last executing test programs:

16.781715091s ago: executing program 3 (id=1865):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

16.77342289s ago: executing program 3 (id=1866):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000380))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

14.997967126s ago: executing program 3 (id=1871):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

14.596469064s ago: executing program 2 (id=1875):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000380))
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13.818944273s ago: executing program 3 (id=1881):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000380))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12.505005155s ago: executing program 3 (id=1886):
r0 = dup(0xffffffffffffffff)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b02010103200809040000000101200009240100800909000909040100000102200009040101010102200009050109100032000908250102300001000904020000010220000904"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r0, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
write$nbd(r0, &(0x7f0000000340)={0x67446698, 0x0, 0x1, 0x4, 0x2, "66d181db45ef19788eea425e71807f4772b8272aa25425ee3cd13723764bcb2c84bcd89c86ebdbd58eab0194de405d773ba5d4f407a5b9621273f03bd0d88c19b44e260e30a415"}, 0x57)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)

9.344412698s ago: executing program 0 (id=1896):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954ee6272"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800)

9.283214178s ago: executing program 4 (id=1897):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x99f, 0x100, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1082, 0xffffffff, 0x1, 0x5, 0x344, 0xa2d88593, 0x4007, 0x7ff8, 0xeff, 0x3, 0x3, 0xe, 0x100, 0x6, 0x10001, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]})
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000100))
unshare(0x2c020400)

9.041979497s ago: executing program 2 (id=1898):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000380))
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.582528857s ago: executing program 2 (id=1900):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
getrlimit(0xb, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x10008000, &(0x7f0000000280)="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", 0xcb0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
mount$tmpfs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000000), 0x3200841, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'local', '=relative'}}}]})

6.848249974s ago: executing program 0 (id=1901):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x8a)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@mcast2, @in6=@remote, 0x4e22, 0x0, 0x4, 0x3, 0x2}, {0x10000, 0xffff, 0x40000000004, 0x6811221d, 0x100000000, 0x4, 0x7, 0x9}, {0x5, 0xfffffffffffffffd, 0x15, 0xfffffffffffffffd}, 0x80, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in=@empty, 0x4d6, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xff}, 0x3502, 0x1, 0x1, 0x0, 0x9, 0x3}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfb, 0x2, 0x0, @remote, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x488c, 0x80, 0x5, 0x7}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)={0x18, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x25dfdbfc, "", [@generic="83c84a76268c"]}, 0x18}], 0x1, 0x0, 0x0, 0x48000}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

6.690456548s ago: executing program 4 (id=1902):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

6.59840453s ago: executing program 1 (id=1903):
kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131f", 0x38, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df", 0xc, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9", 0x2e}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f8", 0x81}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6.404260997s ago: executing program 0 (id=1904):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76", 0x16)
io_uring_setup(0x10002f00, &(0x7f00000004c0)={0x0, 0xe8e3, 0x20, 0x20001, 0x2d4})
r5 = syz_open_procfs(0x0, 0x0)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, 0x0, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000100)={0x0, 0x0})
r7 = socket$inet(0x2, 0xa, 0x0)
sendmmsg$sock(r7, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0)
mkdir(0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)

6.374715831s ago: executing program 4 (id=1905):
ioprio_set$uid(0x3, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
fchown(r3, 0x0, 0xee01)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
r4 = syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=<r5=>r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x103881, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080))
writev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e86", 0x5f}, {&(0x7f0000000240)="2857e5671ef0d8e3c39651a014a3a298466c68130e5b77e37f04a5cec22a4cc681c424e649ef28c1bd78afcb20e74b1ad3ac2c75e5c03189383f8e1d3e61a1", 0x3f}, {0x0}], 0x3)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xfffd, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))
socket$igmp(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
r8 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000)

5.737149048s ago: executing program 1 (id=1906):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000380))
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5.547332424s ago: executing program 2 (id=1907):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x99f, 0x100, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1082, 0xffffffff, 0x1, 0x5, 0x344, 0xa2d88593, 0x4007, 0x7ff8, 0xeff, 0x3, 0x3, 0xe, 0x100, 0x6, 0x10001, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]})
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000100))
unshare(0x2c020400)
r4 = msgget$private(0x0, 0x0)
msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000080)=ANY=[])
mount(&(0x7f0000000280)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='jfs\x00', 0x2, &(0x7f0000000340)='/dev/comedi2\x00')
socket$kcm(0x2c, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x1000080, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

5.546737292s ago: executing program 3 (id=1908):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x20000023896)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000380))
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.741194498s ago: executing program 1 (id=1909):
kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9", 0x2e}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.298115253s ago: executing program 1 (id=1910):
openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0)
mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
chdir(0x0)
accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, 0x0, 0x20000000)
r6 = fanotify_init(0xf00, 0x1)
fanotify_mark(r6, 0x105, 0x40009975, r4, 0x0)
fallocate(r3, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)

2.866479945s ago: executing program 4 (id=1911):
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x5b88, 0x1c080, 0x6, 0x4894})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.865739761s ago: executing program 0 (id=1912):
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x5b88, 0x1c080, 0x6, 0x4894})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.646187511s ago: executing program 4 (id=1913):
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0x99f, 0x100, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x10, 0x1082, 0xffffffff, 0x1, 0x5, 0x344, 0xa2d88593, 0x4007, 0x7ff8, 0xeff, 0x3, 0x3, 0xe, 0x100, 0x6, 0x10001, 0x80007, 0x5, 0x1, 0xb0c4, 0x7df, 0x9, 0x400007, 0x1]})
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000100))
unshare(0x2c020400)
r4 = msgget$private(0x0, 0x0)
msgsnd(r4, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000)
mount(&(0x7f0000000280)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='jfs\x00', 0x2, &(0x7f0000000340)='/dev/comedi2\x00')
socket$kcm(0x2c, 0x3, 0x0)
mount(0x0, 0x0, 0x0, 0x1000080, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)

2.130589621s ago: executing program 1 (id=1914):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x3, 0x8a)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@mcast2, @in6=@remote, 0x4e22, 0x0, 0x4, 0x3, 0x2}, {0x10000, 0xffff, 0x40000000004, 0x6811221d, 0x100000000, 0x4, 0x7, 0x9}, {0x5, 0xfffffffffffffffd, 0x15, 0xfffffffffffffffd}, 0x80, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in=@empty, 0x4d6, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xff}, 0x3502, 0x1, 0x1, 0x0, 0x9, 0x3}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfb, 0x2, 0x0, @remote, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x488c, 0x80, 0x5, 0x7}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)={0x18, 0x6a, 0xfcdfa0f79c183163, 0x0, 0x25dfdbfc, "", [@generic="83c84a76268c"]}, 0x18}], 0x1, 0x0, 0x0, 0x48000}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

2.04359687s ago: executing program 2 (id=1915):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.966224784s ago: executing program 0 (id=1916):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e)
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
r6 = dup3(r5, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x12)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954ee6272"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800)

1.925204625s ago: executing program 2 (id=1917):
kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131f", 0x38, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df", 0xc, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {&(0x7f00000004c0), 0x0, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9", 0x2e}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f8", 0x81}], 0x4}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

184.928957ms ago: executing program 4 (id=1918):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r5 = syz_open_pts(0xffffffffffffffff, 0x0)
r6 = dup3(r5, 0xffffffffffffffff, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x12)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954ee6272"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800)

118.58008ms ago: executing program 1 (id=1919):
kexec_load(0x3, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131f", 0x38, 0x5, 0x4}, {&(0x7f0000000340), 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9", 0x2e}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307", 0x89}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 0 (id=1920):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
openat(0xffffffffffffff9c, 0x0, 0xca000, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
gettid()
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, &(0x7f0000000140), 0x0}, 0x20)
r6 = epoll_create1(0x0)
pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780))
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2004})

kernel console output (not intermixed with test programs):

][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  348.976221][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  349.016906][ T7612] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  349.033615][ T7612] EXT4-fs (loop1): orphan cleanup on readonly fs
[  349.045358][ T7612] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.443: Allocating blocks 41-42 which overlap fs metadata
[  349.045380][ T7612] loop1: lost filesystem error report for type 5 error -117
[  349.053410][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  349.053435][    C1] EXT4-fs (loop1): initial error at time 1779465336: ext4_mb_mark_diskspace_used:4222
[  349.053455][    C1] EXT4-fs (loop1): last error at time 1779465336: ext4_mb_mark_diskspace_used:4222
[  349.132581][ T7612] Quota error (device loop1): write_blk: dquota write failed
[  349.132605][ T7612] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  349.132745][ T7612] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.443: Allocating blocks 41-42 which overlap fs metadata
[  349.132771][ T7612] loop1: lost filesystem error report for type 5 error -117
[  349.172412][ T7612] Quota error (device loop1): write_blk: dquota write failed
[  349.172536][ T7612] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  349.172587][ T7612] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.443: Failed to acquire dquot type 1
[  349.172607][ T7612] loop1: lost filesystem error report for type 5 error -117
[  349.210341][ T7612] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  349.210443][ T7612] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.443: corrupted inode contents
[  349.210465][ T7612] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  349.260416][ T7612] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #12: comm syz.1.443: mark_inode_dirty error
[  349.260440][ T7612] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  349.285910][ T7612] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.443: corrupted inode contents
[  349.285942][ T7612] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  349.309746][ T7612] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.443: mark_inode_dirty error
[  349.309778][ T7612] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  349.328508][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'.
[  349.350673][ T7612] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.443: corrupted inode contents
[  349.350702][ T7612] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  349.363442][ T7612] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  349.363467][ T7612] loop1: lost filesystem error report for type 5 error -117
[  349.370990][ T7618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'.
[  349.399464][ T7612] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.443: corrupted inode contents
[  349.399494][ T7612] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  349.411768][ T7612] EXT4-fs error (device loop1): ext4_truncate:4690: inode #12: comm syz.1.443: mark_inode_dirty error
[  349.411798][ T7612] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  349.432794][ T7612] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  349.432818][ T7612] loop1: lost filesystem error report for type 5 error -117
[  349.432872][ T7618] netlink: 37 bytes leftover after parsing attributes in process `syz.2.446'.
[  349.468691][ T7612] EXT4-fs (loop1): 1 truncate cleaned up
[  349.471600][ T7612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  349.505966][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  349.695545][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.246910][ T5752] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  350.985021][ T5752] usb 3-1: unable to get BOS descriptor or descriptor too short
[  350.988884][ T5752] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  350.988909][ T5752] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  351.027323][ T5752] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  351.027353][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.027370][ T5752] usb 3-1: Product: syz
[  351.027383][ T5752] usb 3-1: Manufacturer: syz
[  351.027395][ T5752] usb 3-1: SerialNumber: syz
[  351.112076][ T5752] usb 3-1: selecting invalid altsetting 1
[  351.120675][ T5752] usb 3-1: unit 6 not found!
[  351.303513][ T5723] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  351.367541][ T7644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'.
[  351.367639][ T7644] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'.
[  351.394901][ T7644] netlink: 37 bytes leftover after parsing attributes in process `syz.3.453'.
[  351.450908][ T7640] loop1: detected capacity change from 0 to 32768
[  351.454044][ T7646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'.
[  351.455248][ T7646] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'.
[  351.480244][ T5723] usb 5-1: unable to get BOS descriptor or descriptor too short
[  351.481504][ T5723] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  351.481575][ T5723] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  351.481614][ T5723] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  351.529277][ T5723] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  351.529307][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.529326][ T5723] usb 5-1: Product: syz
[  351.529340][ T5723] usb 5-1: Manufacturer: syz
[  351.529353][ T5723] usb 5-1: SerialNumber: syz
[  351.645173][ T7646] netlink: 37 bytes leftover after parsing attributes in process `syz.0.454'.
[  351.732163][ T5752] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  352.097454][ T7654] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  352.297671][ T5752] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  352.302308][ T7640] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  352.367575][ T5752] usb 3-1: USB disconnect, device number 7
[  352.646704][ T5952] udevd[5952]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  352.713359][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  352.822609][ T5723] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  352.863361][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  353.008779][ T5723] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  353.419025][ T7673] loop0: detected capacity change from 0 to 512
[  353.613015][ T7673] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  354.113371][ T7673] EXT4-fs (loop0): orphan cleanup on readonly fs
[  354.129200][ T7673] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.458: Allocating blocks 41-42 which overlap fs metadata
[  354.129230][ T7673] loop0: lost filesystem error report for type 5 error -117
[  354.133520][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  354.133542][    C0] EXT4-fs (loop0): initial error at time 1779465341: ext4_mb_mark_diskspace_used:4222
[  354.133564][    C0] EXT4-fs (loop0): last error at time 1779465341: ext4_mb_mark_diskspace_used:4222
[  354.136771][ T7673] Quota error (device loop0): write_blk: dquota write failed
[  354.136791][ T7673] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  354.136923][ T7673] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.458: Allocating blocks 41-42 which overlap fs metadata
[  354.136947][ T7673] loop0: lost filesystem error report for type 5 error -117
[  354.158338][ T7673] Quota error (device loop0): write_blk: dquota write failed
[  354.158481][ T7673] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  354.158530][ T7673] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.458: Failed to acquire dquot type 1
[  354.158551][ T7673] loop0: lost filesystem error report for type 5 error -117
[  354.163763][ T7673] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  354.163864][ T7673] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.458: corrupted inode contents
[  354.163886][ T7673] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  354.166716][ T7673] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #12: comm syz.0.458: mark_inode_dirty error
[  354.166745][ T7673] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  354.167959][ T7673] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.458: corrupted inode contents
[  354.167985][ T7673] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  354.168420][ T7673] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.458: mark_inode_dirty error
[  354.168953][ T7673] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.458: corrupted inode contents
[  354.169377][ T7673] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  354.169393][ T7673] loop0: lost filesystem error report for type 5 error -117
[  354.169920][ T7673] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.458: corrupted inode contents
[  354.170429][ T7673] EXT4-fs error (device loop0): ext4_truncate:4690: inode #12: comm syz.0.458: mark_inode_dirty error
[  354.170953][ T7673] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  354.170971][ T7673] loop0: lost filesystem error report for type 5 error -117
[  354.171794][ T7673] EXT4-fs (loop0): 1 truncate cleaned up
[  354.319889][ T7677] syz_tun: entered allmulticast mode
[  354.379470][ T7673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  354.660134][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.758780][ T5723] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  354.772787][ T5723] usb 5-1: USB disconnect, device number 11
[  355.033361][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  355.344088][ T5602] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  355.964554][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  355.970139][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  356.016882][ T5618] ocfs2: Unmounting device (7,1) on (node local)
[  356.126436][ T5602] usb 4-1: unable to get BOS descriptor or descriptor too short
[  356.136230][ T5602] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  356.136312][ T5602] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  356.136349][ T5602] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  356.139560][ T5602] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  356.139587][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.139605][ T5602] usb 4-1: Product: syz
[  356.139617][ T5602] usb 4-1: Manufacturer: syz
[  356.139630][ T5602] usb 4-1: SerialNumber: syz
[  356.359566][ T7694] netlink: 'syz.4.464': attribute type 1 has an invalid length.
[  356.359588][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'.
[  356.441208][ T7694] netlink: 37 bytes leftover after parsing attributes in process `syz.4.464'.
[  357.017982][ T7696] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  357.079665][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  357.240663][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  357.259988][ T4930] Bluetooth: hci4: unexpected event for opcode 0x007f
[  357.451924][ T5602] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  357.484156][ T5602] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  357.676680][ T5602] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  357.694038][ T5602] usb 4-1: USB disconnect, device number 11
[  357.855257][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  358.447479][ T5723] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  359.492357][ T5723] usb 1-1: unable to get BOS descriptor or descriptor too short
[  359.503421][ T5723] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  359.503435][ T5723] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  359.510656][ T5723] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  359.510685][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.510704][ T5723] usb 1-1: Product: syz
[  359.510716][ T5723] usb 1-1: Manufacturer: syz
[  359.510729][ T5723] usb 1-1: SerialNumber: syz
[  359.592974][ T7723] loop4: detected capacity change from 0 to 512
[  359.598705][ T7723] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  359.630331][ T7723] EXT4-fs (loop4): orphan cleanup on readonly fs
[  359.630982][ T5723] usb 1-1: selecting invalid altsetting 1
[  359.634021][ T7723] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.470: Allocating blocks 41-42 which overlap fs metadata
[  359.634049][ T7723] loop4: lost filesystem error report for type 5 error -117
[  359.636118][ T5723] usb 1-1: unit 6 not found!
[  359.643407][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  359.643426][    C1] EXT4-fs (loop4): initial error at time 1779465347: ext4_mb_mark_diskspace_used:4222
[  359.643447][    C1] EXT4-fs (loop4): last error at time 1779465347: ext4_mb_mark_diskspace_used:4222
[  359.651642][ T7723] Quota error (device loop4): write_blk: dquota write failed
[  359.651662][ T7723] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  359.651813][ T7723] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.470: Allocating blocks 41-42 which overlap fs metadata
[  359.651838][ T7723] loop4: lost filesystem error report for type 5 error -117
[  359.665197][ T7723] Quota error (device loop4): write_blk: dquota write failed
[  359.665329][ T7723] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  359.665380][ T7723] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.470: Failed to acquire dquot type 1
[  359.665399][ T7723] loop4: lost filesystem error report for type 5 error -117
[  359.666081][ T7723] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  359.666186][ T7723] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.470: corrupted inode contents
[  359.666208][ T7723] fserror_report: 4 callbacks suppressed
[  359.666217][ T7723] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  359.666851][ T7723] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.470: mark_inode_dirty error
[  359.666876][ T7723] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  359.667373][ T7723] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.470: corrupted inode contents
[  359.667398][ T7723] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  359.668115][ T7723] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.470: mark_inode_dirty error
[  359.668141][ T7723] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  359.687765][ T7723] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.470: corrupted inode contents
[  359.687794][ T7723] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  359.694500][ T7723] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  359.694524][ T7723] loop4: lost filesystem error report for type 5 error -117
[  359.702241][ T7723] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.470: corrupted inode contents
[  359.702271][ T7723] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  359.703969][ T7723] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.470: mark_inode_dirty error
[  359.703997][ T7723] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  359.704757][ T7723] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  359.704776][ T7723] loop4: lost filesystem error report for type 5 error -117
[  359.708578][ T7723] EXT4-fs (loop4): 1 truncate cleaned up
[  359.770851][ T7723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  360.432316][ T5723] usb 1-1: 2:0: failed to get current value for ch 0 (-32)
[  360.435569][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.553439][ T5752] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  360.707595][ T5752] usb 4-1: unable to get BOS descriptor or descriptor too short
[  360.717309][ T5752] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  360.717386][ T5752] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  360.717423][ T5752] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  360.757517][ T5752] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  360.757544][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.757562][ T5752] usb 4-1: Product: syz
[  360.757575][ T5752] usb 4-1: Manufacturer: syz
[  360.757587][ T5752] usb 4-1: SerialNumber: syz
[  360.883532][ T7738] syz_tun: entered allmulticast mode
[  360.924425][ T5723] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  360.938981][ T5723] usb 1-1: USB disconnect, device number 8
[  361.122200][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  361.185816][ T7739] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  361.241926][ T7733] loop1: detected capacity change from 0 to 32768
[  361.549996][ T7733] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  361.560741][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  363.257951][ T5752] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  363.296425][ T5752] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  363.668079][ T5752] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  363.685146][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  363.734361][ T5752] usb 4-1: USB disconnect, device number 12
[  363.842392][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  363.846929][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  363.872812][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  363.872888][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  363.872926][    T9] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  363.886019][    T9] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  363.886048][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.886065][    T9] usb 1-1: Product: syz
[  363.886077][    T9] usb 1-1: Manufacturer: syz
[  363.886114][    T9] usb 1-1: SerialNumber: syz
[  364.333274][ T5618] ocfs2: Unmounting device (7,1) on (node local)
[  364.378292][ T7758] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  365.758135][    T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  365.882862][    T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  366.740478][    T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22
[  366.752676][    T9] usb 1-1: USB disconnect, device number 9
[  366.917189][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  367.234662][ T5624] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  367.281865][ T7785] syz_tun: entered allmulticast mode
[  367.390965][ T5624] usb 2-1: unable to get BOS descriptor or descriptor too short
[  367.404361][ T5624] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.404387][ T5624] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  367.428609][ T5624] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  367.428653][ T5624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.428672][ T5624] usb 2-1: Product: syz
[  367.428685][ T5624] usb 2-1: Manufacturer: syz
[  367.428697][ T5624] usb 2-1: SerialNumber: syz
[  367.510100][ T5624] usb 2-1: selecting invalid altsetting 1
[  367.521069][ T5624] usb 2-1: unit 6 not found!
[  367.734513][ T7789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.486'.
[  368.039082][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  368.145328][ T5624] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  368.662609][ T5624] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  368.682450][ T5624] usb 2-1: USB disconnect, device number 9
[  368.826203][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  369.993673][ T4930] Bluetooth: hci4: unexpected event for opcode 0x007f
[  370.082550][ T7794] loop4: detected capacity change from 0 to 32768
[  370.281980][ T7794] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  371.232969][ T7828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.497'.
[  371.608098][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  372.043351][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  372.423476][ T5723] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  373.403931][ T5723] usb 5-1: device descriptor read/64, error -71
[  373.834156][ T7794] syz.4.488 (7794) used greatest stack depth: 18776 bytes left
[  373.851237][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  373.883484][ T5011] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  373.964074][ T5617] ocfs2: Unmounting device (7,4) on (node local)
[  374.015832][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  374.016919][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.016993][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  374.017037][    T9] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  374.019260][    T9] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  374.019291][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.019338][    T9] usb 1-1: Product: syz
[  374.019351][    T9] usb 1-1: Manufacturer: syz
[  374.019363][    T9] usb 1-1: SerialNumber: syz
[  374.038135][ T5011] usb 2-1: unable to get BOS descriptor or descriptor too short
[  374.040116][ T5011] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.040139][ T5011] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  374.045030][ T5011] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  374.045056][ T5011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.045073][ T5011] usb 2-1: Product: syz
[  374.045086][ T5011] usb 2-1: Manufacturer: syz
[  374.045098][ T5011] usb 2-1: SerialNumber: syz
[  374.076946][ T5011] usb 2-1: selecting invalid altsetting 1
[  374.080444][ T5011] usb 2-1: unit 6 not found!
[  374.326511][ T7853] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  374.513496][ T5752] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  374.762391][ T5011] usb 2-1: 2:0: failed to get current value for ch 0 (-32)
[  374.856817][ T5752] usb 3-1: unable to get BOS descriptor or descriptor too short
[  374.859833][ T5752] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.859906][ T5752] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  374.859944][ T5752] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  374.862669][ T5752] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  374.862693][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.862716][ T5752] usb 3-1: Product: syz
[  374.862729][ T5752] usb 3-1: Manufacturer: syz
[  374.862740][ T5752] usb 3-1: SerialNumber: syz
[  375.115408][ T5011] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  375.140876][    T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  375.142247][ T5011] usb 2-1: USB disconnect, device number 10
[  375.215571][    T9] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  375.392015][    T9] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22
[  375.416300][    T9] usb 1-1: USB disconnect, device number 10
[  375.456205][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  375.621327][ T7873] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  375.717620][ T7880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.508'.
[  375.778288][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  375.810838][ T5752] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  375.843972][ T5752] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[  376.052557][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  376.258364][ T5752] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[  376.295399][ T5752] usb 3-1: USB disconnect, device number 8
[  377.293957][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  378.043826][ T5011] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  378.200819][ T5011] usb 1-1: unable to get BOS descriptor or descriptor too short
[  378.202297][ T5011] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  378.202318][ T5011] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  378.244191][ T5011] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  378.244210][ T5011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.244220][ T5011] usb 1-1: Product: syz
[  378.244227][ T5011] usb 1-1: Manufacturer: syz
[  378.244234][ T5011] usb 1-1: SerialNumber: syz
[  378.318575][ T5011] usb 1-1: selecting invalid altsetting 1
[  378.341760][ T5011] usb 1-1: unit 6 not found!
[  378.981607][ T5011] usb 1-1: 2:0: failed to get current value for ch 0 (-32)
[  379.292292][ T5011] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  379.304084][ T5011] usb 1-1: USB disconnect, device number 11
[  379.466593][ T7942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.532'.
[  379.499441][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  380.241377][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  383.302466][ T7994] netlink: 72 bytes leftover after parsing attributes in process `syz.4.551'.
[  383.374607][ T7994] netlink: 37 bytes leftover after parsing attributes in process `syz.4.551'.
[  383.644979][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  383.645070][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  383.748994][ T8004] netlink: 40 bytes leftover after parsing attributes in process `syz.2.555'.
[  384.193250][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  384.211690][ T5723] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  385.197119][ T5723] usb 3-1: unable to get BOS descriptor or descriptor too short
[  385.199081][ T5723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  385.199157][ T5723] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  385.199194][ T5723] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  385.226896][ T5723] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  385.226926][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.226944][ T5723] usb 3-1: Product: syz
[  385.226956][ T5723] usb 3-1: Manufacturer: syz
[  385.226969][ T5723] usb 3-1: SerialNumber: syz
[  385.335238][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  385.669254][ T8038] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  386.005720][ T8050] netlink: 40 bytes leftover after parsing attributes in process `syz.0.570'.
[  386.115774][ T5723] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  386.134262][ T5723] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[  386.306461][ T5723] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[  386.323738][ T5723] usb 3-1: USB disconnect, device number 9
[  387.628418][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  387.939837][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  387.944197][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  388.366764][ T8081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.583'.
[  389.006760][ T8093] loop3: detected capacity change from 0 to 512
[  389.608084][ T8093] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  389.613151][ T8093] EXT4-fs (loop3): orphan cleanup on readonly fs
[  389.617693][ T8093] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.584: Allocating blocks 41-42 which overlap fs metadata
[  389.617727][ T8093] loop3: lost filesystem error report for type 5 error -117
[  390.298117][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  390.298146][    C1] EXT4-fs (loop3): initial error at time 1779465377: ext4_mb_mark_diskspace_used:4222
[  390.298170][    C1] EXT4-fs (loop3): last error at time 1779465377: ext4_mb_mark_diskspace_used:4222
[  390.324036][ T8093] Quota error (device loop3): write_blk: dquota write failed
[  390.324059][ T8093] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  390.326953][ T8093] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.584: Allocating blocks 41-42 which overlap fs metadata
[  390.326987][ T8093] loop3: lost filesystem error report for type 5 error -117
[  390.328771][ T8093] Quota error (device loop3): write_blk: dquota write failed
[  390.328889][ T8093] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  390.328941][ T8093] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.584: Failed to acquire dquot type 1
[  390.328960][ T8093] loop3: lost filesystem error report for type 5 error -117
[  390.331658][ T8093] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  390.331775][ T8093] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.584: corrupted inode contents
[  390.331798][ T8093] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  390.333207][ T8093] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.584: mark_inode_dirty error
[  390.333235][ T8093] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  390.363521][ T8093] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.584: corrupted inode contents
[  390.363552][ T8093] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  390.375665][ T8093] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.584: mark_inode_dirty error
[  390.375711][ T8093] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  390.383559][ T8093] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.584: corrupted inode contents
[  390.383591][ T8093] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  390.453451][ T5624] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  390.605938][ T5624] usb 1-1: unable to get BOS descriptor or descriptor too short
[  390.623187][ T5624] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  390.623211][ T5624] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  390.707543][ T8093] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  390.707570][ T8093] loop3: lost filesystem error report for type 5 error -117
[  390.708290][ T8093] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.584: corrupted inode contents
[  390.708318][ T8093] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  390.708698][ T8093] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.584: mark_inode_dirty error
[  390.708724][ T8093] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  390.709176][ T8093] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  390.709196][ T8093] loop3: lost filesystem error report for type 5 error -117
[  390.710777][ T8093] EXT4-fs (loop3): 1 truncate cleaned up
[  390.713579][ T8093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  390.728235][ T5624] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  390.728264][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.728282][ T5624] usb 1-1: Product: syz
[  390.728294][ T5624] usb 1-1: Manufacturer: syz
[  390.728307][ T5624] usb 1-1: SerialNumber: syz
[  390.843763][ T5624] usb 1-1: selecting invalid altsetting 1
[  390.845113][ T5624] usb 1-1: unit 6 not found!
[  391.020044][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.419394][ T5624] usb 1-1: 2:0: failed to get current value for ch 0 (-32)
[  391.759610][ T5624] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  391.775420][ T5011] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  391.799944][ T5624] usb 1-1: USB disconnect, device number 12
[  391.905554][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  391.926953][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  392.021379][ T8125] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  392.372164][ T5011] usb 4-1: unable to get BOS descriptor or descriptor too short
[  392.373146][ T5011] usb 4-1: unable to read config index 0 descriptor/start: -71
[  392.373180][ T5011] usb 4-1: can't read configurations, error -71
[  392.417196][ T8135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'.
[  392.417294][ T8135] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'.
[  392.481636][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  394.296187][ T8162] netlink: 37 bytes leftover after parsing attributes in process `syz.4.615'.
[  395.823526][ T5624] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  396.736460][ T5624] usb 4-1: unable to get BOS descriptor or descriptor too short
[  396.750808][ T5624] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.750834][ T5624] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  396.784380][ T5624] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  396.784410][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.784429][ T5624] usb 4-1: Product: syz
[  396.784442][ T5624] usb 4-1: Manufacturer: syz
[  396.784455][ T5624] usb 4-1: SerialNumber: syz
[  397.087301][ T5624] usb 4-1: selecting invalid altsetting 1
[  397.088072][ T5624] usb 4-1: unit 6 not found!
[  398.326607][ T5624] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  399.775040][ T5624] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  399.822126][ T5624] usb 4-1: USB disconnect, device number 15
[  399.854771][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  401.333149][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  402.459375][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  403.629571][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  405.534736][    T9] usb 5-1: device descriptor read/all, error -71
[  405.897308][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  406.164934][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  406.216316][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  408.322607][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  408.813484][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  409.139780][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  409.141627][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  409.141649][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  409.153235][   T10] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  409.153263][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.153280][   T10] usb 5-1: Product: syz
[  409.155241][   T10] usb 5-1: Manufacturer: syz
[  409.155259][   T10] usb 5-1: SerialNumber: syz
[  409.259017][   T10] usb 5-1: selecting invalid altsetting 1
[  409.259786][   T10] usb 5-1: unit 6 not found!
[  409.924627][   T10] usb 5-1: 2:0: failed to get current value for ch 0 (-32)
[  411.153052][   T10] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  411.173221][   T10] usb 5-1: USB disconnect, device number 16
[  411.409511][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  411.551142][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  413.072980][ T8398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.701'.
[  413.073084][ T8398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.701'.
[  413.109529][ T8398] netlink: 37 bytes leftover after parsing attributes in process `syz.4.701'.
[  413.420130][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.703'.
[  413.420225][ T8407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.703'.
[  413.703113][ T8413] netlink: 37 bytes leftover after parsing attributes in process `syz.2.705'.
[  416.503440][ T5723] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  416.656591][ T5723] usb 1-1: unable to get BOS descriptor or descriptor too short
[  416.658572][ T5723] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  416.658656][ T5723] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  416.658692][ T5723] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  416.662726][ T5723] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  416.662753][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.662771][ T5723] usb 1-1: Product: syz
[  416.662783][ T5723] usb 1-1: Manufacturer: syz
[  416.662796][ T5723] usb 1-1: SerialNumber: syz
[  417.429404][ T8455] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  417.563493][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  417.716995][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  417.719425][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.719446][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  417.771383][   T10] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  417.771412][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.771484][   T10] usb 4-1: Product: syz
[  417.771497][   T10] usb 4-1: Manufacturer: syz
[  417.771511][   T10] usb 4-1: SerialNumber: syz
[  417.868203][   T10] usb 4-1: selecting invalid altsetting 1
[  417.869482][ T5723] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  417.870560][   T10] usb 4-1: unit 6 not found!
[  418.464102][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  418.472963][   T10] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  418.631789][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  418.646279][ T5723] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  418.650968][   T10] usb 4-1: USB disconnect, device number 16
[  418.818101][ T5723] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22
[  418.838174][ T5723] usb 1-1: USB disconnect, device number 13
[  418.982069][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  420.000868][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  422.293629][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  422.457711][ T8538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.751'.
[  422.457818][ T8538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.751'.
[  422.472846][ T8538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.751'.
[  422.512836][ T8538] netlink: 37 bytes leftover after parsing attributes in process `syz.3.751'.
[  423.283545][ T5810] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  423.439963][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short
[  423.441211][ T5810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  423.441337][ T5810] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  423.441374][ T5810] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  423.454647][ T5810] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  423.454677][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.454695][ T5810] usb 4-1: Product: syz
[  423.454708][ T5810] usb 4-1: Manufacturer: syz
[  423.454721][ T5810] usb 4-1: SerialNumber: syz
[  424.013933][ T8579] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  424.244401][ T8595] syz_tun: entered allmulticast mode
[  425.342511][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  425.440595][ T5810] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  425.464084][ T5810] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  425.883759][ T5810] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  425.897431][ T5810] usb 4-1: USB disconnect, device number 17
[  426.479439][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  428.541048][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  428.684931][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  432.463505][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  435.187128][ T8738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.826'.
[  435.187244][ T8738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.826'.
[  435.248698][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  435.250235][ T8738] netlink: 37 bytes leftover after parsing attributes in process `syz.2.826'.
[  436.230118][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  437.449390][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  437.564560][ T5751] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  437.581413][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  437.665707][ T5624] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  437.795445][ T8796] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  437.833516][ T5624] usb 1-1: unable to get BOS descriptor or descriptor too short
[  437.835340][ T5624] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  437.835412][ T5624] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  437.835449][ T5624] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  437.839198][ T5624] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  437.839222][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.839239][ T5624] usb 1-1: Product: syz
[  437.839251][ T5624] usb 1-1: Manufacturer: syz
[  437.839263][ T5624] usb 1-1: SerialNumber: syz
[  437.979553][ T5751] usb 4-1: unable to get BOS descriptor or descriptor too short
[  437.980738][ T5751] usb 4-1: unable to read config index 0 descriptor/start: -71
[  437.980774][ T5751] usb 4-1: can't read configurations, error -71
[  438.683865][ T8806] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  438.751898][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.855'.
[  438.752537][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.4.855'.
[  438.862618][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.856'.
[  438.862717][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.856'.
[  438.893638][ T8824] netlink: 37 bytes leftover after parsing attributes in process `syz.4.855'.
[  438.913472][ T5624] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  438.919520][ T8826] netlink: 37 bytes leftover after parsing attributes in process `syz.2.856'.
[  438.962265][ T5624] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  440.600173][ T5624] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22
[  441.497689][ T5624] usb 1-1: USB disconnect, device number 14
[  441.553577][ T5752] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  441.700094][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  441.709338][ T5752] usb 5-1: Using ep0 maxpacket: 32
[  441.728365][ T5752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  441.739790][ T5752] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  441.739818][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.739837][ T5752] usb 5-1: Product: syz
[  441.739852][ T5752] usb 5-1: Manufacturer: syz
[  441.739864][ T5752] usb 5-1: SerialNumber: syz
[  441.792920][ T5752] usb 5-1: config 0 descriptor??
[  441.814173][ T5752] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  442.123520][ T5810] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  443.322745][ T5752] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2
[  444.008417][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  444.282573][ T8886] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  444.316526][ T5810] usb 3-1: unable to get BOS descriptor or descriptor too short
[  444.317536][ T5810] usb 3-1: unable to read config index 0 descriptor/start: -71
[  444.317570][ T5810] usb 3-1: can't read configurations, error -71
[  445.289519][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  445.289607][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  445.323581][ T5751] usb 5-1: USB disconnect, device number 17
[  446.834430][ T5751] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  446.959062][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  446.985598][ T5751] usb 5-1: unable to get BOS descriptor or descriptor too short
[  446.986737][ T5751] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  446.986810][ T5751] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  446.986845][ T5751] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  446.989318][ T5751] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  446.989343][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.989361][ T5751] usb 5-1: Product: syz
[  446.989372][ T5751] usb 5-1: Manufacturer: syz
[  446.989381][ T5751] usb 5-1: SerialNumber: syz
[  447.283407][ T4930] Bluetooth: hci1: ACL packet for unknown connection handle 3584
[  447.323176][ T8949] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  447.618115][ T5751] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  447.669629][ T5751] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  447.966838][ T5751] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  448.005357][ T5751] usb 5-1: USB disconnect, device number 18
[  448.125406][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  448.126830][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  448.407232][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  448.904321][ T9010] loop4: detected capacity change from 0 to 512
[  449.388030][ T9010] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  449.630714][ T9010] EXT4-fs (loop4): orphan cleanup on readonly fs
[  449.664502][ T9010] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.919: Allocating blocks 41-42 which overlap fs metadata
[  449.664531][ T9010] loop4: lost filesystem error report for type 5 error -117
[  449.666738][ T9010] Quota error (device loop4): write_blk: dquota write failed
[  449.666776][ T9010] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  449.666915][ T9010] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.919: Allocating blocks 41-42 which overlap fs metadata
[  449.666940][ T9010] loop4: lost filesystem error report for type 5 error -117
[  449.673337][    C1] EXT4-fs (loop4): error count since last fsck: 2
[  449.673360][    C1] EXT4-fs (loop4): initial error at time 1779465437: ext4_mb_mark_diskspace_used:4222
[  449.673382][    C1] EXT4-fs (loop4): last error at time 1779465437: ext4_mb_mark_diskspace_used:4222
[  449.673632][ T9010] Quota error (device loop4): write_blk: dquota write failed
[  449.673758][ T9010] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  449.673813][ T9010] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.919: Failed to acquire dquot type 1
[  449.673833][ T9010] loop4: lost filesystem error report for type 5 error -117
[  449.691502][ T9010] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  449.691603][ T9010] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.919: corrupted inode contents
[  449.691626][ T9010] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  449.704218][ T9010] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.919: mark_inode_dirty error
[  449.704251][ T9010] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  449.716256][ T9010] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.919: corrupted inode contents
[  449.716289][ T9010] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  449.734568][ T9010] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.919: mark_inode_dirty error
[  449.734601][ T9010] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  449.748210][ T9010] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.919: corrupted inode contents
[  449.748241][ T9010] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  449.750590][ T9010] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  449.750611][ T9010] loop4: lost filesystem error report for type 5 error -117
[  449.751425][ T9010] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.919: corrupted inode contents
[  449.751452][ T9010] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  449.752083][ T9010] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.919: mark_inode_dirty error
[  449.752109][ T9010] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  449.753062][ T9010] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  449.753082][ T9010] loop4: lost filesystem error report for type 5 error -117
[  449.754333][ T9010] EXT4-fs (loop4): 1 truncate cleaned up
[  449.758784][ T9010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  450.139067][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.419430][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  450.549793][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  450.633454][ T5751] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  450.786570][ T5751] usb 5-1: unable to get BOS descriptor or descriptor too short
[  450.789128][ T5751] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  450.789201][ T5751] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  450.789224][ T5751] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  450.834758][ T5751] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  450.834785][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.834804][ T5751] usb 5-1: Product: syz
[  450.834816][ T5751] usb 5-1: Manufacturer: syz
[  450.834828][ T5751] usb 5-1: SerialNumber: syz
[  451.222813][ T9058] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  451.393474][ T5751] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  451.412983][ T5751] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  451.602900][ T5751] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  451.620839][ T5751] usb 5-1: USB disconnect, device number 19
[  451.728733][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  452.034081][ T9072] loop0: detected capacity change from 0 to 32768
[  452.106762][ T9072] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  453.466863][ T5624] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  453.593524][ T5624] usb 1-1: device descriptor read/64, error -71
[  453.863581][ T5624] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  453.943662][ T5751] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  454.058271][ T9115] loop3: detected capacity change from 0 to 512
[  454.436967][ T9115] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  454.784973][ T9115] EXT4-fs (loop3): orphan cleanup on readonly fs
[  454.817268][ T9115] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.961: Allocating blocks 41-42 which overlap fs metadata
[  454.817343][ T9115] loop3: lost filesystem error report for type 5 error -117
[  454.823329][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  454.823355][    C1] EXT4-fs (loop3): initial error at time 1779465442: ext4_mb_mark_diskspace_used:4222
[  454.823379][    C1] EXT4-fs (loop3): last error at time 1779465442: ext4_mb_mark_diskspace_used:4222
[  454.953164][ T5624] usb 1-1: device descriptor read/64, error -71
[  454.953208][ T9115] Quota error (device loop3): write_blk: dquota write failed
[  454.953223][ T9115] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  454.953407][ T9115] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.961: Allocating blocks 41-42 which overlap fs metadata
[  454.953430][ T9115] loop3: lost filesystem error report for type 5 error -117
[  455.028118][ T9115] Quota error (device loop3): write_blk: dquota write failed
[  455.028253][ T9115] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  455.028303][ T9115] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.961: Failed to acquire dquot type 1
[  455.028322][ T9115] loop3: lost filesystem error report for type 5 error -117
[  455.029223][ T9115] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  455.029316][ T9115] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.961: corrupted inode contents
[  455.029336][ T9115] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  455.029721][ T9115] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.961: mark_inode_dirty error
[  455.029745][ T9115] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  455.030148][ T9115] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.961: corrupted inode contents
[  455.030172][ T9115] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  455.031250][ T9115] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.961: mark_inode_dirty error
[  455.031277][ T9115] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  455.032006][ T9115] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.961: corrupted inode contents
[  455.032034][ T9115] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  455.038927][ T9115] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  455.038950][ T9115] loop3: lost filesystem error report for type 5 error -117
[  455.040471][ T9115] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.961: corrupted inode contents
[  455.040498][ T9115] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  455.041376][ T9115] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.961: mark_inode_dirty error
[  455.041401][ T9115] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  455.042489][ T9115] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  455.042510][ T9115] loop3: lost filesystem error report for type 5 error -117
[  455.043159][ T9115] EXT4-fs (loop3): 1 truncate cleaned up
[  455.057028][ T5624] usb usb1-port1: attempt power cycle
[  455.078557][ T5751] usb 3-1: unable to get BOS descriptor or descriptor too short
[  455.086336][ T9115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  455.107625][ T5751] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  455.107652][ T5751] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  455.182355][ T5751] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  455.182384][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.182402][ T5751] usb 3-1: Product: syz
[  455.182415][ T5751] usb 3-1: Manufacturer: syz
[  455.182429][ T5751] usb 3-1: SerialNumber: syz
[  455.460354][ T5751] usb 3-1: selecting invalid altsetting 1
[  455.461123][ T5751] usb 3-1: unit 6 not found!
[  455.493211][ T5614] ocfs2: Unmounting device (7,0) on (node local)
[  455.544457][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.558375][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  456.072186][ T5751] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  456.215364][ T5624] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  456.254914][ T5751] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  456.267709][ T5751] usb 3-1: USB disconnect, device number 12
[  456.354845][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  456.386878][ T5624] usb 1-1: unable to get BOS descriptor or descriptor too short
[  456.388987][ T5624] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  456.389065][ T5624] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  456.389091][ T5624] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  456.399773][ T5624] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  456.399800][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.399818][ T5624] usb 1-1: Product: syz
[  456.399831][ T5624] usb 1-1: Manufacturer: syz
[  456.399842][ T5624] usb 1-1: SerialNumber: syz
[  456.690312][ T9151] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  456.942936][ T5624] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  456.991665][ T5624] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  458.175463][ T9167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.986'.
[  458.353002][ T5624] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22
[  458.364460][ T5624] usb 1-1: USB disconnect, device number 18
[  458.481734][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  458.586190][ T9172] loop2: detected capacity change from 0 to 32768
[  458.681652][ T9172] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  459.871505][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  460.023744][ T5624] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  460.153473][ T5624] usb 3-1: device descriptor read/64, error -71
[  460.253460][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  460.403483][    T9] usb 1-1: Using ep0 maxpacket: 32
[  460.406025][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  460.408254][    T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5
[  460.408280][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.408298][    T9] usb 1-1: Product: syz
[  460.408310][    T9] usb 1-1: Manufacturer: syz
[  460.408322][    T9] usb 1-1: SerialNumber: syz
[  460.439412][ T5624] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  460.475902][    T9] usb 1-1: config 0 descriptor??
[  460.505457][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  460.570392][ T4930] Bluetooth: hci3: ACL packet for unknown connection handle 3584
[  460.573447][ T5624] usb 3-1: device descriptor read/64, error -71
[  460.589425][    T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  460.632118][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  460.683994][ T5624] usb usb3-port1: attempt power cycle
[  461.043438][ T5624] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  461.067438][ T5624] usb 3-1: device descriptor read/8, error -71
[  461.314162][ T5624] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  461.533550][ T5624] usb 3-1: device not accepting address 16, error -71
[  461.541553][ T5624] usb usb3-port1: unable to enumerate USB device
[  461.728008][ T5613] ocfs2: Unmounting device (7,2) on (node local)
[  462.432489][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  463.616939][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'.
[  463.617166][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'.
[  463.660355][ T9280] netlink: 37 bytes leftover after parsing attributes in process `syz.2.1030'.
[  463.821511][  T824] usb 1-1: USB disconnect, device number 19
[  464.074851][ T4930] Bluetooth: hci1: ACL packet for unknown connection handle 3584
[  464.389172][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  464.984313][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1043'.
[  464.984419][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1043'.
[  464.993138][ T9322] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1043'.
[  465.203798][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  465.322933][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  465.532555][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  465.933667][ T9352] overlayfs: failed to resolve './file1': -2
[  466.971993][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  467.332039][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  467.622642][ T9373] loop3: detected capacity change from 0 to 32768
[  467.635241][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  467.661308][ T9373] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  467.944086][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  467.945260][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  467.945318][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  467.945349][    T9] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  467.969230][    T9] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  467.969257][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.969273][    T9] usb 5-1: Product: syz
[  467.969285][    T9] usb 5-1: Manufacturer: syz
[  467.969296][    T9] usb 5-1: SerialNumber: syz
[  469.023434][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  469.043931][ T5751] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  469.153947][   T10] usb 4-1: device descriptor read/64, error -71
[  469.177436][ T9400] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  469.198359][ T5751] usb 3-1: unable to get BOS descriptor or descriptor too short
[  469.208154][ T5751] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  469.208229][ T5751] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  469.208265][ T5751] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  469.219328][ T5751] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  469.219405][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.219424][ T5751] usb 3-1: Product: syz
[  469.219436][ T5751] usb 3-1: Manufacturer: syz
[  469.219448][ T5751] usb 3-1: SerialNumber: syz
[  469.293065][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  469.403615][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  469.543583][   T10] usb 4-1: device descriptor read/64, error -71
[  469.665297][   T10] usb usb4-port1: attempt power cycle
[  469.904146][ T9416] overlayfs: failed to resolve './file0': -2
[  471.599211][    T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  471.623422][   T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  471.644527][   T10] usb 4-1: device descriptor read/8, error -71
[  471.656815][    T9] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  471.894799][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  471.916775][   T10] usb 4-1: device descriptor read/8, error -71
[  472.024773][   T10] usb usb4-port1: unable to enumerate USB device
[  472.096625][    T9] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  472.107918][ T5751] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  472.120029][    T9] usb 5-1: USB disconnect, device number 20
[  472.177852][ T5751] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[  472.681868][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  473.666479][ T5615] ocfs2: Unmounting device (7,3) on (node local)
[  473.880494][ T9450] loop4: detected capacity change from 0 to 512
[  474.118761][ T9450] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  474.229806][ T9450] EXT4-fs (loop4): orphan cleanup on readonly fs
[  474.313715][ T9450] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1094: Allocating blocks 41-42 which overlap fs metadata
[  474.313791][ T9450] loop4: lost filesystem error report for type 5 error -117
[  474.381530][ T9450] Quota error (device loop4): write_blk: dquota write failed
[  474.381595][ T9450] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  474.383248][ T9450] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.1094: Allocating blocks 41-42 which overlap fs metadata
[  474.383359][ T9450] loop4: lost filesystem error report for type 5 error -117
[  474.469080][    C1] EXT4-fs (loop4): error count since last fsck: 2
[  474.469127][    C1] EXT4-fs (loop4): initial error at time 1779465462: ext4_mb_mark_diskspace_used:4222
[  474.469193][    C1] EXT4-fs (loop4): last error at time 1779465462: ext4_mb_mark_diskspace_used:4222
[  474.730350][ T9450] Quota error (device loop4): write_blk: dquota write failed
[  474.730452][ T9450] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  474.730500][ T9450] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1094: Failed to acquire dquot type 1
[  474.730520][ T9450] loop4: lost filesystem error report for type 5 error -117
[  474.743535][ T9450] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  474.743631][ T9450] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.1094: corrupted inode contents
[  474.743653][ T9450] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  474.744579][ T9450] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.1094: mark_inode_dirty error
[  474.744605][ T9450] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  474.745467][ T9450] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.1094: corrupted inode contents
[  474.745493][ T9450] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  474.746335][ T9450] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.1094: mark_inode_dirty error
[  474.746360][ T9450] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  474.756852][ T9450] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.1094: corrupted inode contents
[  474.756880][ T9450] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  474.799667][ T9450] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  474.799695][ T9450] loop4: lost filesystem error report for type 5 error -117
[  474.809186][ T9450] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.1094: corrupted inode contents
[  474.809227][ T9450] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  474.821995][ T9450] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.1094: mark_inode_dirty error
[  474.822023][ T9450] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  474.823341][ T9450] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  474.823362][ T9450] loop4: lost filesystem error report for type 5 error -117
[  474.837708][ T9450] EXT4-fs (loop4): 1 truncate cleaned up
[  474.839269][ T4930] Bluetooth: hci0: ACL packet for unknown connection handle 3584
[  474.856378][ T9450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  475.229895][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.302439][ T5751] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[  475.320976][ T5751] usb 3-1: USB disconnect, device number 17
[  475.393669][ T5730] udevd[5730]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  475.519964][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1097'.
[  475.520065][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1097'.
[  475.556898][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1099'.
[  475.557007][ T9462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1099'.
[  476.188511][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  476.295194][ T5624] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  476.461594][ T5624] usb 5-1: unable to get BOS descriptor or descriptor too short
[  476.465156][ T5624] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  476.465247][ T5624] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  476.465283][ T5624] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  476.470732][ T5624] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  476.470756][ T5624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.470774][ T5624] usb 5-1: Product: syz
[  476.470786][ T5624] usb 5-1: Manufacturer: syz
[  476.470798][ T5624] usb 5-1: SerialNumber: syz
[  476.663474][ T5751] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  476.818420][ T5751] usb 3-1: unable to get BOS descriptor or descriptor too short
[  476.819848][ T5751] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  476.819937][ T5751] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  476.819975][ T5751] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  476.823038][ T5751] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  476.823064][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.823081][ T5751] usb 3-1: Product: syz
[  476.823093][ T5751] usb 3-1: Manufacturer: syz
[  476.823106][ T5751] usb 3-1: SerialNumber: syz
[  476.906449][ T9514] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  477.358007][ T5624] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  477.375565][ T5624] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  477.901864][ T5624] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  477.920274][ T5624] usb 5-1: USB disconnect, device number 21
[  477.958016][ T5751] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  478.000528][ T5751] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[  478.090572][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  478.348885][ T5751] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[  478.361983][ T5751] usb 3-1: USB disconnect, device number 18
[  478.431926][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  479.951563][ T9560] loop2: detected capacity change from 0 to 512
[  481.108270][ T9560] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  481.126638][ T9560] EXT4-fs (loop2): orphan cleanup on readonly fs
[  481.128380][ T9560] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1130: Allocating blocks 41-42 which overlap fs metadata
[  481.128410][ T9560] loop2: lost filesystem error report for type 5 error -117
[  481.136638][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  481.136660][    C0] EXT4-fs (loop2): initial error at time 1779465468: ext4_mb_mark_diskspace_used:4222
[  481.136681][    C0] EXT4-fs (loop2): last error at time 1779465468: ext4_mb_mark_diskspace_used:4222
[  481.146603][ T9560] Quota error (device loop2): write_blk: dquota write failed
[  481.146624][ T9560] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  481.146765][ T9560] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1130: Allocating blocks 41-42 which overlap fs metadata
[  481.146790][ T9560] loop2: lost filesystem error report for type 5 error -117
[  481.148200][ T9560] Quota error (device loop2): write_blk: dquota write failed
[  481.148308][ T9560] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  481.148354][ T9560] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1130: Failed to acquire dquot type 1
[  481.148393][ T9560] loop2: lost filesystem error report for type 5 error -117
[  481.149278][ T9560] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  481.149373][ T9560] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1130: corrupted inode contents
[  481.149395][ T9560] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  481.150013][ T9560] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.1130: mark_inode_dirty error
[  481.150038][ T9560] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  481.150533][ T9560] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1130: corrupted inode contents
[  481.150557][ T9560] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  481.151175][ T9560] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.1130: mark_inode_dirty error
[  481.151200][ T9560] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  481.151859][ T9560] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1130: corrupted inode contents
[  481.151883][ T9560] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  481.152668][ T9560] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  481.152688][ T9560] loop2: lost filesystem error report for type 5 error -117
[  481.153243][ T9560] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1130: corrupted inode contents
[  481.153304][ T9560] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  481.154117][ T9560] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.1130: mark_inode_dirty error
[  481.154142][ T9560] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  481.154809][ T9560] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  481.154828][ T9560] loop2: lost filesystem error report for type 5 error -117
[  481.155810][ T9560] EXT4-fs (loop2): 1 truncate cleaned up
[  481.207990][ T9560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  481.270464][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  481.496392][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  481.663153][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  483.360281][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  483.640805][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  485.160125][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  485.414810][ T9637] loop0: detected capacity change from 0 to 32768
[  485.459536][ T9637] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  486.943997][ T5624] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  487.005685][ T9657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1166'.
[  487.005786][ T9657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1166'.
[  487.069625][ T9657] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1166'.
[  487.086215][ T5624] usb 1-1: device descriptor read/64, error -71
[  488.063491][ T5624] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  488.193449][ T5624] usb 1-1: device descriptor read/64, error -71
[  488.337839][ T5624] usb usb1-port1: attempt power cycle
[  488.536926][ T1246] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  488.548207][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  488.560246][ T5614] ocfs2: Unmounting device (7,0) on (node local)
[  488.712130][ T1246] usb 3-1: unable to get BOS descriptor or descriptor too short
[  488.725386][ T1246] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.725411][ T1246] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  488.728463][ T1246] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  488.728490][ T1246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.728508][ T1246] usb 3-1: Product: syz
[  488.728520][ T1246] usb 3-1: Manufacturer: syz
[  488.728533][ T1246] usb 3-1: SerialNumber: syz
[  488.860102][ T1246] usb 3-1: selecting invalid altsetting 1
[  488.863156][ T1246] usb 3-1: unit 6 not found!
[  489.357100][ T9701] loop3: detected capacity change from 0 to 32768
[  489.418435][ T9701] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  489.667271][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  489.745547][ T1246] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  490.746632][ T1246] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  490.758414][ T1246] usb 3-1: USB disconnect, device number 19
[  490.817325][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  490.852135][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  490.868423][ T5624] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  491.003795][ T5624] usb 4-1: device descriptor read/64, error -71
[  491.880679][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  492.013424][ T5624] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  492.091463][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  492.144607][ T5624] usb 4-1: device descriptor read/64, error -71
[  492.253761][ T5624] usb usb4-port1: attempt power cycle
[  492.317707][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  492.425001][ T5615] ocfs2: Unmounting device (7,3) on (node local)
[  492.954400][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  493.613516][ T5624] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  493.765862][ T5624] usb 1-1: unable to get BOS descriptor or descriptor too short
[  493.767176][ T5624] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.767198][ T5624] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  493.767270][ T5624] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  493.774013][ T5624] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  493.774036][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.774054][ T5624] usb 1-1: Product: syz
[  493.774066][ T5624] usb 1-1: Manufacturer: syz
[  493.774079][ T5624] usb 1-1: SerialNumber: syz
[  494.343678][ T1246] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  494.515755][ T1246] usb 4-1: unable to get BOS descriptor or descriptor too short
[  494.516925][ T1246] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  494.516998][ T1246] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  494.517035][ T1246] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  494.578185][ T1246] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  494.578215][ T1246] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.578234][ T1246] usb 4-1: Product: syz
[  494.578247][ T1246] usb 4-1: Manufacturer: syz
[  494.578260][ T1246] usb 4-1: SerialNumber: syz
[  495.761454][ T5624] usb 1-1: USB disconnect, device number 23
[  496.904626][ T9841] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  497.027511][ T1246] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  497.061440][ T1246] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  497.227450][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  497.329333][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  497.334340][ T6173] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  497.373927][ T1246] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  497.380368][ T1246] usb 4-1: USB disconnect, device number 27
[  497.462467][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  497.496048][ T6173] usb 3-1: unable to get BOS descriptor or descriptor too short
[  497.507556][ T6173] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  497.507581][ T6173] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  497.512335][ T6173] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  497.512361][ T6173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.512379][ T6173] usb 3-1: Product: syz
[  497.512390][ T6173] usb 3-1: Manufacturer: syz
[  497.512400][ T6173] usb 3-1: SerialNumber: syz
[  497.597632][ T6173] usb 3-1: selecting invalid altsetting 1
[  497.598421][ T6173] usb 3-1: unit 6 not found!
[  498.208069][ T6173] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  498.446902][ T6173] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  498.473076][ T6173] usb 3-1: USB disconnect, device number 20
[  498.565320][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  498.579974][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  498.742593][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  499.114016][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  499.577087][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  499.870395][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  500.368615][ T9997] loop2: detected capacity change from 0 to 32768
[  500.469824][ T9997] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  501.751807][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  501.883493][ T6173] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  502.833417][ T6173] usb 3-1: device descriptor read/64, error -71
[  503.083559][ T6173] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  504.093393][ T6173] usb 3-1: device descriptor read/64, error -71
[  504.213793][ T6173] usb usb3-port1: attempt power cycle
[  504.346113][ T5613] ocfs2: Unmounting device (7,2) on (node local)
[  504.844887][ T4930] Bluetooth: hci3: unexpected event for opcode 0x1804
[  505.946612][T10081] loop2: detected capacity change from 0 to 512
[  506.738913][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  506.739009][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  506.788637][T10081] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  506.792698][T10081] EXT4-fs (loop2): orphan cleanup on readonly fs
[  506.798120][T10081] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1322: Allocating blocks 41-42 which overlap fs metadata
[  506.798159][T10081] loop2: lost filesystem error report for type 5 error -117
[  506.798711][T10081] Quota error (device loop2): write_blk: dquota write failed
[  506.798730][T10081] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  506.798856][T10081] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.1322: Allocating blocks 41-42 which overlap fs metadata
[  506.798881][T10081] loop2: lost filesystem error report for type 5 error -117
[  506.799355][T10081] Quota error (device loop2): write_blk: dquota write failed
[  506.799459][T10081] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  506.799508][T10081] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.1322: Failed to acquire dquot type 1
[  506.799528][T10081] loop2: lost filesystem error report for type 5 error -117
[  506.799929][T10081] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  506.800023][T10081] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1322: corrupted inode contents
[  506.800045][T10081] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  506.800383][T10081] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.1322: mark_inode_dirty error
[  506.800406][T10081] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  506.800758][T10081] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1322: corrupted inode contents
[  506.800782][T10081] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  506.801127][T10081] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.1322: mark_inode_dirty error
[  506.801158][T10081] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  506.801546][T10081] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1322: corrupted inode contents
[  506.801569][T10081] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  506.801973][T10081] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  506.801993][T10081] loop2: lost filesystem error report for type 5 error -117
[  506.802311][T10081] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.1322: corrupted inode contents
[  506.802340][T10081] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  506.802715][T10081] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.1322: mark_inode_dirty error
[  506.802739][T10081] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  506.803134][T10081] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  506.803160][T10081] loop2: lost filesystem error report for type 5 error -117
[  506.804502][    C1] EXT4-fs (loop2): error count since last fsck: 13
[  506.804519][    C1] EXT4-fs (loop2): initial error at time 1779465494: ext4_mb_mark_diskspace_used:4222
[  506.804540][    C1] EXT4-fs (loop2): last error at time 1779465494: ext4_process_orphan:345
[  506.805076][T10081] EXT4-fs (loop2): 1 truncate cleaned up
[  506.848738][T10081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  507.052557][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  507.251532][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  507.574236][T10097] trusted_key: encrypted_key: master key parameter '
BìÞ' is invalid
[  507.613408][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  507.772622][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  507.773967][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  507.774039][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  507.774077][    T9] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  507.776732][    T9] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  507.776758][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.776776][    T9] usb 5-1: Product: syz
[  507.776789][    T9] usb 5-1: Manufacturer: syz
[  507.776801][    T9] usb 5-1: SerialNumber: syz
[  508.836970][T10115] 9p: Bad value for 'wfdno'
[  509.050632][T10122] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  509.138729][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  509.361677][    T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  509.395100][    T9] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  509.648030][    T9] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  509.665409][    T9] usb 5-1: USB disconnect, device number 22
[  509.979829][ T4930] Bluetooth: hci1: unexpected event for opcode 0x1804
[  510.961453][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  511.972064][ T4930] Bluetooth: hci0: unexpected event for opcode 0x1804
[  512.138318][T10144] 9p: Bad value for 'wfdno'
[  514.108006][T10167] 9p: Bad value for 'wfdno'
[  516.369459][T10215] 9p: Unknown Cache mode or invalid value fsca
[  516.502102][ T4930] Bluetooth: hci0: unexpected event for opcode 0x1804
[  516.803415][ T5751] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  516.815887][T10222] loop2: detected capacity change from 0 to 32768
[  516.867460][T10222] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  516.993214][ T5751] usb 5-1: unable to get BOS descriptor or descriptor too short
[  516.995255][ T5751] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  516.995329][ T5751] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  516.995368][ T5751] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  516.999209][ T5751] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  516.999235][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.999253][ T5751] usb 5-1: Product: syz
[  516.999265][ T5751] usb 5-1: Manufacturer: syz
[  516.999278][ T5751] usb 5-1: SerialNumber: syz
[  518.190491][T10220] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  518.443391][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  518.471602][ T5751] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  518.492474][ T5751] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  518.585571][   T10] usb 3-1: device descriptor read/64, error -71
[  518.639113][ T5751] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  518.651588][ T5751] usb 5-1: USB disconnect, device number 23
[  518.775084][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  518.824058][   T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  518.983526][   T10] usb 3-1: device descriptor read/64, error -71
[  519.094355][   T10] usb usb3-port1: attempt power cycle
[  519.433473][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  519.453987][   T10] usb 3-1: device descriptor read/8, error -71
[  519.905421][ T5613] ocfs2: Unmounting device (7,2) on (node local)
[  520.364964][T10278] loop0: detected capacity change from 0 to 32768
[  520.370983][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  520.400787][T10278] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  520.501206][   T49] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  521.871216][   T49] usb 4-1: unable to get BOS descriptor or descriptor too short
[  521.883691][   T49] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  521.883715][   T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  521.889522][   T49] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  521.889548][   T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.889566][   T49] usb 4-1: Product: syz
[  521.889579][   T49] usb 4-1: Manufacturer: syz
[  521.889591][   T49] usb 4-1: SerialNumber: syz
[  521.943599][ T5751] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  521.996438][   T49] usb 4-1: selecting invalid altsetting 1
[  521.997200][   T49] usb 4-1: unit 6 not found!
[  522.073479][ T5751] usb 1-1: device descriptor read/64, error -71
[  522.112152][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  522.334917][ T5751] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  522.483411][ T5751] usb 1-1: device descriptor read/64, error -71
[  522.594158][ T5751] usb usb1-port1: attempt power cycle
[  522.792175][T10315] loop4: detected capacity change from 0 to 32768
[  522.812688][T10315] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[  522.825937][   T49] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  522.827651][T10315] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  522.943414][ T5751] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  522.964469][ T5751] usb 1-1: device descriptor read/8, error -71
[  524.514124][ T5810] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  524.624198][   T49] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  524.636935][   T49] usb 4-1: USB disconnect, device number 28
[  524.655073][ T5810] usb 5-1: device descriptor read/64, error -71
[  524.737517][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  524.894791][ T5810] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  524.897008][ T5614] ocfs2: Unmounting device (7,0) on (node local)
[  524.985571][T10328] 9p: Bad value for 'wfdno'
[  525.023385][ T5810] usb 5-1: device descriptor read/64, error -71
[  525.084628][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  525.135792][ T5810] usb usb5-port1: attempt power cycle
[  525.523451][ T5810] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  526.381091][ T5810] usb 5-1: device descriptor read/8, error -71
[  526.692696][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  526.724487][ T5617] ocfs2: Unmounting device (7,4) on (node local)
[  526.856476][T10364] 9p: Bad value for 'wfdno'
[  530.146896][T10416] 9p: Bad value for 'wfdno'
[  530.234518][ T4930] Bluetooth: hci0: unexpected event for opcode 0x1804
[  532.697037][    T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  532.962033][T10435] 9p: Bad value for 'wfdno'
[  533.166065][    T9] usb 5-1: device not accepting address 28, error -71
[  533.250843][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  533.308181][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  533.410438][ T4930] Bluetooth: hci3: unexpected event for opcode 0x1804
[  533.563422][ T5602] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  533.717563][ T5602] usb 4-1: unable to get BOS descriptor or descriptor too short
[  533.720320][ T5602] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.720343][ T5602] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  533.720401][ T5602] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  533.765430][ T5602] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  533.765459][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.765478][ T5602] usb 4-1: Product: syz
[  533.765491][ T5602] usb 4-1: Manufacturer: syz
[  533.765503][ T5602] usb 4-1: SerialNumber: syz
[  534.262213][ T5602] usb 4-1: USB disconnect, device number 29
[  534.320338][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  534.425031][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  534.671417][T10485] 9p: Bad value for 'wfdno'
[  535.093374][    T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  535.246531][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  535.247864][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  535.247886][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  535.250452][    T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  535.250477][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.250495][    T9] usb 4-1: Product: syz
[  535.250507][    T9] usb 4-1: Manufacturer: syz
[  535.250520][    T9] usb 4-1: SerialNumber: syz
[  535.376208][    T9] usb 4-1: selecting invalid altsetting 1
[  535.379536][    T9] usb 4-1: unit 6 not found!
[  535.530297][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  535.706772][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  535.988875][    T9] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  536.124587][T10530] 9p: Bad value for 'wfdno'
[  536.190196][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  536.208765][    T9] usb 4-1: USB disconnect, device number 30
[  536.273055][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  536.396144][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  536.859106][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  537.029405][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  539.188199][T10621] loop2: detected capacity change from 0 to 32768
[  539.365257][    T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  539.650441][T10621] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  539.785515][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  539.798644][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  539.798671][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  539.841664][    T9] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  539.841781][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.841807][    T9] usb 4-1: Product: syz
[  539.841820][    T9] usb 4-1: Manufacturer: syz
[  539.841833][    T9] usb 4-1: SerialNumber: syz
[  539.974650][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  539.987104][    T9] usb 4-1: selecting invalid altsetting 1
[  540.786772][    T9] usb 4-1: unit 6 not found!
[  540.873207][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  540.890761][   T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  541.033478][   T10] usb 3-1: device descriptor read/64, error -71
[  541.194498][    T9] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  541.273391][   T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  541.320045][T10657] 9p: Bad value for 'wfdno'
[  541.382564][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  541.401643][    T9] usb 4-1: USB disconnect, device number 31
[  541.415325][   T10] usb 3-1: device descriptor read/64, error -71
[  541.475417][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  541.540106][   T10] usb usb3-port1: attempt power cycle
[  542.695319][ T5613] ocfs2: Unmounting device (7,2) on (node local)
[  543.768234][T10687] 9p: Bad value for 'wfdno'
[  543.787172][T10691] loop0: detected capacity change from 0 to 32768
[  543.829499][T10691] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  545.069609][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  545.243377][   T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  545.373457][   T10] usb 1-1: device descriptor read/64, error -71
[  545.633799][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  545.766877][   T10] usb 1-1: device descriptor read/64, error -71
[  545.875121][   T10] usb usb1-port1: attempt power cycle
[  545.934985][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  547.037135][   T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  547.245099][   T10] usb 1-1: device not accepting address 30, error -71
[  547.335515][ T5614] ocfs2: Unmounting device (7,0) on (node local)
[  547.523815][ T5624] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  548.523127][ T5624] usb 4-1: unable to get BOS descriptor or descriptor too short
[  548.525345][ T5624] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  548.525416][ T5624] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  548.525451][ T5624] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  548.529354][ T5624] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  548.529380][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.529397][ T5624] usb 4-1: Product: syz
[  548.529409][ T5624] usb 4-1: Manufacturer: syz
[  548.529421][ T5624] usb 4-1: SerialNumber: syz
[  548.700287][ T4930] Bluetooth: hci3: unexpected event for opcode 0x4889
[  548.941763][T10759] loop0: detected capacity change from 0 to 32768
[  548.988388][T10759] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  549.036559][ T6173] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  549.298860][ T6173] usb 3-1: unable to get BOS descriptor or descriptor too short
[  549.301090][ T6173] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  549.301301][ T6173] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  549.301396][ T6173] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  549.306584][ T6173] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  549.306609][ T6173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.306628][ T6173] usb 3-1: Product: syz
[  549.306857][ T6173] usb 3-1: Manufacturer: syz
[  549.306872][ T6173] usb 3-1: SerialNumber: syz
[  550.445679][T10761] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  550.565063][   T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  550.693420][   T10] usb 1-1: device descriptor read/64, error -71
[  550.697537][ T5624] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  550.861725][ T5624] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  550.875533][ T6173] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  550.943870][   T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  551.082490][   T10] usb 1-1: device descriptor read/64, error -71
[  551.175253][ T5624] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  551.184531][   T10] usb usb1-port1: attempt power cycle
[  551.190371][ T5624] usb 4-1: USB disconnect, device number 32
[  551.279661][ T4930] Bluetooth: hci3: unexpected event for opcode 0x1804
[  551.317810][ T6173] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[  551.497853][ T6173] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[  551.518259][ T6173] usb 3-1: USB disconnect, device number 31
[  551.654919][   T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  551.673937][   T10] usb 1-1: device descriptor read/8, error -71
[  551.677544][ T5952] udevd[5952]: setting mode of /dev/bus/usb/003/031 to 020664 failed: No such file or directory
[  551.677658][ T5952] udevd[5952]: setting owner of /dev/bus/usb/003/031 to uid=0, gid=0 failed: No such file or directory
[  551.693672][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  551.941200][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  552.286596][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  552.329039][ T5614] ocfs2: Unmounting device (7,0) on (node local)
[  552.370590][ T4930] Bluetooth: hci1: unexpected event for opcode 0x1804
[  554.416392][ T4930] Bluetooth: hci1: unexpected event for opcode 0x1804
[  556.066367][   T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  556.414488][T10864] loop3: detected capacity change from 0 to 32768
[  556.592401][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  557.030459][T10864] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  557.063006][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[  557.063029][   T10] usb 1-1: can't read configurations, error -71
[  557.453719][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  557.573450][ T5011] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  557.591385][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  557.622696][T10877] 9p: Bad value for 'wfdno'
[  557.713515][ T5011] usb 4-1: device descriptor read/64, error -71
[  557.826250][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  557.965961][ T5011] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  558.093506][ T5011] usb 4-1: device descriptor read/64, error -71
[  558.215182][ T5011] usb usb4-port1: attempt power cycle
[  558.554390][ T5011] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  558.584035][ T5011] usb 4-1: device descriptor read/8, error -71
[  558.915079][ T5011] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  558.934993][ T5011] usb 4-1: device descriptor read/8, error -71
[  559.045157][ T5011] usb usb4-port1: unable to enumerate USB device
[  559.052489][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  559.395829][ T5615] ocfs2: Unmounting device (7,3) on (node local)
[  559.463631][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  559.788055][T10977] 9p: Bad value for 'wfdno'
[  559.926896][T10986] 9p: Bad value for 'wfdno'
[  560.386943][T10991] loop1: detected capacity change from 0 to 32768
[  560.648449][T10991] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  560.650136][T10991] (syz.1.1689,10991,0):ocfs2_initialize_super:2226 ERROR: status = -12
[  560.650745][T10991] (syz.1.1689,10991,0):ocfs2_fill_super:1177 ERROR: status = -12
[  561.338249][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  561.506461][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  561.595170][T11013] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1697'.
[  562.062990][ T4930] Bluetooth: hci3: SCO packet for unknown connection handle 240
[  562.838291][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  564.348682][ T4930] Bluetooth: hci3: unexpected event for opcode 0x1804
[  566.140598][T11072] overlayfs: failed to resolve './file1': -2
[  566.534466][T11083] 9p: Bad value for 'wfdno'
[  567.193655][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  567.956112][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  567.956211][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  569.563416][ T5751] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  569.912082][ T5751] usb 3-1: unable to get BOS descriptor or descriptor too short
[  570.672717][ T5751] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  570.672743][ T5751] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  570.799760][ T5751] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  570.799789][ T5751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.799807][ T5751] usb 3-1: Product: syz
[  570.799820][ T5751] usb 3-1: Manufacturer: syz
[  570.799833][ T5751] usb 3-1: SerialNumber: syz
[  570.877416][ T5751] usb 3-1: selecting invalid altsetting 1
[  570.878415][ T5751] usb 3-1: unit 6 not found!
[  571.203609][   T10] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  571.366993][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  571.370551][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  571.370637][   T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  571.370675][   T10] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  571.373794][   T10] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  571.373818][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.373836][   T10] usb 4-1: Product: syz
[  571.373849][   T10] usb 4-1: Manufacturer: syz
[  571.373861][   T10] usb 4-1: SerialNumber: syz
[  571.489439][ T5751] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  571.698557][ T5751] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  571.748570][ T5751] usb 3-1: USB disconnect, device number 32
[  571.797155][T11163] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  571.987223][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  572.172621][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  572.230024][   T10] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  573.664279][   T10] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  573.675361][   T10] usb 4-1: USB disconnect, device number 37
[  574.007243][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  574.420750][T11192] capability: warning: `syz.4.1760' uses deprecated v2 capabilities in a way that may be insecure
[  578.473369][   T49] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  578.625553][   T49] usb 3-1: unable to get BOS descriptor or descriptor too short
[  578.635001][   T49] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  578.635076][   T49] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  578.635113][   T49] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  578.640284][   T49] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  578.640311][   T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.640330][   T49] usb 3-1: Product: syz
[  578.640342][   T49] usb 3-1: Manufacturer: syz
[  578.640355][   T49] usb 3-1: SerialNumber: syz
[  579.187145][T11241] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  579.549764][   T49] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  579.730104][   T49] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[  580.948197][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  583.404817][   T49] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[  583.481618][   T49] usb 3-1: USB disconnect, device number 33
[  583.635475][ T5714] udevd[5714]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  583.828861][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  587.142870][T11362] comedi comedi2: c6xdigio: I/O base address not correctly aligned
[  588.554482][T11381] comedi comedi2: c6xdigio: I/O base address not correctly aligned
[  591.006839][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  591.233945][ T4930] Bluetooth: hci3: unexpected event for opcode 0x007f
[  591.573467][ T5624] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  592.359792][ T5624] usb 1-1: unable to get BOS descriptor or descriptor too short
[  592.361320][ T5624] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  592.361392][ T5624] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  592.361417][ T5624] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  592.367298][ T5624] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  592.367322][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.367339][ T5624] usb 1-1: Product: syz
[  592.367351][ T5624] usb 1-1: Manufacturer: syz
[  592.367363][ T5624] usb 1-1: SerialNumber: syz
[  594.855154][ T5624] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  594.875523][ T5624] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  595.286597][ T5624] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22
[  595.294283][ T5624] usb 1-1: USB disconnect, device number 38
[  595.523023][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  596.986042][T11539] comedi comedi2: c6xdigio: I/O base address not correctly aligned
[  597.850236][ T4930] Bluetooth: hci0: unexpected event for opcode 0x007f
[  597.993456][ T5810] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  598.147997][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short
[  598.165400][ T5810] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  598.165476][ T5810] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  598.165502][ T5810] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  598.210900][ T5810] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  598.210935][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.210954][ T5810] usb 4-1: Product: syz
[  598.210966][ T5810] usb 4-1: Manufacturer: syz
[  598.210979][ T5810] usb 4-1: SerialNumber: syz
[  602.103836][T11583] comedi comedi2: c6xdigio: I/O base address not correctly aligned
[  603.147321][T11593] tmpfs: Bad value for 'mpol'
[  603.717858][ T5810] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  603.751447][ T5810] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22
[  606.789622][T11617] comedi comedi2: c6xdigio: I/O base address not correctly aligned
[  607.283555][ T5810] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22
[  607.333588][ T5810] usb 4-1: USB disconnect, device number 38
[  607.927240][T11633] comedi comedi2: c6xdigio: I/O base address not correctly aligned
[  609.504918][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  609.614858][ T4930] Bluetooth: hci1: unexpected event for opcode 0x007f
[  610.680361][T11645] ==================================================================
[  610.680378][T11645] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240
[  610.680411][T11645] Read of size 8 at addr ffff88803eea22a0 by task syz.0.1920/11645
[  610.680428][T11645] 
[  610.680454][T11645] CPU: 1 UID: 0 PID: 11645 Comm: syz.0.1920 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  610.680476][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  610.680494][T11645] Call Trace:
[  610.680501][T11645]  <TASK>
[  610.680512][T11645]  dump_stack_lvl+0xe8/0x150
[  610.680536][T11645]  print_address_description+0x55/0x1e0
[  610.680560][T11645]  ? reverse_path_check_proc+0x5b/0x240
[  610.680582][T11645]  print_report+0x58/0x70
[  610.680608][T11645]  kasan_report+0x117/0x150
[  610.680627][T11645]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  610.680645][T11645]  ? reverse_path_check_proc+0x5b/0x240
[  610.680669][T11645]  ? ep_insert+0xbbb/0x1820
[  610.680686][T11645]  reverse_path_check_proc+0x5b/0x240
[  610.680709][T11645]  ? ep_insert+0xbbb/0x1820
[  610.680727][T11645]  ep_insert+0xc6c/0x1820
[  610.680755][T11645]  ? __pfx_ep_insert+0x10/0x10
[  610.680777][T11645]  ? lockdep_hardirqs_on+0x7a/0x110
[  610.680794][T11645]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  610.680809][T11645]  ? mutex_lock_nested+0x152/0x1d0
[  610.680828][T11645]  ? do_epoll_ctl_file+0xc69/0xed0
[  610.680847][T11645]  do_epoll_ctl_file+0x8bb/0xed0
[  610.680866][T11645]  ? do_epoll_ctl_file+0xac3/0xed0
[  610.680886][T11645]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  610.680911][T11645]  ? __fget_files+0x3a6/0x420
[  610.680928][T11645]  ? __fget_files+0x2a/0x420
[  610.680947][T11645]  __se_sys_epoll_ctl+0x14e/0x210
[  610.680966][T11645]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  610.680982][T11645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.681003][T11645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.681020][T11645]  do_syscall_64+0x15f/0x560
[  610.681038][T11645]  ? clear_bhb_loop+0x40/0x90
[  610.681058][T11645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.681076][T11645] RIP: 0033:0x7f08450ece59
[  610.681098][T11645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.681113][T11645] RSP: 002b:00007f0843325028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  610.681132][T11645] RAX: ffffffffffffffda RBX: 00007f0845366090 RCX: 00007f08450ece59
[  610.681145][T11645] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007
[  610.681156][T11645] RBP: 00007f0845182d6f R08: 0000000000000000 R09: 0000000000000000
[  610.681166][T11645] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.681175][T11645] R13: 00007f0845366128 R14: 00007f0845366090 R15: 00007fffe1e12b58
[  610.681193][T11645]  </TASK>
[  610.681200][T11645] 
[  610.681205][T11645] Allocated by task 11648:
[  610.681212][T11645]  kasan_save_track+0x3e/0x80
[  610.681229][T11645]  __kasan_slab_alloc+0x6c/0x80
[  610.681246][T11645]  kmem_cache_alloc_noprof+0x33b/0x680
[  610.681263][T11645]  ep_insert+0x512/0x1820
[  610.681278][T11645]  do_epoll_ctl_file+0x8bb/0xed0
[  610.681295][T11645]  __se_sys_epoll_ctl+0x14e/0x210
[  610.681312][T11645]  do_syscall_64+0x15f/0x560
[  610.681326][T11645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.681341][T11645] 
[  610.681345][T11645] Freed by task 11641:
[  610.681354][T11645]  kasan_save_track+0x3e/0x80
[  610.681369][T11645]  kasan_save_free_info+0x46/0x50
[  610.681391][T11645]  __kasan_slab_free+0x5c/0x80
[  610.681408][T11645]  kmem_cache_free+0x187/0x6c0
[  610.681427][T11645]  eventpoll_release_file+0xc2/0x240
[  610.681445][T11645]  __fput+0x83c/0xa70
[  610.681460][T11645]  task_work_run+0x1d9/0x270
[  610.681479][T11645]  exit_to_user_mode_loop+0xf3/0x4d0
[  610.681498][T11645]  do_syscall_64+0x33e/0x560
[  610.681512][T11645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.681528][T11645] 
[  610.681533][T11645] The buggy address belongs to the object at ffff88803eea22a0
[  610.681533][T11645]  which belongs to the cache ep_head of size 16
[  610.681547][T11645] The buggy address is located 0 bytes inside of
[  610.681547][T11645]  freed 16-byte region [ffff88803eea22a0, ffff88803eea22b0)
[  610.681565][T11645] 
[  610.681569][T11645] The buggy address belongs to the physical page:
[  610.681596][T11645] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803eea2120 pfn:0x3eea2
[  610.681618][T11645] memcg:ffff888022b4f801
[  610.681626][T11645] flags: 0x80000000000200(workingset|node=0|zone=1)
[  610.681646][T11645] page_type: f5(slab)
[  610.681662][T11645] raw: 0080000000000200 ffff888140aecdc0 ffffea0000d1a790 ffff88801ee98f88
[  610.681679][T11645] raw: ffff88803eea2120 0000000800800048 00000000f5000000 ffff888022b4f801
[  610.681688][T11645] page dumped because: kasan: bad access detected
[  610.681701][T11645] page_owner tracks the page as allocated
[  610.681707][T11645] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4987, tgid 4987 (udevd), ts 41198807966, free_ts 41153853562
[  610.681737][T11645]  post_alloc_hook+0x1f9/0x250
[  610.681754][T11645]  get_page_from_freelist+0x265c/0x26e0
[  610.681774][T11645]  __alloc_frozen_pages_noprof+0x18d/0x380
[  610.681795][T11645]  allocate_slab+0x74/0x5e0
[  610.681817][T11645]  refill_objects+0x33c/0x3d0
[  610.681837][T11645]  __pcs_replace_empty_main+0x373/0x720
[  610.681860][T11645]  kmem_cache_alloc_noprof+0x433/0x680
[  610.681877][T11645]  ep_insert+0x512/0x1820
[  610.681894][T11645]  do_epoll_ctl_file+0x8bb/0xed0
[  610.681911][T11645]  __se_sys_epoll_ctl+0x14e/0x210
[  610.681930][T11645]  do_syscall_64+0x15f/0x560
[  610.681944][T11645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.681960][T11645] page last free pid 29 tgid 29 stack trace:
[  610.681971][T11645]  __free_frozen_pages+0x10af/0x1190
[  610.681988][T11645]  tlb_remove_table_rcu+0x85/0x100
[  610.682009][T11645]  rcu_cpu_kthread+0x99e/0x1470
[  610.682029][T11645]  smpboot_thread_fn+0x541/0xa50
[  610.682044][T11645]  kthread+0x388/0x470
[  610.682062][T11645]  ret_from_fork+0x514/0xb70
[  610.682080][T11645]  ret_from_fork_asm+0x1a/0x30
[  610.682102][T11645] 
[  610.682106][T11645] Memory state around the buggy address:
[  610.682116][T11645]  ffff88803eea2180: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  610.682127][T11645]  ffff88803eea2200: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  610.682139][T11645] >ffff88803eea2280: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  610.682148][T11645]                                ^
[  610.682157][T11645]  ffff88803eea2300: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  610.682168][T11645]  ffff88803eea2380: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc
[  610.682177][T11645] ==================================================================
[  610.692179][T11645] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  610.692203][T11645] CPU: 1 UID: 0 PID: 11645 Comm: syz.0.1920 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  610.692227][T11645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  610.692240][T11645] Call Trace:
[  610.692248][T11645]  <TASK>
[  610.692255][T11645]  vpanic+0x56c/0xa60
[  610.692287][T11645]  ? __pfx_vpanic+0x10/0x10
[  610.692314][T11645]  panic+0xc5/0xd0
[  610.692366][T11645]  ? __pfx_panic+0x10/0x10
[  610.692391][T11645]  ? preempt_schedule_thunk+0x16/0x40
[  610.692412][T11645]  ? preempt_schedule_thunk+0x16/0x40
[  610.692431][T11645]  ? reverse_path_check_proc+0x5b/0x240
[  610.692457][T11645]  check_panic_on_warn+0x89/0xb0
[  610.692482][T11645]  ? reverse_path_check_proc+0x5b/0x240
[  610.692504][T11645]  end_report+0x73/0x170
[  610.692527][T11645]  ? reverse_path_check_proc+0x5b/0x240
[  610.692551][T11645]  kasan_report+0x128/0x150
[  610.692573][T11645]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  610.692602][T11645]  ? reverse_path_check_proc+0x5b/0x240
[  610.692629][T11645]  ? ep_insert+0xbbb/0x1820
[  610.692649][T11645]  reverse_path_check_proc+0x5b/0x240
[  610.692675][T11645]  ? ep_insert+0xbbb/0x1820
[  610.692697][T11645]  ep_insert+0xc6c/0x1820
[  610.692723][T11645]  ? __pfx_ep_insert+0x10/0x10
[  610.692747][T11645]  ? lockdep_hardirqs_on+0x7a/0x110
[  610.692766][T11645]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  610.692786][T11645]  ? mutex_lock_nested+0x152/0x1d0
[  610.692808][T11645]  ? do_epoll_ctl_file+0xc69/0xed0
[  610.692829][T11645]  do_epoll_ctl_file+0x8bb/0xed0
[  610.692849][T11645]  ? do_epoll_ctl_file+0xac3/0xed0
[  610.692871][T11645]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  610.692894][T11645]  ? __fget_files+0x3a6/0x420
[  610.692913][T11645]  ? __fget_files+0x2a/0x420
[  610.692935][T11645]  __se_sys_epoll_ctl+0x14e/0x210
[  610.692957][T11645]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  610.692979][T11645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.693002][T11645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.693021][T11645]  do_syscall_64+0x15f/0x560
[  610.693041][T11645]  ? clear_bhb_loop+0x40/0x90
[  610.693061][T11645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.693079][T11645] RIP: 0033:0x7f08450ece59
[  610.693097][T11645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  610.693115][T11645] RSP: 002b:00007f0843325028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  610.693137][T11645] RAX: ffffffffffffffda RBX: 00007f0845366090 RCX: 00007f08450ece59
[  610.693153][T11645] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007
[  610.693165][T11645] RBP: 00007f0845182d6f R08: 0000000000000000 R09: 0000000000000000
[  610.693179][T11645] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  610.693197][T11645] R13: 00007f0845366128 R14: 00007f0845366090 R15: 00007fffe1e12b58
[  610.693217][T11645]  </TASK>
[  610.695210][T11645] Kernel Offset: disabled