last executing test programs:

21.816164346s ago: executing program 3 (id=1838):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x200108cc, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRES16, @ANYRES16, @ANYRES16], 0x81, 0x14f6, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+/+879f7fX3f/+3/ua5v1u+69vXsNfez1rPuWXPNc9/Pdc380HNUvRb1azcjIvEvgb8+pAghYoQQw4QQNwghAiFEpfhK8VeOF1CQ8q+9CPtzPZp+rTtg1xLPP2/j+edtPP+8jeeft/H88zaef97G88/beP6M5WXb5xS7kVfeXfz5f17G7///i+SWn/zNxvI39/pvpPD88zaef97G88/beP55G88/b+P5/+9X6z85xvPP23j+jOVl1/rzZ17Xdl3rnz/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nDOX+VFkJceTzrvb/WfTHGGGOMMcYYY+zP4/Nf6w4YY4wxxhhjjDH2/x8IKZTQIhD5RH4RIwqIWHGdiBPXi4LiBhERN4p4cZMoJG4WhUURUVQUEwmiuCghjEBhBYlQlBSlRFTcIkqLW0WiKCPKinLCifIiSdwmKojbRUVxh6gk7hSVxV2iiqgqqonq4m5RQ9wjaopaora4V9QRdUU9UV/cJxqI+0VD8YBoJB4UjcVDool4WDQVj4hm4lHRXDwmWojHRUvxhGglWos2oq1o9/+U/4roK14V/UR/kSIGiIHiNTFIDBZDxFAxTLwuhos3xAjxpkgVI8Uo8ZYYLd4WY8Q7YqwYJ8aLd8UEMVFMEpPFFDFVpIn3xDTxvpguPhAzxEwxS8wW6WKOmCs+FPPEfLFAfCQWio/FIrFYLBFLRYb4RGSKZSJLfCqWi89EtlghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrv4XOwQO8UusVvsEXvFPvGF2C++FAfEVyJHfP3fzD/77/J7gQABEiRo0JAP8kEMxEAsxEIcxEFBKAgRiEA8xEMhKASFoTAUhaKQAAlQAkoAAgIBQUkoCVGIQmkoDYmQCGWhLDhwkARJUAFuh4pQESpBJagMlaEKVIWqUB2qQw2oATWhJtSG2lAH6kA9qAf3wX1wPzSEhtAIGkFjaAxNoAk0habQDJpBc2gOLaAFtISW0ApaQRtoA+2gHbSH9tABOkAn6ASdoTN0gS6QDMnQFbpCN+gG3aE79IAe0BN6Qi/oDb3hFXgFXoVXoT/UkQNgIAyEQTAIhsBQGAqvw3B4A96ANyEVRsIoeAvegrdhDJyBsTAOxsN4qCEnwiSYDCSnQhqkwTSYBtNhOsyAmTATZkM6zIG5MBfmwXyYDx/BQvgYPobFsBiWQgZkQCYsgyzIguVwFrJhBayEVbAa1sBqWAfrYR1shE2wEbbAFtgG2+Bz+Bx2wk7YDbthL+yFL+AL+BK+hFTIgRw4CAfhEByCw3AYciEXjsAROApH4Rgcg+NwHE7ASTgFJ+E0nIYzcBbOwTm4ABfgIryU8F3zvWU2pAp5hZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2QFWUFWlBVlJXmnrCzvklVkVdnRVZfVZQ3ZydWUtWRtWVvWkXVlPVlfxgkhGsiGsqFsJBvJxrKxbCIflk3lABgCj8ork2khR0JLOQpaydayjWwr34YnZXs5BjrIjrKTfFqOg7HQRbZ3yfI52VVOgm7yBTkZXpQ95FToKV+WvWRv2Ue+IvvKDq6f7C9nwAA5UM6GQXKwHCKHynlQV16ZWD35pkyVI+Uo+ZZcCm/LMfIdOVaOk+Plu3KCnCgnyclyipwq0+R7cpp8X06XH8gZcqacJWfLdDlHzpUfynlyvlwgP5IL5cdykVwsl8ilMkN+IjPlMpklP5XL5WcyW66QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2uV1+LnfInXKX3C33yL1yn/xC7pdfygPyK5kjv5YH5V/kIfmNPCy/lbnyO3lEfi+Pyh/kMfmjPC5/kifkSXlK/ixPy1/kGXlWnpPn5QX5q7woL8nL0kuhQEmllFaByqfyqxhVQMWq61Scul4VVDeoiLpRxaubVCF1syqsiqiiqphKUMVVCWUUKqtIhaqkKqWi6hZVWt2qElUZVVaVU06VV0nqNlVB3a4qqjtUJXWnqqzuUlVUVVVNVVd3qxrqHlVT1VK11b2qjqqr6qn66j7VQN2vGqoHVCP1oGqsHlJN1MOqqXpENVOPqubqMdVCPa5aqidUK9VatVFtVTv1pGqvnlIdVEfVST2tOqtnVBf1rEpWz6mu6nnVTb2guqsXVQ/1kuqpXla9VG/VR11Sl5VX/VR/laIGqIHqNTVIDVZD1FA1TL2uhqs31Aj1pkpVI9Uo9ZYard5WY9Q7aqwap8ard9UENVFNUpPVFDVVpan31DT1vpquPlAz1Ew1S81W6WqOGvK3Sgv+C/nv/5P8Eb+9+ja1XX2udqidapfarfaovWqf2qf2q/3qgDqgclSOOqgOqkPqkDqsDqtclauOqCPqqDqqjqlj6rg6rk6ok+q8+lmdVr+oM+qsOqvOqwvqgrr4t++B0KClVlrrQOfT+XWMLqBj9XU6Tl+vC+obdETfqOP1TbqQvlkX1kV0UV1MJ+jiuoQ2GrXVpENdUpfSUX2LLq1v1Ym6jC6ry2mny+skfdu/nP9H/bXT7XR73V530B10J91Jd9addRfdRSfrZN1Vd9XddDfdXXfXPXQP3VP31L10L91H99F9dV/dT/fTKTpFD9Sv6UF6sB6ih+ph+nU9XA/XI/QInapT9Sg9So/Wo/UYPUaP1WP1eD1eT9AT9CQ9SU/RU3SaTtPT9DQ9XU/XM/QMPUvP0uk6Xc/Vc/U8PU8v0Av0Qr1QL9KL9BK9RGfoDJ2pM3WWztLL9XKdrVfoFXqVXqXX6DV6nV6nN+gNepPepLfoLTpbb9fb9Q69Q+/Su/QevUfv0/v0fr1fH9AHdI7O0Qf1QX1IH9KH9WGdq3P1EX1EH9VH9TF9TB/Xx/UJfUKf0qf0aX1an9Fn9Dl9Tl/QF/RFfVFf1pevXPYFMpCBDnSQL8gXxAQxQWwQG8QFcUHBoGAQCSJBfBAfFApuDgoHRYKiQbEgISgelAhMgIENKAiDkkGpIBrcEpQObg0SgzJB2aBc4ILyQVJwW1AhuD2oGNwRVAruDCoHdwVVgqpBtaB6cHdQI7gnqBnUCmoH9wZ1grpBvaB+cF/QILg/aBg8EDQKHgwaBw8FTYKHg6bBI0Gz4NGgefBY0CJ4PGgZPBG0CloHbYK2Qbs/tb73Z4o85fqZ/ibFxJiB5jUzyAw2Q8xQM8y8boabN8wI86ZJNSPNKPOWGW3eNmPMO2asGWfGm3fNBDPRTDKTzRQz1aSZ98w0876Zbj4wM8xMM8vMNulmjplrPjTzzHyzwHxkFpqPzSKz2CwxS02G+cRkmmUmy3xqlpvPTLZZYVaaVWa1WWPWmnVmvdlgNppNZrPZYraabWa7+dzsMDvNLrPb7DF7zT7zhdlvvjQHzFcmx3xtDpq/mEPmG3PYfGtyzXfmiPneHDU/mGPmR3Pc/GROmJPmlPnZnDa/mDPmrDlnzpsL5ldz0Vwyl42/cnF/5e0dNWrMh/kwBmMwFmMxDuOwIBbECEYwHuOxEBbCwlgYi2JRTMAELIEl8ApCwpJYEqMYxdJYGhMxEctiWXToMAmTsAJWwIpYESthJayMlbEKVsFqWA3vxrvxHrwHa2EtvBfvxbpYF+tjfWyADbAhNsRG2AgbY2Nsgk2wKTbFZtgMm2NzbIEtsCW2xFbYCttgG2yH7bA9tscO2AE7YSfsjJ2xC3bBZEzGrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A9TMAUH4kAchINwCA7BYTgMh+NwHIEjMBVTcRSOwtE4GsfgGByL43A8vosTcCJOwsk4BadiGqbhNJyG03E6zsAZOAtnYTqm41yci/NwHi7ABbgQF+IiIXAJLsEMzMBMzMQszMLluByzMRtX4kpcjatxLa7F9bgeN+JG3IybcStuxe24HXfgDtyFu3AP7sF9uA/34348gAcwB3PwIB7EQ3gID+NhzMVcPIJH8CgexWN4DI/jcTyBJ/AUnsLTeBrP4Bk8h+fwAv6KF/ESXkaPMVaKWHudjbPX24L2BhtjC9i/j4vaYjbBFrclrLGFbZF/iNFam2jL2LK2nHW2vE2yt/0urmKr2mq2ur3b1rD32Jq/ixvY+21D+4BtZB+09e19/xA3tg/ZJvZx29Q+YZvZ1ra5bWtb2MdtS/uEbWVb2za2re1sn7Fd7LM22T5nu9rnfxdn2mV2vd1gN9pNdr/90p6z5+1R+4O9YH+1/Wx/O8y+bofbN+wI+6ZNtSN/F4+379oJdqKdZCfbKXbq7+JZdrZNt3PsXPuhnWfn/y7OsJ/YhTbLLrKL7RK79Lf4Sk9Z9lO73H5ms+0Ku9KusqvtGrvWrvu3XlfZLXar3Wb32S/sDrvT7rK77R6797f4ynkcsF/ZHPu1PWK/t4fsN/awPWZz7Xe/xVfO75j90R63P9kT9qQ9ZX+2p+0v9ow9+9v5Xzn3n+0le9l6KwhIkiJNAeWj/BRDBSiWrqM4up4K0g0UoRspnm6iQnQzFaYiVJSKUQIVpxJkCMkSUUglqRRF6RYqTbdSIpWhslSOHJWnJLqNKtDtVJHuoEp0J1Wmu6gKVaVqVJ3uphp0D9WkWlSb7qU6VJfqUX26jxrQ/dSQHqBG9CA1poeoCT1MTekRakaPUnN6jFrQ49SSnqBW1JraUFtqR09Se3qKOlBH6kRPU2d6hrrQs5RMz1FXep660QvUnV6kHvQS9aSXqRf1pj70CvWlV6kf9acUGkAD6TUaRINpCA2lYfQ6Dac3aAS9Sak0kkbRWzSa3qYx9A6NpXE0nt6lCTSRJtFkmkJTKY3eo2n0Pk2nD2gGzaRZNJvSaQ7NpQ9pHs2nBfQRLaSPaREtpiW0lDLoE8qkZZRFn9Jy+oyyaQWtpFW0mtbQWlpH62kDbaRNtJm20FbaRtvpc9pBO2kX7aY9tJf20Re0n76kA/QV5dDXdJD+QofoGzpM31IufUdH6Hs6Sj/QMfqRjtNPdIJO0in6mU7TL3SGztI5Ok8X6Fe6SJfoMnkSIYQyVKEOgzBfmD+MCQuEseF1YVx4fVgwvCGMhDeG8eFNYaHw5rBwWCQsGhYLE8LiYYnQhBjakMIwLBmWCqPhLWHp8NYwMSwTlg3LhS4sHyaFt4UVwtvDiuEdYaXwzrByeFdYJawaPv5g9fDusEZ4T1gzrBXWDu8N64R1w3ph/fC+sEF4f9gwfCBsFD4YVgwfCpuED4dNw0fCZuGjYfPwsbBF+HjYMnwibBW2DtuEbcN24ZNh+/CpsEPYMewUPh12Dp8Ju4TPhsnhc2HX8Pk/PJ4SDggHhq+Fr4XeP6CWRJdGM6KfRDOjy6JZ0U+jy6OfRbOjK6Iro6uiq6Nromuj66LroxuiG6ObopujW6Jbo9ui3tfPLxw46ZTTLnD5XH4X4wq4WHedi3PXu4LuBhdxN7p4d5Mr5G52hV0RV9QVcwmuuCvhjENnHbnQlXSlXNTd4kq7W12iK+PKunLOufIuybV17Vw719495Tq4jq6Te9o97Z5xz7hn3bPuOdfVPe+6uRdcd/ei6+Feci+5l10v19v1ca+4vu5V18/1dykuxQ10A90gN8gNcUPcMDfMDXfD3Qg3wqW6VDfKjXKj3Wg3xo1xY91YN96NdxPcBDfJTXJT3BSX5tLcNDfNTXfT3Qw3w81ys1y6S3dz3Vw3z81zC9wCtzBxoVvkFrklbonLcBku02W6LJfllrvlLttlu5VupVvtVru1bq1b79a7jW6j2+w2u61uq9vutrsdbofb5Xa5PW6P2+f2uf1uvzvgDrgcl+MOuoPukDvkDrtvXa77zh1x37uj7gd3zP3ojruf3Al30p1yP7vT7hd3xp1159x5d8H96i66S+6y8y4t8l5kWuT9yPTIB5EZkZmRWZHZkfTInMjcyIeReZH5kQWRjyILIx9HFkUWR5ZElkYyIp9EMiPLIlmRTyPLI59FsiMrIisjqyKrI2si3hffEfqSvpSP+lt8aX+rT/RlfFlfzjtf3if523wFf7uv6O/wlfydvrK/y1fxVX01/4Rv5Vv7Nr6tb+ef9O39U76D7+g7+ad9Z/+M7+Kf9cn+Od/VP++7+Rd8d/+i7+Ff8j39y76X7+37+Fd8X/+q7+f7+xQ/wA/0r/lBfrAf4of6Yf51P9y/4Uf4N32qH+lH+bf8aP+2H+Pf8WP9OD/ev+sn+Il+kp/sp/ipPs2/56f59/10/4Gf4Wf6WX62T/dz/Fz/oZ/n5/sF/iO/0H/sF/nFfolf6jP8Jz7TL/NZ/lO/3H/ms/0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9536H3+l3+d1+j9/r9/kv/H7/pT/gv/I5/mt/0P/FH/Lf+MP+W5/rv/NH/Pf+qP/BH/M/+uP+J3/Cn/Sn/M/+tP/Fn/Fn/Tl/3l/wv/qL/pK/zH+zxhhjjDH2X6L+4PiAf/I1+bd1xUAhxPU7i+X++5qbC/91P1gmdI4IIZ7r3/PR/7vq1ElJSfnbc7OVCEotFkJErubnE1fjFaKTeEYki46iwj/tb7DsfYH+oH70TiFi/y4nRlyNr9a//T+o/+TT4zMrh+fi/5P6i4VILHU1p4C4Gl+tX/E/qF+k/R/0X+CbNCE6/F1OnLgaX62fJJ4Sz4vkf3gmY4wxxhhjjDH2V4Nlte5/dP985f48QV/NyS+uxn90f84YY4wxxhhjjLFr78XefZ59Mjm5Y3fe8IY3vPm3zbX+zcQYY4wxxhj7s1296L/WnTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/8S/E7vW58gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xda/8nAAD//wkPOlo=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000040))
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014008000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)

17.354288755s ago: executing program 2 (id=1848):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @remote}}}, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={r4, @in={{0x2, 0x4e20, @multicast1}}, [0x401, 0x7, 0x2bcd, 0x5, 0x2, 0x28e, 0x3, 0x3, 0x9476, 0xd99, 0xb, 0x8, 0x1, 0x7, 0x7]}, &(0x7f0000000180)=0x100)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./file2\x00', 0x300000a, &(0x7f00000002c0)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x2}}, {@ssd}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@ssd_spread}, {@nodatasum}, {@enospc_debug}, {@nodatasum}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)

14.56355473s ago: executing program 2 (id=1855):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000100)={0x1, 0x7, 0x6f, &(0x7f0000000400)=""/111})
clock_gettime(0x0, &(0x7f0000003000))
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8, 0x6}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1}, 0x28)

13.57974862s ago: executing program 4 (id=1856):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x83, [{{0x9, 0x4, 0x0, 0x2a, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x4, {[@global=@item_012={0x2, 0x1, 0xa, "1ac5"}, @global=@item_012={0x0, 0x1, 0xb}]}}, 0x0}, 0x0)

13.259769146s ago: executing program 3 (id=1860):
socket$unix(0x1, 0x5, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00')
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0)

11.499323501s ago: executing program 2 (id=1864):
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x2, 0x0, 0x0, 0x100000000, 0x800, 0x0, 0xffffffff}, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)
shmget$private(0x0, 0x400000, 0x800, &(0x7f000000e000/0x400000)=nil)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
r5 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="968ca037895d61c2237dbbbcd2e7bb01fc3155ab513022b4fef9080a284613fec9257eaef641ac50a7adf5883b597138821579fefb30d14ad1c57b475ab58addd3a2862e07456a2621553bf18eaf0bba6bcb9ea0f6eeb823b3fe64", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="0000000000000300"/28], 0x48)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2b, &(0x7f0000000040)=0x6, 0x4)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000640)=ANY=[@ANYRESHEX=r5, @ANYBLOB="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", @ANYRES16, @ANYRESOCT=r4, @ANYBLOB="0b67726f75805642927df8fcde013b1d83fdda357606d1a039c0d81e912a39ee26868d1e31e5bbfafd00526c57577a194657612984d7aa077c17c76909011bf84bc30323eb877d450173a574b0f30045af63fcf05ff2efae1103a28eefc67faade3697513156108b26666dea6f3462e70691e53092d2d64bb40e7e9cd5c87afe941ba623adf7e5e9f264ee7d136ec30ffe2c00457935107357467d412ccb7222654e", @ANYRES16=r3, @ANYRESOCT=r3, @ANYRESHEX=r4])
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8c)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000100505a1a4400000000101090244000101000000090400001602020000052406000005240000000d240f01000000000000000000090581034000000000090582020000000000090503024002"], 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12)

10.914333633s ago: executing program 4 (id=1866):
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

8.807755475s ago: executing program 4 (id=1870):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x52, 0x4)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000200)={0x2, &(0x7f0000000f80)=[{@none}, {@fixed}]})

8.747249036s ago: executing program 3 (id=1871):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x35}, 0xf3a, 0x2, 0x1ff, 0x100, 0x0, 0x40})
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRESOCT=r0, @ANYRES32=0x0], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x48}}, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000580))
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x7, 0x4)
sendto$inet6(r0, &(0x7f0000000280)=':=', 0x2, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xb, @empty}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
request_key(&(0x7f00000000c0)='logon\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000440)='GPL\x00', r6)

8.679256717s ago: executing program 4 (id=1872):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000))
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendfile(r7, r1, &(0x7f0000000400)=0x80000001, 0x0)
r8 = syz_open_dev$usbmon(0x0, 0x7, 0x100)
ioctl$MON_IOCX_GET(r8, 0x400c9206, &(0x7f0000000340)={0x0, 0x0})
fcntl$dupfd(r7, 0x0, r4)
preadv(r8, &(0x7f0000000040)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0x100, 0x2)
r9 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
preadv(r9, &(0x7f0000000940)=[{&(0x7f0000000700)=""/252, 0xfc}, {&(0x7f0000000800)=""/46, 0x2e}], 0x2, 0x9, 0xc403)
syz_open_dev$usbfs(0x0, 0x205, 0x8401)

7.671130217s ago: executing program 3 (id=1874):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000100)={0x1, 0x7, 0x6f, &(0x7f0000000400)=""/111})
clock_gettime(0x0, &(0x7f0000003000))
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8, 0x6}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1}, 0x28)

6.715999787s ago: executing program 3 (id=1877):
socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCy8zwzu8/z3cmTeZ6dPDsBlNZ49iON2BVx51QSMdaybTQaG8fz/W7/du10tiRRq73+axJJntfcP8kft+eJ4Yj49mjEo5XV5S5cuXp2ulpreC9i/+K5i/sXrlzdN39u+szsmdnzUwdeOHho8sWpg1MbEuf2/PHY8dee/Pj9t5+f+666L4nDcXLw3ZlYEcdGGY/xuJOH2Jo/EBGHspU278vDZguEUGqV/PdxMCIej7Go1FMNYzH/UaGVA3qqVomoASWVaP9QUs1+QHNs3904+GSPeyX9c+tIYwC0Ov6BxmcjMVwfG227nbSMjBqfbezYgPKzMv65tvvzbIlln0P8effoDGxAOZ0sXY+IJ9rFn9TrtqMeaRZ/uqwe2bhxMiKG8vq98gB1SFrWe/E5zFrWG38aEYfzxyz/6DrLH1+R7nf8AJTTzSP5iXwpS907/2V9j2b/J9r0f0bbnLvWo+jzX+f+X/N8P1zv66Qr+mFZn+VE+5ccXJnx04fHPu1Ufmv/L1uy8pt9wX64dT1i94r4P8iCzfs/WfxJm+Of7XLqcHdlvPr9L8c6bSs6/tqNiD1txz/3eqXZ2hrXJ/fPzVdnJxs/25bx9Tdvfdmp/KLjz47/tg7xtxz/dOXzsvfkYpdlfHXixrlO20bvG3/681DSGG8O5TnvTC8uXpqKGEqO57u05B9Yuy7NfZqvkcW/95n27X/Z7//15a8z0vyT2YWLb5y93Wnbeo5/y8XkO7Uu69BJFv/M/Y//qvaf5X3SZRl/vHn5qU7b1op/5EECAwAAAAAAgBJK69dgk3Ti7nqaTkw05ss+FtvS6oWFxWfnLlw+PxOxt/7/kINp80r3WCOdZOmp/P9hm+kDK9LPRcTOiPisMlJPT5y+UJ0pOngAAAAAAAAAAAAAAAAAAADYJLbn8/+b96n+vdKY/w+URC9vMAdsbto/lFe9/a+6xRNQBs7/UF7aP5SX9g/lpf1DeWn/UF7aP5SX9g/lpf0DAAAAwJa08+mbPyYRsfTSSH3JDOXbzAiCrW2w6AoAhakUXQGgMHcv/evsQ+l01f//K/9ywN5XByhA0i6z3jmord34b7Z9JgAAAAAAAAAAAADQA3t2dZ7/b24wbG2m/UF5PcD8f18dAA85X/0P5WWMD9xvFv9wpw3m/wMAAAAAAAAAAABA34zWlySdyOcCj0aaTkxE/D8idsRgMjdfnZ2MiEci4ofK4P+y9FTRlQYAAAAAAAAAAAAAAAAAAIAtZuHK1bPT1erspdaVv1flbO2V5l1Q+1DWy/EfnxVJ/9+WkYgo/KD0bGWgJSeJWMqO/Kao2KWF2BzVqK8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hzjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793K0XHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8nP4NAAD//4n5QC4=")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socket$unix(0x1, 0x1, 0x0)

5.568708079s ago: executing program 4 (id=1880):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x83, [{{0x9, 0x4, 0x0, 0x2a, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x4, {[@global=@item_012={0x2, 0x1, 0xa, "1ac5"}, @global=@item_012={0x0, 0x1, 0xb}]}}, 0x0}, 0x0)

5.163031697s ago: executing program 3 (id=1882):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x810, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r2=>0x0)
sched_setattr(r2, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x200004, 0x0, 0x60487afe, 0x4, 0x9, 0x3, 0x3}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="4c494e453120274d617361c0bfab97921570498274657220436170747572"], 0x33)
close(r4)
sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20048801}, 0x8000)
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xfffffdfb)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x6b9baa709c74be5b, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x84)

4.952974671s ago: executing program 2 (id=1883):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0xd71, 0x0, 0x0, 0x0)
syz_usbip_server_init(0x5)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd)
openat2$dir(0xffffff9c, &(0x7f0000000500)='./cgroup/../file0\x00', &(0x7f0000000540)={0x24a00, 0x0, 0x8}, 0x18)
syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x2)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40812008, 0xffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x515244b379a1e22c, 0x7}}, 0x50)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce8000905020200020200000905820233"], 0x0)

4.807625004s ago: executing program 1 (id=1884):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x80, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x3, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0x9, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100"], 0x24, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
capset(&(0x7f0000000380)={0x20080522}, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x9, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.54890607s ago: executing program 1 (id=1886):
mkdir(&(0x7f00000040c0)='./file0\x00', 0xdc)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)

4.03161738s ago: executing program 0 (id=1887):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000100)={0x1, 0x7, 0x6f, &(0x7f0000000400)=""/111})
clock_gettime(0x0, &(0x7f0000003000))
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@metacopy_on}]})
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8, 0x6}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x1}, 0x28)

2.99773877s ago: executing program 1 (id=1888):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000000)=""/236}, 0x80)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x4}, 0xb)
keyctl$clear(0x3, 0xfffffffffffffffd)

2.988795661s ago: executing program 0 (id=1889):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}})

2.783319454s ago: executing program 0 (id=1890):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0xfdff)
r4 = syz_open_procfs(0x0, 0x0)
ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

1.910571972s ago: executing program 1 (id=1891):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x7fff, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

1.638916547s ago: executing program 0 (id=1892):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cc, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x4a732f64, 0xc, 0x9, 0xd, 0x2, 0x80, 0x6, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x3, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0x9, 0x5337, 0x26d, 0x9, 0xfffffffb, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x9, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.51567298s ago: executing program 2 (id=1893):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
unshare(0x28000600)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000160400cc0008000500060000001400040073"], 0x58}}, 0x0)

1.350142123s ago: executing program 0 (id=1894):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x240000, &(0x7f0000000a80)={[{@minixdf}, {@grpid}, {@journal_path={'journal_path', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@data_journal}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@journal_async_commit}, {@data_writeback}, {@jqfmt_vfsv0}, {@noload}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'PQ]\'\xfa7\x87\xc3W\xe7\xf6\xcc<N\xe1\xa9\xe9\xb7\x9e\x12\x1ato\x82\xae:\xa4K\xb0\x97\x9d\xa4:/\x16\xb8\x8b\xa1\xc3\xe6zvt\xf4Rd\xbe\x9d'}}, {@euid_eq}, {@fowner_gt}, {@obj_type={'obj_type', 0x3d, '\v\xfdR\x88\xc3\xda\x96\xcd,\x81L\xb4\r\xde_tcU\x96#\x8d\x94\x82\xf8\xa4|4nsm\xfbO\xa2\x84\xcc\xb17\'I\x18\b\xec\xa7\x93Q\xcbP\xf0\xbf\'\a\xf2\x04Y\xec\xd8\xb3\x19\x89a]\xbdhL\x0f&\xd6;\x10f\xcf?\x94eq\xa8\x1d\x8a\x91\xc6\xafF\x05`\xb1\xa5v\xae\xdc\x80\xee\x15\x9e\x97\x12\x1d\xe5\xad\x05\t\x00\x00\x00\x00\x00\x00\x00'}}]}, 0xfa, 0x571, &(0x7f0000001180)="$eJzs3c1rHOUfAPDvbF76kvbXFEr56UECPVip3TSJLxU81KNosaD3uiTTULLplOymNLFge7AXL1IEEQviH+DdY/Ef8K8oaKFoCXrwEpnNbLpNdvO6Nan7+cBunmdmdp95dub75Pvs7LIB9KyR/K4U8VJEfJVEHGtZ1x/FypGV7Zae3JrMb0ksL3/8exJJsay5fVL8HSoq/4+In7+IOFNa325tYXGmUq2mc0V9tD57fbS2sHj26mxlOp1Or41PTJx/c2L8nbff6lpfX7v017cfPXj//Jenlr758dHxe0lciCPFutZ+7MLt1spIjBSvyUBcWLPhWBca20+Svd4BdqSviPOByMeAY9FXRD3w3/d5RCwDPSoR/9CjmnlAc27fpXnwC+PxeysToPX97195byQONuZGh5eSZ2ZG+Xx3uAvt52389Nv9e/ktuvc+BMCmbt+JiHP9/evHv6QY/3bu3Ba2WdvGNse/5W3uEtDiQZ7/vN4u/8mKLQ427tfmP0NtYncnNo//0qMuNNNRnv+92zb/Xb1oNdxX1I42cr6B5MrVapqPbf+LiNMxcCCvb3Q95/zSw47j1NP8b7CRA+btN3PBYj8e9R949jFTlXplN31u9fhOxMtt899kNf9N2hz//PW4tMU2Tqb3X+m0rjX/bd//52v5h4hXi+N/+5k50dMrWsnG1ydHG+fDaPOsWO/Puyd/6dR+5/4ffQ69XS8//ofbnv+r/R9OWq/X1rbfxvcH/047rdv8+Lc//weTTxrlwWLZzUq9PjcWMZh8uH75+NPHNuvN7fP+nz7VPv43Ov8PRcSnW+z/3RN3O2661+d/3v+pbR3/7RcefvDZd53a39rxf6NROl0s2cr4t9Ud3M1rBwAAAAAAAPtNKSKORFIqr5ZLpXJ55fMdJ+JwqZrV6meuZPPXpqLxXdnhGCg1r3QPtXweYqz4PGyzPr6mPhERxyPi675DjXp5MqtO7XXnAQAAAAAAAAAAAAAAAAAAYJ8Y6vD9/9yvfXu9d8Bz5ye/oXdtGv/d+KUnYF/y/x96l/iH3iX+oXeJf+hd4h96l/iH3iX+oXeJfwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqSxcv5rflpSe3JvP61I2F+ZnsxtmptDZTnp2fLE9mc9fL01k2XU3Lk9nshk+W/BHVLLs+Nh7zN0fraa0+WltYvDybzV+rX746W5lOL6cD/1bHAAAAAAAAAAAAAAAAAAAA4AVSW1icqVSr6ZyCwo4K/ftjNxRWCs3A3vUT7u24BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACt/gkAAP//ys442g==")
r2 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$setlease(r0, 0x400, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r1, 0x58, &(0x7f0000000800)}, 0x10)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@dev, @in6=@private0}}, {{@in6=@local}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@dev}, &(0x7f00000009c0)=0x14)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x0)
socket$inet(0xa, 0x1, 0x0)
getsockopt$netlink(r0, 0x10e, 0x8, 0x0, 0x0)

198.379706ms ago: executing program 2 (id=1895):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x200}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

150.411457ms ago: executing program 0 (id=1896):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000008c0)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

149.477817ms ago: executing program 1 (id=1897):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]})

99.499028ms ago: executing program 4 (id=1898):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r2}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
sendto$inet(r1, &(0x7f0000000140)="f52027e688f2bad05dfe91c16a6f6788d6701aec26fba4535d20b68f6950248a14fc7e6a202037467c9d41621b2b9cb0ea7db3daabf7073424229495298985d391ba04207960ef11851f70b91f70f1db989b6e40619f1b83fea803ecc0abe4505a6e591dcdce34e921bf890a1dd932dae552077a751bfebfb2b9295b3355cc435d7a4485e9f1902b5422945b6479145b5e98a79a0db62378a25df7a300b197180854402de64139621df1ee37f029", 0xae, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a9a5a068df7f7229bfb57aea157e42bab9b54db112695b30d267e7168104bcf5e20f4e26ead62a11f457f9c91288"], 0x50)
lgetxattr(0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000fc0200000000000000000000000000800000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x13c}}, 0x0)

0s ago: executing program 1 (id=1899):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000480)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

: Mfr=1, Product=2, SerialNumber=3
[  520.107278][ T6387] usb 5-1: Product: syz
[  520.126082][ T6387] usb 5-1: Manufacturer: syz
[  520.146043][ T6387] usb 5-1: SerialNumber: syz
[  520.172089][ T6387] usb 5-1: config 0 descriptor??
[  520.236282][ T4986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  520.247247][ T4986] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  520.275116][ T9515] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  520.446094][ T4986] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  520.446242][ T6387] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  520.459703][ T4986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.472526][ T4986] usb 2-1: Product: syz
[  520.477056][ T4986] usb 2-1: Manufacturer: syz
[  520.481759][ T4986] usb 2-1: SerialNumber: syz
[  520.527635][ T9524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.553938][ T9524] tipc: Resetting bearer <eth:syzkaller0>
[  520.564047][ T9523] tipc: Disabling bearer <eth:syzkaller0>
[  520.706282][ T5708] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  520.724951][ T5708] usb 4-1: USB disconnect, device number 36
[  520.836183][ T4986] usb 2-1: 0:2 : does not exist
[  520.885996][ T4986] usb 2-1: USB disconnect, device number 30
[  521.140257][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  521.560341][ T9539] netlink: 'syz.1.1448': attribute type 11 has an invalid length.
[  521.568408][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1448'.
[  522.561675][ T9545] loop1: detected capacity change from 0 to 32768
[  522.628486][ T9545] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1451 (9545)
[  522.644839][ T9545] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  522.653580][ T9545] BTRFS info (device loop1): setting nodatacow, compression disabled
[  522.661801][ T9545] BTRFS info (device loop1): enabling ssd optimizations
[  522.668804][ T9545] BTRFS info (device loop1): setting datacow
[  522.674813][ T9545] BTRFS info (device loop1): doing ref verification
[  522.681557][ T9545] BTRFS info (device loop1): force clearing of disk cache
[  522.688716][ T9545] BTRFS info (device loop1): turning off barriers
[  522.695192][ T9545] BTRFS info (device loop1): using spread ssd allocation scheme
[  522.702899][ T9545] BTRFS info (device loop1): using free space tree
[  522.709435][ T9545] BTRFS info (device loop1): has skinny extents
[  522.786101][ T5708] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  522.856130][ T6387] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[  522.880776][ T6387] usb 5-1: USB disconnect, device number 47
[  523.059345][ T9545] BTRFS info (device loop1): clearing free space tree
[  523.066360][ T9545] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  523.076170][ T9545] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  523.093410][ T9545] BTRFS info (device loop1): creating free space tree
[  523.101260][ T9545] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  523.110931][ T9545] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  523.176098][ T5708] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  523.211566][ T5708] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  523.331001][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.426764][ T5708] usb 1-1: config 0 descriptor??
[  523.449354][ T9568] loop4: detected capacity change from 0 to 128
[  523.497592][ T5708] pwc: Askey VC010 type 2 USB webcam detected.
[  523.537426][ T9568] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffffÿÿÿÿ01777777777777777777777¬‚ú=¨ËdÌž¬·Y ýS«38`¿·˜�›‚" or missing value
[  523.623148][ T9570] loop2: detected capacity change from 0 to 4096
[  523.937699][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00
[  524.726747][ T5708] pwc: recv_control_msg error -32 req 02 val 2700
[  524.789954][ T5708] pwc: recv_control_msg error -32 req 02 val 2c00
[  524.836080][ T5708] pwc: recv_control_msg error -32 req 04 val 1000
[  524.987085][ T5708] pwc: recv_control_msg error -32 req 04 val 1300
[  525.033997][ T9580] loop4: detected capacity change from 0 to 64
[  525.040740][ T5708] pwc: recv_control_msg error -32 req 04 val 1400
[  525.334767][ T9580] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  525.838868][ T5708] pwc: recv_control_msg error -32 req 02 val 2000
[  525.886056][ T5708] pwc: recv_control_msg error -32 req 02 val 2100
[  525.956072][ T5708] pwc: recv_control_msg error -32 req 04 val 1500
[  526.360582][ T9591] loop3: detected capacity change from 0 to 128
[  526.949766][ T5708] pwc: recv_control_msg error -32 req 02 val 2500
[  527.048437][ T5708] pwc: recv_control_msg error -71 req 02 val 2400
[  527.310817][ T5708] pwc: recv_control_msg error -71 req 02 val 2600
[  527.346082][ T5708] pwc: recv_control_msg error -71 req 02 val 2900
[  527.366538][ T5708] pwc: recv_control_msg error -71 req 02 val 2800
[  527.382381][ T9598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1460'.
[  527.407904][ T5708] pwc: recv_control_msg error -71 req 04 val 1100
[  527.437024][ T5708] pwc: recv_control_msg error -71 req 04 val 1200
[  527.464628][ T5708] pwc: Registered as video103.
[  527.484184][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32
[  527.569562][ T5708] usb 1-1: USB disconnect, device number 30
[  527.845071][ T9605] netlink: 'syz.3.1462': attribute type 11 has an invalid length.
[  528.733791][ T9614] loop0: detected capacity change from 0 to 4096
[  528.771635][ T9618] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  528.881396][   T13] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  528.962629][ T9618] tipc: Resetting bearer <eth:syzkaller0>
[  528.980225][ T9617] tipc: Disabling bearer <eth:syzkaller0>
[  528.985824][ T9615] loop1: detected capacity change from 0 to 32768
[  529.246021][   T13] usb 4-1: Using ep0 maxpacket: 16
[  529.289289][ T9615] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1463 (9615)
[  529.323309][ T9615] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  529.332263][ T9615] BTRFS info (device loop1): setting nodatacow, compression disabled
[  529.340532][ T9615] BTRFS info (device loop1): enabling ssd optimizations
[  529.347538][ T9615] BTRFS info (device loop1): setting datacow
[  529.353542][ T9615] BTRFS info (device loop1): doing ref verification
[  529.360233][ T9615] BTRFS info (device loop1): force clearing of disk cache
[  529.367471][ T9615] BTRFS info (device loop1): turning off barriers
[  529.373908][ T9615] BTRFS info (device loop1): using spread ssd allocation scheme
[  529.381651][ T9615] BTRFS info (device loop1): using free space tree
[  529.388210][ T9615] BTRFS info (device loop1): has skinny extents
[  529.448431][   T13] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  529.457692][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.503146][   T13] usb 4-1: config 0 descriptor??
[  529.540628][ T9634] loop0: detected capacity change from 0 to 128
[  529.549515][   T13] gspca_main: sonixj-2.14.0 probing 0471:0327
[  529.557699][ T9634] FAT-fs (loop0): Unrecognized mount option "0xffffffffffffffffÿÿÿÿ01777777777777777777777¬‚ú=¨ËdÌž¬·Y ýS«38`¿·˜�›‚" or missing value
[  530.027419][ T9615] BTRFS info (device loop1): clearing free space tree
[  530.034850][ T9615] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  530.044770][ T9615] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  530.124295][ T9615] BTRFS info (device loop1): creating free space tree
[  530.141851][ T9615] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  530.151726][ T9615] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  530.415180][ T4238] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  530.446192][   T13] gspca_sonixj: reg_w1 err -71
[  530.451067][   T13] sonixj: probe of 4-1:0.0 failed with error -71
[  530.568838][   T13] usb 4-1: USB disconnect, device number 37
[  531.886273][ T4238] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  531.903455][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.926328][ T4238] usb 5-1: Product: syz
[  532.658080][ T4238] usb 5-1: Manufacturer: syz
[  532.662818][ T4238] usb 5-1: SerialNumber: syz
[  532.691895][ T4238] usb 5-1: config 0 descriptor??
[  532.741195][ T4238] usb 5-1: can't set config #0, error -71
[  532.904253][ T4238] usb 5-1: USB disconnect, device number 48
[  532.950839][ T9664] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.104740][ T9669] loop1: detected capacity change from 0 to 128
[  533.324510][ T9671] netlink: 'syz.3.1475': attribute type 11 has an invalid length.
[  533.761579][ T9664] tipc: Resetting bearer <eth:syzkaller0>
[  533.768087][ T9662] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  533.774642][ T9662] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  533.843625][    T7] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  533.856369][ T9662] vhci_hcd vhci_hcd.0: Device attached
[  533.877866][ T9663] tipc: Disabling bearer <eth:syzkaller0>
[  533.879408][ T9675] loop3: detected capacity change from 0 to 64
[  533.951996][ T9675] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  534.097611][ T9679] loop1: detected capacity change from 0 to 4096
[  534.125431][ T9682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.163101][ T9682] tipc: Resetting bearer <eth:syzkaller0>
[  534.176326][ T4239] usb 34-1: SetAddress Request (6) to port 0
[  534.182718][ T4239] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd
[  534.191395][ T9681] tipc: Disabling bearer <eth:syzkaller0>
[  534.256572][    T7] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  534.449179][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  534.460346][    T7] usb 1-1: config 0 has no interface number 0
[  534.467387][    T7] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  534.582499][ T9685] loop1: detected capacity change from 0 to 128
[  534.722122][ T9685] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffffÿÿÿÿ01777777777777777777777¬‚ú=¨ËdÌž¬·Y ýS«38`¿·˜�›‚" or missing value
[  534.780870][    T7] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  535.139818][ T9690] loop4: detected capacity change from 0 to 32768
[  535.201819][ T9690] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1481 (9690)
[  535.464321][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.472445][    T7] usb 1-1: Product: syz
[  535.476678][    T7] usb 1-1: Manufacturer: syz
[  535.481400][    T7] usb 1-1: SerialNumber: syz
[  535.808343][ T9690] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  535.817438][ T9690] BTRFS info (device loop4): setting nodatacow, compression disabled
[  535.825956][ T9690] BTRFS info (device loop4): enabling ssd optimizations
[  535.832976][ T9690] BTRFS info (device loop4): setting datacow
[  535.839055][ T9690] BTRFS info (device loop4): doing ref verification
[  535.845707][ T9690] BTRFS info (device loop4): force clearing of disk cache
[  535.852961][ T9690] BTRFS info (device loop4): turning off barriers
[  535.859614][ T9690] BTRFS info (device loop4): using spread ssd allocation scheme
[  535.867455][ T9690] BTRFS info (device loop4): using free space tree
[  535.874017][ T9690] BTRFS info (device loop4): has skinny extents
[  535.946159][ T9672] vhci_hcd: connection reset by peer
[  536.036994][    T7] usb 1-1: config 0 descriptor??
[  536.037967][  T461] vhci_hcd: stop threads
[  536.113981][  T461] vhci_hcd: release socket
[  536.171822][    T7] usb 1-1: can't set config #0, error -71
[  536.179184][  T461] vhci_hcd: disconnect device
[  536.206492][    T7] usb 1-1: USB disconnect, device number 31
[  536.337263][ T9690] BTRFS info (device loop4): clearing free space tree
[  536.344276][ T9690] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  536.354063][ T9690] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  536.368951][ T9690] BTRFS info (device loop4): creating free space tree
[  536.376911][ T9690] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  536.386579][ T9690] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  536.619528][ T4238] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  537.129663][ T6574] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  537.206230][ T6387] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  537.389330][ T4238] usb 3-1: Using ep0 maxpacket: 16
[  537.509308][ T4238] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  537.528759][ T4238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.581504][ T4238] usb 3-1: config 0 descriptor??
[  537.646711][   T13] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  537.666845][ T9730] loop0: detected capacity change from 0 to 128
[  537.698806][ T4238] gspca_main: sonixj-2.14.0 probing 0471:0327
[  537.740269][ T6574] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  537.857576][ T6387] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  537.875787][ T6574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.935661][ T6387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.035641][ T6574] usb 4-1: Product: syz
[  538.099612][ T6387] usb 2-1: Product: syz
[  538.126510][ T6574] usb 4-1: Manufacturer: syz
[  538.137409][   T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  538.246128][ T6387] usb 2-1: Manufacturer: syz
[  538.251184][   T13] usb 5-1: config 0 interface 0 has no altsetting 0
[  538.258201][ T6574] usb 4-1: SerialNumber: syz
[  538.267164][ T6387] usb 2-1: SerialNumber: syz
[  538.274706][ T6574] usb 4-1: config 0 descriptor??
[  538.296081][ T4238] gspca_sonixj: reg_w1 err -71
[  538.301298][ T4238] sonixj: probe of 3-1:0.0 failed with error -71
[  538.325166][ T6387] usb 2-1: config 0 descriptor??
[  538.334420][ T4238] usb 3-1: USB disconnect, device number 31
[  538.486551][   T13] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  538.530221][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.543318][   T13] usb 5-1: Product: syz
[  538.552443][   T13] usb 5-1: Manufacturer: syz
[  538.559109][   T13] usb 5-1: SerialNumber: syz
[  538.709537][ T6574] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  538.718494][ T6387] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  538.729734][   T13] usb 5-1: config 0 descriptor??
[  538.839559][ T9734] netlink: 'syz.0.1488': attribute type 11 has an invalid length.
[  539.486403][ T4239] usb 34-1: device descriptor read/8, error -110
[  539.493965][   T13] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  539.504354][   T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  539.526842][   T13] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  539.539579][   T13] usb 5-1: media controller created
[  539.544783][ T9741] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  539.560664][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  539.611013][   T13] DVB: Unable to find symbol tda10046_attach()
[  539.618787][   T13] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  539.636864][   T13] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  539.817595][ T9757] loop0: detected capacity change from 0 to 4096
[  539.916413][ T4239] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  539.924448][ T4239] usb usb34-port1: attempt power cycle
[  540.126601][   T13] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71
[  540.138684][   T13] usb 5-1: USB disconnect, device number 49
[  540.269254][ T9763] loop2: detected capacity change from 0 to 64
[  540.295579][ T9763] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  540.426487][ T4239] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  540.738842][   T26] audit: type=1800 audit(1758967909.674:101): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1493" name="file1" dev="loop2" ino=5 res=0 errno=0
[  540.903564][ T9768] loop4: detected capacity change from 0 to 128
[  540.922027][ T9770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  540.932431][ T9770] tipc: Resetting bearer <eth:syzkaller0>
[  540.944314][ T9769] tipc: Disabling bearer <eth:syzkaller0>
[  540.956623][ T4239] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  540.967153][ T9768] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffffÿÿÿÿ01777777777777777777777¬‚ú=¨ËdÌž¬·Y ýS«38`¿·˜�›‚" or missing value
[  540.981902][ T4239] usb usb34-port1: unable to enumerate USB device
[  541.184648][ T9775] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  541.191308][ T9775] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  541.202804][ T6387] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32)
[  541.226484][ T9775] vhci_hcd vhci_hcd.0: Device attached
[  541.942157][ T6387] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  541.960176][ T6387] usb 2-1: media controller created
[  541.967860][ T6387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  541.978621][ T6574] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[  542.047125][ T6574] usb 4-1: USB disconnect, device number 38
[  542.755171][ T9791] loop1: detected capacity change from 0 to 32768
[  542.780859][ T6387] i2c i2c-13: Added multiplexed i2c bus 14
[  542.786973][ T6387] rtl2832 13-0010: Realtek RTL2832 successfully attached
[  542.812659][ T6387] usb 2-1: DVB: registering adapter 13 frontend 0 (Realtek RTL2832 (DVB-T))...
[  542.839140][ T6387] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered.
[  542.889842][ T9791] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1499 (9791)
[  542.924992][ T9791] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  542.934102][ T9791] BTRFS info (device loop1): setting nodatacow, compression disabled
[  542.942396][ T9791] BTRFS info (device loop1): enabling ssd optimizations
[  542.949452][ T9791] BTRFS info (device loop1): setting datacow
[  542.955465][ T9791] BTRFS info (device loop1): doing ref verification
[  542.962164][ T9791] BTRFS info (device loop1): force clearing of disk cache
[  542.969499][ T9791] BTRFS info (device loop1): turning off barriers
[  542.976016][ T9791] BTRFS info (device loop1): using spread ssd allocation scheme
[  542.983719][ T9791] BTRFS info (device loop1): using free space tree
[  542.990359][ T9791] BTRFS info (device loop1): has skinny extents
[  543.003147][ T6387] DVB: Unable to find symbol r820t_attach()
[  543.065997][ T4239] usb 34-1: SetAddress Request (10) to port 0
[  543.072371][ T6397] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  543.091389][ T4239] usb 34-1: new SuperSpeed USB device number 10 using vhci_hcd
[  543.099474][ T6387] usb 2-1: USB disconnect, device number 31
[  543.300428][ T9816] netlink: 'syz.2.1501': attribute type 11 has an invalid length.
[  543.316175][   T13] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  543.399223][ T9791] BTRFS info (device loop1): clearing free space tree
[  543.406388][ T9791] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  543.416177][ T9791] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  543.448696][ T9791] BTRFS info (device loop1): creating free space tree
[  543.456989][ T9791] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  543.466701][ T9791] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  543.516278][ T6397] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  543.552113][ T6397] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  543.742817][ T6397] usb 1-1: config 0 has no interface number 0
[  543.749757][   T13] usb 5-1: Using ep0 maxpacket: 16
[  543.783516][ T9788] loop3: detected capacity change from 0 to 128
[  544.199573][ T9777] vhci_hcd: connection reset by peer
[  544.232692][  T461] vhci_hcd: stop threads
[  544.265914][  T461] vhci_hcd: release socket
[  544.297725][ T9820] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  544.313444][  T461] vhci_hcd: disconnect device
[  544.328224][ T6397] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  544.376164][ T6397] usb 1-1: string descriptor 0 read error: -71
[  544.382485][ T6397] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  544.404077][ T6397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.412508][   T13] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  544.424250][ T6397] usb 1-1: config 0 descriptor??
[  544.432645][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.442642][   T13] usb 5-1: config 0 descriptor??
[  544.463535][ T9824] loop0: detected capacity change from 0 to 64
[  544.470180][ T6397] usb 1-1: can't set config #0, error -71
[  544.477459][ T6397] usb 1-1: USB disconnect, device number 32
[  544.497594][   T13] gspca_main: sonixj-2.14.0 probing 0471:0327
[  544.726075][ T9824] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  545.078724][ T9844] loop1: detected capacity change from 0 to 4096
[  545.424600][   T26] audit: type=1800 audit(1758967914.294:102): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1505" name="file1" dev="loop0" ino=5 res=0 errno=0
[  545.444273][    C0] vkms_vblank_simulate: vblank timer overrun
[  545.452067][   T13] gspca_sonixj: reg_w1 err -71
[  545.457069][   T13] sonixj: probe of 5-1:0.0 failed with error -71
[  545.464998][   T13] usb 5-1: USB disconnect, device number 50
[  545.606633][ T9849] device syzkaller0 entered promiscuous mode
[  545.886127][ T5771] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  545.887778][ T9855] loop2: detected capacity change from 0 to 128
[  545.964991][ T9855] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffffÿÿÿÿ01777777777777777777777¬‚ú=¨ËdÌž¬·Y ýS«38`¿·˜�›‚" or missing value
[  546.541913][ T9864] loop4: detected capacity change from 0 to 32768
[  546.708320][ T6387] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  547.109859][ T9864] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1512 (9864)
[  547.312425][ T9864] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  547.321263][ T9864] BTRFS info (device loop4): setting nodatacow, compression disabled
[  547.329501][ T9864] BTRFS info (device loop4): enabling ssd optimizations
[  547.336537][ T9864] BTRFS info (device loop4): setting datacow
[  547.342538][ T9864] BTRFS info (device loop4): doing ref verification
[  547.349168][ T9864] BTRFS info (device loop4): force clearing of disk cache
[  547.356366][ T9864] BTRFS info (device loop4): turning off barriers
[  547.362806][ T9864] BTRFS info (device loop4): using spread ssd allocation scheme
[  547.370499][ T9864] BTRFS info (device loop4): using free space tree
[  547.377151][ T9864] BTRFS info (device loop4): has skinny extents
[  548.476539][ T4239] usb 34-1: device descriptor read/8, error -110
[  548.716352][ T6387] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  548.767429][ T6387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.775677][ T6387] usb 2-1: Product: syz
[  548.830132][ T6387] usb 2-1: Manufacturer: syz
[  548.835600][ T6387] usb 2-1: SerialNumber: syz
[  548.842773][ T6387] usb 2-1: config 0 descriptor??
[  548.846078][ T5771] usb 1-1: device descriptor read/all, error -71
[  548.871217][ T9890] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  548.886126][ T6387] usb 2-1: can't set config #0, error -71
[  548.902380][ T6387] usb 2-1: USB disconnect, device number 32
[  548.917466][ T9889] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  548.924105][ T9889] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  548.964347][ T9899] loop1: detected capacity change from 0 to 64
[  548.996122][ T4239] usb 34-1: SetAddress Request (11) to port 0
[  549.003062][ T4239] usb 34-1: new SuperSpeed USB device number 11 using vhci_hcd
[  549.042249][ T9899] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  549.099200][ T9864] BTRFS error (device loop4): open_ctree failed: -22
[  549.108406][ T9889] vhci_hcd vhci_hcd.0: Device attached
[  549.306438][ T5771] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  549.596078][ T6387] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  550.024281][ T4347] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4347)
[  550.115364][ T9922] loop2: detected capacity change from 0 to 4096
[  550.122509][ T6387] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  550.140604][ T6387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.166570][ T5771] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  550.174792][ T6387] usb 4-1: Product: syz
[  550.180868][ T6387] usb 4-1: Manufacturer: syz
[  550.181311][ T5771] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  550.187405][ T6387] usb 4-1: SerialNumber: syz
[  550.235283][ T6387] usb 4-1: config 0 descriptor??
[  550.235949][ T5771] usb 1-1: config 0 has no interface number 0
[  550.266216][ T5771] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  550.506153][ T6387] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  550.646283][ T5771] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  550.655380][ T5771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.698914][ T5771] usb 1-1: Product: syz
[  550.707804][ T5771] usb 1-1: Manufacturer: syz
[  550.718415][ T5771] usb 1-1: SerialNumber: syz
[  550.732258][ T5771] usb 1-1: config 0 descriptor??
[  550.766359][ T9901] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  550.778621][ T9901] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  550.824910][ T5771] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  551.020626][ T5771] usb 1-1: USB disconnect, device number 34
[  551.028655][ T9894] vhci_hcd: connection reset by peer
[  551.154565][ T4314] vhci_hcd: stop threads
[  551.161708][ T4314] vhci_hcd: release socket
[  551.166628][ T4314] vhci_hcd: disconnect device
[  552.060398][ T9942] loop4: detected capacity change from 0 to 128
[  552.070021][ T9944] device syzkaller0 entered promiscuous mode
[  552.087476][ T1108] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  552.181845][ T9942] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffffÿÿÿÿ01777777777777777777777¬‚ú=¨ËdÌž¬·Y ýS«38`¿·˜�›‚" or missing value
[  552.336080][ T1108] usb 2-1: Using ep0 maxpacket: 16
[  552.520195][ T9948] netlink: 'syz.2.1526': attribute type 11 has an invalid length.
[  553.500597][ T9954] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  553.611897][ T1108] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  553.621906][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.652054][ T1108] usb 2-1: config 0 descriptor??
[  553.723513][ T1108] gspca_main: sonixj-2.14.0 probing 0471:0327
[  553.894677][ T9969] loop4: detected capacity change from 0 to 128
[  554.166751][ T4239] usb 34-1: device descriptor read/8, error -110
[  554.297283][ T4239] usb usb34-port1: attempt power cycle
[  554.386718][ T1108] gspca_sonixj: reg_w1 err -71
[  554.392258][ T1108] sonixj: probe of 2-1:0.0 failed with error -71
[  554.626035][ T6168] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  554.644102][ T6387] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[  554.652271][ T4239] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  554.663581][ T1108] usb 2-1: USB disconnect, device number 33
[  554.674137][ T6387] usb 4-1: USB disconnect, device number 39
[  555.544241][ T9977] loop4: detected capacity change from 0 to 64
[  555.577033][ T9975] loop2: detected capacity change from 0 to 32768
[  555.600016][ T9973] loop3: detected capacity change from 0 to 4096
[  555.613570][ T9975] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  555.614608][ T9977] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  555.622334][ T9975] BTRFS info (device loop2): setting nodatacow, compression disabled
[  555.622392][ T9975] BTRFS info (device loop2): enabling ssd optimizations
[  555.646016][ T9975] BTRFS info (device loop2): setting datacow
[  555.652155][ T9975] BTRFS info (device loop2): doing ref verification
[  555.658840][ T9975] BTRFS info (device loop2): force clearing of disk cache
[  555.666022][ T9975] BTRFS info (device loop2): turning off barriers
[  555.672466][ T9975] BTRFS info (device loop2): using spread ssd allocation scheme
[  555.680175][ T9975] BTRFS info (device loop2): using free space tree
[  555.687046][ T9975] BTRFS info (device loop2): has skinny extents
[  555.746386][ T4239] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  555.781684][ T4239] usb usb34-port1: unable to enumerate USB device
[  556.095214][ T9975] BTRFS info (device loop2): clearing free space tree
[  556.102522][ T9975] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  556.113155][ T9975] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  556.127558][ T6168] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  556.352273][   T26] audit: type=1800 audit(1758967925.244:103): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1532" name="file1" dev="loop4" ino=5 res=0 errno=0
[  556.373030][ T9975] BTRFS info (device loop2): creating free space tree
[  556.380632][ T9975] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  556.390267][ T9975] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  556.413886][ T6168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.432444][ T6168] usb 1-1: Product: syz
[  556.441408][ T6168] usb 1-1: Manufacturer: syz
[  556.456620][ T6168] usb 1-1: SerialNumber: syz
[  556.589597][ T6168] usb 1-1: config 0 descriptor??
[  556.656263][ T6168] usb 1-1: can't set config #0, error -71
[  556.674322][ T6168] usb 1-1: USB disconnect, device number 35
[  557.659102][T10011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  557.665770][T10011] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  557.781224][T10011] vhci_hcd vhci_hcd.0: Device attached
[  557.797246][ T4343] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop2 scanned by udevd (4343)
[  557.899435][T10023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1538'.
[  558.606052][ T4251] usb 36-1: SetAddress Request (10) to port 0
[  558.612284][ T4251] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd
[  558.636602][T10025] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  558.723735][T10030] device syzkaller0 entered promiscuous mode
[  558.915985][ T6484] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  558.951286][ T6393] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  558.959047][ T6394] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  559.436776][ T6484] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  559.459410][ T6484] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.844852][T10047] loop3: detected capacity change from 0 to 128
[  559.853016][ T6484] usb 5-1: Product: syz
[  559.875975][ T6484] usb 5-1: Manufacturer: syz
[  559.880668][ T6484] usb 5-1: SerialNumber: syz
[  559.964910][ T6484] usb 5-1: config 0 descriptor??
[  560.016252][ T6393] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.026695][ T6394] usb 2-1: config 0 has an invalid interface number: 6 but max is 0
[  560.034704][ T6394] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.088192][ T6393] usb 1-1: config 0 interface 0 has no altsetting 0
[  560.102516][ T6394] usb 2-1: config 0 has no interface number 0
[  560.112108][ T6394] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  560.256171][ T6393] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  560.273814][ T6393] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.286140][ T6484] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  560.292296][ T6394] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  560.301532][T10050] loop3: detected capacity change from 0 to 4096
[  560.314439][ T6394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.331766][ T6393] usb 1-1: Product: syz
[  560.347250][ T6393] usb 1-1: Manufacturer: syz
[  560.354022][ T6394] usb 2-1: Product: syz
[  560.361331][ T6393] usb 1-1: SerialNumber: syz
[  560.366123][ T6394] usb 2-1: Manufacturer: syz
[  560.379275][ T6393] usb 1-1: config 0 descriptor??
[  560.384494][ T6394] usb 2-1: SerialNumber: syz
[  560.409458][ T6394] usb 2-1: config 0 descriptor??
[  560.438859][ T6393] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  560.447344][T10011] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  560.456252][T10011] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  560.501025][ T6394] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  560.516528][ T6393] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  560.640844][T10013] vhci_hcd: connection reset by peer
[  560.655683][ T9836] vhci_hcd: stop threads
[  560.726786][ T9836] vhci_hcd: release socket
[  560.754021][ T6394] usb 2-1: USB disconnect, device number 34
[  560.764413][ T9836] vhci_hcd: disconnect device
[  560.776303][ T6393] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  560.789757][ T6393] usb 1-1: media controller created
[  560.813576][ T6393] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  560.923078][ T6393] DVB: Unable to find symbol tda10046_attach()
[  560.929969][ T6393] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  560.939097][ T6393] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  560.966155][ T6393] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71
[  561.003743][ T6393] usb 1-1: USB disconnect, device number 36
[  561.206662][T10061] loop0: detected capacity change from 0 to 64
[  561.236229][ T6394] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  561.261723][T10061] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  561.296171][ T4239] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  561.555975][ T4239] usb 4-1: Using ep0 maxpacket: 16
[  561.676140][ T4239] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  561.786106][ T6394] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  561.924279][   T26] audit: type=1800 audit(1758967930.854:104): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1547" name="file1" dev="loop0" ino=5 res=0 errno=0
[  561.993591][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.001789][ T6394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.014901][ T6394] usb 2-1: Product: syz
[  562.021195][ T4239] usb 4-1: config 0 descriptor??
[  562.028839][ T6394] usb 2-1: Manufacturer: syz
[  562.046886][ T6394] usb 2-1: SerialNumber: syz
[  562.068113][ T4239] gspca_main: sonixj-2.14.0 probing 0471:0327
[  562.080942][ T6394] usb 2-1: config 0 descriptor??
[  562.756116][ T6394] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  562.810439][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  562.818002][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  563.836703][T10074] loop0: detected capacity change from 0 to 32768
[  563.845999][ T4251] usb 36-1: device descriptor read/8, error -110
[  563.856045][ T4239] gspca_sonixj: reg_w1 err -110
[  563.860981][ T4239] sonixj: probe of 4-1:0.0 failed with error -110
[  563.896249][ T6484] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[  563.923256][ T4239] usb 4-1: USB disconnect, device number 40
[  563.934995][ T6484] usb 5-1: USB disconnect, device number 51
[  564.204145][T10078] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1550'.
[  564.318947][ T4251] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  564.648379][ T4251] usb usb36-port1: attempt power cycle
[  564.929154][T10085] device syzkaller0 entered promiscuous mode
[  565.208344][ T4251] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  565.235325][T10091] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  565.318961][T10093] loop2: detected capacity change from 0 to 128
[  566.098361][T10102] loop1: detected capacity change from 0 to 64
[  566.122660][T10096] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  566.129355][T10096] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  566.166308][ T6394] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  566.174460][T10096] vhci_hcd vhci_hcd.0: Device attached
[  566.196190][T10094] loop3: detected capacity change from 0 to 4096
[  566.212045][ T6394] usb 2-1: USB disconnect, device number 35
[  566.238368][ T4251] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  566.270216][ T4251] usb usb36-port1: unable to enumerate USB device
[  566.288533][T10102] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  566.676368][ T6393] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  566.676421][ T4239] usb 42-1: SetAddress Request (6) to port 0
[  566.878451][ T4239] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[  567.136170][ T4254] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  567.156311][ T6393] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  567.164717][ T6393] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.393469][ T6393] usb 5-1: config 0 has no interface number 0
[  567.400041][ T6393] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  568.008717][T10124] loop3: detected capacity change from 0 to 32768
[  568.136289][ T6393] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  568.169724][ T6393] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.186920][ T6393] usb 5-1: Product: syz
[  568.200510][ T6393] usb 5-1: Manufacturer: syz
[  568.316300][ T6393] usb 5-1: SerialNumber: syz
[  568.329725][ T6393] usb 5-1: config 0 descriptor??
[  568.346295][T10096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  568.353401][T10096] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  568.391387][ T6393] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  568.469660][ T6394] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  568.498221][ T4254] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  568.522996][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.552855][ T4254] usb 1-1: Product: syz
[  568.568407][ T4254] usb 1-1: Manufacturer: syz
[  568.588214][ T4254] usb 1-1: SerialNumber: syz
[  568.590452][ T6484] usb 5-1: USB disconnect, device number 52
[  568.600419][T10103] vhci_hcd: connection reset by peer
[  568.610618][ T4440] vhci_hcd: stop threads
[  568.614903][ T4440] vhci_hcd: release socket
[  568.624218][ T4254] usb 1-1: config 0 descriptor??
[  568.648535][ T4440] vhci_hcd: disconnect device
[  568.795976][ T6393] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  568.846030][ T6394] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.856316][ T6394] usb 3-1: config 0 interface 0 has no altsetting 0
[  568.906048][ T4254] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  569.016173][ T6394] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  569.035975][ T6393] usb 4-1: Using ep0 maxpacket: 16
[  569.041613][ T6394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.058614][ T6394] usb 3-1: Product: syz
[  569.062927][ T6394] usb 3-1: Manufacturer: syz
[  569.068047][ T6394] usb 3-1: SerialNumber: syz
[  569.075013][ T6394] usb 3-1: config 0 descriptor??
[  569.118229][ T6394] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  569.135484][ T6394] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  569.156224][ T6393] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  569.178486][ T6394] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  569.193817][ T6393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.202132][ T6394] usb 3-1: media controller created
[  569.222332][ T6393] usb 4-1: config 0 descriptor??
[  569.244408][ T6394] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  569.282235][ T6393] gspca_main: sonixj-2.14.0 probing 0471:0327
[  569.317643][ T6394] DVB: Unable to find symbol tda10046_attach()
[  569.333073][ T6394] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  569.344256][ T6394] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  570.056019][ T6394] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71
[  570.091880][ T6394] usb 3-1: USB disconnect, device number 32
[  570.154751][T10147] device syzkaller0 entered promiscuous mode
[  570.236088][ T6393] gspca_sonixj: reg_w1 err -110
[  570.241907][ T6393] sonixj: probe of 4-1:0.0 failed with error -110
[  570.508136][T10151] loop4: detected capacity change from 0 to 128
[  571.250458][T10155] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  571.374683][ T6168] usb 4-1: USB disconnect, device number 41
[  571.384074][T10158] loop4: detected capacity change from 0 to 4096
[  571.506060][ T6393] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  571.566134][ T4254] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32
[  571.586251][ T4254] usb 1-1: USB disconnect, device number 37
[  572.006398][ T4239] usb 42-1: device descriptor read/8, error -110
[  572.462377][T10179] loop0: detected capacity change from 0 to 64
[  572.522427][T10183] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  572.528992][T10183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  572.541299][T10183] vhci_hcd vhci_hcd.0: Device attached
[  572.552606][T10179] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  572.696235][ T6393] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  572.712769][ T6393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.734743][ T6393] usb 3-1: Product: syz
[  572.744971][ T6393] usb 3-1: Manufacturer: syz
[  572.761739][ T6393] usb 3-1: SerialNumber: syz
[  572.792531][ T6393] usb 3-1: config 0 descriptor??
[  572.816488][ T4239] usb usb42-port1: Cannot enable. Maybe the USB cable is bad?
[  572.828157][ T4239] usb usb42-port1: attempt power cycle
[  572.906067][ T6168] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  572.956070][ T4254] usb 36-1: SetAddress Request (14) to port 0
[  572.964165][ T4254] usb 36-1: new SuperSpeed USB device number 14 using vhci_hcd
[  573.277902][ T4239] usb usb42-port1: Cannot enable. Maybe the USB cable is bad?
[  573.306030][   T26] audit: type=1800 audit(1758967942.224:105): pid=10196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1576" name="file1" dev="loop0" ino=5 res=0 errno=0
[  573.366110][ T6393] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  573.548706][T10199] device syzkaller0 entered promiscuous mode
[  573.586489][ T4239] usb usb42-port1: Cannot enable. Maybe the USB cable is bad?
[  573.596062][ T6168] usb 2-1: config 0 has an invalid interface number: 6 but max is 0
[  573.605206][ T4239] usb usb42-port1: unable to enumerate USB device
[  573.616742][ T6168] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  573.631448][ T6168] usb 2-1: config 0 has no interface number 0
[  573.639326][ T6168] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  573.856214][ T6168] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  573.865415][ T4251] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  573.893936][ T6168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.906677][ T6168] usb 2-1: Product: syz
[  573.911501][ T6168] usb 2-1: Manufacturer: syz
[  573.919171][ T6168] usb 2-1: SerialNumber: syz
[  573.929984][ T6168] usb 2-1: config 0 descriptor??
[  573.946165][T10183] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  573.960033][T10183] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  573.999474][ T6168] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  574.202060][ T6168] usb 2-1: USB disconnect, device number 36
[  574.209452][T10185] vhci_hcd: connection reset by peer
[  574.215805][ T1412] vhci_hcd: stop threads
[  574.229997][ T1412] vhci_hcd: release socket
[  574.242222][ T1412] vhci_hcd: disconnect device
[  574.276341][ T4251] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  574.295578][ T4251] usb 5-1: config 0 interface 0 has no altsetting 0
[  574.516261][ T4251] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  574.531246][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.549209][ T4251] usb 5-1: Product: syz
[  574.559584][ T4251] usb 5-1: Manufacturer: syz
[  574.583433][ T4251] usb 5-1: SerialNumber: syz
[  574.612100][ T4251] usb 5-1: config 0 descriptor??
[  574.688066][ T4251] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  574.708405][ T4251] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  574.762499][ T4251] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  574.802219][ T4251] usb 5-1: media controller created
[  574.858075][ T4251] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  574.948101][ T4251] DVB: Unable to find symbol tda10046_attach()
[  574.954789][ T4251] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  574.974429][ T4251] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  575.076014][ T1108] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  575.529035][ T6393] usb 3-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32)
[  575.596060][ T1108] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  575.615307][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.646500][ T1108] usb 1-1: Product: syz
[  575.650729][ T1108] usb 1-1: Manufacturer: syz
[  575.655416][ T1108] usb 1-1: SerialNumber: syz
[  575.700197][ T4251] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71
[  575.717785][ T4251] usb 5-1: USB disconnect, device number 53
[  575.748183][ T6393] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -23
[  575.778374][ T1108] usb 1-1: config 0 descriptor??
[  575.806755][ T6393] usb 3-1: USB disconnect, device number 33
[  576.067849][T10214] loop1: detected capacity change from 0 to 4096
[  576.098274][ T1108] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  578.019201][T10232] loop3: detected capacity change from 0 to 32768
[  578.087257][ T4254] usb 36-1: device descriptor read/8, error -110
[  578.145223][T10238] loop1: detected capacity change from 0 to 64
[  578.185960][ T4239] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  578.223861][T10238] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  578.385730][T10241] device syzkaller0 entered promiscuous mode
[  578.566737][ T4254] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  578.586184][ T1108] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  578.594456][ T4239] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  578.604950][ T4254] usb usb36-port1: attempt power cycle
[  578.627375][ T1108] usb 1-1: USB disconnect, device number 38
[  578.634524][ T4239] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  578.670195][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.687259][ T4239] usb 3-1: config 0 descriptor??
[  578.728090][ T4239] pwc: Askey VC010 type 2 USB webcam detected.
[  579.010073][   T26] audit: type=1800 audit(1758967947.904:106): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1591" name="file1" dev="loop1" ino=5 res=0 errno=0
[  579.123911][   T26] audit: type=1326 audit(1758967948.054:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  579.180303][   T26] audit: type=1326 audit(1758967948.084:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  579.202762][    C0] vkms_vblank_simulate: vblank timer overrun
[  579.215313][ T4239] pwc: recv_control_msg error -32 req 02 val 2b00
[  579.233317][ T4254] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  579.265781][   T26] audit: type=1326 audit(1758967948.084:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3505154710 code=0x7ffc0000
[  579.296414][ T4239] pwc: recv_control_msg error -32 req 02 val 2700
[  579.346106][ T4239] pwc: recv_control_msg error -32 req 02 val 2c00
[  579.419520][ T4239] pwc: recv_control_msg error -32 req 04 val 1000
[  579.496486][ T4239] pwc: recv_control_msg error -32 req 04 val 1300
[  579.507519][   T26] audit: type=1326 audit(1758967948.084:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3505154710 code=0x7ffc0000
[  579.566927][ T4254] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  579.590144][ T4254] usb usb36-port1: unable to enumerate USB device
[  579.646410][ T4239] pwc: recv_control_msg error -32 req 04 val 1400
[  579.716785][ T4239] pwc: recv_control_msg error -32 req 02 val 2000
[  579.774558][   T26] audit: type=1326 audit(1758967948.084:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  579.800553][ T4239] pwc: recv_control_msg error -32 req 02 val 2100
[  579.826320][ T4254] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  579.908796][ T4239] pwc: recv_control_msg error -32 req 04 val 1500
[  579.923055][   T26] audit: type=1326 audit(1758967948.084:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  579.966657][ T4239] pwc: recv_control_msg error -32 req 02 val 2500
[  579.976412][   T26] audit: type=1326 audit(1758967948.084:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  579.999510][   T26] audit: type=1326 audit(1758967948.084:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  580.006077][ T4239] pwc: recv_control_msg error -32 req 02 val 2400
[  580.022139][   T26] audit: type=1326 audit(1758967948.084:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.0.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  580.112453][T10264] loop4: detected capacity change from 0 to 4096
[  580.137156][ T6484] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  580.336192][ T4239] pwc: recv_control_msg error -71 req 02 val 2900
[  580.369450][ T4239] pwc: recv_control_msg error -71 req 02 val 2800
[  580.397573][ T4239] pwc: recv_control_msg error -71 req 04 val 1100
[  580.418330][ T4239] pwc: recv_control_msg error -71 req 04 val 1200
[  580.428477][ T4239] pwc: Registered as video103.
[  580.434937][ T4239] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33
[  580.458071][ T4239] usb 3-1: USB disconnect, device number 34
[  580.466032][ T6168] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  580.586193][ T6484] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.603458][ T6484] usb 2-1: config 0 interface 0 has no altsetting 0
[  580.654497][ T4254] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  580.664262][ T4254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.672375][ T4254] usb 1-1: Product: syz
[  580.676685][ T4254] usb 1-1: Manufacturer: syz
[  580.681615][ T4254] usb 1-1: SerialNumber: syz
[  580.687817][ T4254] usb 1-1: config 0 descriptor??
[  581.607981][T10274] loop4: detected capacity change from 0 to 32768
[  581.615921][ T6484] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  581.625336][ T6484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.626255][ T4254] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  581.634337][ T6484] usb 2-1: Product: syz
[  581.646075][ T6484] usb 2-1: Manufacturer: syz
[  581.650698][ T6484] usb 2-1: SerialNumber: syz
[  581.663285][ T6484] usb 2-1: config 0 descriptor??
[  581.714153][T10278] device syzkaller0 entered promiscuous mode
[  581.727948][ T6484] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  581.821226][ T6484] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  581.853256][ T6484] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23)
[  581.936044][ T6168] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  581.945183][ T6168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.958837][ T6168] usb 4-1: Product: syz
[  581.963036][ T6168] usb 4-1: Manufacturer: syz
[  581.970006][ T6168] usb 4-1: SerialNumber: syz
[  582.031161][ T6168] usb 4-1: config 0 descriptor??
[  582.038044][T10283] loop4: detected capacity change from 0 to 64
[  582.073996][T10283] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  582.286145][ T6168] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  582.654981][T10290] syz.4.1610[10290] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  582.655101][T10290] syz.4.1610[10290] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  583.039456][ T4239] usb 2-1: USB disconnect, device number 37
[  583.971380][T10296] syz.4.1610 (10296) used greatest stack depth: 18592 bytes left
[  584.264591][T10308] loop2: detected capacity change from 0 to 4096
[  584.406121][ T4254] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  584.452136][ T4254] usb 1-1: USB disconnect, device number 39
[  584.591618][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1616'.
[  585.037097][ T6168] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[  585.204167][ T6168] usb 4-1: USB disconnect, device number 42
[  585.352729][T10322] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  585.359341][T10322] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  585.391093][T10322] vhci_hcd vhci_hcd.0: Device attached
[  585.476147][ T4254] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  585.491452][T10328] loop3: detected capacity change from 0 to 64
[  585.592454][T10328] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  585.696076][ T4239] usb 36-1: SetAddress Request (18) to port 0
[  585.712619][ T4239] usb 36-1: new SuperSpeed USB device number 18 using vhci_hcd
[  585.736021][ T6394] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  585.857320][ T4254] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  585.880515][ T4254] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  585.913724][ T4254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.950164][ T4254] usb 1-1: config 0 descriptor??
[  586.011467][ T4254] pwc: Askey VC010 type 2 USB webcam detected.
[  586.109384][ T6394] usb 2-1: config 0 has an invalid interface number: 6 but max is 0
[  586.123231][ T6394] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.154491][ T6394] usb 2-1: config 0 has no interface number 0
[  586.165722][ T6394] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  586.446091][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  586.446110][   T26] audit: type=1800 audit(1758967955.374:117): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1621" name="file1" dev="loop3" ino=5 res=0 errno=0
[  586.636262][ T6394] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  586.645356][ T6394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.671933][ T6394] usb 2-1: Product: syz
[  586.676255][ T6394] usb 2-1: Manufacturer: syz
[  586.680971][ T6394] usb 2-1: SerialNumber: syz
[  586.714976][ T6394] usb 2-1: config 0 descriptor??
[  586.751017][T10322] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  586.768553][T10322] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  586.788038][ T4254] pwc: recv_control_msg error -32 req 02 val 2b00
[  586.826158][ T4254] pwc: recv_control_msg error -32 req 02 val 2700
[  586.878943][ T4254] pwc: recv_control_msg error -32 req 02 val 2c00
[  586.899000][ T6394] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  586.938780][T10329] loop4: detected capacity change from 0 to 32768
[  586.991329][ T4254] pwc: recv_control_msg error -32 req 04 val 1000
[  587.106352][ T4254] pwc: recv_control_msg error -32 req 04 val 1300
[  587.229810][T10324] vhci_hcd: connection reset by peer
[  587.240074][ T9836] vhci_hcd: stop threads
[  587.244569][ T9836] vhci_hcd: release socket
[  587.251721][ T9836] vhci_hcd: disconnect device
[  587.316394][ T4254] pwc: recv_control_msg error -32 req 04 val 1400
[  587.431686][ T6394] usb 2-1: USB disconnect, device number 38
[  587.466271][ T4254] pwc: recv_control_msg error -32 req 02 val 2000
[  587.506142][ T4254] pwc: recv_control_msg error -32 req 02 val 2100
[  587.556334][ T4254] pwc: recv_control_msg error -32 req 04 val 1500
[  587.596111][ T4254] pwc: recv_control_msg error -32 req 02 val 2500
[  587.636143][ T4254] pwc: recv_control_msg error -32 req 02 val 2400
[  587.900577][ T4254] pwc: recv_control_msg error -71 req 02 val 2900
[  587.925989][ T4254] pwc: recv_control_msg error -71 req 02 val 2800
[  587.956205][ T4254] pwc: recv_control_msg error -71 req 04 val 1100
[  587.976046][ T4254] pwc: recv_control_msg error -71 req 04 val 1200
[  587.993317][ T4254] pwc: Registered as video103.
[  588.005113][ T4254] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34
[  588.034080][ T4254] usb 1-1: USB disconnect, device number 40
[  588.037322][ T4251] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  588.546535][ T6484] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  589.994160][T10367] loop4: detected capacity change from 0 to 64
[  590.007074][ T4251] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  590.026239][ T4251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.036326][ T4251] usb 4-1: Product: syz
[  590.040548][ T4251] usb 4-1: Manufacturer: syz
[  590.045282][ T4251] usb 4-1: SerialNumber: syz
[  590.055065][ T4251] usb 4-1: config 0 descriptor??
[  590.113035][T10367] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  590.276266][ T6484] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  590.285367][ T6484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.336782][ T4251] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  590.358757][ T6484] usb 2-1: Product: syz
[  590.401730][ T6484] usb 2-1: Manufacturer: syz
[  590.470991][ T6484] usb 2-1: SerialNumber: syz
[  590.594257][ T6484] usb 2-1: config 0 descriptor??
[  590.940633][ T6484] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  591.036027][ T4239] usb 36-1: device descriptor read/8, error -110
[  591.204033][   T26] audit: type=1326 audit(1758967960.134:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209350dec9 code=0x7ffc0000
[  591.243664][T10383] misc userio: Invalid payload size
[  591.260834][   T26] audit: type=1326 audit(1758967960.134:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209350dec9 code=0x7ffc0000
[  591.291787][   T26] audit: type=1326 audit(1758967960.164:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209350dec9 code=0x7ffc0000
[  591.616520][   T26] audit: type=1326 audit(1758967960.164:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209350dec9 code=0x7ffc0000
[  591.686314][ T4239] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  592.383935][   T26] audit: type=1326 audit(1758967960.174:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f209350dec9 code=0x7ffc0000
[  592.461385][T10392] loop0: detected capacity change from 0 to 32768
[  592.484716][ T4239] usb usb36-port1: attempt power cycle
[  592.502138][   T26] audit: type=1326 audit(1758967960.174:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209350dec9 code=0x7ffc0000
[  592.559675][   T26] audit: type=1326 audit(1758967960.174:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f209350dec9 code=0x7ffc0000
[  592.854267][   T26] audit: type=1326 audit(1758967960.174:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10380 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f209350dec9 code=0x7ffc0000
[  592.856233][ T4239] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  592.877057][ T6484] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  592.946365][ T6484] usb 2-1: USB disconnect, device number 39
[  593.265276][ T4239] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  593.445916][ T6386] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  593.565102][ T4239] usb usb36-port1: unable to enumerate USB device
[  593.806012][ T6386] usb 3-1: Using ep0 maxpacket: 16
[  593.976040][ T4251] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  594.003800][ T4251] usb 4-1: USB disconnect, device number 43
[  594.116210][ T6386] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  594.223911][ T6386] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  594.354719][T10419] loop1: detected capacity change from 0 to 512
[  597.028302][T10419] EXT4-fs warning (device loop1): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop1.
[  597.275832][T10422] loop2: detected capacity change from 0 to 512
[  597.289555][T10424] misc userio: Invalid payload size
[  597.296270][ T6386] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  597.296301][ T6386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.320990][ T6386] usb 3-1: can't set config #1, error -71
[  597.322033][ T6386] usb 3-1: USB disconnect, device number 35
[  597.435371][T10427] loop1: detected capacity change from 0 to 64
[  597.482981][T10427] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  597.551535][T10422] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1651: bg 0: block 248: padding at end of block bitmap is not set
[  597.630485][T10422] Quota error (device loop2): write_blk: dquota write failed
[  597.649065][T10422] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  597.666723][T10422] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.1651: Failed to acquire dquot type 1
[  597.730795][T10422] EXT4-fs (loop2): 1 truncate cleaned up
[  597.772404][T10422] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  597.816369][T10422] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  599.803772][   T26] audit: type=1800 audit(1758967968.734:126): pid=10443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1653" name="file1" dev="loop1" ino=5 res=0 errno=0
[  599.890839][T10446] loop2: detected capacity change from 0 to 32768
[  599.978807][T10446] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  599.987702][T10446] BTRFS info (device loop2): setting nodatacow, compression disabled
[  599.995894][T10446] BTRFS info (device loop2): enabling ssd optimizations
[  600.002857][T10446] BTRFS info (device loop2): setting datacow
[  600.008985][T10446] BTRFS info (device loop2): doing ref verification
[  600.015604][T10446] BTRFS info (device loop2): force clearing of disk cache
[  600.022818][T10446] BTRFS info (device loop2): turning off barriers
[  600.029290][T10446] BTRFS info (device loop2): using spread ssd allocation scheme
[  600.036999][T10446] BTRFS info (device loop2): using free space tree
[  600.043517][T10446] BTRFS info (device loop2): has skinny extents
[  600.450546][T10446] BTRFS info (device loop2): clearing free space tree
[  600.458384][T10446] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  600.468236][T10446] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  600.514487][T10446] BTRFS info (device loop2): creating free space tree
[  600.526964][T10446] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  600.547594][T10446] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  601.224968][T10483] misc userio: Invalid payload size
[  601.807326][T10493] overlayfs: overlapping lowerdir path
[  602.464121][ T4254] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  602.891189][ T4254] usb 4-1: Using ep0 maxpacket: 16
[  603.039489][ T4254] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  603.061380][ T4254] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  603.266529][ T4254] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  603.299918][ T4254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.335612][ T4254] usb 4-1: Product: syz
[  603.356937][ T4254] usb 4-1: Manufacturer: syz
[  603.378368][ T4254] usb 4-1: SerialNumber: syz
[  603.741352][ T4254] usb 4-1: 0:2 : does not exist
[  603.809746][ T4254] usb 4-1: USB disconnect, device number 44
[  604.102656][T10513] loop4: detected capacity change from 0 to 64
[  604.117957][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  604.289893][T10513] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  604.526401][T10521] device syzkaller0 entered promiscuous mode
[  605.327023][T10518] loop1: detected capacity change from 0 to 4096
[  605.756032][ T6168] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  606.901053][T10534] loop1: detected capacity change from 0 to 32768
[  606.919165][T10534] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1675 (10534)
[  606.952354][T10534] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  606.955935][ T6168] usb 4-1: Using ep0 maxpacket: 8
[  606.961164][T10534] BTRFS info (device loop1): setting nodatacow, compression disabled
[  606.974386][T10534] BTRFS info (device loop1): enabling ssd optimizations
[  606.981417][T10534] BTRFS info (device loop1): setting datacow
[  606.987454][T10534] BTRFS info (device loop1): doing ref verification
[  606.994036][T10534] BTRFS info (device loop1): force clearing of disk cache
[  607.001242][T10534] BTRFS info (device loop1): turning off barriers
[  607.007757][T10534] BTRFS info (device loop1): using spread ssd allocation scheme
[  607.015415][T10534] BTRFS info (device loop1): using free space tree
[  607.022079][T10534] BTRFS info (device loop1): has skinny extents
[  607.256136][ T6168] usb 4-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  607.278506][ T6168] usb 4-1: config 0 interface 0 has no altsetting 0
[  607.343829][ T6168] usb 4-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  607.391923][ T6168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.445267][ T6168] usb 4-1: config 0 descriptor??
[  607.498285][T10534] BTRFS info (device loop1): clearing free space tree
[  607.505160][T10534] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  607.515069][T10534] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  607.543249][T10534] BTRFS info (device loop1): creating free space tree
[  607.550788][T10534] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  607.560421][T10534] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  608.514000][ T6168] usbhid 4-1:0.0: can't add hid device: -71
[  608.520760][ T6168] usbhid: probe of 4-1:0.0 failed with error -71
[  608.554176][ T6168] usb 4-1: USB disconnect, device number 45
[  610.445035][T10582] loop1: detected capacity change from 0 to 512
[  610.510368][T10578] loop0: detected capacity change from 0 to 4096
[  610.524049][T10582] EXT4-fs (loop1): Test dummy encryption mode enabled
[  610.561240][T10582] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  610.646875][ T6574] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  610.654824][T10582] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  610.828375][T10582] EXT4-fs (loop1): 1 truncate cleaned up
[  610.834397][T10582] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  610.915984][ T4246] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  611.093602][ T6574] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  611.130161][ T6574] usb 5-1: config 0 interface 0 has no altsetting 0
[  611.936558][ T4246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  611.950134][ T4246] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  611.959972][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.007329][ T4246] usb 4-1: config 0 descriptor??
[  612.012513][ T6574] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  612.032160][ T6574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.048551][ T4246] pwc: Askey VC010 type 2 USB webcam detected.
[  612.105186][ T6574] usb 5-1: Product: syz
[  612.131537][ T6574] usb 5-1: Manufacturer: syz
[  612.140534][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1680'.
[  612.141969][ T6574] usb 5-1: SerialNumber: syz
[  612.179034][ T6574] usb 5-1: config 0 descriptor??
[  612.218059][ T6574] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  612.239064][ T6574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  612.279861][ T6574] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23)
[  612.317824][ T6574] usb 5-1: USB disconnect, device number 54
[  612.453716][T10601] loop2: detected capacity change from 0 to 512
[  612.487267][ T4246] pwc: recv_control_msg error -32 req 02 val 2b00
[  612.531190][T10601] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  612.542467][T10601] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  612.553973][ T4246] pwc: recv_control_msg error -32 req 02 val 2700
[  612.646201][ T4246] pwc: recv_control_msg error -32 req 02 val 2c00
[  612.696281][ T4246] pwc: recv_control_msg error -32 req 04 val 1000
[  612.749349][ T4246] pwc: recv_control_msg error -32 req 04 val 1300
[  612.798272][ T4246] pwc: recv_control_msg error -32 req 04 val 1400
[  612.846049][ T4246] pwc: recv_control_msg error -32 req 02 val 2000
[  612.875998][ T6386] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  612.886078][ T4246] pwc: recv_control_msg error -32 req 02 val 2100
[  612.926074][ T4246] pwc: recv_control_msg error -32 req 04 val 1500
[  612.970910][ T4246] pwc: recv_control_msg error -32 req 02 val 2500
[  613.016030][ T4246] pwc: recv_control_msg error -32 req 02 val 2400
[  613.022729][T10610] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[  613.029253][T10610] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  613.071858][T10610] vhci_hcd vhci_hcd.0: Device attached
[  613.125990][ T6386] usb 2-1: Using ep0 maxpacket: 8
[  613.274834][T10615] device syzkaller0 entered promiscuous mode
[  613.286143][ T6386] usb 2-1: unable to get BOS descriptor or descriptor too short
[  613.296039][ T4246] pwc: recv_control_msg error -71 req 02 val 2900
[  613.316338][ T4246] pwc: recv_control_msg error -71 req 02 val 2800
[  613.325952][ T4261] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  613.336662][ T4246] pwc: recv_control_msg error -71 req 04 val 1100
[  613.356224][ T4246] pwc: recv_control_msg error -71 req 04 val 1200
[  613.374695][ T4246] pwc: Registered as video103.
[  613.380218][ T6386] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  613.393251][ T4254] usb 34-1: SetAddress Request (14) to port 0
[  613.405954][ T4254] usb 34-1: new SuperSpeed USB device number 14 using vhci_hcd
[  613.416248][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35
[  613.435988][ T6386] usb 2-1: config 1 interface 0 has no altsetting 0
[  613.463408][ T4246] usb 4-1: USB disconnect, device number 46
[  613.619838][ T6386] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.40
[  613.636615][ T6386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.655965][ T6386] usb 2-1: Product: syz
[  613.675509][ T6386] usb 2-1: Manufacturer: syz
[  613.685668][ T6386] usb 2-1: SerialNumber: syz
[  613.741362][ T4261] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  613.765894][ T4261] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  613.805889][ T4261] usb 1-1: config 0 has no interface number 0
[  613.822389][ T4261] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  614.036884][ T4261] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  614.055506][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.084347][ T4261] usb 1-1: Product: syz
[  614.094495][ T4261] usb 1-1: Manufacturer: syz
[  614.107614][T10625] loop3: detected capacity change from 0 to 4096
[  614.114272][ T4261] usb 1-1: SerialNumber: syz
[  614.129372][ T4261] usb 1-1: config 0 descriptor??
[  614.146225][T10613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  614.174306][T10613] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  614.214834][ T4261] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  614.442924][ T4261] usb 1-1: USB disconnect, device number 41
[  614.448984][T10611] vhci_hcd: connection reset by peer
[  614.456658][    T9] vhci_hcd: stop threads
[  614.465999][    T9] vhci_hcd: release socket
[  614.481606][    T9] vhci_hcd: disconnect device
[  614.558311][T10621] loop4: detected capacity change from 0 to 40427
[  614.618919][T10621] F2FS-fs (loop4): invalid crc value
[  614.645064][T10621] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  614.696170][ T6386] usbhid 2-1:1.0: can't add hid device: -71
[  614.702721][ T6386] usbhid: probe of 2-1:1.0 failed with error -71
[  614.754046][ T6386] usb 2-1: USB disconnect, device number 40
[  614.961122][T10621] F2FS-fs (loop4): Start checkpoint disabled!
[  615.118749][T10621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  615.311071][T10621] attempt to access beyond end of device
[  615.311071][T10621] loop4: rw=2049, want=78368, limit=40427
[  615.599301][T10642] tipc: New replicast peer: 10.1.1.2
[  615.604909][T10642] tipc: Enabled bearer <udp:syz2>, priority 10
[  616.378924][T10645] overlayfs: failed to resolve './bus': -2
[  616.409725][ T1412] attempt to access beyond end of device
[  616.409725][ T1412] loop4: rw=2049, want=45104, limit=40427
[  616.554272][T10650] device syzkaller0 entered promiscuous mode
[  617.142733][T10654] device syzkaller0 entered promiscuous mode
[  617.391463][T10658] loop1: detected capacity change from 0 to 4096
[  617.417241][T10660] loop3: detected capacity change from 0 to 4096
[  617.431484][T10662] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  617.438140][T10662] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  617.451726][T10662] vhci_hcd vhci_hcd.0: Device attached
[  617.552599][T10658] EXT4-fs (loop1): Ignoring removed orlov option
[  617.560733][T10658] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  617.614449][T10658] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement.
[  617.726185][ T6574] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  617.756146][ T6386] usb 42-1: SetAddress Request (10) to port 0
[  617.762337][ T6386] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd
[  618.206231][ T6574] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  618.246599][ T6574] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  618.277231][ T6574] usb 5-1: config 0 has no interface number 0
[  618.293644][ T6574] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  618.465997][ T1108] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  618.476405][ T6574] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  618.487018][ T4254] usb 34-1: device descriptor read/8, error -110
[  618.496271][ T6574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.519283][ T6574] usb 5-1: Product: syz
[  618.523585][ T6574] usb 5-1: Manufacturer: syz
[  618.538861][ T6574] usb 5-1: SerialNumber: syz
[  618.550926][ T6574] usb 5-1: config 0 descriptor??
[  618.589785][T10662] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  618.610146][T10662] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  618.653345][ T6574] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  618.726120][ T1108] usb 1-1: Using ep0 maxpacket: 8
[  618.756894][T10682] loop3: detected capacity change from 0 to 256
[  618.792921][T10684] device syzkaller0 entered promiscuous mode
[  618.854256][ T4239] usb 5-1: USB disconnect, device number 55
[  618.856364][T10682] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d)
[  618.860589][ T1108] usb 1-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  618.882439][T10682] exFAT-fs (loop3): error, invalid access to FAT bad cluster (entry 0x00000005)
[  618.886031][T10664] vhci_hcd: connection reset by peer
[  618.906116][ T4254] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  618.924065][ T4254] usb usb34-port1: attempt power cycle
[  618.924192][T10682] exFAT-fs (loop3): Filesystem has been set read-only
[  618.943897][    T9] vhci_hcd: stop threads
[  618.950895][    T9] vhci_hcd: release socket
[  618.956669][    T9] vhci_hcd: disconnect device
[  618.961516][T10682] exFAT-fs (loop3): failed to initialize root inode
[  618.975341][ T1108] usb 1-1: config 0 interface 0 has no altsetting 0
[  618.992758][ T1108] usb 1-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  619.002669][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.024903][ T1108] usb 1-1: config 0 descriptor??
[  619.276133][ T4254] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  619.596070][ T1108] usbhid 1-1:0.0: can't add hid device: -71
[  619.602429][ T4254] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  619.620583][ T1108] usbhid: probe of 1-1:0.0 failed with error -71
[  619.638996][ T4254] usb usb34-port1: unable to enumerate USB device
[  619.754912][ T1108] usb 1-1: USB disconnect, device number 42
[  620.698935][T10701] loop3: detected capacity change from 0 to 4096
[  621.360601][ T6168] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  622.865969][ T6168] usb 1-1: Using ep0 maxpacket: 8
[  623.604399][ T6386] usb 42-1: device descriptor read/8, error -110
[  623.666277][ T6168] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  623.745912][ T6168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.776165][ T6574] usb 4-1: new low-speed USB device number 47 using dummy_hcd
[  623.777188][ T6168] usb 1-1: config 0 descriptor??
[  623.819519][T10725] device syzkaller0 entered promiscuous mode
[  623.936073][ T6168] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  623.956059][ T6168] asix: probe of 1-1:0.0 failed with error -71
[  624.058693][T10728] loop0: detected capacity change from 0 to 128
[  624.066475][ T6386] usb usb42-port1: Cannot enable. Maybe the USB cable is bad?
[  624.078805][ T6168] usb 1-1: USB disconnect, device number 43
[  624.085705][ T6386] usb usb42-port1: attempt power cycle
[  624.156318][ T6574] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  624.188604][ T6574] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  624.226954][ T6574] usb 4-1: config 0 interface 0 has no altsetting 0
[  624.242836][ T6574] usb 4-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00
[  624.261377][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  624.267747][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  624.283886][T10730] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  624.290654][T10730] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  624.303017][ T6574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.321153][ T6574] usb 4-1: config 0 descriptor??
[  624.327445][T10730] vhci_hcd vhci_hcd.0: Device attached
[  624.356241][T10721] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  625.359746][ T6386] usb 42-1: SetAddress Request (12) to port 0
[  625.373907][ T6386] usb 42-1: new SuperSpeed USB device number 12 using vhci_hcd
[  625.436094][ T4239] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  625.576852][T10753] APIC base relocation is unsupported by KVM
[  625.579657][T10753] Disabled LAPIC found during irq injection
[  625.741751][ T6574] wacom 0003:056A:00F4.0011: unknown main item tag 0x0
[  625.836108][ T6574] wacom 0003:056A:00F4.0011: unknown main item tag 0x0
[  625.843047][ T6574] wacom 0003:056A:00F4.0011: unknown main item tag 0x0
[  625.850621][ T6574] wacom 0003:056A:00F4.0011: unknown main item tag 0x0
[  625.860703][ T6574] wacom 0003:056A:00F4.0011: unknown main item tag 0x0
[  625.881480][ T6574] wacom 0003:056A:00F4.0011: hidraw0: USB HID v0.05 Device [HID 056a:00f4] on usb-dummy_hcd.3-1/input0
[  625.901002][T10760] device pim6reg1 entered promiscuous mode
[  625.907707][ T4239] usb 5-1: config 0 has an invalid interface number: 6 but max is 0
[  625.915733][ T4239] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  625.930009][ T4239] usb 5-1: config 0 has no interface number 0
[  625.936680][ T4239] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  625.953856][ T4246] usb 4-1: USB disconnect, device number 47
[  626.015275][T10765] fido_id[10765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  626.906188][ T4239] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  626.915518][ T1108] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  626.932878][ T4239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.962401][ T4239] usb 5-1: Product: syz
[  626.972525][ T4239] usb 5-1: Manufacturer: syz
[  626.982656][ T4239] usb 5-1: SerialNumber: syz
[  627.059652][ T4239] usb 5-1: config 0 descriptor??
[  627.161573][T10730] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  627.189616][T10730] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  627.959046][ T4239] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  627.977863][T10733] vhci_hcd: connection reset by peer
[  627.983647][ T4314] vhci_hcd: stop threads
[  627.985812][ T4239] usb 5-1: USB disconnect, device number 56
[  628.026470][ T4246] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  628.038082][ T4314] vhci_hcd: release socket
[  628.065037][ T4314] vhci_hcd: disconnect device
[  628.186204][ T1108] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  628.203511][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.242261][ T1108] usb 2-1: Product: syz
[  628.252392][ T1108] usb 2-1: Manufacturer: syz
[  628.265959][ T4246] usb 4-1: Using ep0 maxpacket: 8
[  628.274520][ T1108] usb 2-1: SerialNumber: syz
[  628.316938][ T1108] usb 2-1: config 0 descriptor??
[  628.386156][ T4246] usb 4-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  628.421935][ T4246] usb 4-1: config 0 interface 0 has no altsetting 0
[  628.445598][ T4246] usb 4-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  628.484003][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.523159][ T4246] usb 4-1: config 0 descriptor??
[  628.588228][ T1108] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  628.632831][T10782] loop4: detected capacity change from 0 to 40427
[  628.669722][T10782] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  628.697666][T10782] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  628.751711][T10782] F2FS-fs (loop4): invalid crc value
[  628.800087][T10782] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  628.957521][T10782] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  628.965959][T10782] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  629.066012][ T4246] usbhid 4-1:0.0: can't add hid device: -71
[  629.072095][ T4246] usbhid: probe of 4-1:0.0 failed with error -71
[  629.119974][ T4246] usb 4-1: USB disconnect, device number 48
[  629.317201][ T1108] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  630.349379][ T4251] usb 2-1: USB disconnect, device number 41
[  630.442419][T10806] loop3: detected capacity change from 0 to 4096
[  630.532391][T10806] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  630.578367][T10806] EXT4-fs (loop3): Test dummy encryption mode enabled
[  630.653735][T10806] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  631.236142][ T6386] usb 42-1: device descriptor read/8, error -110
[  631.517712][T10820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1758'.
[  632.225494][ T4184] attempt to access beyond end of device
[  632.225494][ T4184] loop4: rw=2049, want=45104, limit=40427
[  632.244146][   T26] audit: type=1326 audit(1758968000.454:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10816 comm="syz.3.1758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfe9315ec9 code=0x0
[  632.576372][ T6386] usb usb42-port1: Cannot enable. Maybe the USB cable is bad?
[  632.594394][ T6386] usb usb42-port1: unable to enumerate USB device
[  632.646440][ T4246] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  632.706497][ T4251] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  632.975898][ T4251] usb 3-1: Using ep0 maxpacket: 16
[  633.096053][ T4251] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  633.120945][ T4251] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  633.136896][ T4246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  633.154915][ T4246] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  633.170107][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.214241][ T4246] usb 4-1: config 0 descriptor??
[  633.298249][ T4246] pwc: Askey VC010 type 2 USB webcam detected.
[  633.321899][ T4251] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  633.335329][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.353242][ T4251] usb 3-1: Product: syz
[  633.365086][ T4251] usb 3-1: Manufacturer: syz
[  633.381803][ T4251] usb 3-1: SerialNumber: syz
[  633.718601][ T4246] pwc: recv_control_msg error -32 req 02 val 2b00
[  633.741963][ T4251] usb 3-1: 0:2 : does not exist
[  633.768126][ T4246] pwc: recv_control_msg error -32 req 02 val 2700
[  633.812306][ T4246] pwc: recv_control_msg error -32 req 02 val 2c00
[  633.816130][ T4251] usb 3-1: USB disconnect, device number 36
[  633.866027][ T4246] pwc: recv_control_msg error -32 req 04 val 1000
[  633.906028][ T4246] pwc: recv_control_msg error -32 req 04 val 1300
[  633.946029][ T4246] pwc: recv_control_msg error -32 req 04 val 1400
[  633.996104][ T4246] pwc: recv_control_msg error -32 req 02 val 2000
[  634.037164][ T4246] pwc: recv_control_msg error -32 req 02 val 2100
[  634.077190][ T4246] pwc: recv_control_msg error -32 req 04 val 1500
[  634.117193][ T4246] pwc: recv_control_msg error -32 req 02 val 2500
[  634.130083][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  634.156006][ T4246] pwc: recv_control_msg error -32 req 02 val 2400
[  634.360773][T10850] syz.0.1770[10850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  634.360865][T10850] syz.0.1770[10850] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  634.422010][   T26] audit: type=1326 audit(1758968003.354:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.0.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  634.436058][ T4246] pwc: recv_control_msg error -71 req 02 val 2900
[  634.498568][T10852] overlayfs: overlapping lowerdir path
[  634.536296][ T4246] pwc: recv_control_msg error -71 req 02 val 2800
[  634.552941][   T26] audit: type=1326 audit(1758968003.354:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.0.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  634.596334][ T4246] pwc: recv_control_msg error -71 req 04 val 1100
[  634.626058][ T4246] pwc: recv_control_msg error -71 req 04 val 1200
[  634.655204][   T26] audit: type=1326 audit(1758968003.354:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.0.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  634.679903][ T4246] pwc: Registered as video103.
[  634.707281][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39
[  634.783050][   T26] audit: type=1326 audit(1758968003.354:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.0.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  634.812152][ T4246] usb 4-1: USB disconnect, device number 49
[  634.895991][   T26] audit: type=1326 audit(1758968003.454:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.0.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  635.014587][   T26] audit: type=1326 audit(1758968003.454:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10849 comm="syz.0.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  635.334686][T10862] syz.3.1772[10862] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  635.335195][T10862] syz.3.1772[10862] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  637.625817][T10872] device syzkaller0 entered promiscuous mode
[  637.815947][ T4246] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  638.930828][T10879] loop1: detected capacity change from 0 to 32768
[  638.939836][ T4246] usb 4-1: Using ep0 maxpacket: 8
[  639.000058][T10879] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1779 (10879)
[  639.056396][ T4246] usb 4-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  639.083292][ T4246] usb 4-1: config 0 interface 0 has no altsetting 0
[  639.393758][ T4246] usb 4-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  639.466264][ T4251] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  639.643929][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.675689][ T4246] usb 4-1: config 0 descriptor??
[  639.683015][   T26] audit: type=1326 audit(1758968008.624:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  639.761708][   T26] audit: type=1326 audit(1758968008.644:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  639.784310][T10879] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  639.793279][T10879] BTRFS info (device loop1): setting nodatacow, compression disabled
[  639.801447][T10879] BTRFS info (device loop1): enabling ssd optimizations
[  639.808463][T10879] BTRFS info (device loop1): setting datacow
[  639.814459][T10879] BTRFS info (device loop1): doing ref verification
[  639.821098][T10879] BTRFS info (device loop1): force clearing of disk cache
[  639.828270][T10879] BTRFS info (device loop1): turning off barriers
[  639.834734][T10879] BTRFS info (device loop1): using spread ssd allocation scheme
[  639.842440][T10879] BTRFS info (device loop1): using free space tree
[  639.849001][T10879] BTRFS info (device loop1): has skinny extents
[  639.855500][ T4251] usb 3-1: Using ep0 maxpacket: 16
[  639.862905][   T26] audit: type=1326 audit(1758968008.654:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  639.897938][   T26] audit: type=1326 audit(1758968008.654:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  639.922035][   T26] audit: type=1326 audit(1758968008.664:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  639.975241][   T26] audit: type=1326 audit(1758968008.664:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10888 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3505188785 code=0x7ffc0000
[  640.014408][   T26] audit: type=1326 audit(1758968008.694:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  640.037506][   T26] audit: type=1326 audit(1758968008.694:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  640.060484][   T26] audit: type=1326 audit(1758968008.694:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  640.084310][   T26] audit: type=1326 audit(1758968008.714:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10885 comm="syz.0.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  640.168391][ T4251] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  640.189768][ T4251] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  640.307262][T10912] overlayfs: failed to resolve './file1': -2
[  640.526661][ T4251] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  640.638131][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.699999][T10879] BTRFS info (device loop1): clearing free space tree
[  640.707189][T10879] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  640.716939][T10879] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  640.776127][T10879] BTRFS info (device loop1): creating free space tree
[  640.789649][T10879] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  640.799313][T10879] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  640.866101][ T4246] usbhid 4-1:0.0: can't add hid device: -71
[  640.872995][ T4246] usbhid: probe of 4-1:0.0 failed with error -71
[  640.919942][ T4246] usb 4-1: USB disconnect, device number 50
[  640.943658][ T4251] usb 3-1: Product: syz
[  640.947920][ T4251] usb 3-1: Manufacturer: syz
[  640.956497][ T4251] usb 3-1: SerialNumber: syz
[  641.326306][ T4251] usb 3-1: 0:2 : does not exist
[  641.388875][ T4251] usb 3-1: USB disconnect, device number 37
[  641.626676][ T4343] udevd[4343]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  641.655480][ T4246] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  642.021698][ T4246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  642.032371][ T4246] usb 4-1: config 0 interface 0 has no altsetting 0
[  642.196143][ T4246] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  642.209947][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.220878][ T4246] usb 4-1: Product: syz
[  642.225259][ T4246] usb 4-1: Manufacturer: syz
[  642.242993][ T4246] usb 4-1: SerialNumber: syz
[  642.269121][ T4246] usb 4-1: config 0 descriptor??
[  642.318796][ T4246] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  642.338383][ T4246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  642.388859][ T4246] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23)
[  643.125436][T10947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  643.132007][T10947] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  643.192272][T10947] vhci_hcd vhci_hcd.0: Device attached
[  645.005590][ T6484] usb 4-1: USB disconnect, device number 51
[  645.060523][T10960] loop1: detected capacity change from 0 to 32768
[  645.081655][   T21] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  645.280390][T10960] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1799 (10960)
[  645.506140][T10951] vhci_hcd: connection closed
[  645.506817][ T1412] vhci_hcd: stop threads
[  645.530141][ T1412] vhci_hcd: release socket
[  645.545527][ T1412] vhci_hcd: disconnect device
[  645.561453][   T21] usb 3-1: device descriptor read/all, error -71
[  645.570391][T10965] loop3: detected capacity change from 0 to 4096
[  646.033541][T10960] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  646.042507][T10960] BTRFS info (device loop1): setting nodatacow, compression disabled
[  646.050711][T10960] BTRFS info (device loop1): enabling ssd optimizations
[  646.057756][T10960] BTRFS info (device loop1): setting datacow
[  646.063769][T10960] BTRFS info (device loop1): doing ref verification
[  646.070491][T10960] BTRFS info (device loop1): force clearing of disk cache
[  646.077710][T10960] BTRFS info (device loop1): turning off barriers
[  646.084141][T10960] BTRFS info (device loop1): using spread ssd allocation scheme
[  646.091822][T10960] BTRFS info (device loop1): using free space tree
[  646.098368][T10960] BTRFS info (device loop1): has skinny extents
[  646.944770][T10960] BTRFS error (device loop1): open_ctree failed: -12
[  647.098757][ T4347] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4347)
[  647.329816][T11007] loop4: detected capacity change from 0 to 512
[  647.566070][T11014] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  647.572668][T11014] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  647.648549][T11014] vhci_hcd vhci_hcd.0: Device attached
[  649.135207][ T6397] usb 36-1: SetAddress Request (22) to port 0
[  649.141673][ T4246] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  649.149504][ T6397] usb 36-1: new SuperSpeed USB device number 22 using vhci_hcd
[  649.181408][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'.
[  649.268628][T11025] loop4: detected capacity change from 0 to 4096
[  650.396209][ T4246] usb 2-1: config 0 has an invalid interface number: 6 but max is 0
[  650.556012][ T4246] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  650.566255][T11016] vhci_hcd: connection reset by peer
[  650.572241][ T1236] vhci_hcd: stop threads
[  650.577738][ T1236] vhci_hcd: release socket
[  650.596120][ T1236] vhci_hcd: disconnect device
[  650.606537][ T4246] usb 2-1: config 0 has no interface number 0
[  650.612681][ T4246] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  650.686063][ T4246] usb 2-1: string descriptor 0 read error: -71
[  650.708762][ T4246] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  650.749119][ T4246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.820582][T11053] fuse: Unknown parameter '0x0000000000000009'
[  650.854024][T11053] fuse: Unknown parameter '0x0000000000000008‡ëò	àgçÙ%wAÝÕ˘Év…¾û'
[  650.873346][ T4246] usb 2-1: config 0 descriptor??
[  650.895144][T11055] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  650.915465][ T4246] usb 2-1: can't set config #0, error -71
[  650.953113][ T4246] usb 2-1: USB disconnect, device number 42
[  651.053362][T11055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  651.115458][T11055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  651.199321][T10934] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  651.326115][ T4246] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  651.438109][T10934] usb 3-1: Using ep0 maxpacket: 16
[  651.621259][T10934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.621293][T10934] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  651.621314][T10934] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  651.621343][T10934] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  651.621364][T10934] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  651.716064][ T4246] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  651.716103][ T4246] usb 2-1: config 0 interface 0 has no altsetting 0
[  651.776235][T10934] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  651.776260][T10934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  651.776275][T10934] usb 3-1: SerialNumber: syz
[  651.800018][T11053] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  651.820300][T10934] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  651.821010][T10934] cdc_acm: probe of 3-1:1.0 failed with error -12
[  651.886060][ T4246] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  651.886095][ T4246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.886118][ T4246] usb 2-1: Product: syz
[  651.886134][ T4246] usb 2-1: Manufacturer: syz
[  651.886150][ T4246] usb 2-1: SerialNumber: syz
[  651.888138][ T4246] usb 2-1: config 0 descriptor??
[  651.937964][ T4246] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  651.978362][ T4246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  652.041001][ T4246] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 error while loading driver (-23)
[  652.236188][T11066] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1827'.
[  653.150909][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  653.159281][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  653.172651][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  653.180136][T11070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  653.483387][T11070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  653.503463][T11072] netlink: 'syz.0.1828': attribute type 12 has an invalid length.
[  653.516440][T11072] netlink: 'syz.0.1828': attribute type 29 has an invalid length.
[  653.524494][T11072] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1828'.
[  653.741843][ T6484] usb 2-1: USB disconnect, device number 43
[  654.246058][ T6397] usb 36-1: device descriptor read/8, error -110
[  654.511639][T11082] loop4: detected capacity change from 0 to 256
[  655.413613][T11084] loop3: detected capacity change from 0 to 32768
[  655.497541][T11082] FAT-fs (loop4): Directory bread(block 64) failed
[  655.504127][T11082] FAT-fs (loop4): Directory bread(block 65) failed
[  655.534130][T11082] FAT-fs (loop4): Directory bread(block 66) failed
[  655.544930][T11082] FAT-fs (loop4): Directory bread(block 67) failed
[  655.573006][T11084] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  655.576229][ T6397] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  655.581783][T11084] BTRFS info (device loop3): setting nodatacow, compression disabled
[  655.598292][T11084] BTRFS info (device loop3): enabling ssd optimizations
[  655.605268][T11084] BTRFS info (device loop3): setting datacow
[  655.609864][T11082] FAT-fs (loop4): Directory bread(block 68) failed
[  655.611409][T11084] BTRFS info (device loop3): doing ref verification
[  655.624395][T11084] BTRFS info (device loop3): force clearing of disk cache
[  655.631532][T11084] BTRFS info (device loop3): turning off barriers
[  655.637970][T11084] BTRFS info (device loop3): using spread ssd allocation scheme
[  655.645606][T11084] BTRFS info (device loop3): using free space tree
[  655.652147][T11084] BTRFS info (device loop3): has skinny extents
[  655.714014][ T6397] usb usb36-port1: attempt power cycle
[  655.736622][T11082] FAT-fs (loop4): Directory bread(block 69) failed
[  655.748677][T11089] loop1: detected capacity change from 0 to 4096
[  655.775155][T11082] FAT-fs (loop4): Directory bread(block 70) failed
[  655.791213][T11082] FAT-fs (loop4): Directory bread(block 71) failed
[  655.817212][T11082] FAT-fs (loop4): Directory bread(block 72) failed
[  655.823793][T11082] FAT-fs (loop4): Directory bread(block 73) failed
[  655.987655][ T4246] usb 3-1: USB disconnect, device number 40
[  656.270274][ T6397] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  656.338264][T11097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1833'.
[  657.126415][ T6397] usb usb36-port1: Cannot enable. Maybe the USB cable is bad?
[  657.142503][T11097] IPv6: Can't replace route, no match found
[  657.166061][ T6397] usb usb36-port1: unable to enumerate USB device
[  657.265112][T11110] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  657.271689][T11110] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  657.373676][ T1236] attempt to access beyond end of device
[  657.373676][ T1236] loop4: rw=1, want=1480, limit=256
[  657.396306][T11084] BTRFS info (device loop3): clearing free space tree
[  657.403178][T11084] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  657.413112][T11084] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  657.450489][T11084] BTRFS info (device loop3): creating free space tree
[  657.459075][T11084] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  657.468704][T11084] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  657.478996][T11110] vhci_hcd vhci_hcd.0: Device attached
[  657.509686][ T1236] attempt to access beyond end of device
[  657.509686][ T1236] loop4: rw=1, want=1832, limit=256
[  657.568937][ T6397] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  657.712984][ T1236] attempt to access beyond end of device
[  657.712984][ T1236] loop4: rw=1, want=18384, limit=256
[  657.799101][   T26] kauditd_printk_skb: 75 callbacks suppressed
[  657.799115][   T26] audit: type=1326 audit(1758968026.734:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  657.969735][ T4986] usb 38-1: SetAddress Request (3) to port 0
[  657.976404][ T4986] usb 38-1: new SuperSpeed USB device number 3 using vhci_hcd
[  658.066040][ T6397] usb 3-1: config 0 has an invalid interface number: 6 but max is 0
[  658.101905][T11125] syz.0.1839[11125] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  658.102406][T11125] syz.0.1839[11125] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  658.220458][   T26] audit: type=1326 audit(1758968026.734:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  659.059677][ T6397] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  659.522222][ T6397] usb 3-1: config 0 has no interface number 0
[  659.532496][ T6397] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  659.552055][   T26] audit: type=1326 audit(1758968026.764:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  659.574970][   T26] audit: type=1326 audit(1758968026.764:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  659.601386][ T6397] usb 3-1: string descriptor 0 read error: -71
[  659.612550][ T6397] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  659.621788][T11116] vhci_hcd: connection reset by peer
[  659.627741][ T4314] vhci_hcd: stop threads
[  659.632018][ T4314] vhci_hcd: release socket
[  659.651621][ T6397] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.670283][   T26] audit: type=1326 audit(1758968026.764:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  659.698292][ T6397] usb 3-1: config 0 descriptor??
[  659.704595][ T4314] vhci_hcd: disconnect device
[  659.740253][ T6397] usb 3-1: can't set config #0, error -71
[  659.749776][ T6397] usb 3-1: USB disconnect, device number 41
[  659.763006][   T26] audit: type=1326 audit(1758968026.764:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  660.299030][T11134] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  660.590177][   T26] audit: type=1326 audit(1758968026.764:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  660.654238][T11134] FAT-fs (loop5): unable to read boot sector
[  660.668840][   T26] audit: type=1326 audit(1758968026.764:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  660.705947][   T26] audit: type=1326 audit(1758968026.764:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  660.754412][   T26] audit: type=1326 audit(1758968026.764:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3505155ec9 code=0x7ffc0000
[  661.121758][T11151] fuse: Unknown parameter '0x0000000000000009'
[  663.056136][ T4986] usb 38-1: device descriptor read/8, error -110
[  663.083960][T11163] loop2: detected capacity change from 0 to 32768
[  663.191225][T11163] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1848 (11163)
[  663.218749][T11163] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  663.227595][T11163] BTRFS info (device loop2): setting nodatacow, compression disabled
[  663.235797][T11163] BTRFS info (device loop2): enabling ssd optimizations
[  663.242986][T11163] BTRFS info (device loop2): setting datacow
[  663.249066][T11163] BTRFS info (device loop2): doing ref verification
[  663.255688][T11163] BTRFS info (device loop2): force clearing of disk cache
[  663.262883][T11163] BTRFS info (device loop2): turning off barriers
[  663.269374][T11163] BTRFS info (device loop2): using spread ssd allocation scheme
[  663.277053][T11163] BTRFS info (device loop2): using free space tree
[  663.283563][T11163] BTRFS info (device loop2): has skinny extents
[  663.329146][T11165] overlayfs: fs on './file1/file0' does not support file handles, falling back to index=off,nfs_export=off.
[  663.567898][ T4986] usb usb38-port1: Cannot enable. Maybe the USB cable is bad?
[  663.586046][ T4986] usb usb38-port1: attempt power cycle
[  663.926718][ T4986] usb usb38-port1: Cannot enable. Maybe the USB cable is bad?
[  664.408844][ T4986] usb usb38-port1: Cannot enable. Maybe the USB cable is bad?
[  664.417182][ T4986] usb usb38-port1: unable to enumerate USB device
[  664.536794][T11163] BTRFS info (device loop2): clearing free space tree
[  664.543638][T11163] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  664.553352][T11163] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  664.571698][T11163] BTRFS info (device loop2): creating free space tree
[  664.579243][T11163] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  664.588835][T11163] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  665.880475][T11206] loop1: detected capacity change from 0 to 4096
[  666.095980][ T6397] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  666.345905][ T6397] usb 5-1: Using ep0 maxpacket: 8
[  666.466136][ T6397] usb 5-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  666.522153][ T6397] usb 5-1: config 0 interface 0 has no altsetting 0
[  666.529092][ T4246] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  666.726387][ T6397] usb 5-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  666.735592][ T6397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.760008][ T6397] usb 5-1: config 0 descriptor??
[  666.846006][ T4246] usb 4-1: Using ep0 maxpacket: 16
[  666.966756][ T4246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  667.115870][ T4246] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  667.946209][ T4246] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  667.956163][ T6397] usbhid 5-1:0.0: can't add hid device: -71
[  667.963475][ T6397] usbhid: probe of 5-1:0.0 failed with error -71
[  667.970733][ T4246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.000760][ T6397] usb 5-1: USB disconnect, device number 58
[  668.010820][ T4246] usb 4-1: Product: syz
[  668.031713][ T4246] usb 4-1: Manufacturer: syz
[  668.045571][ T4246] usb 4-1: SerialNumber: syz
[  668.154537][T11232] fuse: Unknown parameter '0x0000000000000009'
[  668.188495][T11232] fuse: Unknown parameter '0x0000000000000008‡ëò	àgçÙ%wAÝÕ˘Év…¾û'
[  668.476118][ T4246] usb 4-1: 0:2 : does not exist
[  669.312109][ T6386] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  669.427337][ T4246] usb 4-1: USB disconnect, device number 52
[  669.626492][ T4347] udevd[4347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  669.676083][ T6386] usb 3-1: Using ep0 maxpacket: 16
[  670.616010][ T6386] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  670.662737][ T6386] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  670.705570][ T6386] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  670.874717][T11252] loop4: detected capacity change from 0 to 512
[  670.883027][ T6386] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  670.894146][ T6386] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  671.630771][T11252] EXT4-fs (loop4): Ignoring removed orlov option
[  671.659592][T11252] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  671.782341][T11252] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  671.945007][T11252] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.1872: corrupted in-inode xattr
[  671.998239][T11252] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1872: couldn't read orphan inode 15 (err -117)
[  672.307579][T11252] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  672.821823][T11271] loop3: detected capacity change from 0 to 1024
[  673.692964][T11271] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000]
[  673.740980][T11271] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.1877: Freeing blocks not in datazone - block = 0, count = 4096
[  673.775531][T11271] EXT4-fs (loop3): Remounting filesystem read-only
[  673.790836][T11271] EXT4-fs (loop3): 1 orphan inode deleted
[  673.799226][T11271] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,noblock_validity,grpjquota=,init_itable=0x0000000000000006,debug,errors=remount-ro,. Quota mode: writeback.
[  674.428019][ T4246] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  674.461023][ T6386] usb 3-1: string descriptor 0 read error: -71
[  674.475396][ T6386] usb 3-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40
[  674.496204][ T6386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  674.546095][ T6386] usb 3-1: can't set config #1, error -71
[  674.567536][ T6386] usb 3-1: USB disconnect, device number 42
[  674.686061][ T4246] usb 5-1: Using ep0 maxpacket: 8
[  674.806823][ T4246] usb 5-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  674.828437][T11290] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  674.835001][T11290] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  674.847652][T11290] vhci_hcd vhci_hcd.0: Device attached
[  675.310545][ T4246] usb 5-1: config 0 interface 0 has no altsetting 0
[  675.319029][ T4246] usb 5-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  675.373555][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.547257][ T4246] usb 5-1: config 0 descriptor??
[  675.556068][ T6386] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  675.634159][   T21] usb 38-1: SetAddress Request (7) to port 0
[  675.640946][   T21] usb 38-1: new SuperSpeed USB device number 7 using vhci_hcd
[  677.812243][T11297] vhci_hcd: connection reset by peer
[  677.819158][ T4314] vhci_hcd: stop threads
[  677.823435][ T4314] vhci_hcd: release socket
[  677.831862][ T4314] vhci_hcd: disconnect device
[  677.846592][ T6386] usb 3-1: unable to read config index 0 descriptor/all
[  677.869826][ T6386] usb 3-1: can't read configurations, error -71
[  677.883923][T11327] device syzkaller0 entered promiscuous mode
[  678.080285][ T4246] usbhid 5-1:0.0: can't add hid device: -71
[  678.090748][ T4246] usbhid: probe of 5-1:0.0 failed with error -71
[  679.285576][ T4246] usb 5-1: USB disconnect, device number 59
[  679.318048][   T26] kauditd_printk_skb: 22 callbacks suppressed
[  679.318058][   T26] audit: type=1326 audit(1758968048.254:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda5aa3ec9 code=0x7ffc0000
[  679.395513][T11340] device syzkaller0 entered promiscuous mode
[  679.474450][T11347] ------------[ cut here ]------------
[  679.481063][   T26] audit: type=1326 audit(1758968048.284:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda5aa3ec9 code=0x7ffc0000
[  679.503918][T11347] WARNING: CPU: 0 PID: 11347 at arch/x86/kvm/x86.c:10363 kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  679.514996][T11347] Modules linked in:
[  679.534773][   T26] audit: type=1326 audit(1758968048.284:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda5aa3ec9 code=0x7ffc0000
[  679.566065][T11347] CPU: 1 PID: 11347 Comm: syz.1.1899 Not tainted syzkaller #0
[  679.573583][   T26] audit: type=1326 audit(1758968048.284:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda5aa3ec9 code=0x7ffc0000
[  679.601140][   T26] audit: type=1326 audit(1758968048.284:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda5aa3ec9 code=0x7ffc0000
[  679.626140][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  679.654797][T11347] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  679.666273][   T26] audit: type=1326 audit(1758968048.284:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdda5aa3ec9 code=0x7ffc0000
[  679.695466][T11347] Code: e8 41 43 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 26 43 ad 00 e9 c8 ed ff ff e8 3c db 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c
[  679.721164][   T26] audit: type=1326 audit(1758968048.284:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda5aa3ec9 code=0x7ffc0000
[  679.748744][T11347] RSP: 0018:ffffc90002f9fc30 EFLAGS: 00010283
[  679.758722][T11347] RAX: ffffffff810eefe4 RBX: ffff88807ed98000 RCX: 0000000000080000
[  679.770404][T11347] RDX: ffffc90004174000 RSI: 000000000000041f RDI: 0000000000000420
[  679.780508][   T26] audit: type=1326 audit(1758968048.284:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.1.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda5aa3ec9 code=0x7ffc0000
[  679.807238][T11347] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad323e
[  679.815464][T11347] R10: fffffbfff1ad323e R11: 1ffffffff1ad323d R12: ffff88804d65a001
[  679.828970][T11347] R13: 1ffff1100fdb301e R14: ffff88807ed980f0 R15: ffff88804d65a000
[  679.839779][T11347] FS:  00007fdda3d0b6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  679.851369][T11347] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  679.861504][T11347] CR2: 000055e1efc58168 CR3: 00000000751ae000 CR4: 00000000003526f0
[  679.881749][T11347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  679.903506][T11347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  679.915605][T11347] Call Trace:
[  679.921171][T11347]  <TASK>
[  679.924269][T11347]  ? __lock_acquire+0x7c60/0x7c60
[  679.933527][T11347]  kvm_vcpu_ioctl+0x887/0xb80
[  679.941252][T11347]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  679.950295][T11347]  ? bpf_lsm_file_ioctl+0x5/0x10
[  679.955479][T11347]  ? security_file_ioctl+0x7c/0xa0
[  679.963654][T11347]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  679.973313][T11347]  __se_sys_ioctl+0xfa/0x170
[  679.981264][T11347]  do_syscall_64+0x4c/0xa0
[  679.989313][T11347]  ? clear_bhb_loop+0x30/0x80
[  679.994258][T11347]  ? clear_bhb_loop+0x30/0x80
[  680.001719][T11347]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  680.011542][T11347] RIP: 0033:0x7fdda5aa3ec9
[  680.018768][T11347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  680.044329][T11347] RSP: 002b:00007fdda3d0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  680.053238][T11347] RAX: ffffffffffffffda RBX: 00007fdda5cfafa0 RCX: 00007fdda5aa3ec9
[  680.068855][T11347] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  680.078017][T11347] RBP: 00007fdda5b26f91 R08: 0000000000000000 R09: 0000000000000000
[  680.086120][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  680.094110][T11347] R13: 00007fdda5cfb038 R14: 00007fdda5cfafa0 R15: 00007ffd91d8e968
[  680.102164][T11347]  </TASK>
[  680.105224][T11347] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  680.112513][T11347] CPU: 1 PID: 11347 Comm: syz.1.1899 Not tainted syzkaller #0
[  680.119976][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  680.130047][T11347] Call Trace:
[  680.133343][T11347]  <TASK>
[  680.136275][T11347]  dump_stack_lvl+0x168/0x230
[  680.140992][T11347]  ? show_regs_print_info+0x20/0x20
[  680.146225][T11347]  ? load_image+0x3b0/0x3b0
[  680.150780][T11347]  panic+0x2c9/0x7f0
[  680.154697][T11347]  ? bpf_jit_dump+0xd0/0xd0
[  680.159212][T11347]  ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  680.165075][T11347]  __warn+0x248/0x2b0
[  680.169065][T11347]  ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  680.174892][T11347]  report_bug+0x1b7/0x2e0
[  680.179278][T11347]  handle_bug+0x3a/0x70
[  680.183455][T11347]  exc_invalid_op+0x16/0x40
[  680.187964][T11347]  asm_exc_invalid_op+0x16/0x20
[  680.192840][T11347] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  680.199293][T11347] Code: e8 41 43 ad 00 e9 03 e9 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d5 ed ff ff 4c 89 ff e8 26 43 ad 00 e9 c8 ed ff ff e8 3c db 68 00 <0f> 0b e9 31 fd ff ff 44 89 f9 80 e1 07 38 c1 0f 8c d2 ed ff ff 4c
[  680.218943][T11347] RSP: 0018:ffffc90002f9fc30 EFLAGS: 00010283
[  680.225043][T11347] RAX: ffffffff810eefe4 RBX: ffff88807ed98000 RCX: 0000000000080000
[  680.233043][T11347] RDX: ffffc90004174000 RSI: 000000000000041f RDI: 0000000000000420
[  680.241040][T11347] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1ad323e
[  680.249050][T11347] R10: fffffbfff1ad323e R11: 1ffffffff1ad323d R12: ffff88804d65a001
[  680.257162][T11347] R13: 1ffff1100fdb301e R14: ffff88807ed980f0 R15: ffff88804d65a000
[  680.265166][T11347]  ? kvm_arch_vcpu_ioctl_run+0x1bc4/0x1f40
[  680.270994][T11347]  ? __lock_acquire+0x7c60/0x7c60
[  680.276065][T11347]  kvm_vcpu_ioctl+0x887/0xb80
[  680.280784][T11347]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  680.286473][T11347]  ? bpf_lsm_file_ioctl+0x5/0x10
[  680.291447][T11347]  ? security_file_ioctl+0x7c/0xa0
[  680.296600][T11347]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  680.302254][T11347]  __se_sys_ioctl+0xfa/0x170
[  680.306850][T11347]  do_syscall_64+0x4c/0xa0
[  680.311278][T11347]  ? clear_bhb_loop+0x30/0x80
[  680.315958][T11347]  ? clear_bhb_loop+0x30/0x80
[  680.320656][T11347]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  680.326584][T11347] RIP: 0033:0x7fdda5aa3ec9
[  680.331025][T11347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  680.350770][T11347] RSP: 002b:00007fdda3d0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  680.359185][T11347] RAX: ffffffffffffffda RBX: 00007fdda5cfafa0 RCX: 00007fdda5aa3ec9
[  680.367164][T11347] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  680.375159][T11347] RBP: 00007fdda5b26f91 R08: 0000000000000000 R09: 0000000000000000
[  680.383151][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  680.391127][T11347] R13: 00007fdda5cfb038 R14: 00007fdda5cfafa0 R15: 00007ffd91d8e968
[  680.399115][T11347]  </TASK>
[  680.402519][T11347] Kernel Offset: disabled
[  680.407189][T11347] Rebooting in 86400 seconds..