(r7, &(0x7f0000000200)=@other={'trylock', ' ', 'none'}, 0xd)

22m31.324508732s ago: executing program 1 (id=18):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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")
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
openat(0xffffffffffffff9c, 0x0, 0x129242, 0x30)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
statx(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x1000, 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
socket$netlink(0x10, 0x3, 0x4)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r2, 0xa, 0x21)
fcntl$setlease(r2, 0x400, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
getpid()
fcntl$setown(r2, 0x8, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

22m29.178516027s ago: executing program 1 (id=24):
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

22m27.590945876s ago: executing program 1 (id=27):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040))
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYBLOB=',rootmode', @ANYRESDEC=0x0])
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
times(0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20)

22m26.330946715s ago: executing program 32 (id=27):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040))
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYBLOB=',rootmode', @ANYRESDEC=0x0])
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
times(0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r6, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x1006c, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20)

22m9.960671701s ago: executing program 2 (id=66):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, 0x0, 0x0)
ftruncate(r0, 0xfffffffd)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4)

22m9.635199472s ago: executing program 2 (id=69):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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")
futex(0x0, 0x86, 0x0, &(0x7f00000002c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501)
ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x3, 0x30, 0x8a49, 0x1, 0x0, 0x206, 0x0})
close(0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff)

22m7.957308394s ago: executing program 2 (id=72):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000140)=@updsa={0x184, 0x1a, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in6=@local, @in6=@mcast1, 0x4e24, 0x7, 0x4e23, 0xe, 0x0, 0x0, 0x10, 0x87}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x33}, @in6=@loopback, {0x0, 0x2, 0x7, 0x164, 0x2, 0x9, 0xc2a, 0x4}, {0x0, 0x4, 0x4, 0x9}, {0x9, 0x5, 0xffffffff}, 0x70bd29, 0x34ff, 0xa, 0x1, 0x7f, 0x43}, [@algo_auth_trunc={0x4c, 0x14, {{'blake2b-256-generic\x00'}, 0x0, 0x180}}, @algo_auth={0x48, 0x1, {{'michael_mic\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)

22m7.511860772s ago: executing program 2 (id=75):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
listen(0xffffffffffffffff, 0xc00)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
clock_settime(0xa00, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0x6, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

22m4.784472171s ago: executing program 2 (id=76):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
bind$inet6(r0, 0x0, 0x0)
ftruncate(r0, 0xfffffffd)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4)

22m3.342538717s ago: executing program 2 (id=81):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, 0x0)
recvmmsg(r0, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000003400)=""/4092, 0xffc}, {&(0x7f00000044c0)=""/4080, 0xff0}], 0x2}, 0x7}], 0x1, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x90, 0x10)
futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2)

22m2.304404556s ago: executing program 33 (id=81):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, 0x0)
recvmmsg(r0, &(0x7f0000008880)=[{{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000003400)=""/4092, 0xffc}, {&(0x7f00000044c0)=""/4080, 0xff0}], 0x2}, 0x7}], 0x1, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x90, 0x10)
futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2)

22m2.062600182s ago: executing program 0 (id=87):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x210)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = socket(0x10, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10)
times(&(0x7f0000000080))
write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333a2a6d60f3879", 0x99)
recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

22m1.078617741s ago: executing program 0 (id=90):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_clone3(0x0, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

21m59.025102304s ago: executing program 0 (id=94):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x727b85c6)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5aea}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040))

21m58.661128657s ago: executing program 0 (id=95):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000040)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs")
chroot(&(0x7f0000000a40)='./file0\x00')
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0)

21m58.170659517s ago: executing program 0 (id=96):
syz_open_procfs(0xffffffffffffffff, 0x0)
unshare(0x62040200)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x82)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]})
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

21m54.893985037s ago: executing program 0 (id=100):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x238, &(0x7f0000000800)="$eJzsmL9rFEEUx78zu7feiUhsUthYGDCiucvtoaQ5NIJgJULir0oPs4aYTU4uK5iAJMHGRjsLIY2F/4BFCisLO/8BQQsVBAuvsLCxGZkfeze3w+ZySzrfpxi+M/Nm3743b1+xIAjiv+X7tz9fn1+amT8L4AgmcMis//QAxrRmW337L68enXnZvLzz9vObD6tHn7zLPk8eEWJwobyHfx/A+1kPiZpx+/RfKSbMZB68p6+D47TRN8FQNfouOG4YHYHhttEPLN2W9tXq/aU4qt5rxwtSTMuhLodQDo3s+3W3GRbMXAghmLW/tr6x3IrjqGMJ3+xZW5vI2Iwies6Wx538lRCgO8vRtN5PZvHWs6fbcp7mZtrKXx0cdRNEAwxzZn0GO2ludEqs+I/7qKQuvIH4MdaKM9FKwUwxAMOCLGvR/F0gNXuLY1PFjk/KcC66W2OFbhGDp0rob8lM5h7PK6/RSkcJP3s7rrhgLrSAr6vZKMSm8wEo8UKW0IHfsisKRZGK8S776G790ILn1rNgw12w/ddPeb/vnH6IZsUfvUQrkHH1VnzvYO4C+LSr+4d4zXDK6k++1T9qycrD2tr6xtTSSmsxWoxWw7BxngFb58KaakR6dPpevz9XVH86bNqTfH4pxzbgAR63kqRT12PAAlSQJJ1QzUPrs5nbbf+6Y44luALgpJ7Ilhb0nug5PligbbiylWrSNSIIgiAIgiAIgiAIgiAIgijECTD1F3QI4TVl/S8AAP//CkpUTQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000000)='./file2\x00', 0x193400, 0x80)

21m54.19719676s ago: executing program 34 (id=100):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000580)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x238, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000000)='./file2\x00', 0x193400, 0x80)

21m9.463427746s ago: executing program 6 (id=172):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==")
openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40)
open(0x0, 0x14507e, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)

21m8.038638214s ago: executing program 6 (id=175):
clock_gettime(0x0, &(0x7f0000001240))
recvmmsg(0xffffffffffffffff, &(0x7f0000001100), 0x0, 0x40000000, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x20000007d, 0x0)
poll(0x0, 0x0, 0x4)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f00000006c0)='.\x00', 0xaa)
open(0x0, 0x0, 0x0)
mknodat(0xffffffffffffffff, 0x0, 0x8910, 0x4)
getdents64(r0, &(0x7f0000000000)=""/45, 0x2d)

21m7.174496316s ago: executing program 6 (id=178):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x727b85c6)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5aea}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040))

21m4.90649468s ago: executing program 6 (id=182):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x1a1100, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000500)={@id={0x2, 0x0, @a}})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x434601, 0x41464519a859a56c)

21m3.742272236s ago: executing program 6 (id=186):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000100)='./file0\x00')
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xc42, 0x11, 0x5}, 0x18)
syz_read_part_table(0x5c9, &(0x7f0000000000)="$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")
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x100, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f00009fcc0002000100000e000058"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000891}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)

21m3.16652462s ago: executing program 6 (id=190):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x727b85c6)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5aea}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040))

21m2.584302703s ago: executing program 35 (id=190):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x727b85c6)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5aea}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100)
getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040))

19m38.217741739s ago: executing program 5 (id=384):
prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x1000)=nil)

19m37.408937761s ago: executing program 5 (id=387):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x204000, &(0x7f00000003c0)=ANY=[], 0x1, 0x5524, &(0x7f0000010040)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000c0bee9580d85d2f64ab9ee145c092e0014000305000000000000000002180000", @ANYRES32, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'})
close(r3)

19m29.054918567s ago: executing program 5 (id=405):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101001, 0x200)
write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
gettid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000001240)=[{0x0}, {&(0x7f00000012c0)=""/90, 0x5a}], 0x2, 0xf, 0x8000)

19m26.098865175s ago: executing program 5 (id=408):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x242, 0x100)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(0xffffffffffffffff, r1, 0x0, 0xe3aa2ea)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f00000000c0)={0x3, 0x20})
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0)
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})

19m25.519071589s ago: executing program 5 (id=411):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140))
sendmsg$AUDIT_SET(r0, 0x0, 0x20040044)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(0x0, 0x0)
ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000380)={<r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

19m24.828282562s ago: executing program 5 (id=416):
syz_usb_connect$midi(0x5, 0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000108c0d03014000010203010902440001019e000709040000030103300009050c0eff03ca0e00052501019409050f2f20007f0800052701015009050303ff03093c100d250109960b1e2d6b01f40e31"], 0x0)
syz_usb_connect$midi(0x6, 0x40, &(0x7f0000000000)=ANY=[], 0x0)

19m24.32653049s ago: executing program 36 (id=416):
syz_usb_connect$midi(0x5, 0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="12011001000000108c0d03014000010203010902440001019e000709040000030103300009050c0eff03ca0e00052501019409050f2f20007f0800052701015009050303ff03093c100d250109960b1e2d6b01f40e31"], 0x0)
syz_usb_connect$midi(0x6, 0x40, &(0x7f0000000000)=ANY=[], 0x0)

4.757434503s ago: executing program 3 (id=3706):
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01e028bd700ffb04df"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.226638698s ago: executing program 4 (id=3708):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004041)

4.01552602s ago: executing program 4 (id=3709):
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x20000804)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4)
r1 = creat(&(0x7f0000000200)='./file1\x00', 0x12e)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
dup3(r2, r1, 0x0)
syz_io_uring_setup(0x88b, 0x0, 0x0, &(0x7f00000003c0))
close(0xffffffffffffffff)

3.787052419s ago: executing program 8 (id=3710):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="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"], 0x114}}, 0x0)

3.614678068s ago: executing program 4 (id=3711):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
write$proc_mixer(0xffffffffffffffff, 0x0, 0x86)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, 0x0, 0x0)
connect$802154_dgram(r1, 0x0, 0x0)

3.537286264s ago: executing program 3 (id=3712):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x4b, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r3, 0x0, 0x8, 0x0, 0x1)
socket$inet6_udplite(0xa, 0x2, 0x88)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r4)
mount(&(0x7f00000000c0)=@nullb, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)=r4}, 0x20)
recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)

3.515098681s ago: executing program 8 (id=3713):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="b318"})

3.294718071s ago: executing program 4 (id=3714):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000240)={0x1, 0x40000, 0x203, 0xfffd, 0x2, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0xffffffffffffffff, 0x80000005, 0x3})

3.29169123s ago: executing program 8 (id=3715):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x805, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ac0))
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r2, 0x7}, 0x8)

3.111441838s ago: executing program 4 (id=3716):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000fc0)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0})

3.097476346s ago: executing program 8 (id=3717):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xfffffffc}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="1c00082002030000"], 0xfb5)

2.274642368s ago: executing program 4 (id=3718):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40, 0x0, 0xf, "012720dcfe14c639a500ba17162716"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c240200000003000000000009240600060100000009"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000000100)="504b147615c7996326170a2fd838753058a2902b69ac64dbe61bae8d880f63a9e4e61c387fe11e7fbbd21d6f530ebea9a3f15165162ffd9f0a9c0a81ed705250a0496af99c00e6", 0x47)

2.248436683s ago: executing program 3 (id=3719):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

2.029633604s ago: executing program 8 (id=3720):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.983686116s ago: executing program 3 (id=3721):
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01e028bd700ffb04df"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.494650418s ago: executing program 7 (id=3723):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000380)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x2, 0x8001, 0x9, 0xf, 0x2, 0x3, "7d16"}}, 0x11a)

1.346392461s ago: executing program 7 (id=3724):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000240)={0x1, 0x40000, 0x203, 0xfffd, 0x2, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0xffffffffffffffff, 0x80000005, 0x3})

1.234759711s ago: executing program 7 (id=3725):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r2, 0x7}, 0x8)

1.148624956s ago: executing program 3 (id=3726):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000fc0)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0})

1.148027315s ago: executing program 7 (id=3727):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
timer_create(0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

930.637857ms ago: executing program 7 (id=3728):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x48, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd45fe42904bcee14db4241544716b9ea42231ed9953a3bb017f9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, 0x0)

899.113191ms ago: executing program 3 (id=3729):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x39000, 0x3)

793.589102ms ago: executing program 7 (id=3730):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="15a31ae9b77a306d5d3418def83421daef8bc61f50c603b6e2072bf9aa93746fe11ce6cc33ca4fe0f3cbfd228dd5a2951f1218dacfd2cc0e36966c9fde554cdc4ca8602ee26302ae43760573b94c", @ANYRESDEC=0x0, @ANYBLOB="2489f2ff4c07e09fa28aaf455d08a155c648b11556baff00fadda8159f18b6e4e7a72114573fc922b29302bbb534ce2e14f88c00fbf1c8d7068da0bbaa4d2073fcedfab24736f8aa1b52caa9dc7e8fc210c8c61aef60dc0b6c9bde9285aab16d91f8e551fe8636dcfa2dfdeb1a19c297dc1c9e4f1a2ba4c0607082da9e4dda7c6e70034c12891fe5163a6b9cfa6f62f012b28115f42049ddbd38b7597b28f3", @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(0x0, 0x0)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000300)={0xf, 0x1f, 0x2, 0x9}, 0xf)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c00078008001240000000020500050002000000"], 0x58}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

0s ago: executing program 8 (id=3731):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x9})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast2, 0xfffbffff})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil})
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r3, &(0x7f00000016c0)=""/4103, 0x1007)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x482480, 0x138)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x3, 0x8)
connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f8}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$phonet(0x23, 0x2, 0x1)
syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, r8, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0, 0x4000000, 0x1})
io_uring_enter(r5, 0x47f6, 0x202f, 0x0, 0x0, 0x0)
shutdown(r4, 0x1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)

kernel console output (not intermixed with test programs):

sing preconfigured BSSID 50:50:50:50:50:50
[ 1016.625214][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1016.637800][T15320] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1016.679181][T15320] usb 5-1: device descriptor read/8, error -71
[ 1016.820895][T16306] loop3: detected capacity change from 0 to 1024
[ 1016.828918][T16306] EXT4-fs: Ignoring removed orlov option
[ 1016.849699][T16306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1016.875341][T16306] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.2420: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[ 1016.901381][T16306] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1794: Corrupt filesystem
[ 1016.951716][T16112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1016.968524][T15320] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1017.020545][T15320] usb 5-1: device descriptor read/8, error -71
[ 1017.146838][T15320] usb usb5-port1: unable to enumerate USB device
[ 1018.654576][T16342] loop8: detected capacity change from 0 to 164
[ 1018.688003][T16342] ISOFS: unable to read i-node block
[ 1018.693391][T16342] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[ 1019.440545][T16346] program syz.3.2470 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1020.052026][ T5859] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1020.347923][ T5859] usb 9-1: device descriptor read/64, error -71
[ 1020.698147][T16368] loop4: detected capacity change from 0 to 256
[ 1020.706926][T16368] exfat: Deprecated parameter 'namecase'
[ 1020.713361][T16368] exfat: Deprecated parameter 'utf8'
[ 1020.747608][T16368] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1020.788598][T16370] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5)
[ 1020.795831][T16370] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1020.889679][T16370] vhci_hcd vhci_hcd.0: Device attached
[ 1020.961018][T16370] (unnamed net_device) (uninitialized): option mode: invalid value (9)
[ 1021.124423][ T5859] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1021.162808][T16370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1021.674080][ T5859] usb 9-1: device descriptor read/64, error -71
[ 1021.839551][T16072] usb 48-1: SetAddress Request (2) to port 0
[ 1021.846129][T16072] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd
[ 1021.887768][T16371] vhci_hcd: connection closed
[ 1021.897571][T16377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1021.947842][ T6570] vhci_hcd: stop threads
[ 1021.964321][ T6570] vhci_hcd: release socket
[ 1021.976496][ T5859] usb usb9-port1: attempt power cycle
[ 1022.020794][ T6570] vhci_hcd: disconnect device
[ 1022.062115][T16387] program syz.3.2482 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1023.871294][T16397] loop4: detected capacity change from 0 to 40427
[ 1024.378195][ T5859] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1024.731777][ T5859] usb 9-1: device not accepting address 31, error -71
[ 1025.866245][T16413] loop7: detected capacity change from 0 to 16
[ 1025.878323][T16413] erofs: Unknown parameter '0x0000000000000003'
[ 1027.610652][T16421] program syz.4.2491 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1028.328186][T16072] usb 48-1: device descriptor read/8, error -110
[ 1028.491344][   T27] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1028.708437][   T27] usb 5-1: Using ep0 maxpacket: 32
[ 1028.713746][T16437] loop7: detected capacity change from 0 to 256
[ 1028.729556][   T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1028.740917][T16437] exfat: Deprecated parameter 'namecase'
[ 1028.747798][T16437] exfat: Deprecated parameter 'utf8'
[ 1028.755978][   T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1028.758756][T16072] usb usb48-port1: attempt power cycle
[ 1028.766743][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.781947][   T27] usb 5-1: config 0 descriptor??
[ 1028.803930][T16437] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1030.319844][T16441] loop3: detected capacity change from 0 to 40427
[ 1031.219189][T16448] program syz.7.2501 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1031.329705][T16072] usb usb48-port1: unable to enumerate USB device
[ 1031.972130][T16466] loop3: detected capacity change from 0 to 16
[ 1031.983750][T16466] erofs: Unknown parameter '0x0000000000000003'
[ 1033.460411][   T27] usb 5-1: USB disconnect, device number 39
[ 1034.081528][ T8456] usb 9-1: new low-speed USB device number 33 using dummy_hcd
[ 1035.643186][T16480] loop3: detected capacity change from 0 to 40427
[ 1036.930291][ T8456] usb 9-1: device descriptor read/all, error -71
[ 1038.843036][T16510] loop3: detected capacity change from 0 to 16
[ 1038.854652][T16510] erofs: Unknown parameter '0x0000000000000003'
[ 1040.800815][T16072] usb 5-1: new low-speed USB device number 40 using dummy_hcd
[ 1042.305837][T16525] loop7: detected capacity change from 0 to 40427
[ 1042.378367][ T8456] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1042.404764][T16072] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.071923][T16072] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1043.178217][T16072] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1043.226860][T16072] usb 5-1: string descriptor 0 read error: -22
[ 1043.248829][T16072] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1043.301592][T16072] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1043.371049][T16072] usb 5-1: 0:2 : does not exist
[ 1043.468736][T16072] usb 5-1: selecting invalid altsetting 1
[ 1043.504744][T16072] usb_set_interface error
[ 1043.554182][T16072] snd-usb-us122l: probe of 5-1:1.1 failed with error -22
[ 1043.673528][T16072] usb 5-1: USB disconnect, device number 40
[ 1045.097825][ T8456] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1045.107311][T16419] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1045.287639][T16419] usb 9-1: Using ep0 maxpacket: 32
[ 1045.292894][ T8456] usb 4-1: Using ep0 maxpacket: 32
[ 1045.300015][T16419] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1045.310331][ T8456] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1045.322137][ T8456] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1045.335737][ T8456] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1045.342562][ T8456] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1045.351839][   T27] usb 5-1: new low-speed USB device number 41 using dummy_hcd
[ 1045.360082][ T8456] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1045.370226][T16419] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1045.379712][T16419] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1045.389951][ T8456] usb 4-1: config 0 descriptor??
[ 1045.395432][T16419] usb 9-1: Product: syz
[ 1045.402633][ T8456] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1045.410085][T16419] usb 9-1: Manufacturer: syz
[ 1045.414782][T16419] usb 9-1: SerialNumber: syz
[ 1045.427544][T16419] usb 9-1: config 0 descriptor??
[ 1045.433287][T16550] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1045.442090][T16419] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1045.448421][T16419] hub: probe of 9-1:0.0 failed with error -5
[ 1045.549598][   T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1045.559806][   T27] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1045.568859][   T27] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1045.578673][   T27] usb 5-1: string descriptor 0 read error: -22
[ 1045.585574][   T27] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1045.595844][   T27] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1045.616133][   T27] usb 5-1: 0:2 : does not exist
[ 1045.631201][   T27] usb 5-1: selecting invalid altsetting 1
[ 1045.636982][   T27] usb_set_interface error
[ 1045.656811][   T27] snd-usb-us122l: probe of 5-1:1.1 failed with error -22
[ 1046.519344][T16560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1046.528303][T16560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1047.825286][T16419] usb 4-1: USB disconnect, device number 37
[ 1049.501508][T16566] loop3: detected capacity change from 0 to 40427
[ 1049.841481][ T5859] usb 9-1: USB disconnect, device number 36
[ 1050.255850][ T5828] usb 5-1: USB disconnect, device number 41
[ 1051.229958][T16419] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1051.582504][T16419] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[ 1051.609950][T16419] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1051.637018][T16419] usb 4-1: config 0 has no interface number 0
[ 1051.647976][T16419] usb 4-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1051.664520][T16419] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1051.675348][T16419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.689859][T16419] usb 4-1: Product: syz
[ 1051.694174][T16419] usb 4-1: Manufacturer: syz
[ 1051.702291][T16419] usb 4-1: SerialNumber: syz
[ 1051.718030][T16419] usb 4-1: config 0 descriptor??
[ 1051.945449][ T5859] usb 4-1: USB disconnect, device number 38
[ 1052.357644][T16419] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1052.547863][T16419] usb 5-1: Using ep0 maxpacket: 32
[ 1052.555551][T16419] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1052.569591][T16419] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1052.578723][T16419] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1052.586877][T16419] usb 5-1: Product: syz
[ 1052.591572][T16419] usb 5-1: Manufacturer: syz
[ 1052.596179][T16419] usb 5-1: SerialNumber: syz
[ 1052.603098][T16419] usb 5-1: config 0 descriptor??
[ 1052.609111][T16594] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1052.617381][T16419] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1052.623395][T16419] hub: probe of 5-1:0.0 failed with error -5
[ 1052.769987][ T5859] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1052.958179][ T5859] usb 4-1: Using ep0 maxpacket: 8
[ 1052.966564][ T5859] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1052.975196][ T5859] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1052.985224][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1052.996426][ T5859] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1053.006556][ T5859] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1053.020131][ T5859] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1053.029261][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.681651][T16597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1053.690551][T16597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1053.852366][T16599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1053.861351][T16599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1053.871092][T16599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1053.879933][T16599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1054.090818][T16598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1054.112566][T16598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1054.132981][T16598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1054.143644][T16598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1054.397742][ T8456] usb 9-1: new low-speed USB device number 37 using dummy_hcd
[ 1054.592333][ T8456] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.604442][ T8456] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1054.614252][ T8456] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1054.627204][ T8456] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1054.643515][ T8456] usb 9-1: string descriptor 0 read error: -22
[ 1054.650628][ T8456] usb 9-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1054.659788][ T8456] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1054.674458][ T8456] usb 9-1: 0:2 : does not exist
[ 1054.704490][ T8456] usb-storage 9-1:1.1: USB Mass Storage device detected
[ 1054.723199][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.729836][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.014097][T16611] loop7: detected capacity change from 0 to 40427
[ 1056.888393][ T8456] us122l: couldn't allocate write buffer
[ 1056.894464][ T8456] snd-usb-us122l: probe of 9-1:1.1 failed with error -22
[ 1056.933233][ T5828] usb 4-1: USB disconnect, device number 39
[ 1057.352525][ T8456] usb 9-1: USB disconnect, device number 37
[ 1058.142092][ T5856] usb 5-1: USB disconnect, device number 42
[ 1058.498137][T16629] loop4: detected capacity change from 0 to 256
[ 1058.538114][T16629] exfat: Deprecated parameter 'namecase'
[ 1058.571725][T16629] exfat: Deprecated parameter 'utf8'
[ 1058.657716][T16629] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1059.837176][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1059.860258][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1059.870299][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1060.078579][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1060.092051][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1060.113714][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1060.525418][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2566'.
[ 1060.890076][T16653] chnl_net:caif_netlink_parms(): no params data found
[ 1062.454945][T16672] loop8: detected capacity change from 0 to 40427
[ 1062.480271][T15918] Bluetooth: hci1: command tx timeout
[ 1063.600065][T16653] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1063.634263][T16653] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1063.657788][T16653] bridge_slave_0: entered allmulticast mode
[ 1063.685626][T16653] bridge_slave_0: entered promiscuous mode
[ 1063.747995][T16653] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1063.755260][T16653] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1063.783432][T16653] bridge_slave_1: entered allmulticast mode
[ 1063.803265][T16653] bridge_slave_1: entered promiscuous mode
[ 1063.868274][T16653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1063.880079][T16653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1063.933529][T16653] team0: Port device team_slave_0 added
[ 1063.951322][T16653] team0: Port device team_slave_1 added
[ 1064.008976][T16653] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1064.023844][T16653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.057014][T16653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1064.084616][T16653] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1064.099068][T16653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1064.134404][T16653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1064.431837][T16653] hsr_slave_0: entered promiscuous mode
[ 1064.443535][T16653] hsr_slave_1: entered promiscuous mode
[ 1064.557874][ T5772] Bluetooth: hci1: command tx timeout
[ 1064.596604][T16684] loop3: detected capacity change from 0 to 256
[ 1064.607374][T16684] exfat: Deprecated parameter 'namecase'
[ 1064.613938][T16684] exfat: Deprecated parameter 'utf8'
[ 1064.705083][T16684] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1064.862238][T16653] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1065.079473][T16653] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1065.174164][T16653] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1065.305722][T16653] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1066.282344][T16653] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1066.328316][T16653] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1066.348680][T16653] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1066.360132][T16653] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1066.472017][T16653] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1066.523765][T16653] 8021q: adding VLAN 0 to HW filter on device team0
[ 1066.560266][T10449] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1066.567520][T10449] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1066.609868][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1066.617174][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1066.647604][ T5772] Bluetooth: hci1: command tx timeout
[ 1067.131433][T16653] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1068.641121][T16724] loop3: detected capacity change from 0 to 40427
[ 1068.732693][ T5772] Bluetooth: hci1: command tx timeout
[ 1069.868171][ T5755] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1071.622571][T16745] loop8: detected capacity change from 0 to 256
[ 1071.638603][T16745] exfat: Deprecated parameter 'namecase'
[ 1071.644339][T16745] exfat: Deprecated parameter 'utf8'
[ 1071.720412][T16745] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1071.905421][T16653] veth0_vlan: entered promiscuous mode
[ 1071.989984][T16653] veth1_vlan: entered promiscuous mode
[ 1072.775076][T16653] veth0_macvtap: entered promiscuous mode
[ 1072.805339][T16653] veth1_macvtap: entered promiscuous mode
[ 1072.959852][T16653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1072.989755][T16653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.026858][T16653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1073.055195][T16653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.066416][T16653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1073.078095][T16653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.088705][T16653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1073.100585][T16653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.113446][T16653] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1073.162946][T16653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.183315][T16653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.220147][T16653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.237489][T16653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.250915][T16653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.265625][T16653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.275675][T16653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1073.294268][T16653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1073.308368][T16653] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1073.340757][T16653] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1073.359312][T16653] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1073.378505][T16653] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1073.388461][T16653] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1073.594148][T10449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1073.637732][T10449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1073.707144][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1073.716944][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1075.254320][T16772] loop3: detected capacity change from 0 to 40427
[ 1077.157037][T16789] loop7: detected capacity change from 0 to 16
[ 1077.169220][T16789] erofs: Unknown parameter '0x0000000000000003'
[ 1079.432378][T16800] loop3: detected capacity change from 0 to 256
[ 1079.460853][T16800] exfat: Deprecated parameter 'namecase'
[ 1079.466588][T16800] exfat: Deprecated parameter 'utf8'
[ 1079.529449][T16800] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1082.339191][T16816] loop4: detected capacity change from 0 to 40427
[ 1084.005673][T16842] loop4: detected capacity change from 0 to 16
[ 1084.018011][T16842] erofs: Unknown parameter '0x0000000000000003'
[ 1086.508527][T16854] loop8: detected capacity change from 0 to 256
[ 1086.535034][T16854] exfat: Deprecated parameter 'namecase'
[ 1086.586571][T16854] exfat: Deprecated parameter 'utf8'
[ 1087.230635][T16854] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1089.279938][T16870] loop7: detected capacity change from 0 to 40427
[ 1091.162762][T16894] loop4: detected capacity change from 0 to 16
[ 1091.174710][T16894] erofs: Unknown parameter '0x0000000000000003'
[ 1093.194834][T16905] loop3: detected capacity change from 0 to 256
[ 1093.231890][T16905] exfat: Deprecated parameter 'namecase'
[ 1093.260181][T16905] exfat: Deprecated parameter 'utf8'
[ 1093.297980][T16905] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1094.307928][T16917] loop7: detected capacity change from 0 to 40427
[ 1097.255286][T16945] loop4: detected capacity change from 0 to 256
[ 1097.330168][T16948] loop7: detected capacity change from 0 to 16
[ 1097.454220][T16948] erofs: Unknown parameter '0x0000000000000003'
[ 1097.812344][T16945] exfat: Deprecated parameter 'namecase'
[ 1098.145019][T16945] exfat: Deprecated parameter 'utf8'
[ 1098.683935][T16945] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1101.569693][T16961] loop7: detected capacity change from 0 to 40427
[ 1104.878540][T16990] loop7: detected capacity change from 0 to 16
[ 1104.890618][T16990] erofs: Unknown parameter '0x0000000000000003'
[ 1106.737183][T17004] loop7: detected capacity change from 0 to 256
[ 1106.765297][T17004] exfat: Deprecated parameter 'namecase'
[ 1106.785546][T17004] exfat: Deprecated parameter 'utf8'
[ 1106.831839][T17004] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1109.198530][T17026] loop4: detected capacity change from 0 to 40427
[ 1110.270085][T17035] loop3: detected capacity change from 0 to 16
[ 1110.282134][T17035] erofs: Unknown parameter '0x0000000000000003'
[ 1113.117593][ T5865] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1113.949871][ T5772] Bluetooth: hci2: command 0x0406 tx timeout
[ 1114.431545][T17058] loop7: detected capacity change from 0 to 256
[ 1114.440668][T17058] exfat: Deprecated parameter 'namecase'
[ 1114.455067][T17058] exfat: Deprecated parameter 'utf8'
[ 1114.485696][T17058] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[ 1116.420782][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.427166][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.607259][T17078] loop8: detected capacity change from 0 to 16
[ 1116.619033][T17078] erofs: Unknown parameter '0x0000000000000003'
[ 1119.033862][T17086] loop7: detected capacity change from 0 to 40427
[ 1121.228057][T16419] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1121.557263][T17121] loop7: detected capacity change from 0 to 16
[ 1121.570659][T17121] erofs: Unknown parameter '0x0000000000000003'
[ 1121.580145][   T27] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1121.627604][T16419] usb 4-1: Using ep0 maxpacket: 32
[ 1121.884793][   T27] usb 9-1: Using ep0 maxpacket: 32
[ 1121.919248][T16419] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1122.052637][   T27] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1122.197028][T16419] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1122.236146][   T27] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1122.271278][T16419] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1122.282543][   T27] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1122.314257][T16419] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1122.344255][   T27] usb 9-1: Product: syz
[ 1122.354959][   T27] usb 9-1: Manufacturer: syz
[ 1122.370037][T16419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.380161][   T27] usb 9-1: SerialNumber: syz
[ 1122.479075][T16419] usb 4-1: config 0 descriptor??
[ 1122.503849][T16419] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1122.513520][   T27] usb 9-1: config 0 descriptor??
[ 1122.539182][T17117] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1122.568809][   T27] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1122.574771][   T27] hub: probe of 9-1:0.0 failed with error -5
[ 1124.718779][T17129] loop4: detected capacity change from 0 to 40427
[ 1125.108730][ T5828] usb 9-1: USB disconnect, device number 38
[ 1125.791985][ T5828] usb 4-1: USB disconnect, device number 40
[ 1125.892448][ T5755] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1126.587748][ T5856] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1126.777660][ T5856] usb 9-1: Using ep0 maxpacket: 8
[ 1126.812873][ T5856] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1127.482354][ T5856] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1127.497711][ T5856] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1127.513924][ T5856] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1127.524567][ T5856] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1127.547498][ T5856] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1127.556715][ T5856] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.184439][T17170] loop3: detected capacity change from 0 to 16
[ 1128.196710][T17170] erofs: Unknown parameter '0x0000000000000003'
[ 1128.527904][ T5772] Bluetooth: hci4: command 0x0406 tx timeout
[ 1130.050764][T16419] usb 9-1: USB disconnect, device number 39
[ 1132.256964][T17186] loop3: detected capacity change from 0 to 40427
[ 1132.857525][T16419] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 1133.327495][T16419] usb 9-1: Using ep0 maxpacket: 32
[ 1133.399612][T16419] usb 9-1: device descriptor read/all, error -71
[ 1134.129420][    T8] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1135.306810][T17224] loop8: detected capacity change from 0 to 16
[ 1135.318648][T17224] erofs: Unknown parameter '0x0000000000000003'
[ 1137.106346][    T8] usb 4-1: Using ep0 maxpacket: 8
[ 1137.148685][    T8] usb 4-1: device descriptor read/all, error -71
[ 1138.861257][T16419] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1139.283537][T17245] loop4: detected capacity change from 0 to 40427
[ 1139.308832][    T8] usb 4-1: new low-speed USB device number 42 using dummy_hcd
[ 1139.660939][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1139.696996][    T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1139.737702][    T8] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1139.795727][    T8] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1139.836916][    T8] usb 4-1: string descriptor 0 read error: -22
[ 1139.856517][    T8] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1139.886285][    T8] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1139.963407][    T8] usb 4-1: 0:2 : does not exist
[ 1140.047316][    T8] usb-storage 4-1:1.1: USB Mass Storage device detected
[ 1140.357578][T16419] usb 9-1: Using ep0 maxpacket: 32
[ 1140.364997][T16419] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1140.393931][T16419] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1140.416136][T16419] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1140.427079][T16419] usb 9-1: Product: syz
[ 1140.433387][T16419] usb 9-1: Manufacturer: syz
[ 1140.438894][T16419] usb 9-1: SerialNumber: syz
[ 1140.451094][    T8] us122l: couldn't allocate write buffer
[ 1140.457976][    T8] snd-usb-us122l: probe of 4-1:1.1 failed with error -22
[ 1140.472997][T16419] usb 9-1: config 0 descriptor??
[ 1140.492426][    T8] usb 4-1: USB disconnect, device number 42
[ 1140.493630][T17237] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1140.528877][T16419] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1140.535051][T16419] hub: probe of 9-1:0.0 failed with error -5
[ 1140.776043][T16419] usb 9-1: USB disconnect, device number 42
[ 1142.179190][T17265] loop8: detected capacity change from 0 to 16
[ 1142.190958][T17265] erofs: Unknown parameter '0x0000000000000003'
[ 1144.658251][T17287] program syz.7.2728 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1144.797896][T16072] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1145.003400][T16072] usb 9-1: Using ep0 maxpacket: 8
[ 1145.014650][T16072] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1145.029709][T16072] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1145.047942][T16072] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1145.059758][T16072] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1145.075437][T16072] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1145.094469][T16072] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1145.104209][T16072] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.084976][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1146.096243][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1146.131391][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1146.147003][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1146.358988][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1146.370690][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1146.380816][T17303] usbtmc 9-1:16.0: simple control status returned b0
[ 1146.391713][T17303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1146.473424][T17310] loop3: detected capacity change from 0 to 16
[ 1146.485323][T17310] erofs: Unknown parameter '0x0000000000000003'
[ 1146.674299][T17303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1147.207167][ T8456] usb 9-1: USB disconnect, device number 43
[ 1148.550699][T17323] program syz.8.2740 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1148.762199][T17329] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2744'.
[ 1150.347691][T17335] loop3: detected capacity change from 0 to 40427
[ 1150.952494][T16419] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1151.195971][T16419] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[ 1151.267731][T16419] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1151.284807][T16419] usb 5-1: config 0 has no interface number 0
[ 1151.291300][T16419] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1151.314996][T16419] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1151.325382][T16419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1151.333872][T16419] usb 5-1: Product: syz
[ 1151.338442][T16419] usb 5-1: Manufacturer: syz
[ 1151.343077][T16419] usb 5-1: SerialNumber: syz
[ 1151.347773][    T8] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1151.358342][T16419] usb 5-1: config 0 descriptor??
[ 1151.462706][T17349] team0 (unregistering): Port device team_slave_0 removed
[ 1151.483665][T17349] team0 (unregistering): Port device team_slave_1 removed
[ 1151.567592][    T8] usb 9-1: Using ep0 maxpacket: 32
[ 1151.584632][T16419] usb 5-1: USB disconnect, device number 43
[ 1151.585913][    T8] usb 9-1: config 0 interface 0 altsetting 128 has an invalid endpoint with address 0x0, skipping
[ 1151.606075][    T8] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1151.612856][    T8] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1151.629496][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1151.649296][    T8] usb 9-1: config 0 descriptor??
[ 1151.930245][T17353] loop3: detected capacity change from 0 to 16
[ 1151.940048][T17353] erofs: Unknown parameter '0x0000000000000003'
[ 1153.875093][    T8] corsair-psu 0003:1B1C:1C09.000D: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0
[ 1154.417513][    T8] corsair-psu 0003:1B1C:1C09.000D: unable to initialize device (-38)
[ 1154.459382][    T8] corsair-psu: probe of 0003:1B1C:1C09.000D failed with error -38
[ 1154.502239][    T8] usb 9-1: USB disconnect, device number 44
[ 1156.368460][T17378] loop7: detected capacity change from 0 to 40427
[ 1157.837642][T16419] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1158.107757][  T788] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1158.185170][T17397] loop8: detected capacity change from 0 to 16
[ 1158.200208][T17397] erofs: Unknown parameter '0x0000000000000003'
[ 1158.240297][T16419] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[ 1158.551432][T16419] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1158.938554][T16419] usb 5-1: config 0 has no interface number 0
[ 1159.091363][T16419] usb 5-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1159.446167][T16419] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1159.672043][T16419] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1159.849919][T16419] usb 5-1: Product: syz
[ 1159.885383][T16419] usb 5-1: Manufacturer: syz
[ 1159.897988][T16419] usb 5-1: SerialNumber: syz
[ 1159.918839][T16419] usb 5-1: config 0 descriptor??
[ 1160.146598][T16419] usb 5-1: USB disconnect, device number 44
[ 1160.378489][  T788] usb 4-1: Using ep0 maxpacket: 8
[ 1160.395466][  T788] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1160.407104][  T788] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1160.425742][  T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1160.430992][T17409] loop7: detected capacity change from 0 to 512
[ 1160.436327][  T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1160.453086][T17409] EXT4-fs: Ignoring removed nobh option
[ 1160.456119][  T788] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1160.475728][T17409] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1160.478659][  T788] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1160.510363][  T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1160.527254][T17409] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1160.543372][T17409] EXT4-fs (loop7): 1 truncate cleaned up
[ 1160.559419][T17409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1160.763213][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1160.879084][  T788] usb 4-1: usb_control_msg returned -71
[ 1160.915920][  T788] usbtmc 4-1:16.0: can't read capabilities
[ 1160.947364][  T788] usb 4-1: USB disconnect, device number 43
[ 1162.586165][T17425] loop7: detected capacity change from 0 to 40427
[ 1162.688853][ T5856] usb 5-1: new low-speed USB device number 45 using dummy_hcd
[ 1163.097595][ T5856] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1163.117178][T17429] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2775'.
[ 1163.163384][ T5856] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1163.218180][ T5856] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1163.292383][ T5856] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1163.364023][ T5856] usb 5-1: string descriptor 0 read error: -22
[ 1163.397677][ T5856] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1163.464379][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1163.595082][ T5856] usb 5-1: 0:2 : does not exist
[ 1163.702610][ T5856] usb-storage 5-1:1.1: USB Mass Storage device detected
[ 1164.043344][ T5856] us122l: couldn't allocate write buffer
[ 1164.056336][ T5856] snd-usb-us122l: probe of 5-1:1.1 failed with error -22
[ 1164.079983][ T5856] usb 5-1: USB disconnect, device number 45
[ 1164.317672][ T5800] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1164.509458][ T5800] usb 9-1: config 0 has an invalid interface number: 117 but max is 0
[ 1164.517739][ T5800] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1164.527892][ T5800] usb 9-1: config 0 has no interface number 0
[ 1164.534015][ T5800] usb 9-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1164.549011][ T5800] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1164.558207][ T5800] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1164.566305][ T5800] usb 9-1: Product: syz
[ 1164.570553][ T5800] usb 9-1: Manufacturer: syz
[ 1164.575191][ T5800] usb 9-1: SerialNumber: syz
[ 1164.584610][ T5800] usb 9-1: config 0 descriptor??
[ 1164.636072][T17451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2784'.
[ 1164.638122][ T5856] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1164.648822][T17451] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[ 1164.827668][ T5856] usb 4-1: Using ep0 maxpacket: 32
[ 1164.843563][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1164.866623][  T788] usb 9-1: USB disconnect, device number 45
[ 1164.882466][ T5856] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1164.913642][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1164.932178][ T5856] usb 4-1: Product: syz
[ 1164.936592][ T5856] usb 4-1: Manufacturer: syz
[ 1164.952817][ T5856] usb 4-1: SerialNumber: syz
[ 1164.961666][ T5856] usb 4-1: config 0 descriptor??
[ 1164.967354][T17449] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1164.977342][ T5856] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1164.984372][ T5856] hub: probe of 4-1:0.0 failed with error -5
[ 1165.623206][T17458] team0 (unregistering): Port device team_slave_0 removed
[ 1165.831080][T17458] team0 (unregistering): Port device team_slave_1 removed
[ 1167.662532][T17463] loop8: detected capacity change from 0 to 40427
[ 1168.334496][  T788] usb 4-1: USB disconnect, device number 44
[ 1169.120180][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2794'.
[ 1169.158770][T17484] netdevsim netdevsim8 netdevsim0: entered allmulticast mode
[ 1169.168912][T16419] usb 5-1: new low-speed USB device number 46 using dummy_hcd
[ 1169.487379][T17492] loop3: detected capacity change from 0 to 16
[ 1169.500734][T17492] erofs: Unknown parameter '0x0000000000000003'
[ 1169.724653][T16419] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1170.142664][T16419] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1170.385286][T16419] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping
[ 1170.649320][T16419] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1170.885227][T16419] usb 5-1: string descriptor 0 read error: -22
[ 1170.910008][T16419] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1170.968237][T16419] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1171.105610][T16419] usb 5-1: 0:2 : does not exist
[ 1171.220327][T16419] usb-storage 5-1:1.1: USB Mass Storage device detected
[ 1171.567065][T16419] us122l: couldn't allocate write buffer
[ 1171.585704][T16419] snd-usb-us122l: probe of 5-1:1.1 failed with error -22
[ 1171.637852][T16419] usb 5-1: USB disconnect, device number 46
[ 1171.967632][ T5856] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1172.164806][ T5856] usb 4-1: Using ep0 maxpacket: 32
[ 1172.178221][ T5856] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1172.209781][ T5856] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1172.223280][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1172.270891][ T5856] usb 4-1: Product: syz
[ 1172.275349][ T5856] usb 4-1: Manufacturer: syz
[ 1172.284718][ T5856] usb 4-1: SerialNumber: syz
[ 1172.306779][ T5856] usb 4-1: config 0 descriptor??
[ 1172.318149][T17502] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1172.965189][ T5856] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1172.986565][ T5856] hub: probe of 4-1:0.0 failed with error -5
[ 1173.002468][T17520] loop4: detected capacity change from 0 to 2048
[ 1173.036658][T17520] EXT4-fs: Ignoring removed nobh option
[ 1173.084132][T17520] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=c802c028, mo2=0002]
[ 1173.098795][T17520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1173.226763][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1173.567850][ T5856] usb 4-1: USB disconnect, device number 45
[ 1176.647595][T16419] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1176.967900][T16419] usb 4-1: Using ep0 maxpacket: 8
[ 1176.976604][T16419] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1176.987596][T16419] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1176.998191][T16419] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1177.008539][T16419] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1177.019107][T16419] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1177.032924][T16419] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1177.124482][T16419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1177.615606][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.622097][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.248341][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1178.292370][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1178.588732][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1178.643540][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1179.559712][T17607] loop8: detected capacity change from 0 to 512
[ 1179.594559][T17607] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1179.645177][T17607] EXT4-fs (loop8): 1 truncate cleaned up
[ 1179.665330][T17607] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1179.728379][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1179.762131][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1179.796737][T17600] usbtmc 4-1:16.0: simple control status returned b0
[ 1179.854251][T17615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1179.872069][T17615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1179.999910][ T8456] usb 4-1: USB disconnect, device number 46
[ 1180.424238][ T8160] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1180.759680][T17635] loop3: detected capacity change from 0 to 512
[ 1180.787284][T17635] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1180.825976][T17635] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1180.854166][T17635] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.2844: Invalid block bitmap block 0 in block_group 0
[ 1180.885740][T17635] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6651: Corrupt filesystem
[ 1180.896910][T17635] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.2844: attempt to clear invalid blocks 983261 len 1
[ 1180.919951][T17635] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.2844: Invalid inode table block 0 in block_group 0
[ 1180.936131][T17635] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem
[ 1180.945997][T17635] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[ 1180.957363][T17635] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.2844: Invalid inode table block 0 in block_group 0
[ 1181.061192][T17635] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Corrupt filesystem
[ 1181.222199][T17635] EXT4-fs error (device loop3): ext4_truncate:4294: inode #11: comm syz.3.2844: mark_inode_dirty error
[ 1181.608023][T17635] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[ 1181.658552][T17635] EXT4-fs error (device loop3): __ext4_get_inode_loc:4489: comm syz.3.2844: Invalid inode table block 0 in block_group 0
[ 1181.726449][T17635] EXT4-fs (loop3): 1 truncate cleaned up
[ 1181.761338][T17635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1181.946372][T17635] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2844: Invalid inode bitmap blk 0 in block_group 0
[ 1182.097158][T16112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1183.337290][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2854'.
[ 1184.160281][ T5828] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1185.163778][T17675] loop8: detected capacity change from 0 to 40427
[ 1185.204374][T15918] Bluetooth: hci1: command 0x0406 tx timeout
[ 1185.248731][T17676] team0 (unregistering): Port device team_slave_0 removed
[ 1185.337526][ T5828] usb 5-1: Using ep0 maxpacket: 8
[ 1185.357890][ T5828] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1185.371007][ T5828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1185.409280][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1185.490906][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1185.547937][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1185.626360][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1185.670783][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.827587][  T788] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1186.028366][T17676] team0 (unregistering): Port device team_slave_1 removed
[ 1186.067587][  T788] usb 4-1: Using ep0 maxpacket: 32
[ 1186.092558][  T788] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[ 1186.124838][  T788] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[ 1186.147710][  T788] usb 4-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59
[ 1186.175118][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.204363][  T788] usb 4-1: Product: syz
[ 1186.224648][  T788] usb 4-1: Manufacturer: syz
[ 1186.251242][  T788] usb 4-1: SerialNumber: syz
[ 1186.481623][T17678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1186.488971][T17678] IPv6: NLM_F_CREATE should be set when creating new route
[ 1186.538788][T17686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.556786][T17686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1186.585319][T17686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.603411][T17686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1186.824407][T17686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.847982][T17686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1186.877279][T17686] usbtmc 5-1:16.0: simple control status returned b0
[ 1186.888464][T17678] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1186.898815][T17678] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1186.910338][T17686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1186.931990][T17686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1187.095075][T17694] usb 5-1: USB disconnect, device number 47
[ 1187.349729][T17678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1187.399582][T17678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1187.807594][T17700] loop4: detected capacity change from 0 to 512
[ 1187.866538][T17700] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1187.908170][T17700] EXT4-fs (loop4): 1 truncate cleaned up
[ 1187.925479][T17700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1188.054321][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1188.088687][T17678] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1188.098085][T17678] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1188.107060][T17678] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1188.160127][T17678] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1188.440861][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2863'.
[ 1188.469335][  T788] usb 4-1: USB disconnect, device number 47
[ 1188.622166][T17711] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1188.650800][T17711] CIFS mount error: No usable UNC path provided in device string!
[ 1188.650800][T17711] 
[ 1188.661473][T17711] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1190.101020][T17731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2873'.
[ 1190.420900][T17747] loop4: detected capacity change from 0 to 512
[ 1190.476819][T17747] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2879: invalid indirect mapped block 256 (level 2)
[ 1190.529039][T17747] EXT4-fs (loop4): 2 truncates cleaned up
[ 1190.591888][T17747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1190.669103][   T28] audit: type=1800 audit(1772871625.567:265): pid=17747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2879" name="file1" dev="loop4" ino=15 res=0 errno=0
[ 1190.753125][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1190.974263][T17759] loop3: detected capacity change from 0 to 512
[ 1190.992273][T17759] EXT4-fs: Ignoring removed nobh option
[ 1191.040970][T17759] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2883: invalid indirect mapped block 256 (level 2)
[ 1191.089439][T17759] EXT4-fs (loop3): 2 truncates cleaned up
[ 1191.125505][T17759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1191.220402][T17759] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.2883: bg 0: block 5: invalid block bitmap
[ 1191.781562][T16112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1192.175579][T17771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2885'.
[ 1192.264249][T17775] netlink: 'syz.4.2888': attribute type 5 has an invalid length.
[ 1194.494086][T15918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1194.513872][T15918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1194.522936][T15918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1194.527713][T17808] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2897'.
[ 1194.546124][T15918] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1194.555442][T15918] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1194.563096][T15918] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1194.925485][T12737] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.068370][T12737] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.195348][T12737] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.285936][T12737] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.412116][T17805] chnl_net:caif_netlink_parms(): no params data found
[ 1195.763615][T17805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1195.787695][T17805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1195.794921][T17805] bridge_slave_0: entered allmulticast mode
[ 1195.808757][T17805] bridge_slave_0: entered promiscuous mode
[ 1195.897669][T17805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1195.905037][T17805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1195.940342][T17805] bridge_slave_1: entered allmulticast mode
[ 1195.958265][T17805] bridge_slave_1: entered promiscuous mode
[ 1196.463982][T17805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1196.639052][T15918] Bluetooth: hci3: command tx timeout
[ 1197.040847][T17805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1197.176594][T17844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2905'.
[ 1197.395610][T17805] team0: Port device team_slave_0 added
[ 1197.496900][T17805] team0: Port device team_slave_1 added
[ 1197.682241][T17805] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1197.694400][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1197.721653][T17805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1197.775517][T17805] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1197.783118][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1197.816146][T17805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1197.877603][T17694] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1197.892818][T17805] hsr_slave_0: entered promiscuous mode
[ 1197.899301][T17805] hsr_slave_1: entered promiscuous mode
[ 1197.905407][T17805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1197.913303][T17805] Cannot create hsr debugfs directory
[ 1198.078022][T17694] usb 4-1: Using ep0 maxpacket: 32
[ 1198.086552][T17694] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1198.113317][T17694] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1198.128963][T17694] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1198.144888][T17694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.159291][T17694] usb 4-1: config 0 descriptor??
[ 1198.229197][T17869] IPVS: length: 4096 != 24
[ 1198.311988][T12737] hsr_slave_0: left promiscuous mode
[ 1198.359224][T12737] hsr_slave_1: left promiscuous mode
[ 1198.375076][T12737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1198.387224][T12737] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1198.405607][T12737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1198.433119][T12737] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1198.458765][T12737] bridge_slave_1: left allmulticast mode
[ 1198.464468][T12737] bridge_slave_1: left promiscuous mode
[ 1198.486254][T12737] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1198.510806][T12737] bridge_slave_0: left allmulticast mode
[ 1198.516512][T12737] bridge_slave_0: left promiscuous mode
[ 1198.533384][T12737] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1198.611811][T12737] veth1_macvtap: left promiscuous mode
[ 1198.617471][T12737] veth0_macvtap: left promiscuous mode
[ 1198.641845][T12737] veth1_vlan: left promiscuous mode
[ 1198.647244][T12737] veth0_vlan: left promiscuous mode
[ 1198.717976][T15918] Bluetooth: hci3: command tx timeout
[ 1200.152188][T12737] team0 (unregistering): Port device team_slave_1 removed
[ 1200.236963][T12737] team0 (unregistering): Port device team_slave_0 removed
[ 1200.311873][T12737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1200.384662][T12737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1200.629894][T17694] usbhid 4-1:0.0: can't add hid device: -71
[ 1200.635972][T17694] usbhid: probe of 4-1:0.0 failed with error -71
[ 1200.661750][T17694] usb 4-1: USB disconnect, device number 48
[ 1200.797590][T15918] Bluetooth: hci3: command tx timeout
[ 1201.494545][T12737] bond0 (unregistering): Released all slaves
[ 1201.533857][ T5752] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1201.718879][ T5752] usb 5-1: Using ep0 maxpacket: 32
[ 1201.788742][ T5752] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1202.420175][ T5752] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1202.435221][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1202.443591][ T5752] usb 5-1: Product: syz
[ 1202.447823][ T5752] usb 5-1: Manufacturer: syz
[ 1202.452429][ T5752] usb 5-1: SerialNumber: syz
[ 1202.489631][ T5752] usb 5-1: config 0 descriptor??
[ 1202.495412][T17927] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1202.538796][ T5752] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1202.553842][ T5752] hub: probe of 5-1:0.0 failed with error -5
[ 1202.887923][T15918] Bluetooth: hci3: command tx timeout
[ 1203.019733][T17805] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1203.036754][T17805] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1203.072023][T17805] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1203.111859][T17805] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1203.274255][T17805] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1203.321011][T17805] 8021q: adding VLAN 0 to HW filter on device team0
[ 1203.356954][T12737] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1203.364299][T12737] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1203.409126][T10672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1203.416305][T10672] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1203.699210][T17697] usb 5-1: USB disconnect, device number 48
[ 1203.902144][T17805] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1204.323324][T17982] loop4: detected capacity change from 0 to 1024
[ 1204.379910][T17982] EXT4-fs: Ignoring removed nobh option
[ 1204.407520][T17982] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1204.508879][T17982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1204.564439][T17805] veth0_vlan: entered promiscuous mode
[ 1204.581066][T17805] veth1_vlan: entered promiscuous mode
[ 1204.610119][T17805] veth0_macvtap: entered promiscuous mode
[ 1204.621571][T17805] veth1_macvtap: entered promiscuous mode
[ 1204.647060][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1204.673515][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1204.696817][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1204.744704][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1204.780174][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1204.811983][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1204.847034][T17805] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1204.895852][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1204.915824][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1204.933723][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1204.951992][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1204.967157][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1204.998419][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1205.040554][T17805] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1205.074293][T17805] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1205.107470][T17805] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1205.116232][T17805] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1205.162609][T17805] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1205.442023][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1205.466211][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1205.539325][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1205.547254][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1205.671801][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1205.688603][ T5799] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1205.732992][T18021] loop8: detected capacity change from 0 to 1024
[ 1205.766182][T18021] EXT4-fs: Ignoring removed orlov option
[ 1205.800103][T18021] EXT4-fs: Ignoring removed nobh option
[ 1205.839427][T18021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1205.877578][ T5799] usb 4-1: Using ep0 maxpacket: 32
[ 1205.889730][ T5799] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1205.907136][ T5799] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1205.918175][ T5799] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1205.927483][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1205.951217][ T5799] usb 4-1: config 0 descriptor??
[ 1206.055081][T17805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1206.160660][T18029] loop4: detected capacity change from 0 to 512
[ 1206.216217][T18029] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1206.251701][T18029] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1206.284434][T18029] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.2955: Invalid block bitmap block 0 in block_group 0
[ 1206.359303][T18029] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6651: Corrupt filesystem
[ 1206.386563][T18029] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.2955: attempt to clear invalid blocks 983261 len 1
[ 1206.455301][T18029] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.2955: Invalid inode table block 0 in block_group 0
[ 1206.499239][T18029] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem
[ 1206.534486][T18029] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[ 1206.573867][T18029] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.2955: Invalid inode table block 0 in block_group 0
[ 1206.615634][T18029] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5920: Corrupt filesystem
[ 1206.658432][T18029] EXT4-fs error (device loop4): ext4_truncate:4294: inode #11: comm syz.4.2955: mark_inode_dirty error
[ 1206.678949][T18029] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[ 1206.698427][T18029] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.2955: Invalid inode table block 0 in block_group 0
[ 1206.723472][T18029] EXT4-fs (loop4): 1 truncate cleaned up
[ 1206.732594][T18029] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1206.785513][T18029] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2955: Invalid inode bitmap blk 0 in block_group 0
[ 1207.005120][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1209.085697][ T5799] usbhid 4-1:0.0: can't add hid device: -71
[ 1209.096471][ T5799] usbhid: probe of 4-1:0.0 failed with error -71
[ 1209.106218][ T5799] usb 4-1: USB disconnect, device number 49
[ 1210.430406][T18079] loop7: detected capacity change from 0 to 16384
[ 1210.540157][T17694] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1210.578133][T18081] loop7: detected capacity change from 16384 to 0
[ 1210.727707][T17694] usb 5-1: Using ep0 maxpacket: 32
[ 1210.739474][T17694] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1210.776237][T17694] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1210.795794][T17694] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1210.828163][T17694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1210.882928][T17694] usb 5-1: config 0 descriptor??
[ 1211.185261][T18094] loop8: detected capacity change from 0 to 164
[ 1211.242716][T18094] rock: directory entry would overflow storage
[ 1211.253705][T18094] rock: sig=0x5252, size=5, remaining=3
[ 1211.996578][T18107] Unsupported ieee802154 address type: 0
[ 1213.288611][T17694] usbhid 5-1:0.0: can't add hid device: -71
[ 1213.294791][T17694] usbhid: probe of 5-1:0.0 failed with error -71
[ 1213.373728][T18139] loop3: detected capacity change from 0 to 16
[ 1213.385417][T18139] erofs: Unknown parameter '0x0000000000000003'
[ 1213.807803][T17694] usb 5-1: USB disconnect, device number 49
[ 1215.983015][T18167] loop4: detected capacity change from 0 to 512
[ 1215.991622][T18167] EXT4-fs: Ignoring removed nobh option
[ 1216.021091][T18167] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3004: invalid indirect mapped block 256 (level 2)
[ 1216.041446][T18157] syzkaller0: entered promiscuous mode
[ 1216.047180][T18157] syzkaller0: entered allmulticast mode
[ 1216.073335][T18167] EXT4-fs (loop4): 2 truncates cleaned up
[ 1216.096686][T18167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1216.204423][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1216.323228][T18171] loop4: detected capacity change from 0 to 128
[ 1216.387490][ T5755] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1217.787829][T18183] loop8: detected capacity change from 0 to 16
[ 1217.799731][T18183] erofs: Unknown parameter '0x0000000000000003'
[ 1219.228892][T18188] loop7: detected capacity change from 0 to 16384
[ 1219.925027][T18189] loop7: detected capacity change from 16384 to 0
[ 1220.445599][T18198] loop7: detected capacity change from 0 to 164
[ 1220.446414][T18194] loop8: detected capacity change from 0 to 32768
[ 1220.557586][T18194]  loop8: p1 p3 < >
[ 1220.710766][T18200] loop7: detected capacity change from 0 to 512
[ 1220.738436][T18200] EXT4-fs: Ignoring removed nobh option
[ 1220.772465][T18200] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3013: invalid indirect mapped block 256 (level 2)
[ 1220.841857][T18200] EXT4-fs (loop7): 2 truncates cleaned up
[ 1220.873859][T18200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1221.033094][ T5755] udevd[5755]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[ 1221.044952][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 1221.148350][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1222.984040][T18219] loop7: detected capacity change from 0 to 16
[ 1222.995849][T18219] erofs: Unknown parameter '0x0000000000000003'
[ 1224.647226][T18178] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1224.656791][T18178] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1224.666548][T18178] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1224.913290][T18231] loop7: detected capacity change from 0 to 512
[ 1224.962054][T18231] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1225.017840][T18231] EXT4-fs (loop7): 1 truncate cleaned up
[ 1225.024689][T18231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1225.338809][T18243] netlink: 'syz.7.3023': attribute type 21 has an invalid length.
[ 1225.346974][T18243] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3023'.
[ 1225.356395][T18243] netlink: 'syz.7.3023': attribute type 5 has an invalid length.
[ 1225.364960][T18243] netlink: 'syz.7.3023': attribute type 6 has an invalid length.
[ 1225.399525][T18243] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3023'.
[ 1225.564016][T18245] loop4: detected capacity change from 0 to 512
[ 1225.975976][T18244] lo speed is unknown, defaulting to 1000
[ 1225.982440][T18244] lo speed is unknown, defaulting to 1000
[ 1225.991614][T18244] lo speed is unknown, defaulting to 1000
[ 1226.004599][T18244] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1226.024677][T18244] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1226.122144][T18244] lo speed is unknown, defaulting to 1000
[ 1226.131736][T18244] lo speed is unknown, defaulting to 1000
[ 1226.139009][T18244] lo speed is unknown, defaulting to 1000
[ 1226.146089][T18244] lo speed is unknown, defaulting to 1000
[ 1226.153345][T18244] lo speed is unknown, defaulting to 1000
[ 1226.333229][T18249] loop3: detected capacity change from 0 to 1024
[ 1226.378458][T18249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1226.581040][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1226.641675][T16112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1226.799257][T18263] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3033'.
[ 1226.815533][T18259] loop7: detected capacity change from 0 to 1024
[ 1226.855045][T18259] EXT4-fs: Ignoring removed bh option
[ 1226.890010][T18259] EXT4-fs: Ignoring removed nobh option
[ 1226.902429][T18259] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1226.952810][T18259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1227.064370][T18275] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1227.178610][T18259] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4045: comm syz.7.3030: Allocating blocks 497-513 which overlap fs metadata
[ 1227.284813][T18259] EXT4-fs (loop7): pa ffff8880771d3d98: logic 256, phys. 385, len 8
[ 1227.293141][T18259] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5386: group 0, free 0, pa_free 1
[ 1227.636533][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1229.088265][T18311] loop7: detected capacity change from 0 to 16384
[ 1229.186276][T18312] loop3: detected capacity change from 0 to 4096
[ 1229.257183][T18312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1229.329675][T18315] loop7: detected capacity change from 16384 to 0
[ 1229.572779][T16112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1231.106964][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3063'.
[ 1231.337495][T18352] loop7: detected capacity change from 0 to 16384
[ 1231.417641][T18352] loop7: detected capacity change from 16384 to 0
[ 1232.119091][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3074'.
[ 1233.669077][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3083'.
[ 1233.739352][T18401] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1237.110029][T18407] loop8: detected capacity change from 0 to 40427
[ 1239.063075][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.072302][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1243.135150][T18446] team0 (unregistering): Port device team_slave_0 removed
[ 1243.169320][T18446] team0 (unregistering): Port device team_slave_1 removed
[ 1243.410778][T18464] netlink: 196 bytes leftover after parsing attributes in process `syz.7.3104'.
[ 1243.582356][T18470] loop7: detected capacity change from 0 to 512
[ 1243.598980][T18470] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1243.820539][T18470] EXT4-fs (loop7): 1 truncate cleaned up
[ 1243.826882][T18470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1244.045357][T18470] netlink: 'syz.7.3108': attribute type 21 has an invalid length.
[ 1244.055570][T18470] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3108'.
[ 1244.080230][T18470] netlink: 'syz.7.3108': attribute type 5 has an invalid length.
[ 1244.085058][T15918] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 1244.100113][T15918] CPU: 1 PID: 15918 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 1244.107875][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1244.117990][T15918] Workqueue: hci3 hci_rx_work
[ 1244.122846][T15918] Call Trace:
[ 1244.126135][T15918]  <TASK>
[ 1244.129066][T15918]  dump_stack_lvl+0x18c/0x250
[ 1244.133804][T15918]  ? show_regs_print_info+0x20/0x20
[ 1244.139003][T15918]  ? load_image+0x400/0x400
[ 1244.143535][T15918]  sysfs_create_dir_ns+0x26e/0x2a0
[ 1244.148693][T15918]  ? sysfs_warn_dup+0xa0/0xa0
[ 1244.153370][T15918]  ? do_raw_spin_unlock+0x121/0x230
[ 1244.158610][T15918]  kobject_add_internal+0x61c/0xcc0
[ 1244.163849][T15918]  kobject_add+0x164/0x240
[ 1244.168370][T15918]  ? __rwlock_init+0x150/0x150
[ 1244.173228][T15918]  ? kobject_init+0x1e0/0x1e0
[ 1244.178004][T15918]  ? _raw_spin_unlock+0x28/0x40
[ 1244.182966][T15918]  ? get_device_parent+0x366/0x390
[ 1244.188112][T15918]  device_add+0x408/0xc20
[ 1244.192455][T15918]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1244.197656][T15918]  le_conn_complete_evt+0xf5d/0x1540
[ 1244.203068][T15918]  ? hci_event_packet+0x4cb/0x1270
[ 1244.208183][T15918]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[ 1244.214432][T15918]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1244.220164][T15918]  ? skb_pull_data+0xfb/0x200
[ 1244.224934][T15918]  hci_le_conn_complete_evt+0x187/0x440
[ 1244.230498][T15918]  ? hci_remote_host_features_evt+0x150/0x150
[ 1244.236568][T15918]  hci_event_packet+0x7ba/0x1270
[ 1244.241514][T15918]  ? bis_list+0x290/0x290
[ 1244.245848][T15918]  ? lockdep_hardirqs_on+0x98/0x150
[ 1244.251142][T15918]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1244.256355][T15918]  hci_rx_work+0x43a/0xd60
[ 1244.260784][T15918]  ? process_scheduled_works+0x96f/0x15d0
[ 1244.266602][T15918]  process_scheduled_works+0xa5d/0x15d0
[ 1244.272213][T15918]  ? worker_attach_to_pool+0x380/0x380
[ 1244.277690][T15918]  ? assign_work+0x3d2/0x5d0
[ 1244.282299][T15918]  worker_thread+0xa55/0xfc0
[ 1244.286988][T15918]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1244.292919][T15918]  ? _raw_spin_unlock+0x40/0x40
[ 1244.297769][T15918]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1244.303686][T15918]  kthread+0x2fa/0x390
[ 1244.307751][T15918]  ? pr_cont_work+0x560/0x560
[ 1244.312430][T15918]  ? kthread_blkcg+0xd0/0xd0
[ 1244.317017][T15918]  ret_from_fork+0x48/0x80
[ 1244.321465][T15918]  ? kthread_blkcg+0xd0/0xd0
[ 1244.326075][T15918]  ret_from_fork_asm+0x11/0x20
[ 1244.330894][T15918]  </TASK>
[ 1244.348330][T15918] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1244.363919][T15918] Bluetooth: hci3: failed to register connection device
[ 1244.364457][T18470] netlink: 'syz.7.3108': attribute type 6 has an invalid length.
[ 1244.381733][T18470] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3108'.
[ 1244.561442][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1244.677986][T17697] kernel write not supported for file /input/event2 (pid: 17697 comm: kworker/1:13)
[ 1247.052173][T18525] loop7: detected capacity change from 0 to 512
[ 1247.158148][T18525] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1247.179772][T17697] kernel write not supported for file /input/event2 (pid: 17697 comm: kworker/1:13)
[ 1247.243069][T18525] EXT4-fs (loop7): 1 truncate cleaned up
[ 1247.292677][T18525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1247.536186][T18525] netlink: 'syz.7.3125': attribute type 21 has an invalid length.
[ 1248.974097][T18539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3130'.
[ 1248.988431][T18525] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3125'.
[ 1249.012409][T18525] netlink: 'syz.7.3125': attribute type 5 has an invalid length.
[ 1249.033223][T18525] netlink: 'syz.7.3125': attribute type 6 has an invalid length.
[ 1249.064685][T18525] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3125'.
[ 1249.210745][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1251.635052][ T5772] Bluetooth: hci3: command 0x0406 tx timeout
[ 1253.136395][T18576] loop7: detected capacity change from 0 to 512
[ 1253.216738][T18576] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1253.341818][T18576] EXT4-fs (loop7): 1 truncate cleaned up
[ 1253.410507][T18576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1253.590603][T15918] Bluetooth: Wrong link type (-57)
[ 1253.673557][T18576] netlink: 'syz.7.3142': attribute type 21 has an invalid length.
[ 1253.698600][T18576] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3142'.
[ 1253.746076][T18576] netlink: 'syz.7.3142': attribute type 5 has an invalid length.
[ 1253.786641][T18576] netlink: 'syz.7.3142': attribute type 6 has an invalid length.
[ 1253.817834][T18576] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3142'.
[ 1254.182000][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1254.513025][T18603] loop3: detected capacity change from 0 to 16
[ 1254.524956][T18603] erofs: Unknown parameter '0x0000000000000003'
[ 1258.060101][ T5799] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1258.409283][ T5799] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1258.723160][T18635] program syz.3.3156 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1258.756583][ T5799] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1258.786555][ T5799] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1258.795692][ T5799] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1258.806840][ T5799] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1258.820445][ T5799] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1258.860653][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1258.892756][ T5799] usb 5-1: Product: syz
[ 1258.897068][ T5799] usb 5-1: Manufacturer: syz
[ 1258.936034][ T5799] cdc_wdm 5-1:1.0: skipping garbage
[ 1258.953147][ T5799] cdc_wdm 5-1:1.0: skipping garbage
[ 1258.981930][ T5799] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1259.005510][ T5799] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1260.095534][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 4 bytes
[ 1260.178258][T17694] usb 5-1: USB disconnect, device number 50
[ 1260.420311][   T28] audit: type=1326 audit(1772871695.347:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.7.3165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f557ef9c799 code=0x0
[ 1261.060587][T18675] program syz.3.3170 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1261.931609][T18690] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3177'.
[ 1267.862413][T18761] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3201'.
[ 1267.907849][T18762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3202'.
[ 1268.080450][T18766] loop7: detected capacity change from 0 to 512
[ 1268.162872][T18766] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1268.250993][T18766] EXT4-fs (loop7): 1 truncate cleaned up
[ 1268.345711][T18766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1269.091151][T18779] netlink: 'syz.7.3204': attribute type 21 has an invalid length.
[ 1269.119899][T18779] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3204'.
[ 1269.130173][T18779] netlink: 'syz.7.3204': attribute type 5 has an invalid length.
[ 1269.138103][T18779] netlink: 'syz.7.3204': attribute type 6 has an invalid length.
[ 1269.145936][T18779] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3204'.
[ 1269.308082][ T5799] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1269.341390][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1269.487505][ T5799] usb 4-1: device descriptor read/64, error -71
[ 1269.748956][T18798] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3217'.
[ 1269.768294][ T5799] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1269.945694][ T5799] usb 4-1: device descriptor read/64, error -71
[ 1270.088837][ T5799] usb usb4-port1: attempt power cycle
[ 1270.517846][ T5799] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1270.580804][ T5799] usb 4-1: device descriptor read/8, error -71
[ 1270.919225][ T5799] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1271.004388][ T5799] usb 4-1: device descriptor read/8, error -71
[ 1271.195833][ T5799] usb usb4-port1: unable to enumerate USB device
[ 1271.474695][T18816] loop4: detected capacity change from 0 to 512
[ 1271.512032][T18816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1271.593411][T18816] EXT4-fs (loop4): 1 truncate cleaned up
[ 1271.608835][T18816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1271.762551][T18822] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3226'.
[ 1271.850688][T18816] netlink: 'syz.4.3223': attribute type 21 has an invalid length.
[ 1271.859096][T18816] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3223'.
[ 1271.868799][T18816] netlink: 'syz.4.3223': attribute type 5 has an invalid length.
[ 1271.876566][T18816] netlink: 'syz.4.3223': attribute type 6 has an invalid length.
[ 1271.884911][T18816] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3223'.
[ 1271.997278][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1273.175783][T18839] loop8: detected capacity change from 0 to 16
[ 1273.182815][T18839] erofs: Unknown parameter '0x0000000000000003'
[ 1274.416705][T18854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3236'.
[ 1274.848070][T17697] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1275.068130][T17697] usb 4-1: device descriptor read/64, error -71
[ 1275.567536][T17697] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1275.737516][T17697] usb 4-1: device descriptor read/64, error -71
[ 1275.857709][T17697] usb usb4-port1: attempt power cycle
[ 1276.289407][T17697] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1276.331400][T17697] usb 4-1: device descriptor read/8, error -71
[ 1276.627743][T17697] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1276.712713][T17697] usb 4-1: device descriptor read/8, error -71
[ 1276.898743][T17697] usb usb4-port1: unable to enumerate USB device
[ 1277.425607][T18879] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3246'.
[ 1277.507620][    T8] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[ 1277.744682][    T8] usb 5-1: config 0 has no interfaces?
[ 1277.762862][    T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1277.787722][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.813480][    T8] usb 5-1: config 0 descriptor??
[ 1278.636967][T16072] usb 5-1: USB disconnect, device number 51
[ 1278.705997][T18895] 9pnet_fd: Insufficient options for proto=fd
[ 1279.028610][T18899] loop8: detected capacity change from 0 to 16
[ 1282.106946][ T5755] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1283.801887][T17695] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1283.885910][T18927] 9pnet_fd: Insufficient options for proto=fd
[ 1283.987951][T17695] usb 9-1: Using ep0 maxpacket: 32
[ 1284.016323][T17695] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1284.045334][T17695] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1284.183414][T17695] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1284.193115][T17695] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1284.228532][T17695] usb 9-1: config 0 descriptor??
[ 1285.146634][T17695] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0
[ 1285.186939][T17695] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0
[ 1285.210252][T17695] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0
[ 1285.218315][T17695] corsair-psu 0003:1B1C:1C09.000E: unknown main item tag 0x0
[ 1285.238345][T17695] corsair-psu 0003:1B1C:1C09.000E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0
[ 1285.713003][T18938] loop4: detected capacity change from 0 to 40427
[ 1285.738243][    C1] usb 9-1: input irq status -75 received
[ 1286.318659][    C1] usb 9-1: input irq status -75 received
[ 1287.296101][T17695] corsair-psu 0003:1B1C:1C09.000E: unable to initialize device (-71)
[ 1287.311268][T17695] corsair-psu: probe of 0003:1B1C:1C09.000E failed with error -71
[ 1287.322925][T17695] usb 9-1: USB disconnect, device number 46
[ 1287.924231][T18955] 9pnet_fd: Insufficient options for proto=fd
[ 1289.055932][T18965] loop8: detected capacity change from 0 to 512
[ 1289.098817][T18965] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1289.162037][T18965] EXT4-fs (loop8): 1 truncate cleaned up
[ 1289.176608][T18965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1289.337021][T18972] netlink: 'syz.8.3273': attribute type 21 has an invalid length.
[ 1289.345694][T18972] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3273'.
[ 1289.358758][T18972] netlink: 'syz.8.3273': attribute type 5 has an invalid length.
[ 1289.366831][T18972] netlink: 'syz.8.3273': attribute type 6 has an invalid length.
[ 1289.377019][T18972] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3273'.
[ 1289.658044][T16072] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1289.814997][T17805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1289.858404][T16072] usb 5-1: Using ep0 maxpacket: 32
[ 1289.869267][T16072] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1289.901092][T16072] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1289.917717][T16072] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1289.931484][T16072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.943746][T16072] usb 5-1: config 0 descriptor??
[ 1290.169427][T18982] program syz.8.3279 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1290.265200][T18984] loop8: detected capacity change from 0 to 1024
[ 1290.273522][T18984] EXT4-fs: Ignoring removed nobh option
[ 1290.293354][T18984] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1290.375484][T16072] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0
[ 1290.393401][T16072] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0
[ 1290.402583][T16072] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0
[ 1290.417962][T16072] corsair-psu 0003:1B1C:1C09.000F: unknown main item tag 0x0
[ 1290.446405][T16072] corsair-psu 0003:1B1C:1C09.000F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[ 1290.508918][T18984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1290.570592][    C0] usb 5-1: input irq status -75 received
[ 1290.610107][T17805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1290.771334][    C0] usb 5-1: input irq status -75 received
[ 1292.226319][T16072] corsair-psu 0003:1B1C:1C09.000F: unable to initialize device (-71)
[ 1292.300867][T16072] corsair-psu: probe of 0003:1B1C:1C09.000F failed with error -71
[ 1292.365534][T16072] usb 5-1: USB disconnect, device number 52
[ 1292.472628][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3285'.
[ 1295.317750][T16072] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1295.339653][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3297'.
[ 1295.561722][T16072] usb 5-1: Using ep0 maxpacket: 32
[ 1295.586389][T16072] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1295.627898][T16072] usb 5-1: config 0 has no interfaces?
[ 1295.650001][T16072] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1295.678056][T16072] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1295.706867][T16072] usb 5-1: Product: syz
[ 1295.714730][T16072] usb 5-1: Manufacturer: syz
[ 1295.719951][T16072] usb 5-1: SerialNumber: syz
[ 1295.740743][T16072] usb 5-1: config 0 descriptor??
[ 1295.753950][T19050] loop7: detected capacity change from 0 to 512
[ 1295.781511][T19050] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1295.836098][T19050] EXT4-fs (loop7): 1 truncate cleaned up
[ 1295.844246][T19050] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1296.048167][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1297.292830][T17695] usb 5-1: USB disconnect, device number 53
[ 1299.278856][T19088] program syz.7.3311 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1299.288067][T19089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'.
[ 1299.778988][T19099] loop3: detected capacity change from 0 to 1024
[ 1299.808119][T19099] EXT4-fs: Ignoring removed nobh option
[ 1299.813774][T19099] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1299.919907][T19099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1299.958092][T16072] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1300.187721][T16072] usb 9-1: Using ep0 maxpacket: 32
[ 1300.198457][T16072] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1300.214682][T16072] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1300.266590][T16072] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1300.287042][T16072] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1300.306607][T16072] usb 9-1: Product: syz
[ 1300.321275][T16072] usb 9-1: Manufacturer: syz
[ 1300.331560][T16072] usb 9-1: SerialNumber: syz
[ 1300.372164][T16072] usb 9-1: config 0 descriptor??
[ 1300.394349][T16072] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1300.401716][T16072] hub: probe of 9-1:0.0 failed with error -5
[ 1300.485470][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.492122][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.825884][T16112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1302.376193][T19126] loop4: detected capacity change from 0 to 40427
[ 1302.413721][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3323'.
[ 1304.001994][T17694] usb 9-1: USB disconnect, device number 47
[ 1304.392181][T19142] program syz.4.3329 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1306.427602][T16072] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1306.658114][T16072] usb 5-1: Using ep0 maxpacket: 32
[ 1306.697131][T16072] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1307.304933][T16072] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1307.350765][T16072] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1307.377547][T16072] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1307.984955][T16072] usb 5-1: Product: syz
[ 1307.989567][T16072] usb 5-1: Manufacturer: syz
[ 1307.994195][T16072] usb 5-1: SerialNumber: syz
[ 1308.002182][T16072] usb 5-1: config 0 descriptor??
[ 1308.009285][T16072] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1308.015242][T16072] hub: probe of 5-1:0.0 failed with error -5
[ 1309.394663][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3332'.
[ 1309.891927][ T5799] usb 5-1: USB disconnect, device number 54
[ 1310.622128][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3351'.
[ 1314.198863][T19258] program syz.3.3366 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1316.383191][T19290] program syz.3.3375 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1318.066392][T19295] loop4: detected capacity change from 0 to 40427
[ 1318.178810][T19283] Bluetooth: hci3: command 0x0406 tx timeout
[ 1319.188216][T19301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3378'.
[ 1319.238001][T10449] hsr_slave_0: left promiscuous mode
[ 1319.787964][T10449] hsr_slave_1: left promiscuous mode
[ 1319.866116][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1319.897321][T10449] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1319.940911][T10449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1319.964356][T10449] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1320.013686][T10449] bridge_slave_1: left allmulticast mode
[ 1320.037372][T10449] bridge_slave_1: left promiscuous mode
[ 1320.047692][T10449] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1320.080971][T10449] bridge_slave_0: left allmulticast mode
[ 1320.086675][T10449] bridge_slave_0: left promiscuous mode
[ 1320.106440][T10449] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1320.235376][T10449] veth1_macvtap: left promiscuous mode
[ 1320.259892][T10449] veth0_macvtap: left promiscuous mode
[ 1320.284894][T10449] veth1_vlan: left promiscuous mode
[ 1320.295662][T10449] veth0_vlan: left promiscuous mode
[ 1321.589724][T19331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3382'.
[ 1323.309328][T10449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1323.397247][T10449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1323.467604][T19343] loop7: detected capacity change from 0 to 512
[ 1323.507692][T19343] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1323.540880][T19343] EXT4-fs (loop7): 1 truncate cleaned up
[ 1323.559918][T19343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1323.775484][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1323.956067][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3388'.
[ 1324.626545][T10449] bond0 (unregistering): Released all slaves
[ 1325.758150][T17694] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1326.217485][T17694] usb 4-1: Using ep0 maxpacket: 16
[ 1326.741760][T19381] loop4: detected capacity change from 0 to 512
[ 1326.772219][T19381] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1326.811311][T19381] EXT4-fs (loop4): 1 truncate cleaned up
[ 1326.831247][T19381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1327.326130][T17694] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1327.368810][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1327.631137][T17694] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1327.668625][T19387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3398'.
[ 1327.668735][T17694] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[ 1327.688582][T17694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1327.696619][T17694] usb 4-1: Product: syz
[ 1327.712072][T17694] usb 4-1: Manufacturer: syz
[ 1327.716732][T17694] usb 4-1: SerialNumber: syz
[ 1327.988550][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3402'.
[ 1328.102100][T17694] usb 4-1: 0:2 : does not exist
[ 1328.137910][T19401] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in;
[ 1328.137910][T19401]    program syz.7.3403 not setting count and/or reply_len properly
[ 1328.171478][T17694] usb 4-1: USB disconnect, device number 58
[ 1328.565030][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1329.766454][T19428] program syz.4.3411 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1330.136094][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3414'.
[ 1330.547632][T17697] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1330.797956][T17697] usb 9-1: Using ep0 maxpacket: 16
[ 1330.840885][T17697] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1330.908673][T17697] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1330.998536][T17697] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[ 1331.056425][T17697] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.141258][T17697] usb 9-1: Product: syz
[ 1331.176737][T17697] usb 9-1: Manufacturer: syz
[ 1331.216121][T17697] usb 9-1: SerialNumber: syz
[ 1331.469913][T17697] usb 9-1: 0:2 : does not exist
[ 1331.503468][T17697] usb 9-1: USB disconnect, device number 48
[ 1331.546435][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1333.293257][T19458] loop4: detected capacity change from 0 to 40427
[ 1334.412143][T19466] program syz.4.3424 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1334.744136][T19472] bridge0: entered promiscuous mode
[ 1334.768998][T19472] macsec1: entered promiscuous mode
[ 1335.227596][ T5799] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1335.542488][ T5799] usb 5-1: Using ep0 maxpacket: 32
[ 1335.887146][ T5799] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1335.907547][ T5799] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1335.914224][ T5799] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1335.938071][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.949503][ T5799] usb 5-1: config 0 descriptor??
[ 1336.671544][ T5799] corsair-psu 0003:1B1C:1C09.0010: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[ 1337.119620][ T5799] corsair-psu 0003:1B1C:1C09.0010: unable to initialize device (-71)
[ 1337.142540][ T5799] corsair-psu: probe of 0003:1B1C:1C09.0010 failed with error -71
[ 1337.178342][ T5799] usb 5-1: USB disconnect, device number 55
[ 1338.027527][T17693] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1338.706700][T19495] program syz.4.3433 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1338.827500][T17693] usb 4-1: Using ep0 maxpacket: 32
[ 1338.840309][T17693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1338.867505][T17693] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[ 1338.887935][T17693] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1338.897027][T17693] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1338.936117][T17693] usb 4-1: Product: syz
[ 1338.940751][T17693] usb 4-1: Manufacturer: syz
[ 1338.945366][T17693] usb 4-1: SerialNumber: syz
[ 1338.985654][T17693] usb 4-1: config 0 descriptor??
[ 1339.009620][T17693] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1339.030962][T17693] hub: probe of 4-1:0.0 failed with error -5
[ 1339.462894][T19505] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3437'.
[ 1339.472595][T19505] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3437'.
[ 1340.405444][ T5799] usb 4-1: USB disconnect, device number 59
[ 1340.697249][T19517] loop4: detected capacity change from 0 to 512
[ 1340.702528][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3442'.
[ 1340.744342][T19517] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1340.760789][T19517] EXT4-fs (loop4): 1 truncate cleaned up
[ 1340.782673][T19517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1341.462242][T19527] loop3: detected capacity change from 0 to 40427
[ 1344.843908][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1345.334532][T19548] program syz.3.3450 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1348.100965][T19571] loop7: detected capacity change from 0 to 16384
[ 1348.968813][T19572] loop7: detected capacity change from 16384 to 0
[ 1352.239859][T19605] program syz.8.3468 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1354.740485][T19641] loop7: detected capacity change from 0 to 16384
[ 1355.787810][T19642] loop7: detected capacity change from 16384 to 0
[ 1355.994189][T19652] program syz.4.3484 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1361.924115][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.931387][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1364.922421][T19751] loop4: detected capacity change from 0 to 512
[ 1365.003567][T19751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1365.043584][T19751] EXT4-fs (loop4): 1 truncate cleaned up
[ 1365.084032][T19751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1365.411710][T15916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1365.937346][T19761] fuse: Bad value for 'fd'
[ 1369.071804][T19797] program syz.7.3519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1369.087990][ T5799] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1369.386494][ T5799] usb 5-1: device descriptor read/64, error -71
[ 1369.657514][ T5799] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1369.827588][ T5799] usb 5-1: device descriptor read/64, error -71
[ 1370.022130][ T5799] usb usb5-port1: attempt power cycle
[ 1370.447579][ T5799] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1370.490855][ T5799] usb 5-1: device descriptor read/8, error -71
[ 1370.767570][ T5799] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1370.817986][ T5799] usb 5-1: device descriptor read/8, error -71
[ 1370.955296][ T5799] usb usb5-port1: unable to enumerate USB device
[ 1374.535337][T19854] [U] 
[ 1374.538981][T19854] [U] K{�
[ 1374.542754][T19854] [U] �T �1��Š�F���Fˊ�`G�Jǘ�G���������O��/�MC�
[ 1374.553818][T19854] [U] T�ؖ/,�~�Ĝ��J���}8���'O1��"�7-΂JQ�K��W��Q�5C%"�H12��Y������X�`���ȼ`+��(�¿!(���Z'�TXLN�I�G�J����ݭ�P�~�7�!���"ب���(�5�OBܤ�̓J�
[ 1374.570862][T19854] [U] �K\&�}6�6�X�HX��Ե���.`�A�$�40|϶��9��ި����U��4��ĮVBZ��}�W�M�T���Q��ΦR�4��
[ 1374.598854][T19854] [U] ".H6��"�KÇ[����J�4��I�N��[Z(��C|T�]Z{��3�C=��X�Ԟ˅�4�W�)\T�XJ��SH{Q;̹���T��+���G��߮D�.˂�>Y����WUH�FN����HL]S�2���\G%�O�&Z)�К'�PUL�_<�	�ذ�Ү��`ұT��ޜ���;_�"(�U{7J��2X �/�'��C���I����H�C�ճ�V�=��AI�%W�ES� R��J�Μ���G��R��͡HI
���A��6-�D��V�� I"��Nƨ ��ASC~4���8C�*�OO5/ߜJ�~���W�VK+����3��Y)��M���V��YQƽ�DTR�
OTPEM%F��EJ�A5��T_-X~�^AAۂҘ�Q��
[ 1374.643004][T19854] [U] 	+�W�G?]��'A:	��)�
����' B>T���F/��<'�U�'��H�I�.+]E�.�-ɿ߿�%��>2`�^U�8F.�6��3��+�A�«���G3�P��6:�^0��T��V�'E�T����YC�N��Rϩ�N�PJ�;�Z����ۑ8!��\م�A�ʖ2��$е�­WI.��#��/BAI���`��4J��D�Y@�Z��GW�5˿B��ٜ�N�Y"VI2��
[ 1374.668726][T19854] [U] �T�_K5�T�YJ���9��C�$BR�L�NUL��9W���|�G�"ʃ�%�ڶ�C�؝���Q��
 ��3��Q��N^HP*��$	�.�7Yӱ�2�
[ 1374.681880][T19854] [U] �?���H��*����3͝7�ɍ�^#Q�"0~���(�O�XL�B�,'V��=���C�S���G�S��0�ւ��`���ه��=1(�ξ��P#�2DO*Ƀ
[ 1374.697364][T19854] [U] �S��G������GU��D-{���|&�����ѐ2��L�C_��!`��OZ֥�B��%>�RѶ�WχݎSS�H"�YA4�O.�Y��ď�RTԶ�B�[+/<<R�B����|ФE���۠�V96#���ͤʦJ�U�%
S851���ҩS�P��\��?Q�|L��QX�0�K�1ORɴ2��|��D�F���ِ��2ޔ���0��H�}C[/����PX^��O
[ 1374.724826][T19854] [U] �؛���(J�Л��M��XZ�;�����؝_����*3�3��5�\�XM��U��AK!AQ`��;FЕ�I+��VUH���M�J��Ʒ��Z�C��Z���)_ǟ�	ԑ�&�֡��A�XTO���_� ڼ�:���%��P���Cֲ�Y�+_�ܛ��}U�M��ƫC�!KJ�7пG��=B�
[ 1374.752966][T19854] [U] ٽ�F�%�XA��L�2R*G��VW��$��J	�A��F����+ؾ9̈́VI�֗�Kپ�1}_��
��%�R6��(]��/��ؐřYܺ��Hä���R G��RN/ܫ�#!�D����%���D��-{�$�VU��T���$:MTR�E�C1V�D~��];[�����SQ����(��E,X�8�"�
��G�D�ڵ2@T8���҃����T8.RC+�@�ʦ�P�U�
P����C���'ńYL�-SS1E?�7�O���^]����C�½H]�JKR]RKQ܆��ݣ޴OTC��X���4�N�	��&����ڋ��@�:M7�~�+�W*���XM��>>��{Q���
_�՝LX8�U����{�Z��ؐ)��7?�RR;�C�R�Hײڣ����1�>)�Mă‰�T���(��Aϝ�}9�ڥ�J*Mќ�ġ�'L��Q	�DW��ظ=��|Q�	�Æ�W;5��Ž�!�DB�X`ɧ�/��E�`ƦM��X��"�\
[ 1374.803197][T19854] [U] {;�ե�٘_�O2��)�O��.2�W2ʲ��Y���X_  HPϱ�S�D����:]�{�����Ƚ
[ 1374.814231][T19854] [U] I,�>�Ӥ	��5�1��^1�N4�OǶ�'0�?֒I�9W.�_.�W�A���V��`)�Z���C6GIӹ�A��XL[����F�*��O�W)+��'\N�
[K@����2�Ǭ���P"^`���	ؿ
[ 1374.828416][T19854] [U] 22��Ʃ�۩X?0;3U�
[ 1374.838307][T19854] [U] ޜ�
ƍ�SOBX�8�W�4��(�~/���K�U��ԖOQ�E+�G�-Y�GY_
�>V�����3.H�ә]̈́�2��)�D�,	��	�D~�D���+�W;A\�F
P��Ș|$��)�
KؐI���ɿK�YT^R���Ǚ���A=�#�ܜ	�Ϳ�AE��T�1��ݯ4K�.E"R�S|П�S���:��>P��R�"Z�ڭ���#P!�KY"�}��F�N84ܳ��Hޱ�O��S��̫%DLW�MƲ�
[ 1374.865208][T19854] [U] [�['XN�'�����,MR��/����1D=!D�X91B�
WǻR�LF���K̤Z��#�`̑L؛�˜��B~�M���
[ 1374.877760][T19854] [U] �L�>�сD+�D�����"5�ʍ�H3<���IR=F^�F�N��������V���D�OIO�:U�>�Y�
[ 1374.887269][T19854] [U] 'B�6V�20�ķǞ��׌�"T8�{9�FW��]���̩�
[ 1374.895650][T19854] [U] �72މ���U�C6����τI]8C��TۨQSK�Y��I��¹ �|V'�TV/��G�$[� 9KH`�"ܑ��}��[^=��0�]��%�̂T�����F�_V�4C���
[ 1374.908587][T19854] [U] �EC�
[ 1374.913668][T19854] [U] ���|���<��:^�3$7NK~�-�@��?��/MTL��۾�I�WȬ@G~T�{��P�+�$�JP|���I�RIӍPM� ��Y� ڔ8�T���V�����,�L�,�
[ 1375.292473][T19852] [U] �K�����)0���~ܳʪ�IP'�F�ҜZ��R���@B�]�5��{��ʼ�'�8�ƥF��UTQUD
ǩ�K;7ͪ0C[��Y���YC���ذM��L�8�T�͚�5���RX����W� X���OQHVI'8����L�
[ 1375.838754][T19857] loop7: detected capacity change from 0 to 16384
[ 1376.068145][T19858] loop7: detected capacity change from 16384 to 0
[ 1376.209006][T19861] loop7: detected capacity change from 0 to 512
[ 1376.229917][T19861] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1376.313901][T19865] loop2: detected capacity change from 0 to 7
[ 1376.334545][T19861] EXT4-fs (loop7): 1 truncate cleaned up
[ 1376.354841][T19865] Dev loop2: unable to read RDB block 7
[ 1376.363756][T19861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1376.394414][T19865]  loop2: unable to read partition table
[ 1376.428126][T19865] loop2: partition table beyond EOD, truncated
[ 1376.446255][T19865] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)
[ 1376.672589][T16653] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1377.792360][T19881] program syz.4.3543 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1378.827585][ T5799] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[ 1378.954887][T19892] loop8: detected capacity change from 0 to 512
[ 1378.964642][T19892] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1378.982537][T19892] EXT4-fs (loop8): 1 truncate cleaned up
[ 1378.990043][T19892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1379.039283][ T5799] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1379.053888][ T5799] usb 5-1: not running at top speed; connect to a high speed hub
[ 1379.063303][ T5799] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[ 1379.076979][ T5799] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[ 1379.086597][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1379.094821][ T5799] usb 5-1: Product: syz
[ 1379.099317][ T5799] usb 5-1: Manufacturer: syz
[ 1379.104282][ T5799] usb 5-1: SerialNumber: syz
[ 1379.154976][T17805] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1379.373094][ T5799] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[ 1379.392393][ T5799] snd-usb-audio: probe of 5-1:12.0 failed with error -2
[ 1379.402554][ T5799] usb 5-1: USB disconnect, device number 60
[ 1379.421851][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1380.574118][T19909] program syz.7.3552 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1382.151225][T19928] loop3: detected capacity change from 0 to 512
[ 1382.198032][T19928] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1382.307494][T19928] EXT4-fs (loop3): 1 truncate cleaned up
[ 1382.327037][T19928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1383.824692][T16112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1385.889388][T19968] program syz.7.3568 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1386.068003][T17697] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 1386.277530][T17697] usb 9-1: Using ep0 maxpacket: 32
[ 1386.299519][T17697] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1386.332737][T17697] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1386.344212][T17697] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1386.373747][T17697] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1386.406331][T17697] usb 9-1: config 0 descriptor??
[ 1386.882147][T17697] corsair-psu 0003:1B1C:1C09.0011: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.8-1/input0
[ 1387.458739][T17697] corsair-psu 0003:1B1C:1C09.0011: unable to initialize device (-71)
[ 1387.476697][T17697] corsair-psu: probe of 0003:1B1C:1C09.0011 failed with error -71
[ 1387.536223][T17697] usb 9-1: USB disconnect, device number 49
[ 1387.825499][T19983] program syz.7.3572 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1389.060091][T17693] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1389.267505][T17693] usb 5-1: Using ep0 maxpacket: 32
[ 1389.285428][T17693] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1389.304554][T17693] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1389.317873][T17693] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1389.338855][T17693] usb 5-1: Product: syz
[ 1389.351468][T17693] usb 5-1: Manufacturer: syz
[ 1389.360622][T17693] usb 5-1: SerialNumber: syz
[ 1389.383399][T17693] usb 5-1: config 0 descriptor??
[ 1389.395530][T19993] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1389.412323][T17693] hub 5-1:0.0: bad descriptor, ignoring hub
[ 1389.427486][T17693] hub: probe of 5-1:0.0 failed with error -5
[ 1391.238275][  T788] usb 5-1: USB disconnect, device number 61
[ 1397.877812][T17693] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1398.827609][T17693] usb 5-1: Using ep0 maxpacket: 32
[ 1398.942536][T17693] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1398.954021][T17693] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1398.973875][T17693] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1399.060202][T17693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.073791][T17693] usb 5-1: config 0 descriptor??
[ 1399.525309][T20083] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1399.620161][T20083] batadv_slave_0: entered promiscuous mode
[ 1400.095450][T17693] corsair-psu 0003:1B1C:1C09.0012: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[ 1400.687062][T17693] corsair-psu 0003:1B1C:1C09.0012: unable to initialize device (-71)
[ 1401.013213][T17693] corsair-psu: probe of 0003:1B1C:1C09.0012 failed with error -71
[ 1401.066160][T17693] usb 5-1: USB disconnect, device number 62
[ 1401.309282][T20106] program syz.3.3612 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1405.078284][  T788] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[ 1405.289910][  T788] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1405.298822][  T788] usb 4-1: not running at top speed; connect to a high speed hub
[ 1405.312588][  T788] usb 4-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config
[ 1405.325901][  T788] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[ 1405.335908][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1405.344292][  T788] usb 4-1: Product: syz
[ 1405.349352][  T788] usb 4-1: Manufacturer: syz
[ 1405.353981][  T788] usb 4-1: SerialNumber: syz
[ 1405.427674][T16072] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1405.583083][  T788] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[ 1405.628921][T16072] usb 5-1: Using ep0 maxpacket: 32
[ 1405.647124][T16072] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1405.661132][  T788] snd-usb-audio: probe of 4-1:12.0 failed with error -2
[ 1405.672577][T16072] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1405.681923][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1405.682006][  T788] usb 4-1: USB disconnect, device number 60
[ 1405.704989][T16072] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1405.726079][T16072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1405.750539][T16072] usb 5-1: config 0 descriptor??
[ 1406.269450][T16072] corsair-psu 0003:1B1C:1C09.0013: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[ 1406.779684][T16072] corsair-psu 0003:1B1C:1C09.0013: unable to initialize device (-71)
[ 1406.952178][T16072] corsair-psu: probe of 0003:1B1C:1C09.0013 failed with error -71
[ 1407.033070][T16072] usb 5-1: USB disconnect, device number 63
[ 1407.116840][T20155] fido_id[20155]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1408.691002][T20160] netlink: 4588 bytes leftover after parsing attributes in process `syz.3.3628'.
[ 1410.573759][T20192] loop2: detected capacity change from 0 to 7
[ 1410.837622][T20192]  loop2: [POWERTEC] p1 p2 p3
[ 1410.848429][T20192] loop2: p1 start 779053419 is beyond EOD, truncated
[ 1410.872847][T20192] loop2: p2 size 393216 extends beyond EOD, truncated
[ 1410.899473][T20192] loop2: p3 start 1680801792 is beyond EOD, truncated
[ 1411.100258][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[ 1411.378589][T20202] program syz.8.3641 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1418.102944][T20276] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3666'.
[ 1418.135603][T20276] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1418.370993][ T5755] udevd[5755]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1418.409848][ T5774] udevd[5774]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1423.815611][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.823109][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[ 1427.482162][ T5752] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[ 1427.695307][ T5752] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1427.715697][ T5752] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1427.739312][ T5752] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1427.749320][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1427.767689][ T5752] usb 4-1: Product: syz
[ 1427.783112][ T5752] usb 4-1: Manufacturer: syz
[ 1427.793274][ T5752] usb 4-1: SerialNumber: syz
[ 1427.820052][ T5752] usb 4-1: config 0 descriptor??
[ 1427.854868][ T5752] usb 4-1: selecting invalid altsetting 0
[ 1428.084167][ T5752] usb 4-1: USB disconnect, device number 61
[ 1428.657926][  T788] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1428.857507][  T788] usb 9-1: Using ep0 maxpacket: 8
[ 1428.872444][  T788] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1428.897543][  T788] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1428.927266][  T788] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1428.955633][  T788] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1429.007819][  T788] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1429.070775][  T788] usbtmc 9-1:16.0: bulk endpoints not found
[ 1429.567379][T20392] input: syz0 as /devices/virtual/input/input23
[ 1430.233740][T20394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1430.248603][T20394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1431.455501][T17693] usb 9-1: USB disconnect, device number 50
[ 1433.064019][T20433] loop2: detected capacity change from 0 to 7
[ 1433.082850][ T5774] Dev loop2: unable to read RDB block 7
[ 1433.098165][ T5774]  loop2: unable to read partition table
[ 1433.110793][ T5774] loop2: partition table beyond EOD, truncated
[ 1433.125625][T20433] Dev loop2: unable to read RDB block 7
[ 1433.147700][T20433]  loop2: unable to read partition table
[ 1433.159028][T20433] loop2: partition table beyond EOD, truncated
[ 1433.181757][T20433] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1433.369582][  T788] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1433.558205][  T788] usb 5-1: Using ep0 maxpacket: 8
[ 1433.574180][  T788] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1433.587078][  T788] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1433.607670][ T5752] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1433.625053][  T788] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1433.635675][  T788] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1433.638432][T20444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3722'.
[ 1433.657005][  T788] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1433.674620][  T788] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1433.684622][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1433.697878][  T788] usbtmc 5-1:16.0: bulk endpoints not found
[ 1433.813651][  T788] hid-generic 8001:0009:000F.0014: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[ 1433.834223][ T5752] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1433.857656][ T5752] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1433.876294][ T5752] usb 9-1: Product: syz
[ 1433.884395][ T5752] usb 9-1: Manufacturer: syz
[ 1433.907010][ T5752] usb 9-1: SerialNumber: syz
[ 1433.927041][ T5752] usb 9-1: config 0 descriptor??
[ 1433.947626][T20447] fido_id[20447]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1434.268570][T20455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1434.306274][T20457] binder: 20456:20457 ioctl 4018620d 0 returned -22
[ 1434.309120][T20455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1434.361516][ T5752] usb 9-1: Firmware version (0.0) predates our first public release.
[ 1434.390021][ T5752] usb 9-1: Please update to version 0.2 or newer
[ 1434.427005][T20459] program syz.7.3728 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1434.633604][ T5752] usb 9-1: USB disconnect, device number 51
[ 1436.162266][   T43] ------------[ cut here ]------------
[ 1436.168517][   T43] WARNING: CPU: 0 PID: 43 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 1436.179470][   T43] Modules linked in:
[ 1436.183394][   T43] CPU: 0 PID: 43 Comm: kworker/u4:3 Not tainted syzkaller #0
[ 1436.190841][   T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1436.200995][   T43] Workqueue: phy25 ieee80211_csa_finalize_work
[ 1436.207260][   T43] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 1436.214670][   T43] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c
[ 1436.234699][   T43] RSP: 0018:ffffc90000b3f9c0 EFLAGS: 00010293
[ 1436.241103][   T43] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff888018af3c00
[ 1436.243680][    C1] ------------[ cut here ]------------
[ 1436.250267][   T43] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1436.255311][    C1] WARNING: CPU: 1 PID: 20474 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600
[ 1436.263440][   T43] RBP: dffffc0000000000 R08: ffff88802f1095af R09: 1ffff11005e212b5
[ 1436.273517][    C1] Modules linked in:
[ 1436.281700][   T43] R10: dffffc0000000000 R11: ffffed1005e212b6 R12: 0000000000000001
[ 1436.285576][    C1] CPU: 1 PID: 20474 Comm: syz.8.3731 Not tainted syzkaller #0
[ 1436.293619][   T43] R13: ffff88802f10a5d9 R14: ffff888079bdac70 R15: ffff888079bdace8
[ 1436.293639][   T43] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1436.293657][   T43] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1436.301216][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1436.309225][   T43] CR2: 0000200000002000 CR3: 000000005aa15000 CR4: 00000000003506f0
[ 1436.309247][   T43] Call Trace:
[ 1436.309257][   T43]  <TASK>
[ 1436.309282][   T43]  ieee80211_link_use_reserved_context+0x383/0x5c0
[ 1436.318346][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[ 1436.324823][   T43]  ieee80211_csa_finalize+0x5a6/0xf20
[ 1436.324852][   T43]  ? mutex_lock_nested+0x20/0x20
[ 1436.324881][   T43]  ? lockdep_hardirqs_on+0x98/0x150
[ 1436.324911][   T43]  ? ieee80211_csa_finalize_work+0x140/0x140
[ 1436.324934][   T43]  ? read_lock_is_recursive+0x20/0x20
[ 1436.335107][    C1] Code: 24 4c 89 e7 e8 2e a7 c1 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 09 ee 83 f7 0f 0b e9 f6 f7 ff ff e8 fd ed 83 f7 <0f> 0b e9 48 fb ff ff e8 f1 ed 83 f7 48 c7 c7 00 61 64 8e 4c 89 e6
[ 1436.343051][   T43]  ieee80211_csa_finalize_work+0xf6/0x140
[ 1436.343082][   T43]  ? process_scheduled_works+0x96f/0x15d0
[ 1436.343114][   T43]  process_scheduled_works+0xa5d/0x15d0
[ 1436.346432][    C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246
[ 1436.346454][    C1] RAX: ffffffff8a032e63 RBX: ffffffff8a031c66 RCX: ffff88802ba4bc00
[ 1436.346471][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 1436.346482][    C1] RBP: 0000000000000000 R08: ffff88802ba4bc00 R09: 0000000000000003
[ 1436.346494][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880632a23c0
[ 1436.346508][    C1] R13: dffffc0000000000 R14: ffff8880632a28b0 R15: ffff888026406824
[ 1436.346525][    C1] FS:  00007f8def3f36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1436.346545][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1436.346558][    C1] CR2: 0000200000004000 CR3: 0000000030301000 CR4: 00000000003506e0
[ 1436.346576][    C1] Call Trace:
[ 1436.346584][    C1]  <IRQ>
[ 1436.346596][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[ 1436.346631][    C1]  ieee80211_beacon_get_tim+0xbf/0x580
[ 1436.349665][   T43]  ? worker_attach_to_pool+0x380/0x380
[ 1436.356189][    C1]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[ 1436.362857][   T43]  ? assign_work+0x3d2/0x5d0
[ 1436.362901][   T43]  worker_thread+0xa55/0xfc0
[ 1436.368348][    C1]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[ 1436.373265][   T43]  kthread+0x2fa/0x390
[ 1436.373299][   T43]  ? pr_cont_work+0x560/0x560
[ 1436.373323][   T43]  ? kthread_blkcg+0xd0/0xd0
[ 1436.373342][   T43]  ret_from_fork+0x48/0x80
[ 1436.378641][    C1]  __iterate_interfaces+0x243/0x500
[ 1436.384557][   T43]  ? kthread_blkcg+0xd0/0xd0
[ 1436.384584][   T43]  ret_from_fork_asm+0x11/0x20
[ 1436.384630][   T43]  </TASK>
[ 1436.384641][   T43] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1436.384651][   T43] CPU: 0 PID: 43 Comm: kworker/u4:3 Not tainted syzkaller #0
[ 1436.384666][   T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1436.384677][   T43] Workqueue: phy25 ieee80211_csa_finalize_work
[ 1436.384700][   T43] Call Trace:
[ 1436.384708][   T43]  <TASK>
[ 1436.384715][   T43]  dump_stack_lvl+0x18c/0x250
[ 1436.384742][   T43]  ? show_regs_print_info+0x20/0x20
[ 1436.384764][   T43]  ? load_image+0x400/0x400
[ 1436.384796][   T43]  panic+0x2dc/0x730
[ 1436.384819][   T43]  ? bpf_jit_dump+0xd0/0xd0
[ 1436.384848][   T43]  ? ret_from_fork_asm+0x11/0x20
[ 1436.384872][   T43]  __warn+0x2e0/0x470
[ 1436.384889][   T43]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 1436.384910][   T43]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 1436.384929][   T43]  report_bug+0x2be/0x4f0
[ 1436.384945][   T43]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 1436.384964][   T43]  ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 1436.384982][   T43]  ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0
[ 1436.385001][   T43]  handle_bug+0xcf/0x120
[ 1436.385024][   T43]  exc_invalid_op+0x1a/0x50
[ 1436.385046][   T43]  asm_exc_invalid_op+0x1a/0x20
[ 1436.385183][   T43] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0
[ 1436.385203][   T43] Code: 48 89 df e8 fa 70 d7 f7 e9 dc fc ff ff e8 20 42 7f f7 eb 24 e8 19 42 7f f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 08 42 7f f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 fa 41 7f f7 48 8b 7c 24 08 4c 8b 7c
[ 1436.385217][   T43] RSP: 0018:ffffc90000b3f9c0 EFLAGS: 00010293
[ 1436.385231][   T43] RAX: ffffffff8a07d65e RBX: 0000000000000001 RCX: ffff888018af3c00
[ 1436.385244][   T43] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1436.385254][   T43] RBP: dffffc0000000000 R08: ffff88802f1095af R09: 1ffff11005e212b5
[ 1436.385266][   T43] R10: dffffc0000000000 R11: ffffed1005e212b6 R12: 0000000000000001
[ 1436.385277][   T43] R13: ffff88802f10a5d9 R14: ffff888079bdac70 R15: ffff888079bdace8
[ 1436.385296][   T43]  ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0
[ 1436.385336][   T43]  ieee80211_link_use_reserved_context+0x383/0x5c0
[ 1436.385360][   T43]  ieee80211_csa_finalize+0x5a6/0xf20
[ 1436.385379][   T43]  ? mutex_lock_nested+0x20/0x20
[ 1436.385403][   T43]  ? lockdep_hardirqs_on+0x98/0x150
[ 1436.385421][   T43]  ? ieee80211_csa_finalize_work+0x140/0x140
[ 1436.385441][   T43]  ? read_lock_is_recursive+0x20/0x20
[ 1436.385468][   T43]  ieee80211_csa_finalize_work+0xf6/0x140
[ 1436.385489][   T43]  ? process_scheduled_works+0x96f/0x15d0
[ 1436.385510][   T43]  process_scheduled_works+0xa5d/0x15d0
[ 1436.385557][   T43]  ? worker_attach_to_pool+0x380/0x380
[ 1436.385583][   T43]  ? assign_work+0x3d2/0x5d0
[ 1436.385608][   T43]  worker_thread+0xa55/0xfc0
[ 1436.385653][   T43]  kthread+0x2fa/0x390
[ 1436.385667][   T43]  ? pr_cont_work+0x560/0x560
[ 1436.385687][   T43]  ? kthread_blkcg+0xd0/0xd0
[ 1436.385703][   T43]  ret_from_fork+0x48/0x80
[ 1436.385720][   T43]  ? kthread_blkcg+0xd0/0xd0
[ 1436.385736][   T43]  ret_from_fork_asm+0x11/0x20
[ 1436.385770][   T43]  </TASK>
[ 1436.390350][   T43] Kernel Offset: disabled