last executing test programs:

1m2.672789906s ago: executing program 0 (id=495):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_read_part_table(0x635, &(0x7f0000000000)="$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")
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m1.455168234s ago: executing program 0 (id=499):
r0 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0)
syz_emit_ethernet(0x69, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c)

59.921669478s ago: executing program 0 (id=500):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03fccef3e273"})

58.525061021s ago: executing program 0 (id=502):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff457d101c2eb4b78c660e677df701905b901fab4afaaf755a3f6a004", "036c47c6780824d1cbf7966d61fdcf335263bd9bffbcc24910ed71038259ca171ce1a311ef54ec32d71e14ef3dd077e9b48b0000000000000000000000001fe9", "f200d300d3560200000500000000000000000100", [0x200]})
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1)

56.136397844s ago: executing program 0 (id=515):
mkdirat(0xffffffffffffff9c, 0x0, 0xc)
pipe2$9p(0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x25, 0x1, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x80882, 0x0)
r1 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x10ec25, 0x10000, 0x2, 0x4000032f}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1a, 0x6007, @fd_index, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001800)=""/211, 0xd3}, {&(0x7f000001b000)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/110, 0x6e}, {0x0}], 0x4})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x7d)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1}, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
utimes(&(0x7f0000000540)='./file0\x00', &(0x7f0000000600))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0xff94, 0x2a, 0x10, 0x70bd28, 0x25dfd3fd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0xf}, {0x4, 0x7}}}, 0xffffffffffffffbd}, 0x1, 0x0, 0x0, 0x44}, 0x20008004)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000)

55.379435235s ago: executing program 0 (id=511):
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x1ea, &(0x7f0000000700)="$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")
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
getpid()
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xfffffffe})
ptrace$pokeuser(0x6, r2, 0x358, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)

54.124593047s ago: executing program 32 (id=511):
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x1ea, &(0x7f0000000700)="$eJzsmT2LE0EYx/8zu9nkDhFsLGwUPPCEu83uRuUai/MLKNz51hm89Tjdu0huiyQgGGxs/Bh+BYtUKezsbLVQQbAwpfXI7DzZDHkjiQkKPj+4ud/OPPvMSzZPIAHDMP8t377++vLm1s7+FoAz2ECR+n84gxhpxX8ukXx6+/7k7IvOcD4dK4x2Z11Dd9dBSq6UUvbYBv3fh8z9LiSukt+HgE/+CBL3yGMIPCR/anltjSSJ/ce15ODJURIHugl1E+mmYs/vAui1BQ4AlGh9who/bbaeVZMkrg9LQfXnGRmaV6adnQu4vV2Jm9b56dfgwetXbX3dP5vAOr8QEiF5BQJ75Dsowvd9/QiYI7H2f8Ed5Hdm2f8icruwnDwejJzbnha8tZS5FhQPwN+bfW5p/xvLWI4Iq2dNi35D5z3ne50Po3d9X+XCLq12y6CaPTL0cf3PMntUBMbGDOqnLrlXrPrkws3rRzk9fl4+bba2j46rh/FhfBJFlRvBtSC4HpWz2mzaKfWvlNWndSt/YUKsJzw0qmlaDxtAWg/z68i0VsXde1f7md0js/onsXnZ5NCPSrbt4vg5BP2Zz0Ftm87ExTMMwzAMwzAMwzAMwzAMw8zFRYjsW1D6oUophZdmRNlEd7K+3wEAAP//zPhXeA==")
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
getpid()
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xfffffffe})
ptrace$pokeuser(0x6, r2, 0x358, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil)

49.693768325s ago: executing program 2 (id=525):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x150b, &(0x7f0000003180)="$eJzs3Au0T9X2OPA511pbh8Q3yXvNNTff5LFIkjwSEkmSJEleCUmSJCFxyCsJScg7yTskr5C836+8k+RKkiQkJFn/oVt/997u73Z/v/twxz3zM8YeZ82z95zfuc8853z33mOc83X7gZXrVqlYm5nhH4J//JAKACkA0AcAMgNABAAlspTIAjgE0mtM/cdeRPxzPTDlcncgLieZf9om80/bZP5pm8w/bZP5p20y/7RN5p+2yfyFSMu2TM15tWxpd/v3Pf8Hef7/H0fe//+LHCoy6vN1Ra7t8L9IkfmnbTL/tE3mn7bJ/NM2mX/aJvP/LxcBVPgbu2X+aZvMX4i07HI/f5bt8m6X+/tPCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTacDZcYgDg1/Xl7ksIIYQQQgghhBD/POGKP43SXb5GhBBCCCGEEEII8S+EoECDgQjSwRWQAukhA1wJGeEqyASZIQFXQxa4BrLCtZANskMOyAm5IDfkAQsEDhhiyAv5IAnXQX64HgpAQSgEhcFDESgKN0AxuBGKw01QAm6GknALlILSUAbKwq1QDm6D8lABKsLtUAnugMpQBe6EqnAXVIO7oTrcAzXgXqgJ90EtuB9qwwNQBx6EuvAQ1IOHoT40gIbQCBr/n/Kfh87wAnSBrpAK3aA7vAg9oCf0gt7QB16CvvAy9INXoD8MgIHwKgyC12AwvA5DYCgMgzdgOIyAkTAKRsMYGAtvwjh4C8bD2zABJsIkmAxTYCpMg3dgOsyAmfAuzIL3YDbMgbkwD+bD+7AAFsIi+AAWw4ewBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFPoKtsA22ww7YCbtgN3wMe+AT2Aufwj747C/zM//t/DN/kd8BAQEVKjRoMB2mwxRMwQyYATNiRsyEmTCBCcyCWTArZsVsmA1zYA7MhbkwD+ZBQkJGxryYF5OYxPyYHwtgASyEhdCjx6JYFIvhjVgci2MJLIElsSSWwtJYGstiWSyH5bA8lseKWBErYSWsjJXxTrwT78JqWA2rY3WsgTWwJtbEWlgLa2NtrIN1sC7WxXpYD+tjfWyIDbExNsYm2ASbYlNsjs2xBbbAltgSW2ErbI2tsQ22wbbYFtthO2yP7bEDdsSO+Dw+jy/gC9gVK6lu2B27Yw/sgb2wN/bGl7Avvowv4yvYHwfgQHwVX8XXcDCexiE4FIfhMCynRuBIHIWsxuBYHIvjcByOx/E4ASfiRJyMU3AqTsNpOB1n4Ax8F2fhe/gezsE5OA/n43xcgAtxES7CxXgGl+BSXIbLcQWuxBW4GtfgalyH63EdbsSNuBk340f4EW7DbbgDd+Au3IUf48f4CX6C/XEf7sP9uB8P4AE8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4Ak/iCTyFp/A0nsGzeBbP4Tk8j8/m+rLOroJr+4O6yCij0ql0KkWlqAwqg8qoMqpMKpNKqITKorKorCqryqayqRwqh8qlcqk8Ko8iRYpVrPKqvCqpkiq/yq8KqAKqkCqkvPKqqCqqiqliqrgqrkqom1VJdYsqpUqrZr6sKqvKqea+vKqgKqqKqpK6Q1VWVVQVVVVVVdVUNVVdVVc1VA1VU92naqlu2AsfUBcnU1cNwHpqINZXDVRD1Ui9ho+oJmowNlXNVHP1mBqKQ7ClauJbqSdVazUS26in1Sh8RrVTY7C9ek51UB1VJ/W86qya+i6/Pu5Uk7GH6ql6qd5qOt6hLk6ssnpF9VcD1ED1qpqHr6nB6nU1RA1Vw9QbargaoUaqUWq0GqPGqjfVOPWWGq/eVhPURDVJTVZT1FQ1Tb2jpqsZaqZ6V81S76nZao6aq+ap+ep9tUAtVIvUB2qx+lAtUUvVMrVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVEfqa1qm9qudqidapfarT5We9Qnaq/6VO1Tn6n96g/qgPpcHVRfqEPqS3VYfaWOqK/VUfWNOqa+VcfVCXVSfadOqe/VaXVGnVU/qHPqR3Ve/aQuqKBAo1Zaa6MjnU5foVN0ep1BX6lBX6Uz6cw6oa/WWfQ1Oqu+VmfT2XUOnVPn0rl1Hm01aadZxzqvzqeT+jqdX1+vC+iCupAurL0uoovqG3QxfaMurm/SJfTNuqS+RZfSpXUZXVbfqsvp23R5XUFX1LfrSvoOXVlX0XfqqvouXU3fravre3QNfa+uqe/TtfT9urZ+QNfRD+q6+iFdTz+s6+sGuqFupBvrR3QT/ahuqpvp5vox3UI/rlvqJ3Qr/aRurZ/SbfTTuq1+RrfTz+r2+jndQXfUnfRP+oIOuovuqlN1N91dv6h76J66l+6t++iXdF/9su6nX9H99QA9UL+qB+nX9GD9uh6ih+ph+g09XI/QI/UoPVqP0WP1m3qcfkuP12/rCXqinqQn6yl6qu71S6WZf0f+W38lv9/Pr75Zb9Ef6a16m96ud+idepferXfrPXqP3qv36n16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+pg+rk/oH/R3+pT+Xp/WZ/QZ/YM+p8/p8798DcCgUUYbYyKTzlxhUkx6k8FcaTKaq0wmk9kkzNUmi7nGZDXXmmwmu8lhcppcJrfJY6wh4wyb2OQ1+UzSXGfym+tNAVPQFDKFjTdFTFFzwz+c/3v9NTaNTRPTxDQ1TU1z09y0MC1MS9PStDKtTGvT2rQxbUxb09a0M+1Me9PedDAdTCfTyXQ2nU0X08WkmlTT3bxoepieppfpbfqYl0xf09f0M/1Mf9PfDDQDzSAzyAw2g80QM8QMM8PMcDPcjDQjzWgz2ow1Y804M86MN+PNBDPBTDKTzBQzxUwz08x0M93MNDPNLDPLzDazzVwz18w3880Cs8AsMovMYrPYLDFLzVKz3Cw3K81Ks9qsNmvNWrPerDcbzUazxGwxW8xWs9VsN9vNTrPT7Da7zR6zx+w1e80+s8/sN/vNAXPAHDQHzSFzyBw2h80Rc8QcNUfNMXPMHDfHzUlz0pwyp8xpc9qcNWfNOXPOnDfnzQVz4eJlX6QiFZnIROmidFFKlBJliDJEGaOMUaYoU5SIElGWKEuUNbo2yhZlj3JEOaNcUe4oFWxEkYs4iqO8Ub4oGV0X5Y+ujwpEBaNCUeHIR0WiotENUbHoxqh4dFNUIro5KhndEpWKSkdlorLRrVG56LaofFQhqhjdHlWK7ogqR1WiO6Oq0V1RtejuqHp0T1QjujeqGd0X1Yruj2pHD0R1ogejutFDUb3o4ah+1CBqGDWKGv9T64dwOvujvovtalNtN9vdvmh72J62l+1t+9iXbF/7su1nX7H97QA70L5qB9nX7GD7uh1ih9ph9g073I6wI+0oO9qOsWPtm3acfcuOt2/bCXainWQn2yl2qp1m37HT7Qw7075rZ9n37Gw7x8618+x8+75dYBfaRfYDu9h+aJfYpXaZXW5X2JV2lV1t19i1dp1dbzfYjXaT3Wy32I/sVrvNbrc77E67y+62H9s99hO7135q99nP7H77B3vAfm4P2i/sIfulPWy/skfs1/ao/cYes9/a4/aEPWm/s6fs9/a0PWPP2h/sOfujPW9/shdsuHhxf/HtnQwZSkfpKIVSKANloIyUkTJRJkpQgrJQFspKWSkbZaMclINyUS7KQ3noIiamvJSXkpSk/JSfClABKkSFyJOnolSUilExKk7FqQSVoJJUkkpRKSpDZehWupVuo9uoAlWg2+l2uoPuoCpUhapSVapG1ag6VacaVINqUk2qRbWoNtWmOlSH6lJdqkf1qD7Vp4bUkBpTY2pCTagpNaXm1JxaUAtqSS2pFbWi1tSa2lAbakttqR21o/bUnjpQB+pEnagzdaYu1IVSKZW6U3fqQT2oF/WiPtSH+lJf6kf9qD/1p4E0kAbRIBpMg2kIDaVh9AYNpxE0kkbRaBpDY2ksjaNxNJ7G0wSaQJNoEk2hKTSNptF0mk4zaSbNolk0m2bTXJpL82k+LaAFtIgW0WJaTEtoCS2jZbSCVtAqWkVraA2to3W0gTbQJtpEW2gLbaWttJ22007aSbtpN+2hPbSX9tI+2kf7aT8doAN0kA7SITpEh+kwHaEjdJSO0jE6RsfpOJ2kk3SKTtFpOk1n6Sydox/pPP1EFyhQilOQwV3pMrqrXCaX2aW49O5iHAHAxTiHy+lyudwuj7Mum8v+ZzE55wq4gq6QK+y8K+KKuht+E5dypV0ZV9bd6sq521z538RV3V2umrvbVXf3uCruzj+La7h7XU33kKvlHna1XQNXxzVydd1Drp572NV3DVxD18i1cI+7lu4J18o96Vq7p34TL3AL3Rq31q1z690e94k7635wR9zX7pz70XVxXV0f95Lr6152/dwrrr8b8Jt4mHvDDXcj3Eg3yo12Y34TT3KT3RQ31U1z77jpbsZv4vnufTfLLXKz3Rw31837Ob7Y0yL3gVvsPnRL3FK3zC13K9xKt8qt/v+9Lncb3Sa32e12H7utbpvb7na4nW7Xz/HF89jrPnX73GfusPvKHXCfu4PuqDvkvvw5vnh+R9037pj71h13J9xJ95075b53p92Zn8//4rl/535yF1xwwMiKNRuOOB1fwSmcnjPwlZyRr+JMnJkTfDVn4Ws4K1/L2Tg75+CcnItzcx62TOyYOea8nI+TfB3n5+u5ABfkQlyYPRfhonwDF+MbuTjfxCX4Zi7Jt3ApLs1luCzfyuX4Ni7PFbgi386VQuDKXIXv5Kp8F1fju7k638M1+F6uyfdxLb6fa/MDXIcf5Lr8ENfjh7k+N+CG3Igb8yPchB/lptyMm/Nj3IIf55b8BLfiJ7k1P8Vt+Gluy89wO36W2/Nz3IE7cid+njvzC9yFu3Iqd+Pu/CL34J7ci3tzH36J+/LL3I9f4f48gAfyqzyIX+PB/DoP4aE8jN/g4TyCR/IoHs1jeCy/yeP4LR7Pb/MEnsiTeDJP4ak8jd/h6TyDZ/K7PIvf49k8h+fyPJ7P7/MCXsiL+ANezB/yEl7Ky3g5r+CVvIpX8xpey+t4PW/gjbyJN/MW/oi38jbezjt4J+/i3fwx7+FPeC9/yvv4M97Pf+AD/Dkf5C/4EH/Jh/krPsJf81H+ho/xt3ycT/BJ/o5P8fd8ms/wWf6Bz/GPfJ5/4gscGGKMVaxjE0dxuviKOCVOH2eIr4wzxlfFmeLMcSK+Os4SXxNnja+Ns8XZ4xxxzjhXnDvOE9uYYhdzHMd543xxMr4uzh9fHxeIC8aF4sKxj4vEReMb4mLxjXHx+Ka4RHxzXDK+JYbU0vFD95SNb43LxbfF5eMKccX49rhSfEdcOa4S3xlXje+Kq8V3x9Xje+Li8b1xzfi+uFZ8f1w7fiCuEz8Y140fiuvFD8f14wZxw7hR3Dh+JG4SPxo3jZvFzePH4hbx43HL+Im4Vfxk3Dp+6nf3p8bd4u7xi/GLcQh3q1/uE5MLkguTi5IfJBcnP0wuSS5NLksuT65IrkyuSq5OrkmuTa5Lrk9uSG5MbkpuToZQ5Qrw6JXX3vjIp/NX+BSf3mfwV/qM/iqfyWf2CX+1z+Kv8Vn9tT6bz+5z+Jw+l8/t83jryTvPPvZ5fT6f9Nf5/P56X8AX9IV8Ye99EV/UN/KNfWPfxD/qm/pmvrl/zD/mH/eP+yf8E/5J39o/5dv4p31b/4xv55/1z/rnfAff0Xfyz/vO/gXfxXf1qT7Vd/fdfQ/fw/fyvXwf38f39X19P9/P9/f9/UA/0A/yg/xgP9gP8UP8MD/MD/fD/Ug/0o/2o/1YP9aP8+P8eD/eT/AT/CQ/yU/xU/w0P81P99P9TD/Tzyowy8/2s/1cP9fP9/P9Ar/AL/KL/GK/2C/xS/wyv8yv8Cv8Kr/Kr/Fr/Dq/zm/wG/wmv8lv8Vv8Vr/Vb/fb/U6/0+/2u/0ev8fv9Xv9Pr/P7/f7/QF/wB/0X/hD/kt/2H/lj/iv/VH/jT/mv/XH/Ql/0n/nT/nv/Wl/xp/1P/hz/kd/3v/kL/jgxybeTIxLvJUYn3g7MSExMTEpMTkxJTE1MS3xTmJ6YkZiZuLdxKzEe4nZiTmJuYl5ifmJ9xMLEgsTixIfJBYnPkwsSSxNLEssT6xIrEyEkHtrHPKGfCEZrgv5w/WhQCgYCoXCwYcioWi4IRQLN4bi4aZQItwcSoZbQqlQOpQJD4f6oUFoGBqFxuGR0CQ8GpqGZqF5eCy0CI+HluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIHUOn8HzoHF4IXULXkBq6he7hxdAj9Ay9Qu/QJ7wU+oaXQ7/wSugfBoSB4dUwKLwWBofXw5AwNAwLb4ThYUQYGUaF0WFMGBveDOPCW2F8eDtMCBPDpDA5TAlTw7TwTpgeZoSZ4d0wK7wXZoc5YW6YF+aH98OCsDAsCh+ExeHDsCQsDcvC8rAirAyrwuqwJqwN68L6sCFsDJvC5rAlfBS2hm1he9gRdoZdYXf4OOwJn4S94dOwL3wW9oc/hAPh83AwfBEOhS/D4fBVOBK+DkfDN+FY+DYcDyfCyfBdOBW+D6fDmXA2/BDOhR/D+fBTuCB/syaEEEII8XfRv7O/21/5XDoA+PWWqDsAXLUt56G/rLkh2x/XPVWuFgkAeLJr+wd+3SpVSk1N/eXYJRqifHMAIPHn9X+Nl0JzeBxaQTMo9lf766k6nuPfqZ+8GSDDn+SkwKX4Uv0b/4f6jzw2bEHJ+GyWv1F/DkCBfJdy0sOl+FL94v9D/exNfqf/9J+PBWj6JzkZ4VJ8qX5ReBSeglZ/dqQQQgghhBBCCPFHPVWZtr93/3zx/jyXuZRzBVyKf+/+XAghhBBCCCGEEJffMx07PfFIq1bN2v59C/zlucD/LksWsvjvWaT/5UfnP6Wff9Hicv5WEkIIIYQQQvwrXLro//1j8d/RkBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIkQb9O/6d2OU+RyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOJy+38BAAD//z/nMuk=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x19, r0}, 0x94)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94)
socket$alg(0x26, 0x5, 0x0)

48.108287963s ago: executing program 2 (id=527):
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

44.92458392s ago: executing program 2 (id=531):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x13f, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1}}, 0x20)

44.592487037s ago: executing program 2 (id=533):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff457d101c2eb4b78c660e677df701905b901fab4afaaf755a3f6a004", "036c47c6780824d1cbf7966d61fdcf335263bd9bffbcc24910ed71038259ca171ce1a311ef54ec32d71e14ef3dd077e9b48b0000000000000000000000001fe9", "f200d300d3560200000500000000000000000100", [0x200]})
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1)

42.761608985s ago: executing program 2 (id=537):
creat(0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, "ec"}]}}, 0x0}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x22002)

42.067433551s ago: executing program 2 (id=538):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kexec_load(0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r9 = accept$alg(r8, 0x0, 0x0)
write$binfmt_script(r9, &(0x7f0000000600), 0xfec8)
recvmmsg(r9, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/105, 0x69}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000000640)={0x0, 0x989680})

41.688185631s ago: executing program 33 (id=538):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
kexec_load(0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r9 = accept$alg(r8, 0x0, 0x0)
write$binfmt_script(r9, &(0x7f0000000600), 0xfec8)
recvmmsg(r9, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/105, 0x69}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000740)=""/135, 0x87, 0x2000000}}, {{&(0x7f00000006c0), 0x80, 0x0, 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000000640)={0x0, 0x989680})

14.829423842s ago: executing program 4 (id=594):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000040)='./bus\x00', 0x18, &(0x7f0000000300)={[{@space_cache_v1}, {@nossd_spread}, {@ref_verify}, {@nodatacow}, {@clear_cache}, {@noacl}, {@nossd}, {@barrier}, {@ref_verify}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x2)
unlink(&(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x800, 0x0)

11.599352553s ago: executing program 1 (id=600):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x579, &(0x7f0000000680)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x40, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

11.290747948s ago: executing program 1 (id=601):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20)
r3 = socket(0x2, 0x2, 0x1)
bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e)

9.824682216s ago: executing program 4 (id=603):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]})
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(r0, &(0x7f000000b500)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}], 0x1}}], 0x1, 0x8804)
sendmmsg$inet6(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005)

9.493849053s ago: executing program 3 (id=604):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
syz_open_dev$vim2m(0x0, 0x2, 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setrlimit(0xb, &(0x7f0000000040)={0x0, 0x5})
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1)
close(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x398}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, 0x0)
syz_mount_image$qnx6(&(0x7f0000009e00), &(0x7f0000000000)='./file0\x00', 0x20c800, &(0x7f0000000040), 0x0, 0x9e0d, &(0x7f0000013c40)="$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")
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)

8.114039554s ago: executing program 3 (id=606):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=@delchain={0x140, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x7c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x7, 0x7, 0x1, 0x4}, {0xf3d0, 0xeb, 0x30, 0x2}, {0x7bd, 0x7, 0xdf, 0x3616}, {0x0, 0xb, 0x81, 0x1}, {0x81, 0x80, 0x40, 0x3}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x80, 0x8, 0xa, 0x7fff}, {0xe5fe, 0x10, 0x0, 0x5}, {0x400, 0xf, 0x81, 0x28e49d38}, {0x1, 0xff, 0xef, 0x5}, {0xe68, 0x7, 0x2}, {0xfff0, 0x9c, 0x30, 0xb2}, {0x8000, 0x8, 0x1, 0xa4}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_route={{0xa}, {0x68, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x5c, 0x6, [@m_vlan={0x58, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x21, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

8.04191972s ago: executing program 3 (id=607):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x0)
pwrite64(r0, &(0x7f0000000000)="9d", 0x1, 0x8fff)
write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0x1bc)

8.03788251s ago: executing program 4 (id=608):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0x108)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet(0x2, 0x2, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
fchdir(0xffffffffffffffff)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x7}]})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x0, 0x303, 0x4, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x44000080)

7.962330637s ago: executing program 3 (id=609):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x579, &(0x7f0000000680)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x40, 0x0, 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

7.54344688s ago: executing program 1 (id=610):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200))

6.915813141s ago: executing program 3 (id=611):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40)

6.231837316s ago: executing program 1 (id=612):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2)
mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setgroups(0x0, 0x0)
lseek(0xffffffffffffffff, 0x10000000005, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
signalfd(r0, 0x0, 0x0)
syz_usb_connect(0x6, 0x36, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

5.887939834s ago: executing program 5 (id=613):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0)
sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

4.932133331s ago: executing program 5 (id=614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, r3)
ptrace(0x10, r3)
ptrace$cont(0x20, r3, 0x1000000ffffffff, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1)
openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)

3.579052871s ago: executing program 5 (id=615):
socket$kcm(0xa, 0x3, 0x11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x0)
r2 = socket$kcm(0x23, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r3, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000940)={r3, r3})

3.235516888s ago: executing program 4 (id=616):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]})
socket$nl_route(0x10, 0x3, 0x0)
sendmmsg$inet6(r0, &(0x7f000000b500)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}], 0x1}}], 0x1, 0x8804)
sendmmsg$inet6(r0, &(0x7f0000003640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040005)

3.108539009s ago: executing program 5 (id=617):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=@delchain={0x140, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x7c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x7, 0x7, 0x1, 0x4}, {0xf3d0, 0xeb, 0x30, 0x2}, {0x7bd, 0x7, 0xdf, 0x3616}, {0x0, 0xb, 0x81, 0x1}, {0x81, 0x80, 0x40, 0x3}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x80, 0x8, 0xa, 0x7fff}, {0xe5fe, 0x10, 0x0, 0x5}, {0x400, 0xf, 0x81, 0x28e49d38}, {0x1, 0xff, 0xef, 0x5}, {0xe68, 0x7, 0x2}, {0xfff0, 0x9c, 0x30, 0xb2}, {0x8000, 0x8, 0x1, 0xa4}]}}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x70, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x5c, 0x6, [@m_vlan={0x58, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x21, 0x6, "4536d5ba67cb41f3417191a0b4758169ba997e9dbec50e599419b7f290"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2.993656708s ago: executing program 1 (id=618):
r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0xc0001, 0x0)
writev(r0, &(0x7f0000001880)=[{&(0x7f0000000400)='{', 0x1}], 0x1)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket(0x10, 0x3, 0x3b7)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
shmctl$SHM_STAT(0x0, 0xd, 0x0)
r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0)
r5 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
fsmount(r5, 0x0, 0xf)
fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000840)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @empty}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e21, @empty}}]}, 0x1fffc)
syz_emit_vhci(&(0x7f0000001e00)=ANY=[@ANYBLOB="2136077dfa7a74abaaaa"], 0xa)
ftruncate(r4, 0x80079a0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendfile(r4, r4, 0x0, 0x200001)
r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe)
ioctl$TCFLSH(r7, 0x540b, 0xfffffffffffeffff)
connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x5, 0xfffffffffffffff3, 0xffffffffffffffbe, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0)

2.678782483s ago: executing program 5 (id=619):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x579, &(0x7f0000000680)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x40, 0x0, 0x0, 0x0, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

1.765692327s ago: executing program 4 (id=620):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)

509.892759ms ago: executing program 4 (id=621):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

412.155597ms ago: executing program 3 (id=622):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @main=@item_012={0x1, 0x0, 0x0, "ec"}]}}, 0x0}, 0x0)
openat$mice(0xffffffffffffff9c, 0x0, 0x22002)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x10810, &(0x7f00000027c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="835850937b95f44374162c44566e74fa41f0a28b313f97a9f68319454f7e7c0d3c37cdbeeca8bf114af8f31e2e637af143fe9b3e6e7af3f48152e087701ab266bb0d1fc35ea0ebd15e7cf52aa4365a2ca5e291838f09153c76efc059274b252effacb206089f", @ANYRES8, @ANYRESOCT, @ANYRES64, @ANYBLOB="132a9f652b14782f3459346c81553fbe163d802e0c6a794b91dae006df15e7e75452135bf96775f5f5fb102345b4262b22418af5596178d687cf", @ANYRES64], 0xfd, 0x150f, &(0x7f00000028c0)="$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")
close_range(r0, 0xffffffffffffffff, 0x0)

111.214291ms ago: executing program 5 (id=623):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x7, 0x8c, 0x401, 0x1bcd9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd)

0s ago: executing program 1 (id=624):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket(0x2c, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$mice(0xffffffffffffff9c, 0x0, 0x1)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@alloc_mode_reuse}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x2, 0x5505, &(0x7f0000002480)="$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")
r1 = getpid()
landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x3, 0x1}, 0x18, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1811e000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x183341, 0x2)
ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r5, 0x0, 0xfc01, 0x1000f4)
creat(&(0x7f0000000180)='./bus\x00', 0x9b00000000000009)

kernel console output (not intermixed with test programs):

op3: detected capacity change from 0 to 256
[  100.499306][ T5988] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  100.519865][ T5877] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  100.550950][ T5830] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0003/input/input10
[  100.761508][ T5830] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0003/input/input11
[  100.783407][ T5877] usb 1-1: USB disconnect, device number 2
[  100.807049][ T5877] usblp0: removed
[  101.510317][ T5790] hfs: node 4:3 still has 1 user(s)!
[  101.710861][ T5830] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0003/input/input12
[  102.795986][ T5830] hid-udraw 0003:20D6:CB17.0003: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0
[  102.813194][ T5830] usb 4-1: USB disconnect, device number 2
[  102.892945][ T6029] fido_id[6029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  103.830176][   T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  103.850606][ T6039] loop2: detected capacity change from 0 to 64
[  103.991964][   T28] audit: type=1326 audit(1754232057.103:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.1.54" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee47b8eb69 code=0x0
[  104.024605][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.041702][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.056027][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.074137][   T23] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  104.083945][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.109592][   T23] usb 1-1: config 0 descriptor??
[  104.256525][  T969] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  104.459082][  T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.470360][  T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.481537][  T969] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.494554][  T969] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  104.503927][  T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.515492][  T969] usb 4-1: config 0 descriptor??
[  104.535601][ T6025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.544652][ T6025] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.556580][   T23] usbhid 1-1:0.0: can't add hid device: -71
[  104.563975][   T23] usbhid: probe of 1-1:0.0 failed with error -71
[  104.576498][   T23] usb 1-1: USB disconnect, device number 3
[  104.782203][ T5790] hfs: node 4:3 still has 1 user(s)!
[  104.933578][  T969] hid-udraw 0003:20D6:CB17.0004: unknown main item tag 0x0
[  104.945489][  T969] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0004/input/input13
[  105.127053][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.135662][  T787] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  105.159359][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.218745][ T6042] loop3: detected capacity change from 0 to 256
[  105.227980][  T969] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0004/input/input14
[  105.381727][  T787] usb 3-1: config 1 interface 0 has no altsetting 0
[  105.393525][ T6042] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  105.438145][  T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  106.381022][  T969] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0004/input/input15
[  106.945731][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.972238][  T787] usb 3-1: Product: syz
[  106.976617][  T787] usb 3-1: Manufacturer: syz
[  106.996271][  T787] usb 3-1: SerialNumber: syz
[  107.101624][  T969] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0004/input/input16
[  107.205852][  T969] hid-udraw 0003:20D6:CB17.0004: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0
[  107.260039][  T969] usb 4-1: USB disconnect, device number 3
[  107.388265][  T787] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  107.451924][  T787] usb 3-1: USB disconnect, device number 4
[  107.475937][ T6066] fido_id[6066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  107.499947][  T787] usblp0: removed
[  107.645501][ T6072] loop0: detected capacity change from 0 to 64
[  107.775019][   T28] audit: type=1326 audit(1754232060.883:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6074 comm="syz.1.65" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee47b8eb69 code=0x0
[  109.144468][  T787] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  109.185213][ T5786] hfs: node 4:3 still has 1 user(s)!
[  109.403720][  T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.476492][  T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.490993][  T787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  109.512779][  T787] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  109.523677][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.923510][  T787] usb 3-1: config 0 descriptor??
[  111.063981][  T787] usbhid 3-1:0.0: can't add hid device: -71
[  111.070185][  T787] usbhid: probe of 3-1:0.0 failed with error -71
[  111.106511][  T787] usb 3-1: USB disconnect, device number 5
[  111.317523][   T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  111.466404][ T6114] loop2: detected capacity change from 0 to 64
[  111.516518][ T5855] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  111.694806][   T23] usb 1-1: config 1 interface 0 has no altsetting 0
[  111.709658][   T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  113.742318][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.806765][   T23] usb 1-1: Product: syz
[  113.811013][   T23] usb 1-1: Manufacturer: syz
[  113.815634][   T23] usb 1-1: SerialNumber: syz
[  113.881537][ T5790] hfs: node 4:3 still has 1 user(s)!
[  113.962022][   T28] audit: type=1326 audit(1754232067.073:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.2.80" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046c18eb69 code=0x0
[  114.049839][   T23] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  114.075507][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.097811][   T23] usb 1-1: USB disconnect, device number 4
[  114.115231][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.121959][   T23] usblp0: removed
[  114.126004][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.146917][ T5855] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  114.158863][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.182989][ T5855] usb 4-1: config 0 descriptor??
[  114.279537][ T5855] usbhid 4-1:0.0: can't add hid device: -71
[  114.300941][ T5855] usbhid: probe of 4-1:0.0 failed with error -71
[  114.326660][ T5855] usb 4-1: USB disconnect, device number 4
[  115.576268][  T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  115.813126][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.930214][  T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.155164][  T787] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.262327][  T787] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  116.313254][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.364739][  T787] usb 1-1: config 0 descriptor??
[  116.499559][ T6147] loop2: detected capacity change from 0 to 64
[  116.817006][ T6130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.846559][ T6130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.865680][  T787] usbhid 1-1:0.0: can't add hid device: -71
[  116.885674][  T787] usbhid: probe of 1-1:0.0 failed with error -71
[  116.902871][  T787] usb 1-1: USB disconnect, device number 5
[  117.593941][ T5790] hfs: node 4:3 still has 1 user(s)!
[  117.646866][   T23] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  117.886575][   T28] audit: type=1326 audit(1754232070.983:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.0.95" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5268b8eb69 code=0x0
[  117.917728][  T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  118.125987][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.180396][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.240261][  T787] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  118.317822][  T787] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  118.383704][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.489335][  T787] usb 4-1: config 0 descriptor??
[  118.708474][   T23] usb 2-1: config 1 interface 0 has no altsetting 0
[  118.723418][   T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  118.739402][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.764440][   T23] usb 2-1: Product: syz
[  118.768994][ T6169] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.96'.
[  118.781755][   T23] usb 2-1: Manufacturer: syz
[  118.792207][   T23] usb 2-1: SerialNumber: syz
[  119.204564][   T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  119.213501][  T787] hid-udraw 0003:20D6:CB17.0005: unknown main item tag 0x0
[  120.162141][ T6159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.242189][   T23] usb 2-1: USB disconnect, device number 4
[  120.251033][ T6159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.310667][   T23] usblp0: removed
[  120.344011][ T6159] loop3: detected capacity change from 0 to 256
[  120.451768][ T6159] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  120.520820][  T787] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0005/input/input17
[  120.613141][  T787] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0005/input/input18
[  120.727864][  T787] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0005/input/input19
[  120.805960][  T787] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0005/input/input20
[  120.936843][  T787] hid-udraw 0003:20D6:CB17.0005: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0
[  120.981667][ T6189] binder: 6188:6189 ioctl 4018620d 0 returned -22
[  121.029369][  T787] usb 4-1: USB disconnect, device number 5
[  121.084922][ T6192] loop1: detected capacity change from 0 to 64
[  121.163802][ T6191] fido_id[6191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  121.893967][   T28] audit: type=1326 audit(1754232075.003:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.3.105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  122.125047][ T6202] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.106'.
[  122.152263][ T5793] hfs: node 4:3 still has 1 user(s)!
[  122.398118][   T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  122.549925][ T5830] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  123.070430][ T5830] usb 3-1: config 1 interface 0 has no altsetting 0
[  123.089711][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  123.111256][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.146195][ T5830] usb 3-1: Product: syz
[  123.160678][ T5830] usb 3-1: Manufacturer: syz
[  123.194673][ T5830] usb 3-1: SerialNumber: syz
[  123.498442][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.628134][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.428393][   T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  124.510285][   T27] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  124.556304][ T5830] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  124.575492][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.627879][   T27] usb 1-1: config 0 descriptor??
[  124.673568][   T27] usb 1-1: can't set config #0, error -71
[  124.723911][   T27] usb 1-1: USB disconnect, device number 6
[  124.806936][ T5830] usb 3-1: USB disconnect, device number 6
[  124.817579][ T5830] usblp0: removed
[  124.828994][ T6222] binder: 6221:6222 ioctl 4018620d 0 returned -22
[  125.049592][ T6230] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.116'.
[  125.179029][ T6233] loop2: detected capacity change from 0 to 64
[  125.221922][   T28] audit: type=1326 audit(1754232078.313:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.1.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee47b8eb69 code=0x0
[  125.468527][   T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  126.257983][ T5790] hfs: node 4:3 still has 1 user(s)!
[  126.364253][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.398707][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.448023][   T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  126.496059][   T27] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  126.844633][  T969] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  126.852904][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.429015][  T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.447984][   T27] usb 1-1: config 0 descriptor??
[  127.493359][  T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.561965][  T969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.592780][  T969] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  127.604401][  T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.638270][  T969] usb 2-1: config 0 descriptor??
[  127.711108][ T6254] binder: 6253:6254 ioctl 4018620d 0 returned -22
[  127.902755][   T27] hid-udraw 0003:20D6:CB17.0006: unknown main item tag 0x0
[  127.961698][   T27] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0006/input/input21
[  128.040371][   T27] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0006/input/input22
[  128.068561][ T6243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.100052][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.101249][ T6243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.223693][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.524896][  T969] usbhid 2-1:0.0: can't add hid device: -71
[  128.683684][   T27] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0006/input/input23
[  128.715082][ T6228] loop0: detected capacity change from 0 to 256
[  128.726287][  T969] usbhid: probe of 2-1:0.0 failed with error -71
[  128.787727][  T969] usb 2-1: USB disconnect, device number 5
[  128.865854][ T6228] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  128.883755][   T27] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0006/input/input24
[  128.996993][  T787] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  128.999053][   T27] hid-udraw 0003:20D6:CB17.0006: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0
[  129.211833][  T787] usb 3-1: config 1 interface 0 has no altsetting 0
[  129.222300][ T6265] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.127'.
[  129.243259][  T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  129.272870][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.292276][  T787] usb 3-1: Product: syz
[  129.296700][  T787] usb 3-1: Manufacturer: syz
[  129.301348][  T787] usb 3-1: SerialNumber: syz
[  129.382653][ T6269] loop3: detected capacity change from 0 to 64
[  129.698320][  T787] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  129.714500][  T787] usb 3-1: USB disconnect, device number 7
[  129.919238][   T27] usb 1-1: USB disconnect, device number 7
[  130.445335][   T28] audit: type=1326 audit(1754232083.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6275 comm="syz.0.131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5268b8eb69 code=0x0
[  130.447787][ T5792] hfs: node 4:3 still has 1 user(s)!
[  130.497042][  T787] usblp0: removed
[  130.615310][ T6280] binder: BINDER_SET_CONTEXT_MGR already set
[  130.651061][ T6280] binder: 6279:6280 ioctl 4018620d 2000000002c0 returned -16
[  132.432895][ T6298] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.137'.
[  132.565398][ T6304] loop1: detected capacity change from 0 to 64
[  132.756544][   T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  132.916702][   T27] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  132.930340][   T23] usb 1-1: device descriptor read/64, error -71
[  133.239805][   T27] usb 3-1: config 1 interface 0 has no altsetting 0
[  133.278045][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  133.299740][   T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  133.308026][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  133.426297][   T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  133.447043][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.455099][   T27] usb 3-1: Product: syz
[  133.466929][   T27] usb 3-1: Manufacturer: syz
[  133.471833][   T27] usb 3-1: SerialNumber: syz
[  133.600989][ T5793] hfs: node 4:3 still has 1 user(s)!
[  133.608057][   T23] usb 1-1: device descriptor read/64, error -71
[  133.656239][ T5830] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  133.714240][   T27] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  133.738993][   T23] usb usb1-port1: attempt power cycle
[  133.758145][   T27] usb 3-1: USB disconnect, device number 8
[  133.777711][   T27] usblp0: removed
[  133.849162][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.860337][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.870494][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.883631][ T5830] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  133.892797][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.904320][ T5830] usb 4-1: config 0 descriptor??
[  134.160668][ T6315] binder: BINDER_SET_CONTEXT_MGR already set
[  134.169701][ T6315] binder: 6314:6315 ioctl 4018620d 2000000002c0 returned -16
[  134.186341][   T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  134.217808][   T23] usb 1-1: device descriptor read/8, error -71
[  134.325792][ T5830] hid-udraw 0003:20D6:CB17.0007: unknown main item tag 0x0
[  134.347001][ T5830] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0007/input/input25
[  134.528759][ T5830] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0007/input/input26
[  134.553403][ T6302] loop3: detected capacity change from 0 to 256
[  135.192563][ T5830] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0007/input/input27
[  135.221859][ T6302] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  135.386217][   T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  135.389889][ T5830] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.0007/input/input28
[  135.522054][   T23] usb 1-1: device descriptor read/8, error -71
[  135.622915][ T5830] hid-udraw 0003:20D6:CB17.0007: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0
[  135.647138][   T23] usb usb1-port1: unable to enumerate USB device
[  135.672985][   T28] audit: type=1326 audit(1754232088.773:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.1.147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee47b8eb69 code=0x0
[  135.734340][ T5830] usb 4-1: USB disconnect, device number 6
[  136.017044][ T6330] fido_id[6330]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  136.898598][ T6336] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.149'.
[  138.453546][  T787] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  138.580586][ T6353] binder: BINDER_SET_CONTEXT_MGR already set
[  138.588619][ T6353] binder: 6352:6353 ioctl 4018620d 2000000002c0 returned -16
[  138.670791][  T787] usb 4-1: config 1 interface 0 has no altsetting 0
[  138.691508][  T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  138.705595][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.755898][  T787] usb 4-1: Product: syz
[  138.760592][  T787] usb 4-1: Manufacturer: syz
[  138.765332][  T787] usb 4-1: SerialNumber: syz
[  139.022730][  T787] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  139.054172][  T787] usb 4-1: USB disconnect, device number 7
[  139.081731][  T787] usblp0: removed
[  139.935048][ T5850] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  140.046172][   T28] audit: type=1326 audit(1754232093.123:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.2.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046c18eb69 code=0x0
[  140.087009][ T5850] usb 2-1: device descriptor read/64, error -71
[  140.240171][   T27] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  140.398035][ T5850] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  140.495339][   T27] usb 1-1: config 1 interface 0 has no altsetting 0
[  140.561417][   T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  140.600895][ T5850] usb 2-1: device descriptor read/64, error -71
[  140.620359][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.671378][   T27] usb 1-1: Product: syz
[  140.762239][   T27] usb 1-1: Manufacturer: syz
[  140.772668][   T27] usb 1-1: SerialNumber: syz
[  140.778284][ T5850] usb usb2-port1: attempt power cycle
[  141.021212][   T27] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  141.041979][   T27] usb 1-1: USB disconnect, device number 12
[  141.065843][   T27] usblp0: removed
[  141.196703][ T5850] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  141.237656][ T5850] usb 2-1: device descriptor read/8, error -71
[  141.356412][  T969] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  141.453009][ T6379] binder: 6378:6379 ioctl c0306201 0 returned -14
[  141.506311][ T5850] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  141.739109][  T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.756306][  T969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.774576][ T5850] usb 2-1: device descriptor read/8, error -71
[  141.782078][  T969] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  141.885175][  T969] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  141.907482][ T5850] usb usb2-port1: unable to enumerate USB device
[  142.002000][  T969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.312448][  T969] usb 4-1: config 0 descriptor??
[  143.315772][ T6374] loop3: detected capacity change from 0 to 256
[  143.409347][ T6374] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  143.590668][  T969] usbhid 4-1:0.0: can't add hid device: -71
[  143.783618][   T28] audit: type=1326 audit(1754232096.883:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6401 comm="syz.1.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee47b8eb69 code=0x0
[  143.827385][  T969] usbhid: probe of 4-1:0.0 failed with error -71
[  143.893812][  T969] usb 4-1: USB disconnect, device number 8
[  144.719502][ T6412] binder: 6411:6412 ioctl c0306201 0 returned -14
[  144.756718][ T6412] binder: BINDER_SET_CONTEXT_MGR already set
[  144.764050][ T6412] binder: 6411:6412 ioctl 4018620d 2000000002c0 returned -16
[  144.766395][   T27] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  145.169725][   T27] usb 1-1: config 1 interface 0 has no altsetting 0
[  145.181753][   T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  145.191348][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.199817][   T27] usb 1-1: Product: syz
[  145.204032][   T27] usb 1-1: Manufacturer: syz
[  145.209138][   T27] usb 1-1: SerialNumber: syz
[  145.246483][  T969] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  145.494504][  T969] usb 2-1: device descriptor read/64, error -71
[  145.881171][  T969] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  146.017040][   T27] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  146.031489][   T27] usb 1-1: USB disconnect, device number 13
[  146.039944][   T27] usblp0: removed
[  146.181347][  T969] usb 2-1: device descriptor read/64, error -71
[  146.308781][  T969] usb usb2-port1: attempt power cycle
[  146.906236][  T969] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  146.997243][  T969] usb 2-1: device descriptor read/8, error -71
[  147.474972][  T969] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  148.242677][ T6444] binder: 6443:6444 ioctl c0306201 0 returned -14
[  148.560793][  T969] usb 2-1: device descriptor read/8, error -71
[  148.631842][   T28] audit: type=1326 audit(1754232101.743:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6447 comm="syz.3.188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  148.696558][  T969] usb usb2-port1: unable to enumerate USB device
[  148.726211][ T5877] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  149.058033][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.069179][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.079601][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  149.092671][ T5877] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  149.101985][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.116997][ T5877] usb 3-1: config 0 descriptor??
[  149.550677][ T6435] loop2: detected capacity change from 0 to 256
[  149.615447][ T6435] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  149.666462][  T969] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  150.438666][  T969] usb 2-1: config 1 interface 0 has no altsetting 0
[  150.472369][  T969] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  150.515609][  T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.559624][  T969] usb 2-1: Product: syz
[  150.570912][ T5877] usbhid 3-1:0.0: can't add hid device: -71
[  150.605117][  T969] usb 2-1: Manufacturer: syz
[  150.610796][ T5877] usbhid: probe of 3-1:0.0 failed with error -71
[  150.628104][  T969] usb 2-1: SerialNumber: syz
[  150.654094][ T5877] usb 3-1: USB disconnect, device number 9
[  150.935502][  T969] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  150.984102][  T969] usb 2-1: USB disconnect, device number 14
[  151.003147][  T969] usblp0: removed
[  152.068114][   T28] audit: type=1326 audit(1754232105.183:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6479 comm="syz.3.200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  152.924322][  T787] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  153.108422][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.129699][  T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.185269][  T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  153.221789][  T787] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  153.238410][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.297617][  T787] usb 2-1: config 0 descriptor??
[  153.848875][  T787] hid-udraw 0003:20D6:CB17.0008: unknown main item tag 0x0
[  153.954190][  T787] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0008/input/input29
[  154.083048][ T6478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.210202][ T6478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.225144][  T787] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0008/input/input30
[  154.332393][  T787] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0008/input/input31
[  154.487876][  T787] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0008/input/input32
[  154.590271][   T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  154.696791][  T787] hid-udraw 0003:20D6:CB17.0008: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0
[  154.766216][  T787] usb 2-1: USB disconnect, device number 15
[  154.812234][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.837091][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.871201][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.904655][   T23] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  154.924296][ T6505] fido_id[6505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  154.939333][ T5877] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  154.951423][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.971778][   T23] usb 4-1: config 0 descriptor??
[  155.544284][ T6497] loop3: detected capacity change from 0 to 256
[  155.780934][ T6497] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  156.126371][   T23] usbhid 4-1:0.0: can't add hid device: -71
[  156.132482][   T23] usbhid: probe of 4-1:0.0 failed with error -71
[  156.150045][ T5877] usb 3-1: config 1 interface 0 has no altsetting 0
[  156.158151][   T23] usb 4-1: USB disconnect, device number 9
[  156.168696][ T5877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  156.186254][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.196905][ T5877] usb 3-1: Product: syz
[  156.202536][ T5877] usb 3-1: Manufacturer: syz
[  156.207805][ T5877] usb 3-1: SerialNumber: syz
[  156.275544][   T28] audit: type=1326 audit(1754232109.383:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.1.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee47b8eb69 code=0x0
[  156.848227][ T5877] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  156.862760][ T5877] usb 3-1: USB disconnect, device number 10
[  156.875067][ T5877] usblp0: removed
[  157.616330][  T969] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  157.818528][  T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.839874][  T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.860287][  T969] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.896193][  T969] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  157.915755][  T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.954630][  T969] usb 2-1: config 0 descriptor??
[  158.026290][ T5877] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  158.218098][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.266303][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.280005][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  158.298005][ T5877] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  158.309994][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.521910][ T5877] usb 1-1: config 0 descriptor??
[  158.565777][  T969] hid-udraw 0003:20D6:CB17.0009: unknown main item tag 0x0
[  158.694027][ T6534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.771591][  T969] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0009/input/input33
[  158.819509][ T6534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.934795][   T28] audit: type=1326 audit(1754232112.043:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.2.226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046c18eb69 code=0x0
[  158.960788][  T969] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0009/input/input34
[  159.028107][  T969] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0009/input/input35
[  159.102890][ T6542] loop0: detected capacity change from 0 to 256
[  159.165226][  T969] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0009/input/input36
[  159.221067][ T6542] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  159.267219][  T969] hid-udraw 0003:20D6:CB17.0009: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0
[  159.327043][ T5877] usbhid 1-1:0.0: can't add hid device: -71
[  159.338141][ T5877] usbhid: probe of 1-1:0.0 failed with error -71
[  159.345389][  T969] usb 2-1: USB disconnect, device number 16
[  159.419896][ T5877] usb 1-1: USB disconnect, device number 14
[  159.462611][ T6557] fido_id[6557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  159.744853][   T23] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  160.088287][   T23] usb 4-1: config 1 interface 0 has no altsetting 0
[  160.103397][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  160.129621][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.398934][   T23] usb 4-1: Product: syz
[  160.842588][   T23] usb 4-1: Manufacturer: syz
[  160.938370][   T23] usb 4-1: SerialNumber: syz
[  161.404522][   T23] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  161.490682][   T23] usb 4-1: USB disconnect, device number 10
[  161.515858][   T23] usblp0: removed
[  162.455562][   T28] audit: type=1326 audit(1754232115.563:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6585 comm="syz.3.238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  162.579557][ T6591] loop2: detected capacity change from 0 to 256
[  162.707373][ T6591] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  162.812486][ T5837] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  162.999788][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.011059][ T5837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.020923][ T5837] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.033879][ T5837] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  163.043155][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.053945][ T5837] usb 1-1: config 0 descriptor??
[  163.596843][ T5837] hid-udraw 0003:20D6:CB17.000A: unknown main item tag 0x0
[  163.620931][ T5837] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000A/input/input37
[  164.016783][ T6584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.401095][ T6584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.632528][ T5837] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000A/input/input38
[  164.726909][   T23] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  164.936716][ T5837] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000A/input/input39
[  164.964032][   T23] usb 4-1: config 1 interface 0 has no altsetting 0
[  165.056238][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  165.242246][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.495585][   T23] usb 4-1: Product: syz
[  165.526326][   T23] usb 4-1: Manufacturer: syz
[  165.538333][   T23] usb 4-1: SerialNumber: syz
[  165.698640][ T5837] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.000A/input/input40
[  165.746782][ T5837] hid-udraw 0003:20D6:CB17.000A: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0
[  165.830367][ T5837] usb 1-1: USB disconnect, device number 15
[  166.084935][   T23] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  166.127673][   T23] usb 4-1: USB disconnect, device number 11
[  166.268786][   T23] usblp0: removed
[  166.447373][ T6619] fido_id[6619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  166.815107][   T28] audit: type=1326 audit(1754232119.913:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.2.252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046c18eb69 code=0x0
[  166.985301][ T6626] loop1: detected capacity change from 0 to 256
[  167.093746][ T6626] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  168.596609][   T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  168.999782][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.011715][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.022033][   T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.035612][   T27] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  169.045552][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.056559][   T27] usb 3-1: config 0 descriptor??
[  169.117952][ T5830] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  169.379504][ T5830] usb 2-1: config 1 interface 0 has no altsetting 0
[  169.488620][ T5830] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  169.624175][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.653493][ T5830] usb 2-1: Product: syz
[  169.659538][ T5830] usb 2-1: Manufacturer: syz
[  169.664195][ T5830] usb 2-1: SerialNumber: syz
[  170.023396][   T28] audit: type=1326 audit(1754232123.133:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6657 comm="syz.0.266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5268b8eb69 code=0x0
[  170.123314][ T5830] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  170.155356][ T5830] usb 2-1: USB disconnect, device number 17
[  170.175918][ T5830] usblp0: removed
[  170.353599][   T27] hid-udraw 0003:20D6:CB17.000B: unknown main item tag 0x0
[  170.364765][   T27] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.000B/input/input41
[  170.450464][   T27] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.000B/input/input42
[  170.465055][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.487992][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.489344][   T27] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.000B/input/input43
[  170.679860][   T27] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.000B/input/input44
[  170.757947][   T27] hid-udraw 0003:20D6:CB17.000B: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0
[  170.989893][   T27] usb 3-1: USB disconnect, device number 11
[  171.913032][ T6671] loop0: detected capacity change from 0 to 256
[  171.951670][ T6667] fido_id[6667]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  172.133146][ T6671] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  173.040916][   T27] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  173.048638][   T28] audit: type=1326 audit(1754232126.143:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.2.278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046c18eb69 code=0x0
[  173.562170][   T27] usb 2-1: config 1 interface 0 has no altsetting 0
[  173.660922][   T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  173.670537][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.679787][   T27] usb 2-1: Product: syz
[  173.684169][   T27] usb 2-1: Manufacturer: syz
[  173.689369][   T27] usb 2-1: SerialNumber: syz
[  174.802554][   T27] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  174.854696][   T27] usb 2-1: USB disconnect, device number 18
[  174.903169][   T27] usblp0: removed
[  174.920382][ T6708] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.283'.
[  174.946395][  T787] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  175.004392][ T6710] binder: 6709:6710 ioctl 4018620d 0 returned -22
[  175.096198][  T787] usb 3-1: device descriptor read/64, error -71
[  175.366296][  T787] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  175.526278][  T787] usb 3-1: device descriptor read/64, error -71
[  175.526630][ T5877] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  175.677018][  T787] usb usb3-port1: attempt power cycle
[  175.828784][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.839884][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.849932][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.096749][  T787] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  176.148749][  T787] usb 3-1: device descriptor read/8, error -71
[  176.446465][  T787] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  176.507632][  T787] usb 3-1: device descriptor read/8, error -71
[  176.640900][  T787] usb usb3-port1: unable to enumerate USB device
[  176.789552][   T28] audit: type=1326 audit(1754232129.893:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6726 comm="syz.0.290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5268b8eb69 code=0x0
[  176.808166][ T5877] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  176.821209][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.833912][ T5877] usb 4-1: config 0 descriptor??
[  177.075182][ T6734] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.293'.
[  177.250202][ T6737] binder: 6735:6737 ioctl 4018620d 0 returned -22
[  177.350599][ T6712] loop3: detected capacity change from 0 to 256
[  177.453323][ T6712] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  177.686299][ T5830] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  177.694260][ T5877] usbhid 4-1:0.0: can't add hid device: -71
[  177.700371][ T5877] usbhid: probe of 4-1:0.0 failed with error -71
[  177.709637][ T5877] usb 4-1: USB disconnect, device number 12
[  177.937014][ T5830] usb 3-1: config 1 interface 0 has no altsetting 0
[  177.959132][ T5830] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  177.984773][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.003366][ T5830] usb 3-1: Product: syz
[  178.008512][ T5830] usb 3-1: Manufacturer: syz
[  178.014359][ T5830] usb 3-1: SerialNumber: syz
[  179.378995][ T6759] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.302'.
[  179.441598][ T5830] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  179.464646][ T5830] usb 3-1: USB disconnect, device number 16
[  179.485893][ T5830] usblp0: removed
[  179.596767][   T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  179.871333][   T23] usb 2-1: device descriptor read/64, error -71
[  180.061056][ T6764] binder: 6762:6764 ioctl 4018620d 0 returned -22
[  180.274941][   T28] audit: type=1326 audit(1754232133.383:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6765 comm="syz.3.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  180.491606][   T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  180.576229][ T5855] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  180.656515][   T23] usb 2-1: device descriptor read/64, error -71
[  180.758450][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.769799][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.780012][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.793164][ T5855] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  180.802323][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.806732][   T23] usb usb2-port1: attempt power cycle
[  180.813239][ T5855] usb 1-1: config 0 descriptor??
[  181.253063][ T6770] loop0: detected capacity change from 0 to 256
[  181.285034][ T6770] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  181.433028][ T5855] usbhid 1-1:0.0: can't add hid device: -71
[  181.471612][ T5855] usbhid: probe of 1-1:0.0 failed with error -71
[  181.491967][   T23] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  181.540523][ T5855] usb 1-1: USB disconnect, device number 16
[  181.547120][   T23] usb 2-1: device descriptor read/8, error -71
[  182.076342][   T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  182.126887][   T23] usb 2-1: device descriptor read/8, error -71
[  182.276319][   T23] usb usb2-port1: unable to enumerate USB device
[  182.406920][ T6793] binder: 6792:6793 ioctl c0306201 0 returned -14
[  182.651256][   T28] audit: type=1326 audit(1754232135.703:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6798 comm="syz.0.316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5268b8eb69 code=0x0
[  183.521292][   T27] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  184.225987][   T27] usb 4-1: config 1 interface 0 has no altsetting 0
[  184.436359][ T5830] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  184.644827][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.660877][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.671313][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  184.697256][ T5830] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  184.712703][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.725090][ T5830] usb 2-1: config 0 descriptor??
[  184.753322][   T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  184.762669][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.770855][   T27] usb 4-1: Product: syz
[  184.796173][   T27] usb 4-1: Manufacturer: syz
[  184.800848][   T27] usb 4-1: SerialNumber: syz
[  185.175256][ T6809] loop1: detected capacity change from 0 to 256
[  185.242205][ T6809] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  185.681978][ T5830] usbhid 2-1:0.0: can't add hid device: -71
[  186.325519][ T5830] usbhid: probe of 2-1:0.0 failed with error -71
[  186.342682][ T5830] usb 2-1: USB disconnect, device number 23
[  186.411336][   T27] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  186.443002][   T27] usb 4-1: USB disconnect, device number 13
[  186.476475][   T27] usblp0: removed
[  186.611450][ T6829] binder: 6828:6829 ioctl c0306201 0 returned -14
[  187.127880][ T5830] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  187.161207][   T28] audit: type=1326 audit(1754232140.273:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.3.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  187.632430][ T5830] usb 1-1: device descriptor read/64, error -71
[  188.184154][ T5830] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  188.225107][ T6854] binder: 6853:6854 ioctl c0306201 0 returned -14
[  188.356319][ T5830] usb 1-1: device descriptor read/64, error -71
[  188.476661][ T5830] usb usb1-port1: attempt power cycle
[  188.566421][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  188.676386][ T5877] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  188.778244][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.792501][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.858677][ T5877] usb 3-1: config 1 interface 0 has no altsetting 0
[  188.869009][ T5877] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  188.883082][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.892238][ T5877] usb 3-1: Product: syz
[  188.897146][ T5877] usb 3-1: Manufacturer: syz
[  188.900525][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  188.902042][ T5877] usb 3-1: SerialNumber: syz
[  188.915931][    T9] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  188.928986][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.950671][    T9] usb 4-1: config 0 descriptor??
[  188.967510][ T5830] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  189.015562][ T5830] usb 1-1: device descriptor read/8, error -71
[  189.296230][ T5830] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  189.337030][ T5830] usb 1-1: device descriptor read/8, error -71
[  189.384829][ T6856] loop3: detected capacity change from 0 to 256
[  189.401391][ T5877] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  189.434656][ T5877] usb 3-1: USB disconnect, device number 17
[  189.451043][ T6856] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  189.496415][ T5830] usb usb1-port1: unable to enumerate USB device
[  189.507958][ T5877] usblp0: removed
[  189.537367][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  189.543469][    T9] usbhid: probe of 4-1:0.0 failed with error -71
[  189.596778][    T9] usb 4-1: USB disconnect, device number 14
[  190.793086][   T28] audit: type=1326 audit(1754232143.893:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee47b8eb69 code=0x0
[  191.876335][   T27] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  192.058416][   T27] usb 3-1: config 1 interface 0 has no altsetting 0
[  192.071203][   T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  192.081455][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.089979][   T27] usb 3-1: Product: syz
[  192.094227][   T27] usb 3-1: Manufacturer: syz
[  192.099119][   T27] usb 3-1: SerialNumber: syz
[  192.126366][ T5877] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  192.189138][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'.
[  192.854190][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.146150][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.156008][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.192158][ T5877] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  193.218512][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.262117][ T5877] usb 2-1: config 0 descriptor??
[  193.324641][   T27] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  193.357982][   T27] usb 3-1: USB disconnect, device number 18
[  193.380879][   T27] usblp0: removed
[  193.437317][ T5830] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  193.628435][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.645111][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.655559][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.674797][ T5830] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  193.691361][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.703719][ T5830] usb 1-1: config 0 descriptor??
[  193.715472][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.775042][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.834516][ T5877] usbhid 2-1:0.0: can't add hid device: -71
[  193.846221][ T5877] usbhid: probe of 2-1:0.0 failed with error -71
[  193.856938][ T5877] usb 2-1: USB disconnect, device number 24
[  194.171934][ T6901] loop0: detected capacity change from 0 to 256
[  194.263116][ T6901] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  194.508962][ T5830] usbhid 1-1:0.0: can't add hid device: -71
[  194.526331][ T5830] usbhid: probe of 1-1:0.0 failed with error -71
[  194.570575][ T5830] usb 1-1: USB disconnect, device number 21
[  194.581683][   T28] audit: type=1326 audit(1754232147.693:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6917 comm="syz.2.359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f046c18eb69 code=0x0
[  194.650811][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  194.660842][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  195.744157][ T5877] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  196.199177][ T5877] usb 1-1: config 1 interface 0 has no altsetting 0
[  196.251362][ T5877] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  196.294833][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.344242][ T5877] usb 1-1: Product: syz
[  196.376385][ T5877] usb 1-1: Manufacturer: syz
[  196.405273][ T5877] usb 1-1: SerialNumber: syz
[  196.919443][ T5877] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  196.939564][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  197.178138][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.206182][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.243478][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  197.262673][    T9] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  197.272169][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.295246][    T9] usb 3-1: config 0 descriptor??
[  197.511587][ T5877] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  197.723331][ T6941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.746988][ T6941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.765231][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  197.778131][    T9] usbhid: probe of 3-1:0.0 failed with error -71
[  197.788813][    T9] usb 3-1: USB disconnect, device number 19
[  197.838305][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.849580][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.859459][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  197.874015][ T5877] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  197.883299][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.894060][ T5877] usb 4-1: config 0 descriptor??
[  198.331787][ T6954] loop3: detected capacity change from 0 to 256
[  198.401796][ T6954] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  198.436999][    T9] usb 1-1: USB disconnect, device number 22
[  198.458790][    T9] usblp0: removed
[  198.565378][ T5877] usbhid 4-1:0.0: can't add hid device: -71
[  198.571657][ T5877] usbhid: probe of 4-1:0.0 failed with error -71
[  198.582138][ T5877] usb 4-1: USB disconnect, device number 15
[  199.783357][ T5855] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  199.999271][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.023599][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.044012][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.076641][ T5855] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  200.094413][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.127543][ T5855] usb 1-1: config 0 descriptor??
[  200.332864][   T23] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  200.562604][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.590976][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.661373][ T5855] usbhid 1-1:0.0: can't add hid device: -71
[  200.678739][ T5855] usbhid: probe of 1-1:0.0 failed with error -71
[  200.705087][ T5855] usb 1-1: USB disconnect, device number 23
[  200.732144][   T23] usb 4-1: config 1 interface 0 has no altsetting 0
[  200.753006][   T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  200.776283][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.788958][   T23] usb 4-1: Product: syz
[  200.793191][   T23] usb 4-1: Manufacturer: syz
[  200.801467][   T23] usb 4-1: SerialNumber: syz
[  200.968946][ T7000] loop2: detected capacity change from 0 to 256
[  201.001924][ T7000] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  201.228499][   T23] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  201.840863][ T5795] Bluetooth: hci0: command 0x0406 tx timeout
[  201.847191][ T5795] Bluetooth: hci1: command 0x0406 tx timeout
[  201.853239][ T5795] Bluetooth: hci2: command 0x0406 tx timeout
[  202.704487][ T7028] loop2: detected capacity change from 0 to 256
[  202.717734][ T5855] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  202.725028][ T7028] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  202.897955][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.912042][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.921896][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  202.936216][ T5855] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  202.945301][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.955464][ T5855] usb 1-1: config 0 descriptor??
[  203.044635][    T9] usb 4-1: USB disconnect, device number 16
[  203.067087][    T9] usblp0: removed
[  203.406452][ T7023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.834146][ T7023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.276339][ T5855] usbhid 1-1:0.0: can't add hid device: -71
[  204.300561][ T5855] usbhid: probe of 1-1:0.0 failed with error -71
[  204.310248][ T5855] usb 1-1: USB disconnect, device number 24
[  204.806608][ T7043] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.405'.
[  204.971731][ T7046] binder: BINDER_SET_CONTEXT_MGR already set
[  204.990865][ T7046] binder: 7045:7046 ioctl 4018620d 2000000002c0 returned -16
[  205.014906][ T7046] binder: 7045:7046 ioctl c0306201 0 returned -14
[  205.279674][   T27] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  205.357701][ T7056] loop2: detected capacity change from 0 to 256
[  205.404541][ T7056] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  205.478648][   T27] usb 4-1: config 1 interface 0 has no altsetting 0
[  205.500689][   T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  205.526299][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.546287][   T27] usb 4-1: Product: syz
[  205.550886][   T27] usb 4-1: Manufacturer: syz
[  205.556995][   T27] usb 4-1: SerialNumber: syz
[  205.987791][   T27] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  207.111425][ T7077] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.417'.
[  207.386535][   T27] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  207.578458][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.603986][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.627368][   T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.650987][   T27] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  207.664505][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.688293][   T27] usb 2-1: config 0 descriptor??
[  207.912063][ T7084] binder: 7083:7084 ioctl c0306201 0 returned -14
[  207.992140][ T5877] usb 4-1: USB disconnect, device number 17
[  208.006883][ T5877] usblp0: removed
[  208.108444][ T7079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.128051][ T7079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.169374][   T27] usbhid 2-1:0.0: can't add hid device: -71
[  208.192223][   T27] usbhid: probe of 2-1:0.0 failed with error -71
[  208.206599][   T27] usb 2-1: USB disconnect, device number 25
[  208.546238][ T5877] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  208.745674][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.774218][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.818109][ T5877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  208.865997][ T5877] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  208.904634][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.935420][ T5877] usb 4-1: config 0 descriptor??
[  209.231231][ T7098] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.427'.
[  209.378790][ T7090] loop3: detected capacity change from 0 to 256
[  209.499704][ T7090] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  209.574666][ T5877] usbhid 4-1:0.0: can't add hid device: -71
[  209.621935][ T5877] usbhid: probe of 4-1:0.0 failed with error -71
[  209.854153][ T5877] usb 4-1: USB disconnect, device number 18
[  210.541878][ T7113] capability: warning: `syz.3.431' uses 32-bit capabilities (legacy support in use)
[  210.780731][ T7119] binder: 7118:7119 ioctl c0306201 0 returned -14
[  211.045267][ T7125] netlink: 'syz.0.436': attribute type 72 has an invalid length.
[  211.236671][ T5877] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  211.435235][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.452955][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.463578][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.481975][ T5877] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  211.492304][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.508310][ T5877] usb 2-1: config 0 descriptor??
[  211.556467][   T23] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  211.739322][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.775945][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.806243][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.819822][   T23] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  211.829257][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.847279][   T23] usb 1-1: config 0 descriptor??
[  211.925876][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.972732][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.036462][ T5877] usbhid 2-1:0.0: can't add hid device: -71
[  212.070719][ T5877] usbhid: probe of 2-1:0.0 failed with error -71
[  212.391708][ T7129] loop0: detected capacity change from 0 to 256
[  212.438113][ T7129] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  212.501959][ T5877] usb 2-1: USB disconnect, device number 26
[  212.518463][   T23] usbhid 1-1:0.0: can't add hid device: -71
[  212.524563][   T23] usbhid: probe of 1-1:0.0 failed with error -71
[  212.560038][   T23] usb 1-1: USB disconnect, device number 25
[  213.362139][ T7149] netlink: 'syz.0.445': attribute type 72 has an invalid length.
[  214.226297][ T5877] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  214.506325][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  214.598010][ T5877] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  214.609313][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.617536][ T5877] usb 1-1: Product: syz
[  214.621865][ T5877] usb 1-1: Manufacturer: syz
[  214.626959][ T5877] usb 1-1: SerialNumber: syz
[  214.640687][ T5877] usb 1-1: config 0 descriptor??
[  214.723117][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.755031][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.773610][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  214.815143][    T9] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  214.825399][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.847198][    T9] usb 3-1: config 0 descriptor??
[  214.866759][ T5877] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  215.026220][   T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  215.237567][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.268620][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.280138][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  215.299246][   T23] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  215.311766][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.331927][   T23] usb 4-1: config 0 descriptor??
[  215.484968][ T7162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.517340][ T7162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.548645][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  215.567487][    T9] usbhid: probe of 3-1:0.0 failed with error -71
[  215.603541][    T9] usb 3-1: USB disconnect, device number 20
[  215.771649][ T7171] loop3: detected capacity change from 0 to 256
[  215.804334][ T7171] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  215.830368][   T23] usbhid 4-1:0.0: can't add hid device: -71
[  215.858500][   T23] usbhid: probe of 4-1:0.0 failed with error -71
[  215.885788][   T23] usb 4-1: USB disconnect, device number 19
[  216.194899][ T7177] netlink: 16 bytes leftover after parsing attributes in process `syz.2.456'.
[  216.327909][ T7181] syz.2.458: attempt to access beyond end of device
[  216.327909][ T7181] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0
[  216.341438][ T7181] EXT4-fs (nbd2): unable to read superblock
[  216.345798][ T7179] netlink: 'syz.1.457': attribute type 72 has an invalid length.
[  216.494267][ T5877] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  216.521623][ T5877] usb 1-1: USB disconnect, device number 26
[  217.197039][ T5797] Bluetooth: hci3: command 0x0406 tx timeout
[  218.145858][ T7198] loop1: detected capacity change from 0 to 1024
[  218.164299][ T7198] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  218.185301][ T7198] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  218.281407][ T7198] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  218.349133][ T7198] EXT4-fs (loop1): orphan cleanup on readonly fs
[  218.382764][ T7198] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.466: Inode bitmap for bg 0 marked uninitialized
[  218.459822][ T7198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  218.885686][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.607630][ T7212] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.468'.
[  219.750514][   T28] audit: type=1326 audit(1754232172.863:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.1.472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee47b8eb69 code=0x0
[  219.846291][   T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  220.223690][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.234816][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.252751][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.266580][   T23] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  220.275854][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.294106][   T23] usb 3-1: config 0 descriptor??
[  220.980089][ T7214] loop2: detected capacity change from 0 to 256
[  221.158695][ T7214] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  221.324512][   T23] usbhid 3-1:0.0: can't add hid device: -71
[  221.566279][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[  221.581601][   T23] usb 3-1: USB disconnect, device number 21
[  222.798496][ T7251] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.480'.
[  225.665901][ T7276] tmpfs: Unknown parameter 'quot'
[  225.677017][ T7276] syz.0.486: attempt to access beyond end of device
[  225.677017][ T7276] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  225.693540][ T7276] SQUASHFS error: Failed to read block 0x0: -5
[  225.700075][ T7276] unable to read squashfs_super_block
[  230.646403][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  230.838837][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.850243][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.885628][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.900538][    T9] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  230.910209][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.923731][    T9] usb 1-1: config 0 descriptor??
[  231.374405][ T7282] loop0: detected capacity change from 0 to 256
[  231.464591][ T7282] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x16e2264b, utbl_chksum : 0xe619d30d)
[  232.142251][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  232.191663][    T9] usbhid: probe of 1-1:0.0 failed with error -71
[  232.224134][ T7296] loop2: detected capacity change from 0 to 256
[  232.250151][    T9] usb 1-1: USB disconnect, device number 27
[  232.461494][ T7288] loop1: detected capacity change from 0 to 32768
[  232.475982][ T7288] =======================================================
[  232.475982][ T7288] WARNING: The mand mount option has been deprecated and
[  232.475982][ T7288]          and is ignored by this kernel. Remove the mand
[  232.475982][ T7288]          option from the mount to silence this warning.
[  232.475982][ T7288] =======================================================
[  232.685458][ T7300] FAT-fs (loop2): error, clusters badly computed (0 != 128)
[  232.693614][ T7300] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  232.720723][   T28] audit: type=1800 audit(1754232185.783:29): pid=7300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.492" name="file1" dev="loop2" ino=1048592 res=0 errno=0
[  232.971335][ T7300] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  233.050612][ T7288] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  233.579409][   T28] audit: type=1800 audit(1754232186.683:30): pid=7288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.490" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  233.644448][ T7310] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  233.657098][ T7309] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  233.807402][ T7312] loop0: detected capacity change from 0 to 2048
[  233.892291][ T7312]  loop0: p1 < > p3
[  233.914866][ T7312] loop0: p3 size 134217728 extends beyond EOD, truncated
[  233.973935][ T5793] ocfs2: Unmounting device (7,1) on (node local)
[  235.337218][ T7333] syz_tun: entered allmulticast mode
[  237.754466][ T7344] loop0: detected capacity change from 0 to 512
[  237.852542][ T7344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.084538][   T28] audit: type=1800 audit(1754232191.193:31): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.502" name="file1" dev="loop0" ino=15 res=0 errno=0
[  238.880184][ T7344] loop0: detected capacity change from 512 to 0
[  239.071679][ T5786] syz-executor: attempt to access beyond end of device
[  239.071679][ T5786] loop0: rw=12288, sector=42, nr_sectors = 2 limit=0
[  239.146267][ T5786] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  239.205216][ T5786] syz-executor: attempt to access beyond end of device
[  239.205216][ T5786] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0
[  239.220805][ T5786] syz-executor: attempt to access beyond end of device
[  239.220805][ T5786] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0
[  239.235016][ T5786] syz-executor: attempt to access beyond end of device
[  239.235016][ T5786] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0
[  239.248764][ T5786] syz-executor: attempt to access beyond end of device
[  239.248764][ T5786] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0
[  239.318877][ T7364] Bluetooth: MGMT ver 1.22
[  239.409067][ T5786] syz-executor: attempt to access beyond end of device
[  239.409067][ T5786] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0
[  239.600078][ T5786] syz-executor: attempt to access beyond end of device
[  239.600078][ T5786] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0
[  239.826437][ T5786] syz-executor: attempt to access beyond end of device
[  239.826437][ T5786] loop0: rw=12288, sector=10, nr_sectors = 2 limit=0
[  239.871305][ T5786] EXT4-fs error (device loop0): ext4_get_inode_loc:4621: inode #2: block 5: comm syz-executor: unable to read itable block
[  239.935916][ T5786] syz-executor: attempt to access beyond end of device
[  239.935916][ T5786] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[  239.997482][ T5786] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  240.047419][ T5786] EXT4-fs (loop0): I/O error while writing superblock
[  240.059916][ T5786] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: IO failure
[  240.102305][ T5786] syz-executor: attempt to access beyond end of device
[  240.102305][ T5786] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0
[  240.119876][ T5786] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  240.133252][ T5786] EXT4-fs (loop0): I/O error while writing superblock
[  240.140588][ T5786] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #2: comm syz-executor: mark_inode_dirty error
[  240.188987][ T5786] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  240.218811][ T5786] EXT4-fs (loop0): I/O error while writing superblock
[  240.269575][ T7368] loop3: detected capacity change from 0 to 4096
[  240.285965][   T12] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4606: inode #2: block 5: comm kworker/u4:1: unable to read itable block
[  240.311280][   T12] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  240.324922][   T12] EXT4-fs (loop0): I/O error while writing superblock
[  240.354683][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.367263][ T7377] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.392410][ T5786] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[  240.401720][ T5786] EXT4-fs (loop0): I/O error while writing superblock
[  240.517656][ T5786] syz_tun (unregistering): left allmulticast mode
[  240.533142][   T28] audit: type=1800 audit(1754232193.643:32): pid=7368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.508" name="file1" dev="loop3" ino=15 res=0 errno=0
[  240.759419][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.811513][ T7379] loop3: detected capacity change from 0 to 256
[  240.856313][ T7379] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  240.876937][ T7379] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  240.892281][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.927138][ T7379] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  241.012269][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.477425][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.335842][ T7388] loop3: detected capacity change from 0 to 512
[  242.456189][   T27] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  242.469859][ T7388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.532004][ T7388] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.644132][ T7388] fscrypt (loop3, inode 15): Error -61 getting encryption context
[  242.658467][   T27] usb 2-1: Using ep0 maxpacket: 32
[  242.684590][   T27] usb 2-1: config 0 has an invalid interface number: 247 but max is 0
[  242.709237][   T27] usb 2-1: config 0 has no interface number 0
[  242.739668][   T27] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  242.755667][   T27] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  242.776280][   T27] usb 2-1: Product: syz
[  242.780530][   T27] usb 2-1: Manufacturer: syz
[  242.808434][   T27] usb 2-1: config 0 descriptor??
[  242.818235][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.987206][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  243.000216][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  243.023845][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  243.056314][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  243.065730][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  243.076997][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  243.119517][ T7386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.513'.
[  243.869210][ T5855] usb 2-1: USB disconnect, device number 27
[  243.929231][ T5797] Bluetooth: hci1: Unable to find connection with handle 0x0001
[  244.238677][ T7399] loop3: detected capacity change from 0 to 32768
[  244.264099][ T7418] loop2: detected capacity change from 0 to 4096
[  244.299004][ T7399] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  244.339653][ T7399] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  244.383565][ T7423] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.482290][   T28] audit: type=1800 audit(1754232197.593:33): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.521" name="file1" dev="loop2" ino=15 res=0 errno=0
[  244.692851][ T7399] (syz.3.517,7399,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  244.772177][ T7397] chnl_net:caif_netlink_parms(): no params data found
[  244.822927][ T5792] ocfs2: Unmounting device (7,3) on (node local)
[  245.136501][ T1145] hsr_slave_0: left promiscuous mode
[  245.153916][ T1145] hsr_slave_1: left promiscuous mode
[  245.163460][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.171745][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.181062][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.196483][ T5797] Bluetooth: hci0: command tx timeout
[  245.203532][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.222611][ T1145] bridge_slave_1: left allmulticast mode
[  245.235266][ T1145] bridge_slave_1: left promiscuous mode
[  245.243888][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.260782][ T1145] bridge_slave_0: left allmulticast mode
[  245.268770][ T1145] bridge_slave_0: left promiscuous mode
[  245.274761][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.325762][ T1145] veth1_macvtap: left promiscuous mode
[  245.333287][ T1145] veth0_macvtap: left promiscuous mode
[  245.339672][ T1145] veth1_vlan: left promiscuous mode
[  245.345492][ T1145] veth0_vlan: left promiscuous mode
[  245.436298][ T5837] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  245.678041][ T7444] mmap: syz.3.523 (7444): VmData 164384768 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  246.375070][ T5837] usb 2-1: Using ep0 maxpacket: 32
[  246.382422][ T5837] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  246.518218][ T5837] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  246.536138][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  246.544397][ T5837] usb 2-1: Product: syz
[  246.565454][ T5837] usb 2-1: Manufacturer: syz
[  246.586175][ T5837] usb 2-1: SerialNumber: syz
[  246.617454][ T7448] loop2: detected capacity change from 0 to 256
[  246.618658][ T5837] usb 2-1: config 0 descriptor??
[  246.647469][ T7448] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  246.665467][ T7435] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  246.697242][ T5837] hub 2-1:0.0: bad descriptor, ignoring hub
[  246.698581][ T7448] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  246.703202][ T5837] hub: probe of 2-1:0.0 failed with error -5
[  246.751943][ T7448] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  247.077540][ T5837] usb 2-1: USB disconnect, device number 28
[  247.476942][ T5797] Bluetooth: hci0: command tx timeout
[  248.319543][ T5837] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  248.767617][ T1145] team0 (unregistering): Port device team_slave_1 removed
[  248.815703][ T1145] team0 (unregistering): Port device team_slave_0 removed
[  248.864658][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.913117][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.438113][ T1145] bond0 (unregistering): Released all slaves
[  249.519661][ T5797] Bluetooth: hci0: command tx timeout
[  249.557815][ T7459] netlink: 'syz.2.527': attribute type 1 has an invalid length.
[  249.688946][ T7460] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  249.701173][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.527'.
[  249.724436][ T7462] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  249.752010][ T7462] bond1 (unregistering): Released all slaves
[  249.912975][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.937952][ T7397] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.945258][ T7397] bridge_slave_0: entered allmulticast mode
[  249.994131][ T7397] bridge_slave_0: entered promiscuous mode
[  250.024955][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.162545][ T7397] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.311546][ T7397] bridge_slave_1: entered allmulticast mode
[  250.670466][ T7397] bridge_slave_1: entered promiscuous mode
[  251.302570][ T7500] loop1: detected capacity change from 0 to 4096
[  251.313189][ T7397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.377168][ T7397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.485269][ T7506] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  251.586121][   T28] audit: type=1800 audit(1754232204.693:34): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.530" name="file1" dev="loop1" ino=15 res=0 errno=0
[  251.615941][ T5797] Bluetooth: hci0: command tx timeout
[  251.691467][ T7397] team0: Port device team_slave_0 added
[  251.705120][ T7512] loop2: detected capacity change from 0 to 512
[  251.753697][ T7397] team0: Port device team_slave_1 added
[  251.765820][ T7512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.925874][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.934068][   T28] audit: type=1800 audit(1754232205.053:35): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.533" name="file1" dev="loop2" ino=15 res=0 errno=0
[  251.970019][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.006905][ T7397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.026239][ T7512] loop2: detected capacity change from 512 to 0
[  252.039318][ T7518] bio_check_eod: 10 callbacks suppressed
[  252.039335][ T7518] syz.2.533: attempt to access beyond end of device
[  252.039335][ T7518] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0
[  252.074005][ T7517] loop1: detected capacity change from 0 to 512
[  252.102716][ T7397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.114016][ T7397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.116623][ T7518] syz.2.533: attempt to access beyond end of device
[  252.116623][ T7518] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0
[  252.144469][ T7397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.240206][ T7518] syz.2.533: attempt to access beyond end of device
[  252.240206][ T7518] loop2: rw=524288, sector=16, nr_sectors = 2 limit=0
[  252.291508][ T7397] hsr_slave_0: entered promiscuous mode
[  252.297676][ T7518] syz.2.533: attempt to access beyond end of device
[  252.297676][ T7518] loop2: rw=524288, sector=18, nr_sectors = 2 limit=0
[  252.340569][ T7397] hsr_slave_1: entered promiscuous mode
[  252.343268][ T7517] EXT4-fs (loop1): Test dummy encryption mode enabled
[  252.353126][ T7517] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  252.366254][ T7517] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  252.379732][ T7517] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.534: bad orphan inode 131083
[  252.391941][ T7517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.435830][ T7518] syz.2.533: attempt to access beyond end of device
[  252.435830][ T7518] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0
[  252.466279][ T7518] syz.2.533: attempt to access beyond end of device
[  252.466279][ T7518] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0
[  252.492618][ T7518] syz.2.533: attempt to access beyond end of device
[  252.492618][ T7518] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0
[  252.561310][ T7518] syz.2.533: attempt to access beyond end of device
[  252.561310][ T7518] loop2: rw=524288, sector=28, nr_sectors = 2 limit=0
[  252.586968][ T7518] syz.2.533: attempt to access beyond end of device
[  252.586968][ T7518] loop2: rw=12288, sector=24, nr_sectors = 2 limit=0
[  252.618609][ T7518] EXT4-fs error (device loop2): ext4_get_inode_loc:4621: inode #15: block 12: comm syz.2.533: unable to read itable block
[  252.662801][ T7518] syz.2.533: attempt to access beyond end of device
[  252.662801][ T7518] loop2: rw=145409, sector=2, nr_sectors = 2 limit=0
[  252.702450][ T7518] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  252.727084][ T7518] EXT4-fs (loop2): I/O error while writing superblock
[  252.733953][ T7518] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: IO failure
[  252.769585][ T7517] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  252.799378][ T7518] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  252.945630][ T7518] EXT4-fs (loop2): I/O error while writing superblock
[  253.048242][ T7518] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #15: comm syz.2.533: mark_inode_dirty error
[  253.118147][ T7518] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  253.126652][ T7518] EXT4-fs (loop2): I/O error while writing superblock
[  253.137151][ T7518] EXT4-fs error (device loop2): ext4_free_branches:1043: inode #15: block 251: comm syz.2.533: Read failure
[  253.149329][ T7518] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  253.158596][ T7518] EXT4-fs (loop2): I/O error while writing superblock
[  253.165756][ T7518] EXT4-fs error (device loop2): ext4_get_inode_loc:4621: inode #15: block 12: comm syz.2.533: unable to read itable block
[  253.180119][ T7518] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  253.188653][ T7518] EXT4-fs (loop2): I/O error while writing superblock
[  253.205075][ T7518] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5902: IO failure
[  253.214689][ T7518] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  253.223051][ T7518] EXT4-fs (loop2): I/O error while writing superblock
[  253.230066][ T7518] EXT4-fs error (device loop2): ext4_truncate:4288: inode #15: comm syz.2.533: mark_inode_dirty error
[  253.241240][ T7518] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  253.249701][ T7518] EXT4-fs (loop2): I/O error while writing superblock
[  253.258574][ T7531] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  253.352358][ T5790] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  253.408200][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.439093][ T5790] EXT4-fs error (device loop2): ext4_check_bdev_write_error:225: comm syz-executor: Error while async write back metadata
[  253.497493][ T5790] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  253.516284][ T5790] EXT4-fs (loop2): I/O error while writing superblock
[  253.596541][ T1134] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4606: inode #15: block 12: comm kworker/u4:6: unable to read itable block
[  253.610601][ T1134] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  253.623144][ T1134] EXT4-fs (loop2): I/O error while writing superblock
[  253.643918][ T7397] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  253.670814][ T5790] Buffer I/O error on dev loop2, logical block 1, lost sync page write
[  253.694453][ T7397] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  253.729027][ T7397] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  253.761623][ T7397] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  254.037035][ T7528] loop3: detected capacity change from 0 to 32768
[  254.112758][   T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.150858][ T7528] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  254.294156][   T28] audit: type=1800 audit(1754232207.403:36): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.535" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  254.323429][   T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.417019][ T5877] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  254.500787][   T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.540504][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.628963][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.629034][   T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.656261][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.678160][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.709011][ T5877] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  254.718523][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.757459][ T5877] usb 2-1: config 0 descriptor??
[  254.764415][ T5792] ocfs2: Unmounting device (7,3) on (node local)
[  254.809910][ T7397] 8021q: adding VLAN 0 to HW filter on device team0
[  254.860536][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.867766][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.954526][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.961804][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.381600][ T7556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  255.429136][ T7556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  255.459806][ T5105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  255.471942][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  255.485202][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  255.507717][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  255.520427][ T5877] usbhid 2-1:0.0: can't add hid device: -71
[  255.531041][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  255.537924][ T5877] usbhid: probe of 2-1:0.0 failed with error -71
[  255.544835][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  255.557407][ T5877] usb 2-1: USB disconnect, device number 30
[  256.081041][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  256.088606][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  256.929012][ T7592] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  257.003453][ T7397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.603811][ T5105] Bluetooth: hci1: command tx timeout
[  257.734757][ T7569] chnl_net:caif_netlink_parms(): no params data found
[  258.196658][   T48] hsr_slave_0: left promiscuous mode
[  258.202868][   T48] hsr_slave_1: left promiscuous mode
[  258.222808][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.262811][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.288839][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.355258][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.364632][   T48] bridge_slave_1: left allmulticast mode
[  258.371982][   T48] bridge_slave_1: left promiscuous mode
[  258.393853][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.431729][ T7635] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  258.447461][   T48] bridge_slave_0: left allmulticast mode
[  258.453166][   T48] bridge_slave_0: left promiscuous mode
[  258.464833][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.750409][ T7639] o2cb: This node has not been configured.
[  258.756644][ T7639] o2cb: Cluster check failed. Fix errors before retrying.
[  258.764549][ T7639] (syz.1.551,7639,0):user_dlm_register:674 ERROR: status = -22
[  258.772450][ T7639] (syz.1.551,7639,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  259.501627][   T48] veth1_macvtap: left promiscuous mode
[  259.516703][   T48] veth0_macvtap: left promiscuous mode
[  259.525480][   T48] veth1_vlan: left promiscuous mode
[  259.676413][ T5105] Bluetooth: hci1: command tx timeout
[  259.732234][   T48] veth0_vlan: left promiscuous mode
[  261.624817][   T48] team0 (unregistering): Port device team_slave_1 removed
[  261.673190][   T48] team0 (unregistering): Port device team_slave_0 removed
[  261.762653][ T5105] Bluetooth: hci1: command tx timeout
[  261.794184][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.877292][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  262.807564][   T48] bond0 (unregistering): Released all slaves
[  262.920134][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.549'.
[  263.252285][ T7569] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.264349][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.279061][ T7569] bridge_slave_0: entered allmulticast mode
[  263.544515][ T7569] bridge_slave_0: entered promiscuous mode
[  263.639346][ T7672] Bluetooth: MGMT ver 1.22
[  264.000899][ T7674] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in;
[  264.000899][ T7674]    program syz.3.560 not setting count and/or reply_len properly
[  264.055075][ T5105] Bluetooth: hci1: command tx timeout
[  264.083472][ T7569] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.226483][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.254276][ T7569] bridge_slave_1: entered allmulticast mode
[  264.288104][ T7569] bridge_slave_1: entered promiscuous mode
[  264.321221][ T7397] veth0_vlan: entered promiscuous mode
[  264.408177][ T7674] loop3: detected capacity change from 0 to 40427
[  264.456786][ T7674] F2FS-fs (loop3): invalid crc value
[  264.476926][ T7674] F2FS-fs (loop3): Found nat_bits in checkpoint
[  264.491426][ T7569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.521439][ T7569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.541820][ T7674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  264.740790][ T7397] veth1_vlan: entered promiscuous mode
[  264.766007][ T7569] team0: Port device team_slave_0 added
[  264.792371][ T7569] team0: Port device team_slave_1 added
[  264.891683][ T7569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.910309][ T7569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.986312][ T7569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.024293][ T7569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.048492][ T7569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.096429][ T7569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.313265][ T7569] hsr_slave_0: entered promiscuous mode
[  265.341426][ T7569] hsr_slave_1: entered promiscuous mode
[  265.355683][ T7569] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  265.376408][   T28] audit: type=1326 audit(1754232218.493:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7692 comm="syz.3.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  265.400346][ T7569] Cannot create hsr debugfs directory
[  265.674778][ T7397] veth0_macvtap: entered promiscuous mode
[  265.718265][ T7397] veth1_macvtap: entered promiscuous mode
[  266.155032][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.173928][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.186899][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.198714][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.211138][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.304414][ T7708] loop3: detected capacity change from 0 to 256
[  266.304473][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.365861][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.537360][ T7397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.552707][ T7397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.565510][ T7397] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.561063][ T7397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.611498][ T7397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.611617][ T7712] loop3: detected capacity change from 0 to 512
[  267.621164][ T7397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.650119][ T7397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.746776][ T7283] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  267.841306][ T7569] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  268.084007][ T7569] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  268.112615][ T7569] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  268.491931][ T7569] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  268.695809][ T7726] binder: 7725:7726 ioctl c0306201 0 returned -14
[  269.266278][   T28] audit: type=1326 audit(1754232222.373:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.3.572" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  269.368942][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.396748][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.550675][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.582485][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.858355][ T7569] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.892314][ T7569] 8021q: adding VLAN 0 to HW filter on device team0
[  269.920676][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.927974][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.979460][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.986790][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.542914][ T7569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  270.730530][ T7758] loop3: detected capacity change from 0 to 40427
[  270.795524][ T7758] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  270.804385][ T7758] F2FS-fs (loop3): Image doesn't support compression
[  270.811267][ T7758] F2FS-fs (loop3): Image doesn't support compression
[  270.818037][ T7758] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4
[  270.834733][ T7758] F2FS-fs (loop3): invalid crc value
[  270.896701][ T7758] F2FS-fs (loop3): Found nat_bits in checkpoint
[  270.948708][ T7758] F2FS-fs (loop3): Start checkpoint disabled!
[  271.013580][ T7758] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  271.283564][ T7758] ptrace attach of "./syz-executor exec"[5792] was attempted by ""[7758]
[  271.965496][ T7569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.009318][ T7790] binder: 7789:7790 ioctl c0306201 0 returned -14
[  273.083699][ T7569] veth0_vlan: entered promiscuous mode
[  273.105387][ T7569] veth1_vlan: entered promiscuous mode
[  273.469032][ T7569] veth0_macvtap: entered promiscuous mode
[  273.500577][ T7569] veth1_macvtap: entered promiscuous mode
[  273.618812][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.661757][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.686103][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.694507][   T28] audit: type=1326 audit(1754232226.803:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.581" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  273.723844][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.746127][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.757040][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.769219][ T7805] loop1: detected capacity change from 0 to 1024
[  273.778389][ T7569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.831442][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.874155][ T7805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.889589][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.916195][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.929717][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.943238][ T7569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.954252][ T7569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.980945][ T7569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.027565][ T7569] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.047191][ T7569] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.049992][ T7805] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz.1.582: Invalid inode table block 0 in block_group 0
[  274.073217][ T7569] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.093013][ T7569] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.169819][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.448582][ T7800] loop4: detected capacity change from 0 to 32768
[  274.496632][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.534666][ T7800] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  274.546801][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.663056][ T7800] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  274.822595][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.839780][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.740857][   T28] audit: type=1800 audit(1754232228.823:40): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.580" name="bus" dev="loop4" ino=17058 res=0 errno=0
[  276.128691][ T7397] ocfs2: Unmounting device (7,4) on (node local)
[  276.571342][ T7833] netlink: 36 bytes leftover after parsing attributes in process `syz.5.539'.
[  277.312562][ T7845] loop3: detected capacity change from 0 to 40427
[  277.476819][ T7845] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  277.484718][ T7845] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  277.550791][ T7845] F2FS-fs (loop3): invalid crc value
[  277.677875][ T7845] F2FS-fs (loop3): Found nat_bits in checkpoint
[  278.018658][ T7845] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  278.025843][ T7845] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  279.167383][ T7866] cgroup: Invalid name
[  279.966197][   T28] audit: type=1326 audit(1754232233.063:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7868 comm="syz.3.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0afef8eb69 code=0x0
[  281.696975][ T7880] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  281.704106][ T7880] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  281.795387][ T7883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  281.855649][ T7880] vhci_hcd vhci_hcd.0: Device attached
[  281.934262][ T7885] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(5)
[  281.940877][ T7885] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  282.003788][    T9] vhci_hcd: vhci_device speed not set
[  282.090889][ T7885] vhci_hcd vhci_hcd.0: Device attached
[  282.136376][    T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  282.153277][ T7883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  282.235436][ T7880] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(8)
[  282.242046][ T7880] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  282.348194][ T7885] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  282.359685][ T7880] vhci_hcd vhci_hcd.0: Device attached
[  282.460812][ T7883] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(12)
[  282.467502][ T7883] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  282.561398][ T7880] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  282.613508][ T7883] vhci_hcd vhci_hcd.0: Device attached
[  282.657781][ T7891] vhci_hcd: connection closed
[  282.660512][ T7888] vhci_hcd: connection closed
[  282.665505][ T7881] vhci_hcd: connection reset by peer
[  282.683635][ T7886] vhci_hcd: connection closed
[  282.731895][   T59] vhci_hcd: stop threads
[  282.781998][   T59] vhci_hcd: release socket
[  282.831621][   T59] vhci_hcd: disconnect device
[  282.842280][   T59] vhci_hcd: stop threads
[  282.864863][   T59] vhci_hcd: release socket
[  282.896832][   T59] vhci_hcd: disconnect device
[  282.942629][   T59] vhci_hcd: stop threads
[  282.962896][   T59] vhci_hcd: release socket
[  282.996249][   T59] vhci_hcd: disconnect device
[  283.054829][   T59] vhci_hcd: stop threads
[  283.067430][   T59] vhci_hcd: release socket
[  283.096168][   T59] vhci_hcd: disconnect device
[  283.784322][ T7878] loop4: detected capacity change from 0 to 32768
[  283.896302][ T7903] loop3: detected capacity change from 0 to 128
[  284.082414][ T7903] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  284.101884][ T7903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  284.139237][ T7878] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.594 (7878)
[  284.278834][ T5105] Bluetooth: hci3: unexpected event for opcode 0x2060
[  284.468907][ T7878] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  284.553065][ T7908] loop1: detected capacity change from 0 to 1024
[  284.560121][ T7878] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  284.633987][ T7878] BTRFS info (device loop4): enabling disk space caching
[  284.703377][ T7878] BTRFS info (device loop4): doing ref verification
[  284.722038][ T7908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.784573][ T7878] BTRFS info (device loop4): setting nodatacow, compression disabled
[  284.864502][ T7878] BTRFS info (device loop4): force clearing of disk cache
[  285.025504][ T7878] BTRFS info (device loop4): doing ref verification
[  285.053016][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.196915][ T7878] BTRFS info (device loop4): disk space caching is enabled
[  285.250127][ T7918] loop3: detected capacity change from 0 to 1024
[  285.537968][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  285.539275][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  285.635209][ T7918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  285.648974][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  285.657578][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  285.674210][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  285.705361][ T7918] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.730210][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  285.731875][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  285.767447][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  285.836945][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  285.871139][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  285.919538][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  285.966988][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  286.006889][ T7878] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  286.013832][ T7918] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  286.058072][ T7878] BTRFS error (device loop4): open_ctree failed: -12
[  286.080288][ T7918] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #15: comm syz.3.599: mark_inode_dirty error
[  286.137146][ T7918] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  286.178624][ T7918] EXT4-fs error (device loop3): ext4_da_do_write_end:3043: inode #15: comm syz.3.599: mark_inode_dirty error
[  286.225002][ T7942] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  286.229465][ T7918] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  286.354814][ T7942] EXT4-fs error (device loop3): ext4_update_disksize_before_punch:3895: inode #15: comm syz.3.599: mark_inode_dirty error
[  286.407348][ T7918] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #15: comm syz.3.599: mark_inode_dirty error
[  286.447396][ T7918] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  286.487432][ T7918] EXT4-fs (loop3): This should not happen!! Data will be lost
[  286.487432][ T7918] 
[  286.518766][   T28] audit: type=1326 audit(1754232239.623:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7945 comm="syz.4.603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c278eb69 code=0x0
[  286.654423][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  287.002242][ T7957] loop3: detected capacity change from 0 to 128
[  287.045786][ T7957] qnx6: unable to set blocksize
[  287.386321][    T9] vhci_hcd: vhci_device speed not set
[  288.313916][ T7965] loop3: detected capacity change from 0 to 1024
[  288.514462][ T7965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.022388][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.674173][ T7988] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.138025][ T7988] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.271348][ T7988] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.672669][ T7988] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.104975][ T7988] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.256570][   T28] audit: type=1326 audit(1754232246.293:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.4.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82c278eb69 code=0x0
[  293.321029][ T7988] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.541968][ T7988] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.395929][ T7988] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.617111][ T8022] loop5: detected capacity change from 0 to 1024
[  295.696962][ T8022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.043940][ T7569] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.120074][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  296.471013][ T8041] loop1: detected capacity change from 0 to 40427
[  296.542200][ T8041] F2FS-fs (loop1): invalid crc value
[  296.641602][ T8041] F2FS-fs (loop1): Found nat_bits in checkpoint
[  296.686457][ T8041] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  298.248051][ T8049] ------------[ cut here ]------------
[  298.253833][ T8049] kernel BUG at fs/f2fs/segment.c:3481!
[  298.259496][ T8049] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  298.265578][ T8049] CPU: 1 PID: 8049 Comm: syz.1.624 Not tainted 6.6.101-syzkaller #0
[  298.273559][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  298.283627][ T8049] RIP: 0010:f2fs_allocate_data_block+0x3f0c/0x3f50
[  298.290139][ T8049] Code: 21 fe 48 8b 54 24 30 e9 c6 eb ff ff e8 9d 67 ca fd 48 c7 c7 90 cc 2f 8d 4c 89 f6 e8 1e e7 95 00 e9 e2 eb ff ff e8 84 67 ca fd <0f> 0b e8 7d 67 ca fd 0f 0b e8 76 67 ca fd 0f 0b e8 6f 67 ca fd 0f
[  298.309926][ T8049] RSP: 0018:ffffc9000b27f850 EFLAGS: 00010283
[  298.315997][ T8049] RAX: ffffffff83bb2e0c RBX: 0000000000000204 RCX: 0000000000080000
[  298.324002][ T8049] RDX: ffffc9000f032000 RSI: 000000000002c775 RDI: 000000000002c776
[  298.332015][ T8049] RBP: 0000000000000200 R08: ffff88805e48d45f R09: 1ffff1100bc91a8b
[  298.340019][ T8049] R10: dffffc0000000000 R11: ffffed100bc91a8c R12: 1ffff9200164ff7c
[  298.348107][ T8049] R13: 0000000000000000 R14: 0000000000003a04 R15: dffffc0000000000
[  298.356112][ T8049] FS:  00007fee479ff6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  298.365158][ T8049] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  298.371767][ T8049] CR2: 00007fee479ddf98 CR3: 000000002c5b7000 CR4: 00000000003506e0
[  298.379773][ T8049] Call Trace:
[  298.383072][ T8049]  <TASK>
[  298.386032][ T8049]  ? f2fs_mark_inode_dirty_sync+0x120/0x1f0
[  298.391966][ T8049]  f2fs_map_blocks+0x1697/0x3c00
[  298.396956][ T8049]  ? f2fs_get_block_locked+0xe0/0xe0
[  298.402255][ T8049]  ? __up_read+0x280/0x670
[  298.406675][ T8049]  ? up_read+0x20/0x20
[  298.410773][ T8049]  ? f2fs_allocate_pinning_section+0x1af/0x590
[  298.416975][ T8049]  f2fs_expand_inode_data+0x5c2/0x970
[  298.422405][ T8049]  ? f2fs_insert_range+0x3d0/0x3d0
[  298.427625][ T8049]  ? down_write+0x162/0x1f0
[  298.432159][ T8049]  ? file_modified_flags+0x136/0x2b0
[  298.437465][ T8049]  f2fs_fallocate+0x416/0x8a0
[  298.442147][ T8049]  vfs_fallocate+0x58e/0x700
[  298.446746][ T8049]  __x64_sys_fallocate+0xc1/0x110
[  298.451843][ T8049]  do_syscall_64+0x55/0xb0
[  298.456288][ T8049]  ? clear_bhb_loop+0x40/0x90
[  298.460996][ T8049]  ? clear_bhb_loop+0x40/0x90
[  298.465679][ T8049]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.471601][ T8049] RIP: 0033:0x7fee47b8eb69
[  298.476055][ T8049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  298.495679][ T8049] RSP: 002b:00007fee479ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  298.504114][ T8049] RAX: ffffffffffffffda RBX: 00007fee47db6080 RCX: 00007fee47b8eb69
[  298.512092][ T8049] RDX: 000000000000fc01 RSI: 0000000000000000 RDI: 0000000000000009
[  298.520069][ T8049] RBP: 00007fee47c11df1 R08: 0000000000000000 R09: 0000000000000000
[  298.528042][ T8049] R10: 00000000001000f4 R11: 0000000000000246 R12: 0000000000000000
[  298.536013][ T8049] R13: 0000000000000000 R14: 00007fee47db6080 R15: 00007ffdfd74aa08
[  298.544005][ T8049]  </TASK>
[  298.547044][ T8049] Modules linked in:
[  298.552283][ T8049] ---[ end trace 0000000000000000 ]---
[  298.558011][ T8049] RIP: 0010:f2fs_allocate_data_block+0x3f0c/0x3f50
[  298.564542][ T8049] Code: 21 fe 48 8b 54 24 30 e9 c6 eb ff ff e8 9d 67 ca fd 48 c7 c7 90 cc 2f 8d 4c 89 f6 e8 1e e7 95 00 e9 e2 eb ff ff e8 84 67 ca fd <0f> 0b e8 7d 67 ca fd 0f 0b e8 76 67 ca fd 0f 0b e8 6f 67 ca fd 0f
[  298.584798][ T8049] RSP: 0018:ffffc9000b27f850 EFLAGS: 00010283
[  298.590911][ T8049] RAX: ffffffff83bb2e0c RBX: 0000000000000204 RCX: 0000000000080000
[  298.598924][ T8049] RDX: ffffc9000f032000 RSI: 000000000002c775 RDI: 000000000002c776
[  298.606944][ T8049] RBP: 0000000000000200 R08: ffff88805e48d45f R09: 1ffff1100bc91a8b
[  298.614953][ T8049] R10: dffffc0000000000 R11: ffffed100bc91a8c R12: 1ffff9200164ff7c
[  298.622965][ T8049] R13: 0000000000000000 R14: 0000000000003a04 R15: dffffc0000000000
[  298.630984][ T8049] FS:  00007fee479ff6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  298.639961][ T8049] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  298.646586][ T8049] CR2: 00007fee479ddf98 CR3: 000000002c5b7000 CR4: 00000000003506e0
[  298.654580][ T8049] Kernel panic - not syncing: Fatal exception
[  298.661079][ T8049] Kernel Offset: disabled
[  298.665432][ T8049] Rebooting in 86400 seconds..