last executing test programs:

14m38.491833425s ago: executing program 1 (id=2):
mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
futex_waitv(&(0x7f0000005a00)=[{0x7, &(0x7f0000000000)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0)
futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110cb000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x10, 0x573}, 0x94)
rmdir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/gser.usb0\x00')
symlink(&(0x7f0000000100)='./config\x00', &(0x7f0000000140)='./config\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x9)
socket$inet(0x2, 0x1, 0x100)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x40, @empty, 0xfffffff9}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
shutdown(r0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x166)
ioctl$TCXONC(r1, 0x540a, 0x2)

14m37.640474527s ago: executing program 1 (id=7):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x1, 0x100)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000002180))
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x800)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4884)
tkill(0x0, 0xb)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7)

14m37.471149641s ago: executing program 0 (id=1):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00')
preadv(r8, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0x9d, 0x0)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, 0x0)

14m34.075175067s ago: executing program 1 (id=8):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b0, &(0x7f0000000b80)="$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")
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffffffff, 0x4, 0x2}})
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000006a80)={0x0, 0x0, &(0x7f0000006a40)={&(0x7f0000006940)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018000, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e8f733d6d6163696e7569742c00"], 0x21, 0x5c8, &(0x7f00000006c0)="$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")
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)

14m33.917523971s ago: executing program 0 (id=9):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, &(0x7f0000000440))
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_buf(r7, 0x1, 0x4b, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)=',', 0x1)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0)

14m31.803339705s ago: executing program 0 (id=11):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000680))
r6 = creat(&(0x7f0000000300)='./file0\x00', 0x68)
landlock_restrict_self(r6, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r7, &(0x7f0000000000)='./file0\x00', 0x2)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r3, 0x0, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0)
fcntl$lock(r8, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb})
syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0xffffffffffffffff)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
sendfile(r9, r9, 0x0, 0x8)

14m29.820917215s ago: executing program 1 (id=13):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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")
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x0, 0x0, 0x0)
io_uring_setup(0x3450, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r6 = fcntl$dupfd(r5, 0x0, r5)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6)

14m24.696684964s ago: executing program 1 (id=17):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5c3a, &(0x7f0000000080)={0x0, 0xde28, 0x11000, 0x1, 0x0, 0x0, r0}, 0x0, &(0x7f0000000200), &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)
r7 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0xa910, 0x5, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x9, 0x1, 0x3, 0x6, 0x7, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]})
ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4})
syz_open_dev$swradio(0x0, 0x0, 0x2)
syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x101)
read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

14m16.356248415s ago: executing program 32 (id=11):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r5, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81e8943c, &(0x7f0000000680))
r6 = creat(&(0x7f0000000300)='./file0\x00', 0x68)
landlock_restrict_self(r6, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r7, &(0x7f0000000000)='./file0\x00', 0x2)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r3, 0x0, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0)
fcntl$lock(r8, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb})
syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0xffffffffffffffff)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0)
sendfile(r9, r9, 0x0, 0x8)

14m9.506662308s ago: executing program 33 (id=17):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x5c3a, &(0x7f0000000080)={0x0, 0xde28, 0x11000, 0x1, 0x0, 0x0, r0}, 0x0, &(0x7f0000000200), &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844)
r7 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0xa910, 0x5, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x9, 0x1, 0x3, 0x6, 0x7, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]})
ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92ff, 0x0, 0x0, 0x4})
syz_open_dev$swradio(0x0, 0x0, 0x2)
syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x101)
read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

12m11.041686711s ago: executing program 4 (id=195):
r0 = add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000001c0)={0x20000000, 0xc6f, 0x101})
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@local, 0x78, r5})
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, &(0x7f0000000000))
keyctl$negate(0xd, 0x0, 0x7, r0)
getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000100))
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
r7 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r7, 0x110, 0x6, 0x0, 0x0)
keyctl$link(0x8, r0, r0)
pwritev(r6, &(0x7f0000000280)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0)
pread64(r6, 0x0, 0x0, 0x4a628)

12m0.095654208s ago: executing program 4 (id=215):
socket$nl_audit(0x10, 0x3, 0x9)
mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpgrp(r0)
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)

11m50.780739684s ago: executing program 4 (id=232):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
mq_open(0x0, 0x2, 0x48, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe)
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x22581)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_settime(0x8d71ca88fffffffd, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000000), 0x880, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './cgroup.cpu/cgroup.procs'}}]})
ioctl$CEC_RECEIVE(r4, 0xc0386106, &(0x7f0000000000)={0x4, 0x80007, 0x9, 0xfffffffe, 0x8, 0x16, "260000000100000754439400", 0xc, 0x0, 0x5, 0x2, 0x0, 0x0, 0x9e})

11m46.664010698s ago: executing program 4 (id=239):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read(r0, &(0x7f0000000300)=""/96, 0x60)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setfsgid(0xee00)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, 0x640b1}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000540)={0x80000000, &(0x7f0000000440), 0x0})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e0001000000000000000092010000000000003affffffffffffff00000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0e00000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd700004350000020001000000000000000000480003006465666c61746500"/233], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d0}, 0x1000)
socket$nl_xfrm(0x10, 0x3, 0x6)

11m32.552470395s ago: executing program 4 (id=271):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20)
fsopen(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100)
fcntl$setlease(r6, 0x400, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
rt_tgsigqueueinfo(r0, r2, 0x28, &(0x7f0000000200)={0x2c, 0x4993, 0x8})

11m30.317268421s ago: executing program 4 (id=274):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
lseek(r0, 0x1ff, 0x0)
getdents64(r0, 0xffffffffffffffff, 0x43)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
ftruncate(r3, 0x2000000)
fcntl$addseals(r3, 0x409, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000037000100fcff070004000000010000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f000092a000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2)
r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x6c, &(0x7f0000000400)=""/108}]})
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)

11m15.226926992s ago: executing program 34 (id=274):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
lseek(r0, 0x1ff, 0x0)
getdents64(r0, 0xffffffffffffffff, 0x43)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1)
ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f00000000c0)={0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
ftruncate(r3, 0x2000000)
fcntl$addseals(r3, 0x409, 0x7)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000037000100fcff070004000000010000000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f000092a000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x2)
r5 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x591384acc3e00258, 0x6c, &(0x7f0000000400)=""/108}]})
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)

6.874476009s ago: executing program 5 (id=2064):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x1, 0x559a, &(0x7f0000005600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/50, 0x32)
getdents64(r0, 0xfffffffffffffffe, 0x29)

5.103475183s ago: executing program 6 (id=2078):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0xfff}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@barrier}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000040)={0x17c04, 0xffffffffffffffff, 0xeb, 0x100000002, 0x20, 0xfbf})

4.906866447s ago: executing program 5 (id=2080):
r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000240)='J', 0x1, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1})
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r0)

4.865174118s ago: executing program 6 (id=2081):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000300)='\x00', 0x1, 0x903c8d9dea063cea, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
listen(r0, 0x3)

4.773031961s ago: executing program 2 (id=2083):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6359eed41)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x2}, 0x8)

4.644979434s ago: executing program 6 (id=2084):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc)
close(r4)

4.475016878s ago: executing program 2 (id=2087):
r0 = socket$kcm(0x28, 0x1, 0x0)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000011006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208000400000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)

4.174263886s ago: executing program 6 (id=2089):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$dvb_demux(&(0x7f0000000040), 0x57, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000131411"], 0x18}, 0x2}, 0x0)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000180)={0x101, 0x7, 0xf8a, 0xca29c56, 0x2630, 0x9})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r4, 0x4a028000)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000c00)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x10, 0x81, 0x33565348, 0x8, 0xa, [{0x10, 0x7}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x202, 0x3fd}, {0x5, 0x1}, {0x4ce, 0x8}, {0x8007ff, 0xd}, {0x6, 0x1}], 0x5, 0xff, 0x6, 0x0, 0x5}}})
listen(r6, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x4d, 0x5, 0x9], [0x6, 0x0, 0x40008000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0x13e}}, 0x4c}, 0x1, 0x0, 0x0, 0x240408dd}, 0x80)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20044044)

4.148744656s ago: executing program 2 (id=2090):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r1, 0x4068aea3, &(0x7f0000000180))

3.754919266s ago: executing program 2 (id=2093):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$dvb_demux(&(0x7f0000000040), 0x57, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000131411"], 0x18}, 0x2}, 0x0)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000180)={0x101, 0x7, 0xf8a, 0xca29c56, 0x2630, 0x9})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r4, 0x4a028000)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000c00)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x10, 0x81, 0x33565348, 0x8, 0xa, [{0x10, 0x7}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x202, 0x3fd}, {0x5, 0x1}, {0x4ce, 0x8}, {0x8007ff, 0xd}, {0x6, 0x1}], 0x5, 0xff, 0x6, 0x0, 0x5}}})
listen(r6, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x4d, 0x5, 0x9], [0x6, 0x0, 0x40008000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0x13e}}, 0x4c}, 0x1, 0x0, 0x0, 0x240408dd}, 0x80)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20044044)

3.646563789s ago: executing program 5 (id=2094):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r1)

3.60064985s ago: executing program 7 (id=2095):
memfd_create(&(0x7f00000003c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a*\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81~\xa7p!\x1e\x85\xb5S\f\xc7\xd7T\x06\xf7J\xd9\xd1\xf7\xc1|\xd9\x05%S\x87_v>X5{e\xa1\x9a\xf9\x88}\xcc\xdf\x9bt\xb9\x1e\tJ\xec\xed \xb9\x9e\xad0\xdb\xc5\x11\xb9\xc8q\xeb\xa85\x92\xd0\xdcEq\xe4\xca!\t\xb5\xe6\x8c\xfa\xe3\xd5\xd0q\xb9C\x95S\x83\xc0_\xdd\t\xd5\xdc\x196\x83\xa9\xd7E\x04\x8f\x94\x81A1\x1e_w1\xcd\x9am,tXs\xa5Kn\xc5\xfc\xf7\x88\x87\x16EZ\xeaW}%%mU\xddu\xa2T\x1c\xb0\xed }\xa3c\xef\xb0\xbe\xab%J\xcb4n\xf5\x89\x9fdL\xe0S\xfc\xbe\xf6\x7f\xf6\'vK~\xc4\xa2\xf5z', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="78010000", @ANYRES16=r1, @ANYBLOB="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"], 0x178}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)

3.472982853s ago: executing program 3 (id=2096):
socket$nl_audit(0x10, 0x3, 0x9)
mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getpgrp(r0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x17, 0x0)
keyctl$session_to_parent(0x12)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x803, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000002100)='net/igmp\x00')
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
r7 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r7, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/214, 0xd6}], 0x1, &(0x7f0000000940), 0x0, 0x0)
preadv(r3, &(0x7f00000029c0)=[{&(0x7f0000002200)=""/175, 0xaf}], 0x1, 0x20007c, 0x8001)

3.20977981s ago: executing program 7 (id=2097):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4005}, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x2)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4)

2.40955793s ago: executing program 5 (id=2098):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000400)=""/2, 0x2}}, 0x120)
syz_usb_disconnect(0xffffffffffffffff)
write$UHID_INPUT(r0, &(0x7f0000003840)={0xc, {"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", 0x1000}}, 0x1006)

2.192641275s ago: executing program 3 (id=2099):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc)
close(r4)

2.036192809s ago: executing program 7 (id=2100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdir(0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.809917055s ago: executing program 6 (id=2101):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$dvb_demux(&(0x7f0000000040), 0x57, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x18}, 0x2}, 0x0)

1.490124373s ago: executing program 3 (id=2102):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x400c4d00, &(0x7f0000000a00))

693.707583ms ago: executing program 7 (id=2103):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}, 0x1c)
shutdown(r0, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4a24, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

693.104563ms ago: executing program 6 (id=2104):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x808, &(0x7f00000006c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55ab, &(0x7f0000006a80)="$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")
syz_kvm_add_vcpu$x86(0x0, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000e40)={0x8, 0x4, 0x3, 0x7fff})

645.077764ms ago: executing program 5 (id=2105):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000101fdffffff6b2d000002100000", @ANYRES32=r1, @ANYBLOB="140003007665746830"], 0x2c}}, 0x0)

621.621295ms ago: executing program 3 (id=2106):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
pwrite64(r0, &(0x7f0000000140)="4e8399bdc0b4", 0x6, 0x5)

503.202797ms ago: executing program 5 (id=2107):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4)

372.49013ms ago: executing program 2 (id=2108):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==")
truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0)
read$FUSE(r0, &(0x7f0000005300)={0x2020}, 0x2020)

371.935861ms ago: executing program 3 (id=2109):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1, 0xb99, 0x8}, &(0x7f0000000280)=0x10)

325.081432ms ago: executing program 7 (id=2110):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})

144.161287ms ago: executing program 3 (id=2111):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$dvb_demux(&(0x7f0000000040), 0x57, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000131411"], 0x18}, 0x2}, 0x0)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f0000000180)={0x101, 0x7, 0xf8a, 0xca29c56, 0x2630, 0x9})
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r4, 0x4a028000)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000c00)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x10, 0x81, 0x33565348, 0x8, 0xa, [{0x10, 0x7}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x202, 0x3fd}, {0x5, 0x1}, {0x4ce, 0x8}, {0x8007ff, 0xd}, {0x6, 0x1}], 0x5, 0xff, 0x6, 0x0, 0x5}}})
listen(r6, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e22, [0x3, 0x4d, 0x5, 0x9], [0x6, 0x0, 0x40008000, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0x13e}}, 0x4c}, 0x1, 0x0, 0x0, 0x240408dd}, 0x80)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20044044)

129.757296ms ago: executing program 2 (id=2112):
mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed)
mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='0x0102\x00', 0x6)
close(r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed)
symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00')
symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed)
mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed)
symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00')
symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00')
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed)
symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000002100)='usbip-vudc.0\x00', 0xc)
close(r4)

0s ago: executing program 7 (id=2113):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2084ce, &(0x7f00000001c0), 0x3, 0x45e, &(0x7f0000000980)="$eJzs3M2PE2UYAPBnpttFBNwV8YMPdRWNGz92WUDl4EGNJh4wMdGDHje7hSCFVXZNhBAFY/BkjIl349F/wZNejPFk4lXvhoQYLoCnmmln2La0he12LdLfLxl43vngfZ/OvO0787YEMLKmsj+SiK0R8UdETDSKrTtMNf66evnswrXLZxeSqNXe/jup73fl8tmFYtfiuC15YTqNSD9PYneHepdPnzk+X61WTuXl2ZUTH8wunz7z3LET80crRysn9x86dPDA3Isv7H9+IHlmbbqy65OlPTvfeO/rNw9/2ZJ/Wx4DMtVr45O12oCrG65tTXEyNsSGsCaliMhOV7ne/yeiFKsnbyJe/2yojQM2VK1Wq23pvvlcDbiDJdFa1uVhVBQf9Nn9b7G0DwJe3rjhx9BdeqVxA5TlfTVfGlvGIs33Kbfd3w7SVES8e+6fb7MlNuY5BABAix+z8c+zncZ/aTzQtN89+dzQZETcGxHbI+K+iNgREfdH1Pd9MCIeWmP97ZMkN45/0ot9JXaLsvHfS/ncVuv4rxj9xWQpL22r519OjhyrVvblr8l0lDdl5bkedfz02u9fddvWPP7Llqz+YiyYt+Pi2KbWYxbnV+bXk3OzS+cjdo11yj+5PhOQRMTOiNjVZx3Hnv5+T7dtN8+/hwHMM9W+i3iqcf7PRVv+haT3/OTsXVGt7Jstroob/frbhbe61b+u/AcgO/93d7z+r+c/mTTP1y6vvY4Lf37R9Z6m3+t/PHmnHo/n6z6eX1k5NRcxnhxuNLp5/f7VY4tysX+W//Tezv1/e6y+ErsjIruIH46IRyLi0bztj0XE4xGxtz2x0mr4y6tPvN9//hsry39xTed/NRiP9jWdg9Lxn39oqXTyhvyv9T7/B+vRdL7mVt7/bqVd/V3NAAAA8P+TRsTWSNKZ63Gazsw0vi+/IyKtLi2vPHNk6aOTi43tk1FOiyddE03PQ+fy2/pG+XxENL5aUGw/8GHjW4bflDbXyzMLS9XFIecOo25Ll/6f+as07NYBG87vtWB06f8wuvR/GF36P4yuDv1/c8cQuON0+vz/dAjtAP57bf3ftB+MEPf/MLq69v87+X/+Aep8/sNIWt4cN/+RfM+g+Jf6PDwPimcOfTfjtguifFs0Y/1BLel4ciMddsMqp9J1XnWC7sHw3pMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6d8AAAD//3Wy3Gc=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
rename(&(0x7f0000000080)='./file0/file0\x00', 0x0)

kernel console output (not intermixed with test programs):

5 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.3.591" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01df59e019 code=0x0
[  549.156605][ T7916] wlan0 speed is unknown, defaulting to 1000
[  550.573944][ T7959] netlink: 72 bytes leftover after parsing attributes in process `syz.3.604'.
[  551.966905][ T7962] netlink: 'syz.5.603': attribute type 10 has an invalid length.
[  551.982448][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.732891][ T7962] device bridge_slave_1 left promiscuous mode
[  553.739949][ T7962] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.270900][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'.
[  557.126202][   T26] audit: type=1326 audit(1786864503.534:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7976 comm="syz.2.608" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f150e19e019 code=0x0
[  558.791454][ T7995] loop7: detected capacity change from 0 to 256
[  558.932740][ T7986] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  559.062512][ T7986] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  559.870928][ T7986] udc dummy_udc.0: failed to start g1: -22
[  559.876881][ T7986] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  559.929105][ T7986] UDC core: g1: couldn't find an available UDC or it's busy
[  560.593586][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[  561.885261][ T8049] fuse: Bad value for 'fd'
[  562.039171][ T8049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.615'.
[  562.641749][ T8066] netlink: 72 bytes leftover after parsing attributes in process `syz.3.617'.
[  563.279267][ T8064] ip6tnl0: Caught tx_queue_len zero misconfig
[  563.390814][ T8071] x_tables: ip_tables: osf match: only valid for protocol 6
[  564.571532][ T8080] gadgetfs: bound to dummy_udc driver
[  564.672296][ T8069] syz.6.618 (8069) used greatest stack depth: 18128 bytes left
[  565.840972][ T4275] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  565.847781][ T4277] Bluetooth: hci2: command 0x1003 tx timeout
[  565.943026][ T8101] xt_hashlimit: max too large, truncated to 1048576
[  569.242844][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  569.249802][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  573.133632][ T8155] netlink: 72 bytes leftover after parsing attributes in process `syz.3.630'.
[  573.993790][ T8153] device syzkaller0 entered promiscuous mode
[  575.539663][ T8174] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  575.652909][ T8174] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  575.758594][ T8174] udc dummy_udc.0: failed to start g1: -22
[  575.788124][ T8174] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  575.823997][ T8174] UDC core: g1: couldn't find an available UDC or it's busy
[  580.209146][ T8218] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  580.219585][ T8218] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  584.828290][ T8272] Invalid ELF header type: 3 != 1
[  585.841122][ T8269] netlink: 64 bytes leftover after parsing attributes in process `syz.5.645'.
[  585.895243][ T8266] device syzkaller0 entered promiscuous mode
[  586.717087][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.647'.
[  590.873678][ T8309] netlink: 96 bytes leftover after parsing attributes in process `syz.7.652'.
[  590.891959][ T8309] loop7: detected capacity change from 0 to 128
[  591.344536][ T8317] netlink: 64 bytes leftover after parsing attributes in process `syz.6.655'.
[  592.733554][ T8316] x_tables: ip_tables: osf match: only valid for protocol 6
[  595.604734][ T4277] Bluetooth: hci2: command 0x1003 tx timeout
[  595.613558][ T4275] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  595.922987][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  595.923142][ T8340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  595.999379][ T8340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  597.420302][ T8348] netlink: 64 bytes leftover after parsing attributes in process `syz.5.670'.
[  599.084319][ T4320] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  599.743717][ T4320] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.023737][ T4320] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping
[  600.490638][ T4320] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  600.553298][ T8360] vxcan0: tx address claim with dest, not broadcast
[  600.649451][ T4320] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  600.658661][ T4320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  600.667687][ T4320] usb 6-1: Product: syz
[  600.671903][ T4320] usb 6-1: Manufacturer: syz
[  600.677532][ T4320] usb 6-1: SerialNumber: syz
[  600.686580][ T4320] usb 6-1: config 0 descriptor??
[  600.737530][ T4320] radio-si470x 6-1:0.0: could not find interrupt in endpoint
[  600.760121][ T8362] file system registered
[  600.871411][ T4320] radio-si470x: probe of 6-1:0.0 failed with error -5
[  601.217044][ T4320] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  601.616112][ T8368] trusted_key: encrypted_key: master key parameter is missing
[  602.020289][   T14] usb 6-1: USB disconnect, device number 2
[  605.451346][ T8399] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  605.476388][ T8384] IPVS: stopping master sync thread 8399 ...
[  605.554175][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.667'.
[  607.085736][ T8408] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  611.137608][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.675'.
[  611.146921][ T8417] device bridge_slave_1 left promiscuous mode
[  611.153737][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.168715][ T8417] device bridge_slave_0 left promiscuous mode
[  611.175563][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.373121][   T53] block nbd6: Attempted send on invalid socket
[  611.379710][   T53] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  611.389525][ T8419] isofs_fill_super: bread failed, dev=nbd6, iso_blknum=16, block=32
[  614.316071][   T26] audit: type=1326 audit(1786864556.332:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8420 comm="syz.7.676" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f086b99e019 code=0x0
[  615.945876][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.683'.
[  617.803528][ T8460] loop5: detected capacity change from 0 to 1024
[  617.811216][ T8460] EXT4-fs: Ignoring removed oldalloc option
[  617.817199][ T8460] EXT4-fs: Ignoring removed oldalloc option
[  617.877867][ T8465] loop7: detected capacity change from 0 to 8
[  617.939500][ T8460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  619.596647][ T8465] SQUASHFS error: lzo decompression failed, data probably corrupt
[  619.768698][ T8465] SQUASHFS error: Failed to read block 0x91: -5
[  619.775159][ T8465] SQUASHFS error: Unable to read metadata cache entry [8f]
[  619.782879][ T8465] SQUASHFS error: Unable to read inode 0x11f
[  621.385545][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  622.484403][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.696'.
[  624.261046][ T8511] batman_adv: batadv0: Adding interface: dummy0
[  624.276881][ T8511] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  624.567991][ T8511] batman_adv: batadv0: Interface activated: dummy0
[  624.736688][ T8537] netlink: 72 bytes leftover after parsing attributes in process `syz.7.708'.
[  625.628742][ T8519] batadv0: mtu less than device minimum
[  625.654640][ T8519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.667783][ T8519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.680177][ T8519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.692266][ T8519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.704541][ T8519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.716815][ T8519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.729179][ T8519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.741544][ T8519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  625.753591][ T8519] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  626.202647][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'.
[  629.310957][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.713'.
[  630.954260][ T8583] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  631.012628][ T8581] IPVS: stopping master sync thread 8583 ...
[  631.084011][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'.
[  632.323489][ T8606] netlink: 72 bytes leftover after parsing attributes in process `syz.2.722'.
[  633.252445][ T8613] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  634.413890][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.725'.
[  635.595684][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.7.726'.
[  635.802779][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  635.811662][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  637.234351][  T955] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  637.600263][  T955] usb 3-1: Using ep0 maxpacket: 16
[  637.642490][  T955] usb 3-1: unable to get BOS descriptor or descriptor too short
[  637.689438][  T955] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  637.710419][ T8645] loop5: detected capacity change from 0 to 8
[  637.751263][  T955] usb 3-1: string descriptor 0 read error: -22
[  637.760498][ T8645] SQUASHFS error: Unable to read inode 0x11f
[  637.777671][  T955] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  637.808124][  T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.942363][  T955] snd-ua101 3-1:1.0: invalid num_altsetting
[  638.197342][ T7705] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  638.322034][ T8656] netlink: 72 bytes leftover after parsing attributes in process `syz.5.734'.
[  638.983475][ T4345] usb 3-1: USB disconnect, device number 2
[  639.129727][ T7705] usb 4-1: unable to get BOS descriptor or descriptor too short
[  639.160715][ T7705] usb 4-1: config 3 has an invalid interface number: 106 but max is 0
[  639.179984][ T7705] usb 4-1: config 3 has no interface number 0
[  639.190927][ T7705] usb 4-1: config 3 interface 106 has no altsetting 0
[  639.217918][ T7705] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=91.2c
[  639.238420][ T7705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.261743][ T7705] usb 4-1: Product: syz
[  639.265989][ T7705] usb 4-1: Manufacturer: syz
[  639.285545][ T7705] usb 4-1: SerialNumber: syz
[  639.549956][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.736'.
[  639.757539][ T8669] netlink: 64 bytes leftover after parsing attributes in process `syz.5.735'.
[  640.446665][ T7705] adutux 4-1:3.106: interrupt endpoints not found
[  640.473390][ T7705] usbhid 4-1:3.106: couldn't find an input interrupt endpoint
[  640.521543][ T7705] usb 4-1: USB disconnect, device number 3
[  640.788810][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'.
[  644.088719][   T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  644.113002][ T4287] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  644.182198][ T8747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.748'.
[  644.370197][ T4287] usb 3-1: Using ep0 maxpacket: 32
[  644.384254][   T22] usb 4-1: config 5 has an invalid interface number: 88 but max is 0
[  644.421637][ T4287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  644.447490][   T22] usb 4-1: config 5 has no interface number 0
[  644.481203][   T22] usb 4-1: config 5 interface 88 altsetting 9 endpoint 0xA has an invalid bInterval 82, changing to 10
[  644.505767][ T4287] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  644.560322][ T4287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.578257][   T22] usb 4-1: config 5 interface 88 has no altsetting 0
[  644.617876][ T4287] usb 3-1: Product: syz
[  644.631848][   T22] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=86.05
[  644.665047][ T4287] usb 3-1: Manufacturer: syz
[  644.694111][ T4287] usb 3-1: SerialNumber: syz
[  644.705488][   T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.750402][   T22] usb 4-1: Product: syz
[  644.754837][   T22] usb 4-1: Manufacturer: syz
[  644.792034][   T22] usb 4-1: SerialNumber: syz
[  644.917970][ T4345] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  644.930347][ T4287] usb 3-1: config 0 descriptor??
[  644.991070][ T4287] asix: probe of 3-1:0.0 failed with error -22
[  645.181168][ T4345] usb 8-1: too many configurations: 151, using maximum allowed: 8
[  645.207044][   T22] radio-si470x 4-1:5.88: could not find interrupt in endpoint
[  645.214682][   T22] radio-si470x: probe of 4-1:5.88 failed with error -5
[  645.261383][ T4345] usb 8-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  645.319494][   T22] usbhid 4-1:5.88: couldn't find an input interrupt endpoint
[  645.329263][ T4345] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  645.366579][ T4345] usb 8-1: Product: syz
[  645.375447][   T22] usb 4-1: USB disconnect, device number 4
[  645.390669][ T4345] usb 8-1: Manufacturer: syz
[  645.421069][ T4345] usb 8-1: SerialNumber: syz
[  645.429341][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.752'.
[  645.733888][ T4345] usb 8-1: config 0 descriptor??
[  645.922843][ T4287] usb 3-1: USB disconnect, device number 3
[  646.130082][ T4345] usb 8-1: USB disconnect, device number 2
[  646.996012][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.754'.
[  647.232800][ T8802] tc_dump_action: action bad kind
[  649.548806][ T8821] netlink: 72 bytes leftover after parsing attributes in process `syz.2.760'.
[  649.864873][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.7.762'.
[  651.336942][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'.
[  653.910600][ T8892] netlink: 72 bytes leftover after parsing attributes in process `syz.5.773'.
[  655.219638][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.775'.
[  656.296046][ T8918] netlink: 'syz.6.781': attribute type 7 has an invalid length.
[  656.412146][ T8916] loop5: detected capacity change from 0 to 4096
[  656.556054][ T8916] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  656.730319][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'.
[  657.449210][ T8916] ntfs3: loop5: ntfs_evict_inode r=6 failed, -22.
[  657.494174][ T8916] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  657.824194][ T8916] ntfs3: loop5: ino=1e, "file1" attr_set_size
[  660.243891][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'.
[  664.455360][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'.
[  665.141439][ T9023] capability: warning: `syz.6.814' uses 32-bit capabilities (legacy support in use)
[  665.418347][ T9032] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  665.450230][ T9032] udc usbip-vudc.0: failed to start g1: -19
[  665.473724][ T9032] UDC core: g1: couldn't find an available UDC or it's busy
[  667.768921][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'.
[  667.994892][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.826'.
[  668.552942][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.7.828'.
[  672.890119][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.7.839'.
[  674.254030][ T9160] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  674.812157][ T9160] udc usbip-vudc.0: failed to start g1: -19
[  674.847656][ T9160] UDC core: g1: couldn't find an available UDC or it's busy
[  675.176534][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.842'.
[  676.248970][ T9182] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  676.308429][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'.
[  677.094943][ T9182] udc usbip-vudc.0: failed to start g1: -19
[  677.139670][ T9182] UDC core: g1: couldn't find an available UDC or it's busy
[  677.153297][ T9192] netlink: 36 bytes leftover after parsing attributes in process `syz.6.859'.
[  677.162344][ T9192] netlink: 'syz.6.859': attribute type 1 has an invalid length.
[  677.295990][ T9194] Illegal XDP return value 4294967274 on prog  (id 32) dev N/A, expect packet loss!
[  677.583915][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.864'.
[  678.276404][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.6.866'.
[  678.718342][ T9228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.868'.
[  680.130048][ T9240] fuse: Bad value for 'fd'
[  680.794170][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.874'.
[  682.991020][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'.
[  691.808694][ T9435] netlink: 'syz.7.918': attribute type 2 has an invalid length.
[  693.131180][ T9450] loop5: detected capacity change from 0 to 1764
[  694.460997][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'.
[  694.489334][ T9458] net_ratelimit: 10 callbacks suppressed
[  694.489426][ T9458] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  695.642717][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'.
[  697.870861][ T9505] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  697.887160][ T9505] udc usbip-vudc.0: failed to start g1: -19
[  697.897693][ T9505] UDC core: g1: couldn't find an available UDC or it's busy
[  697.968532][ T9509] loop7: detected capacity change from 0 to 64
[  698.087138][ T9509] syz.7.941: attempt to access beyond end of device
[  698.087138][ T9509] loop7: rw=0, sector=1024, nr_sectors = 2 limit=64
[  698.146330][ T9509] Buffer I/O error on dev loop7, logical block 512, async page read
[  698.204785][ T9509] syz.7.941: attempt to access beyond end of device
[  698.204785][ T9509] loop7: rw=0, sector=113152, nr_sectors = 2 limit=64
[  698.257416][ T9509] Buffer I/O error on dev loop7, logical block 56576, async page read
[  698.381795][ T9521] x_tables: duplicate entry at hook 3
[  698.822053][ T4386] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  699.531053][ T4386] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  699.550588][ T4386] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  699.710982][ T4386] usb 4-1: config 0 has no interface number 0
[  699.784962][ T4386] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  699.818456][ T4386] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  699.839742][ T4386] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  699.870884][ T4386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.929482][ T4386] usb 4-1: config 0 descriptor??
[  701.080886][ T8485] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  701.323393][ T4386] usb 4-1: USB disconnect, device number 5
[  701.456766][ T9556] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  701.464415][ T9556] udc usbip-vudc.0: failed to start g1: -19
[  701.470806][ T9556] UDC core: g1: couldn't find an available UDC or it's busy
[  701.519042][ T8485] usb 3-1: Using ep0 maxpacket: 16
[  701.532167][ T8485] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  702.323857][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  702.336595][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  702.432079][ T8485] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  702.450519][ T8485] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.461582][ T8485] usb 3-1: Product: syz
[  702.465810][ T8485] usb 3-1: Manufacturer: syz
[  702.470445][ T8485] usb 3-1: SerialNumber: syz
[  702.478007][ T8485] r8152-cfgselector 3-1: config 0 descriptor??
[  702.727870][ T8485] usbip-host 3-1: 3-1 is not in match_busid table... skip!
[  703.286638][ T4431] usb 3-1: config 0 descriptor??
[  703.446946][ T8485] usb 3-1: USB disconnect, device number 4
[  703.534861][ T4318] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  703.821054][ T9583] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  703.881202][ T9583] udc usbip-vudc.0: failed to start g1: -19
[  703.889966][ T4318] usb 4-1: config 1 has an invalid interface number: 82 but max is 1
[  703.903564][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  703.914037][ T4318] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  703.960664][ T9583] UDC core: g1: couldn't find an available UDC or it's busy
[  703.994807][ T4318] usb 4-1: config 1 has no interface number 2
[  704.001770][ T4318] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  704.025018][ T4318] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  704.562890][ T4318] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  704.573160][ T4318] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  704.613199][ T4318] usb 4-1: config 1 interface 82 has no altsetting 0
[  704.648816][ T4318] usb 4-1: config 1 interface 1 has no altsetting 0
[  704.690564][ T4318] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  704.743183][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.771792][ T4318] usb 4-1: Product: syz
[  704.776045][ T4318] usb 4-1: Manufacturer: syz
[  704.811928][ T4318] usb 4-1: SerialNumber: syz
[  704.997708][ T4318] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing
[  705.005214][ T4318] cdc_ncm 4-1:1.0: bind() failure
[  705.559841][   T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  705.787381][   T22] usb 6-1: Using ep0 maxpacket: 16
[  705.877617][   T22] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  705.891157][   T22] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  705.900697][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.922404][   T22] usb 6-1: Product: syz
[  705.949276][   T22] usb 6-1: Manufacturer: syz
[  705.993051][   T22] usb 6-1: SerialNumber: syz
[  706.020282][ T9608] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  706.028393][   T22] r8152-cfgselector 6-1: config 0 descriptor??
[  706.038348][ T4320] usb 4-1: USB disconnect, device number 6
[  706.080337][ T9608] udc usbip-vudc.0: failed to start g1: -19
[  706.103819][ T9608] UDC core: g1: couldn't find an available UDC or it's busy
[  706.263188][   T22] usbip-host 6-1: 6-1 is not in match_busid table... skip!
[  706.274779][ T4471] usb 6-1: config 0 descriptor??
[  706.328579][ T4319] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  706.862375][ T4471] usb 6-1: can't set config #0, error -71
[  706.869505][   T22] usb 6-1: USB disconnect, device number 3
[  707.216641][ T4319] usb 3-1: Using ep0 maxpacket: 8
[  707.223706][ T4319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  707.243710][ T4319] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  707.258683][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.281121][ T4319] usb 3-1: config 0 descriptor??
[  707.295063][ T4319] gspca_main: vc032x-2.14.0 probing 046d:0892
[  707.733249][ T4319] gspca_vc032x: reg_w err -71
[  707.743157][ T4319] vc032x: probe of 3-1:0.0 failed with error -71
[  707.783734][ T4319] usb 3-1: USB disconnect, device number 5
[  708.622165][ T9637] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  708.674346][ T9637] udc usbip-vudc.0: failed to start g1: -19
[  708.688797][ T9637] UDC core: g1: couldn't find an available UDC or it's busy
[  710.271342][ T9657] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  710.556396][ T9657] udc usbip-vudc.0: failed to start g1: -19
[  710.604445][ T9657] UDC core: g1: couldn't find an available UDC or it's busy
[  712.578798][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'.
[  712.906590][ T9683] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  712.942108][ T9683] udc usbip-vudc.0: failed to start g1: -19
[  713.022151][ T9683] UDC core: g1: couldn't find an available UDC or it's busy
[  713.714958][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.991'.
[  715.475825][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'.
[  715.714132][ T9745] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  715.741930][ T9745] udc usbip-vudc.0: failed to start g1: -19
[  715.750861][ T9745] UDC core: g1: couldn't find an available UDC or it's busy
[  718.297307][ T9788] netlink: 'syz.7.1015': attribute type 2 has an invalid length.
[  718.965167][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1018'.
[  719.431998][ T9798] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  719.523217][ T9798] udc usbip-vudc.0: failed to start g1: -19
[  719.547375][ T9798] UDC core: g1: couldn't find an available UDC or it's busy
[  719.775464][ T9812] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  719.871398][ T9812] udc usbip-vudc.0: failed to start g1: -19
[  719.877806][ T9812] UDC core: g1: couldn't find an available UDC or it's busy
[  720.156756][ T9827] netlink: 'syz.5.1028': attribute type 5 has an invalid length.
[  720.269152][ T8485] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  720.345264][ T4318] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  720.485637][ T8485] usb 8-1: Using ep0 maxpacket: 16
[  720.497506][ T8485] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[  720.519605][ T8485] usb 8-1: config 0 has no interface number 0
[  720.535172][ T8485] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  720.551030][ T4318] usb 3-1: Using ep0 maxpacket: 8
[  720.563751][ T8485] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  720.567947][ T4318] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[  720.602085][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  720.604592][ T8485] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  720.629389][ T4318] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  720.646998][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.666318][ T4318] usb 3-1: Product: syz
[  720.666847][ T8485] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  720.677597][ T4318] usb 3-1: Manufacturer: syz
[  720.700512][ T8485] usb 8-1: Product: syz
[  720.706252][ T4318] usb 3-1: SerialNumber: syz
[  720.710070][ T8485] usb 8-1: SerialNumber: syz
[  720.737708][ T4318] usb 3-1: config 0 descriptor??
[  720.743438][ T8485] usb 8-1: config 0 descriptor??
[  720.771124][ T8485] cm109 8-1:0.8: invalid payload size 0, expected 4
[  720.785505][ T4318] powermate: probe of 3-1:0.0 failed with error -5
[  720.839454][ T8485] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input10
[  721.058026][ T4386] usb 3-1: USB disconnect, device number 6
[  721.074737][    C0] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  721.304155][ T4319] usb 8-1: USB disconnect, device number 3
[  721.500885][ T4319] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  722.407138][ T9857] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  722.566379][ T9857] udc usbip-vudc.0: failed to start g1: -19
[  722.700212][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1034'.
[  723.030380][ T9857] UDC core: g1: couldn't find an available UDC or it's busy
[  723.502371][ T9869] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  723.529880][ T9869] udc usbip-vudc.0: failed to start g1: -19
[  723.536243][ T9869] UDC core: g1: couldn't find an available UDC or it's busy
[  723.627290][ T9877] tipc: Can't bind to reserved service type 2
[  725.375562][   T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  725.587741][ T4318] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  725.669833][ T9919] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  725.738343][ T9919] udc usbip-vudc.0: failed to start g1: -19
[  725.749950][   T14] usb 6-1: Using ep0 maxpacket: 8
[  725.758981][ T9919] UDC core: g1: couldn't find an available UDC or it's busy
[  725.774259][   T14] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  725.825049][ T4318] usb 4-1: unable to get BOS descriptor or descriptor too short
[  725.842867][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1051'.
[  725.921729][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  726.137697][ T4318] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  726.318117][ T4318] usb 4-1: string descriptor 0 read error: -22
[  726.434885][ T4318] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  726.508175][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.603977][   T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.612187][   T14] usb 6-1: Product: syz
[  726.616482][   T14] usb 6-1: Manufacturer: syz
[  726.621151][   T14] usb 6-1: SerialNumber: syz
[  726.633294][ T4318] usb 4-1: selecting invalid altsetting 1
[  726.715262][ T4318] usb 4-1: unit 3 not found!
[  726.847540][ T4318] usb 4-1: unit 0 not found!
[  727.024662][ T9937] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  727.051107][ T9937] udc usbip-vudc.0: failed to start g1: -19
[  727.069359][ T9937] UDC core: g1: couldn't find an available UDC or it's busy
[  727.080785][   T14] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[  727.095974][   T14] mxuport: probe of 6-1:254.0 failed with error -5
[  727.133442][   T14] usb 6-1: USB disconnect, device number 4
[  727.151077][ T4318] usb 4-1: USB disconnect, device number 7
[  727.192747][ T7806] udevd[7806]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  727.539672][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1057'.
[  729.476608][ T9962] device syz_tun entered promiscuous mode
[  729.759832][ T9972] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  729.767429][ T9972] udc usbip-vudc.0: failed to start g1: -19
[  729.832157][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'.
[  730.069424][ T9972] UDC core: g1: couldn't find an available UDC or it's busy
[  732.065723][T10002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1071'.
[  733.141132][T10014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1074'.
[  735.063703][T10021] loop5: detected capacity change from 0 to 1024
[  736.322015][T10034] netlink: 'syz.6.1079': attribute type 15 has an invalid length.
[  736.330226][T10034] netlink: 'syz.6.1079': attribute type 7 has an invalid length.
[  736.400730][T10034] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1079'.
[  737.603584][T10063] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  737.632167][T10063] udc usbip-vudc.0: failed to start g1: -19
[  737.667878][T10063] UDC core: g1: couldn't find an available UDC or it's busy
[  737.687192][ T4318] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  737.720730][T10067] xt_l2tp: invalid flags combination: 4
[  737.794390][T10068] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  737.822962][T10068] udc usbip-vudc.0: failed to start g1: -19
[  737.856993][T10068] UDC core: g1: couldn't find an available UDC or it's busy
[  737.892585][ T4318] usb 3-1: Using ep0 maxpacket: 16
[  737.900982][ T4318] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  737.931618][ T4318] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  737.975342][ T4318] usb 3-1: config 0 has no interface number 0
[  737.999805][ T4318] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17
[  738.042153][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  738.080379][ T4318] usb 3-1: Product: syz
[  738.095681][ T4318] usb 3-1: Manufacturer: syz
[  738.124296][ T4318] usb 3-1: SerialNumber: syz
[  738.170901][ T4318] usb 3-1: config 0 descriptor??
[  738.208752][ T4318] usb 3-1: Found UVC 0.00 device syz (046d:08d3)
[  738.215312][ T4318] usb 3-1: No valid video chain found.
[  738.446164][ T4318] usb 3-1: USB disconnect, device number 7
[  738.779256][T10098] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1101'.
[  739.649402][T10104] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  739.656989][T10104] udc usbip-vudc.0: failed to start g1: -19
[  739.738786][T10104] UDC core: g1: couldn't find an available UDC or it's busy
[  739.775556][T10106] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  739.787866][T10106] udc usbip-vudc.0: failed to start g1: -19
[  739.801039][T10106] UDC core: g1: couldn't find an available UDC or it's busy
[  740.005767][T10116] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1106'.
[  740.903937][ T4318] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  741.074611][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1113'.
[  741.232640][ T4318] usb 3-1: Using ep0 maxpacket: 32
[  741.749135][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7
[  741.760500][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024
[  741.774296][ T4318] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  741.783694][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.791736][ T4318] usb 3-1: Product: syz
[  741.796177][ T4318] usb 3-1: Manufacturer: syz
[  741.800805][ T4318] usb 3-1: SerialNumber: syz
[  741.899457][ T4318] usb 3-1: config 0 descriptor??
[  742.134321][ T4318] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11
[  742.141888][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1116'.
[  742.391952][ T4386] usb 3-1: USB disconnect, device number 8
[  742.877655][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'.
[  743.668439][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1118'.
[  743.758845][T10161] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  743.808093][T10161] udc usbip-vudc.0: failed to start g1: -19
[  743.840826][T10161] UDC core: g1: couldn't find an available UDC or it's busy
[  743.863214][T10163] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  743.870873][T10163] udc usbip-vudc.0: failed to start g1: -19
[  743.915536][T10163] UDC core: g1: couldn't find an available UDC or it's busy
[  743.969359][ T4318] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  744.188892][ T4318] usb 3-1: too many configurations: 36, using maximum allowed: 8
[  744.208829][ T4318] usb 3-1: config index 0 descriptor too short (expected 87, got 72)
[  744.233364][ T4318] usb 3-1: config index 1 descriptor too short (expected 87, got 72)
[  744.249576][ T4318] usb 3-1: config index 2 descriptor too short (expected 87, got 72)
[  744.284866][ T4318] usb 3-1: config index 3 descriptor too short (expected 87, got 72)
[  744.327978][ T4318] usb 3-1: config index 4 descriptor too short (expected 87, got 72)
[  744.435408][ T4319] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  744.545650][ T4318] usb 3-1: config index 5 descriptor too short (expected 87, got 72)
[  744.555746][ T4318] usb 3-1: config index 6 descriptor too short (expected 87, got 72)
[  744.565307][ T4318] usb 3-1: config index 7 descriptor too short (expected 87, got 72)
[  744.576691][ T4318] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  744.585808][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.593920][ T4318] usb 3-1: Product: syz
[  744.598178][ T4318] usb 3-1: Manufacturer: syz
[  744.602859][ T4318] usb 3-1: SerialNumber: syz
[  744.627112][ T4318] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  744.654691][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  744.687314][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'.
[  744.736706][ T4319] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  744.891049][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  745.056353][ T4319] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  745.260747][ T4319] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  745.306799][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.351317][ T4319] usb 6-1: Product: syz
[  745.377349][ T4319] usb 6-1: Manufacturer: syz
[  745.399083][ T4319] usb 6-1: SerialNumber: syz
[  745.433534][ T4319] usb 6-1: config 0 descriptor??
[  745.484769][ T4319] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  745.532419][ T4318] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  745.755442][ T4319] scsi host1: usb-storage 6-1:0.0
[  745.805632][ T4319] usb 6-1: USB disconnect, device number 5
[  746.014162][ T4386] usb 3-1: USB disconnect, device number 9
[  746.671553][T10212] vivid-007: =================  START STATUS  =================
[  746.688570][T10212] vivid-007: Enable Output Cropping: true grabbed
[  746.689304][ T4318] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  746.703274][T10212] 
[  746.706261][T10212] vivid-007: Enable Output Composing: true grabbed
[  746.737930][ T4318] ath9k_htc: Failed to initialize the device
[  746.772062][ T4386] usb 3-1: ath9k_htc: USB layer deinitialized
[  746.772676][T10212] vivid-007: Enable Output Scaler: true grabbed
[  746.877741][T10212] vivid-007: Tx RGB Quantization Range: Automatic grabbed
[  746.920198][T10212] vivid-007: Transmit Mode: HDMI grabbed
[  746.937241][T10212] vivid-007: Display Present: true inactive
[  746.944566][T10212] vivid-007: Hotplug Present: 0x00000001
[  746.978240][T10212] vivid-007: RxSense Present: 0x00000001
[  747.021581][T10212] vivid-007: EDID Present: 0x00000001
[  747.042738][T10212] vivid-007: ==================  END STATUS  ==================
[  747.868704][   T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  748.085316][   T14] usb 4-1: Using ep0 maxpacket: 16
[  748.097984][   T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  748.163981][   T14] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  748.191370][   T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.210897][   T14] usb 4-1: Product: syz
[  748.221828][   T14] usb 4-1: Manufacturer: syz
[  748.243698][   T14] usb 4-1: SerialNumber: syz
[  748.268510][   T14] usb 4-1: config 0 descriptor??
[  748.308547][   T14] asix: probe of 4-1:0.0 failed with error -22
[  748.590365][ T4287] usb 4-1: USB disconnect, device number 8
[  749.546543][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1144'.
[  750.409779][T10271] binder: 10267:10271 ioctl 4018620d 0 returned -22
[  750.495498][T10273] netlink: 'syz.6.1148': attribute type 4 has an invalid length.
[  750.602150][T10273] device veth1_macvtap left promiscuous mode
[  750.739110][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1142'.
[  751.680674][T10287] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  751.748300][T10287] udc usbip-vudc.0: failed to start g1: -19
[  751.767948][T10287] UDC core: g1: couldn't find an available UDC or it's busy
[  752.342660][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'.
[  754.984400][T10345] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1168'.
[  756.545247][ T8485] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  756.789319][ T8485] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  756.909979][ T8485] usb 6-1: config 0 has no interfaces?
[  757.021648][ T8485] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  757.030771][ T8485] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.062818][ T8485] usb 6-1: config 0 descriptor??
[  757.450761][ T8485] usb 6-1: USB disconnect, device number 6
[  759.819335][T10401] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1184'.
[  760.876671][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1181'.
[  761.072590][T10407] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  761.127542][T10407] udc usbip-vudc.0: failed to start g1: -19
[  761.148910][T10407] UDC core: g1: couldn't find an available UDC or it's busy
[  761.506149][T10415] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1188'.
[  762.147620][T10419] netlink: 'syz.3.1190': attribute type 10 has an invalid length.
[  762.344876][T10419] 8021q: adding VLAN 0 to HW filter on device batadv0
[  762.416533][T10419] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  762.469450][T10422] netlink: 'syz.3.1190': attribute type 10 has an invalid length.
[  762.509533][T10422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1190'.
[  762.589774][T10422] device batadv0 entered promiscuous mode
[  762.607093][T10422] bond0: (slave batadv0): Releasing backup interface
[  762.658704][T10422] bridge0: port 3(batadv0) entered blocking state
[  762.697704][T10422] bridge0: port 3(batadv0) entered disabled state
[  762.717930][ T4471] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  762.728191][ T4471] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  762.784420][ T4287] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  763.000806][ T4287] usb 8-1: Using ep0 maxpacket: 16
[  763.010227][ T4287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  763.050256][ T4287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  763.067554][ T4287] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  763.103870][ T4287] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  763.138055][ T4287] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.181351][ T4287] usb 8-1: config 0 descriptor??
[  763.281904][T10458] syz.3.1204[10458] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  763.282093][T10458] syz.3.1204[10458] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  763.656562][T10465] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1205'.
[  764.439472][ T4287] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0002/input/input12
[  764.467436][ T4287] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  764.487247][ T4287] usb 8-1: USB disconnect, device number 4
[  765.428654][T10479] xt_connbytes: Forcing CT accounting to be enabled
[  765.627837][T10474] fido_id[10474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  765.759803][T10488] loop7: detected capacity change from 0 to 4096
[  765.789064][T10488] NILFS (loop7): invalid segment: Checksum error in segment payload
[  765.798086][T10488] NILFS (loop7): trying rollback from an earlier position
[  765.853057][T10488] NILFS (loop7): recovery complete
[  765.868262][T10490] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  767.168824][T10510] device ip6gretap0 entered promiscuous mode
[  767.593751][T10513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1220'.
[  768.516518][ T8485] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  768.749119][ T8485] usb 8-1: unable to get BOS descriptor or descriptor too short
[  768.858588][ T8485] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  768.894101][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  768.900643][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  769.093161][ T8485] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  769.315600][ T8485] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  769.347257][ T8485] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  769.374575][ T8485] usb 8-1: Product: syz
[  769.378816][ T8485] usb 8-1: Manufacturer: syz
[  769.383966][ T8485] usb 8-1: SerialNumber: syz
[  769.418064][ T8485] usb 8-1: selecting invalid altsetting 1
[  769.454271][ T8485] usb 8-1: unit 6 not found!
[  769.709258][ T8485] usb 8-1: 2:0: cannot get min/max values for control 1 (id 2)
[  770.292940][ T8485] snd-usb-audio: probe of 8-1:1.0 failed with error -22
[  770.445117][ T8485] usb 8-1: USB disconnect, device number 5
[  770.706764][T10560] device ip6gretap0 entered promiscuous mode
[  770.795119][ T7806] udevd[7806]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  771.579808][ T4319] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  771.746385][T10569] loop7: detected capacity change from 0 to 256
[  771.788600][ T4319] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  771.808715][ T4319] usb 6-1: config 0 has no interface number 0
[  771.848703][ T4319] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  771.904711][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  771.912799][ T4319] usb 6-1: Product: syz
[  771.945700][ T4319] usb 6-1: Manufacturer: syz
[  771.991688][ T4319] usb 6-1: SerialNumber: syz
[  772.044126][ T4319] usb 6-1: config 0 descriptor??
[  772.103070][ T4319] usb 6-1: selecting invalid altsetting 1
[  772.146273][ T4319] dvb_ttusb_budget: ttusb_init_controller: error
[  772.240855][ T4319] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  774.522053][T10602] device ip6gretap0 entered promiscuous mode
[  775.297297][ T4319] DVB: Unable to find symbol stv0299_attach()
[  775.328668][T10599] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  775.378535][T10599] udc usbip-vudc.0: failed to start g1: -19
[  775.406201][T10599] UDC core: g1: couldn't find an available UDC or it's busy
[  775.584822][ T4319] DVB: Unable to find symbol tda8083_attach()
[  775.595588][T10611] loop5: detected capacity change from 0 to 512
[  775.598347][ T4319] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  775.615477][T10611] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  775.716138][T10611] EXT4-fs (loop5): Test dummy encryption mode enabled
[  775.728635][ T4319] usb 6-1: USB disconnect, device number 7
[  775.779217][T10611] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  776.074978][  T955] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  776.342214][  T955] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  776.398751][  T955] usb 3-1: config 0 has no interface number 0
[  776.530162][  T955] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  776.793991][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1257'.
[  776.818614][  T955] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  776.973186][T10633] tunl0: Caught tx_queue_len zero misconfig
[  776.995640][  T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.020448][T10611] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  777.039146][  T955] usb 3-1: Product: syz
[  777.054488][  T955] usb 3-1: Manufacturer: syz
[  777.061033][T10611] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  777.065735][  T955] usb 3-1: SerialNumber: syz
[  777.091543][  T955] usb 3-1: config 0 descriptor??
[  777.184245][  T955] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  777.991972][  T955] usb 3-1: USB disconnect, device number 10
[  778.005259][  T955] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  778.054019][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  778.766049][T10679] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  778.774740][T10679] udc usbip-vudc.0: failed to start g1: -19
[  778.784570][T10679] UDC core: g1: couldn't find an available UDC or it's busy
[  778.918163][T10686] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  779.692773][ T8485] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  780.526917][ T8485] usb 8-1: Using ep0 maxpacket: 32
[  780.539006][ T8485] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  781.379561][ T8485] usb 8-1: config 0 has no interface number 0
[  781.405941][ T8485] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  781.445975][ T8485] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.493323][ T8485] usb 8-1: Product: syz
[  781.497595][ T8485] usb 8-1: Manufacturer: syz
[  781.555964][ T8485] usb 8-1: SerialNumber: syz
[  781.589204][ T8485] usb 8-1: config 0 descriptor??
[  781.619027][ T8485] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  782.848577][ T8485] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  782.878234][ T8485] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  783.063673][T10729] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  783.094436][T10729] udc usbip-vudc.0: failed to start g1: -19
[  783.128308][    C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  783.129153][ T4287] usb 8-1: USB disconnect, device number 6
[  783.157785][T10729] UDC core: g1: couldn't find an available UDC or it's busy
[  783.219433][ T4287] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  783.291339][ T4287] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  783.341657][ T4287] quatech2 8-1:0.51: device disconnected
[  783.528591][T10737] netlink: 'syz.2.1283': attribute type 21 has an invalid length.
[  784.767466][T10753] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  784.779084][T10753] udc usbip-vudc.0: failed to start g1: -19
[  784.806423][T10753] UDC core: g1: couldn't find an available UDC or it's busy
[  785.148065][T10762] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  785.190960][T10762] udc usbip-vudc.0: failed to start g1: -19
[  785.202910][T10762] UDC core: g1: couldn't find an available UDC or it's busy
[  786.027385][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1305'.
[  786.069730][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1305'.
[  786.339928][T10796] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  786.388018][T10796] udc usbip-vudc.0: failed to start g1: -19
[  786.416148][T10796] UDC core: g1: couldn't find an available UDC or it's busy
[  786.673687][T10804] loop7: detected capacity change from 0 to 1024
[  786.726387][T10804] EXT4-fs: Ignoring removed orlov option
[  786.769074][T10804] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  786.880625][T10804] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  787.142495][ T7350] EXT4-fs (loop7): unmounting filesystem.
[  787.290308][T10818] loop5: detected capacity change from 0 to 128
[  787.336378][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1316'.
[  787.350998][ T4287] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  787.384916][T10822] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1316'.
[  787.451701][T10818] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  787.493380][T10818] FAT-fs (loop5): Filesystem has been set read-only
[  787.503988][T10824] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  787.570331][ T4287] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  787.595625][ T4287] usb 4-1: config 0 interface 0 has no altsetting 0
[  787.617702][ T4287] usb 4-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  787.646346][ T4287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.673932][ T4287] usb 4-1: config 0 descriptor??
[  787.973687][T10833] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  787.990832][T10833] udc usbip-vudc.0: failed to start g1: -19
[  788.157858][T10833] UDC core: g1: couldn't find an available UDC or it's busy
[  788.186230][ T4287] wacom 0003:056A:0333.0003: unknown main item tag 0x0
[  788.250755][ T4287] wacom 0003:056A:0333.0003: unknown main item tag 0x0
[  788.270189][ T4287] wacom 0003:056A:0333.0003: unknown main item tag 0x0
[  788.303497][ T4287] wacom 0003:056A:0333.0003: unknown main item tag 0x0
[  788.334631][T10841] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1321'.
[  788.442664][ T4287] wacom 0003:056A:0333.0003: unknown main item tag 0x0
[  788.540862][ T4287] wacom 0003:056A:0333.0003: unknown main item tag 0x0
[  788.641832][ T4287] wacom 0003:056A:0333.0003: unknown main item tag 0x0
[  788.822307][ T4287] wacom 0003:056A:0333.0003: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.3-1/input0
[  788.997471][ T4287] usb 4-1: USB disconnect, device number 9
[  789.240562][T10853] loop5: detected capacity change from 0 to 512
[  789.291402][T10853] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  789.326757][T10853] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  789.328185][T10844] fido_id[10844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  789.365711][ T3599] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  789.400305][T10853] EXT4-fs (loop5): 1 truncate cleaned up
[  789.417566][T10853] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  789.588263][ T3599] usb 8-1: too many endpoints for config 0 interface 0 altsetting 6: 223, using maximum allowed: 30
[  789.694839][ T3599] usb 8-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  789.988801][T10853] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.5.1322: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  790.015338][ T3599] usb 8-1: config 0 interface 0 has no altsetting 0
[  790.127954][ T3599] usb 8-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  790.230692][ T3599] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.356115][T10853] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem
[  790.383035][ T3599] usb 8-1: config 0 descriptor??
[  790.582384][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  790.716402][T10867] loop5: detected capacity change from 0 to 256
[  790.860919][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  790.883963][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  790.908255][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  790.936269][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  790.951350][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  790.970305][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  791.010321][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  791.032228][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  791.052640][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  791.071607][ T3599] wacom 0003:056A:0057.0004: unknown main item tag 0x0
[  791.110014][ T3599] wacom 0003:056A:0057.0004: hidraw0: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.7-1/input0
[  791.167789][ T3599] usb 8-1: USB disconnect, device number 7
[  791.218349][T10877] loop5: detected capacity change from 0 to 1024
[  791.262761][T10877] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  791.477190][T10878] fido_id[10878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  793.119951][T10899] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1341'.
[  793.147934][T10901] loop5: detected capacity change from 0 to 512
[  793.310255][T10901] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  793.329303][T10901] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  793.447281][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  794.972228][T10918] loop5: detected capacity change from 0 to 40427
[  795.025565][T10918] F2FS-fs (loop5): invalid crc value
[  795.118535][T10918] F2FS-fs (loop5): Found nat_bits in checkpoint
[  795.331404][T10918] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  795.385964][T10918] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  795.847754][T10924] loop7: detected capacity change from 0 to 32768
[  798.018851][T10955] loop5: detected capacity change from 0 to 256
[  799.353883][T10968] loop5: detected capacity change from 0 to 4096
[  799.394521][T10968] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  799.543299][T10968] ntfs3: loop5: failed to convert "076c" to cp863
[  799.588266][T10968] ntfs3: loop5: ino=5, "/" directory corrupted
[  799.646756][T10963] loop7: detected capacity change from 0 to 32768
[  799.731849][ T4287] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  799.888695][T10963] JBD2: Ignoring recovery information on journal
[  799.965759][ T4287] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  799.996671][T10988] mkiss: ax0: crc mode is auto.
[  800.024161][ T4287] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  800.032439][ T4287] usb 3-1: Product: syz
[  800.086906][ T4287] usb 3-1: Manufacturer: syz
[  800.113141][ T4287] usb 3-1: SerialNumber: syz
[  800.157484][ T4287] usb 3-1: config 0 descriptor??
[  800.181164][T10963] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  800.405649][ T4287] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  800.463770][T10963] OCFS2: ERROR (device loop7): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  800.467580][T10963] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  801.013122][T10963] OCFS2: Returning error to the calling process.
[  801.130842][T10963] (syz.7.1357,10963,0):ocfs2_setattr:1299 ERROR: status = -117
[  801.194120][ T4287] peak_usb 3-1:0.0 can0: sending command failure: -8
[  801.200926][ T4287] peak_usb 3-1:0.0 can0: sending command failure: -8
[  801.207825][ T4287] peak_usb 3-1:0.0 can0: sending command failure: -8
[  801.325042][ T4287] peak_usb: probe of 3-1:0.0 failed with error -8
[  801.451947][ T4287] usb 3-1: USB disconnect, device number 11
[  801.550815][ T7350] ocfs2: Unmounting device (7,7) on (node local)
[  801.680632][T11012] loop5: detected capacity change from 0 to 256
[  801.719048][T11012] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  801.990578][T11018] loop5: detected capacity change from 0 to 512
[  802.168993][T11018] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  802.384562][T11018] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  802.681868][T11018] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.1373: Invalid block bitmap block 0 in block_group 0
[  802.899101][T11018] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  802.916472][T11018] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.1373: attempt to clear invalid blocks 983261 len 1
[  802.953676][T11018] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.1373: Invalid inode table block 0 in block_group 0
[  802.973700][T11018] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  803.025231][T11018] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  803.041145][T11018] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.1373: Invalid inode table block 0 in block_group 0
[  803.061291][T11018] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  803.071878][T11018] EXT4-fs error (device loop5): ext4_truncate:4325: inode #11: comm syz.5.1373: mark_inode_dirty error
[  803.083919][T11018] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  803.093582][T11018] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz.5.1373: Invalid inode table block 0 in block_group 0
[  803.157841][T11018] EXT4-fs (loop5): 1 truncate cleaned up
[  803.174612][T11018] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  803.223710][T11030] loop7: detected capacity change from 0 to 128
[  803.464072][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  803.836446][T11045] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  804.227221][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1381'.
[  804.266338][T11047] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1378'.
[  804.315497][T11045] udc usbip-vudc.0: failed to start g1: -19
[  804.341984][T11045] UDC core: g1: couldn't find an available UDC or it's busy
[  804.833614][   T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  804.916743][T11063] loop7: detected capacity change from 0 to 4096
[  805.044136][   T14] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  805.103690][   T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  805.180893][T11073] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  805.301023][   T14] usb 3-1: config 0 has no interface number 0
[  805.428968][   T14] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  805.583524][   T14] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  805.813353][   T14] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  805.919166][   T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.927295][   T14] usb 3-1: Product: syz
[  805.984692][   T14] usb 3-1: Manufacturer: syz
[  805.989377][   T14] usb 3-1: SerialNumber: syz
[  806.317150][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1390'.
[  806.987646][   T14] usb 3-1: config 0 descriptor??
[  807.225921][T11092] loop5: detected capacity change from 0 to 2048
[  807.513713][T11097] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  807.593374][T11098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'.
[  808.213098][   T22] usb 3-1: USB disconnect, device number 12
[  808.689087][T11084] loop7: detected capacity change from 0 to 32768
[  809.832894][T11107] loop5: detected capacity change from 0 to 32768
[  810.187782][T11107] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1397 (11107)
[  810.719647][T11107] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  810.762701][T11107] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  810.824101][T11107] BTRFS info (device loop5): use zlib compression, level 3
[  810.845371][T11107] BTRFS info (device loop5): using free space tree
[  810.963314][T11127] loop7: detected capacity change from 0 to 4096
[  811.213708][T11107] BTRFS info (device loop5): enabling ssd optimizations
[  811.630079][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1406'.
[  812.050482][ T4521] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  813.001980][T11184] loop7: detected capacity change from 0 to 1024
[  814.437104][T11212] loop5: detected capacity change from 0 to 512
[  814.577355][T11212] fscrypt (loop5, inode 2): Error -61 getting encryption context
[  814.594435][T11212] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61
[  814.675664][T11210] loop7: detected capacity change from 0 to 32768
[  814.790429][T11212] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.1409: iget: bad i_size value: 12154757448730
[  814.847992][T11212] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1409: couldn't read orphan inode 13 (err -117)
[  814.884029][T11210] JBD2: Ignoring recovery information on journal
[  814.946356][T11212] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  814.994535][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'.
[  815.036548][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  815.054650][T11210] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  815.401107][T11232] loop5: detected capacity change from 0 to 256
[  815.416902][ T7350] ocfs2: Unmounting device (7,7) on (node local)
[  815.430415][T11232] exfat: Deprecated parameter 'namecase'
[  815.454438][T11232] exfat: Deprecated parameter 'namecase'
[  815.537411][T11232] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x53f1f8b9, utbl_chksum : 0xe619d300)
[  817.029051][T11252] netlink: 'syz.7.1428': attribute type 3 has an invalid length.
[  817.213804][T11256] loop5: detected capacity change from 0 to 4096
[  817.431734][T11256] EXT4-fs (loop5): Test dummy encryption mode enabled
[  817.468203][T11256] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  818.418949][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  818.487383][T11274] loop7: detected capacity change from 0 to 128
[  818.543262][T11274] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  818.651372][T11276] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  818.731527][T11276] udc usbip-vudc.0: failed to start g1: -19
[  818.790265][T11276] UDC core: g1: couldn't find an available UDC or it's busy
[  819.151594][ T7350] EXT4-fs (loop7): unmounting filesystem.
[  819.918292][T11288] loop5: detected capacity change from 0 to 1024
[  820.013624][T11288] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 2: comm syz.5.1445: lblock 2 mapped to illegal pblock 2 (length 1)
[  820.034614][T11288] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  820.043099][T11288] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 48: comm syz.5.1445: lblock 0 mapped to illegal pblock 48 (length 1)
[  820.058026][T11288] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  820.067823][T11288] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.1445: Failed to acquire dquot type 0
[  820.088965][T11288] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  820.103818][T11288] EXT4-fs error (device loop5): ext4_evict_inode:281: inode #11: comm syz.5.1445: mark_inode_dirty error
[  820.126956][T11288] EXT4-fs warning (device loop5): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  820.148936][T11288] EXT4-fs (loop5): 1 orphan inode deleted
[  820.159815][T11288] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  820.170615][ T6209] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:42: lblock 1 mapped to illegal pblock 1 (length 1)
[  820.774976][ T6209] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  820.923910][ T6209] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:42: Failed to release dquot type 0
[  821.271637][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  821.321044][ T6209] EXT4-fs error (device loop5): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:42: lblock 1 mapped to illegal pblock 1 (length 1)
[  821.417346][ T6209] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  821.436832][ T6209] EXT4-fs error (device loop5): ext4_release_dquot:6877: comm kworker/u4:42: Failed to release dquot type 0
[  821.560601][ T4521] EXT4-fs error (device loop5): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  821.637127][T11286] loop7: detected capacity change from 0 to 32768
[  821.641982][ T4521] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  821.680874][T11286] JBD2: Ignoring recovery information on journal
[  821.737181][ T4521] EXT4-fs error (device loop5): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  822.540250][T11286] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  822.606954][   T26] audit: type=1800 audit(1786864748.625:300): pid=11286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1444" name="file1" dev="loop7" ino=17058 res=0 errno=0
[  823.898340][ T7350] ocfs2: Unmounting device (7,7) on (node local)
[  824.068725][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1460'.
[  824.204975][T11331] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1458'.
[  825.792308][T11342] loop7: detected capacity change from 0 to 512
[  825.809533][T11338] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  825.845434][T11338] udc usbip-vudc.0: failed to start g1: -19
[  825.874072][T11338] UDC core: g1: couldn't find an available UDC or it's busy
[  825.886498][T11346] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  825.920607][T11342] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #2: comm syz.7.1459: missing EA_INODE flag
[  825.943314][T11346] udc usbip-vudc.0: failed to start g1: -19
[  825.952682][T11346] UDC core: g1: couldn't find an available UDC or it's busy
[  825.974063][T11342] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1459: error while reading EA inode 2 err=-117
[  826.032454][T11342] EXT4-fs (loop7): 1 orphan inode deleted
[  826.038302][T11342] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  827.022377][ T7350] EXT4-fs (loop7): unmounting filesystem.
[  828.069882][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1472'.
[  829.062766][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1473'.
[  829.483010][T11375] loop7: detected capacity change from 0 to 32768
[  829.522926][T11375] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1471 (11375)
[  829.602931][T11375] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  829.636342][T11375] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  829.645888][T11375] BTRFS info (device loop7): using free space tree
[  829.776250][T11392] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  829.790706][T11392] udc usbip-vudc.0: failed to start g1: -19
[  829.797030][T11392] UDC core: g1: couldn't find an available UDC or it's busy
[  830.093807][T11375] BTRFS info (device loop7): enabling ssd optimizations
[  830.393726][T11375] BTRFS info (device loop7): device stats zeroed by syz.7.1471 (11375)
[  830.623919][T11425] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1482'.
[  831.199611][ T7350] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  831.290208][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1485'.
[  831.439431][T11432] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  831.447034][T11432] udc usbip-vudc.0: failed to start g1: -19
[  831.513800][T11434] device bridge_slave_1 entered promiscuous mode
[  831.557673][T11432] UDC core: g1: couldn't find an available UDC or it's busy
[  832.538586][T11454] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  832.550609][T11454] udc usbip-vudc.0: failed to start g1: -19
[  832.615897][T11454] UDC core: g1: couldn't find an available UDC or it's busy
[  834.179404][T11475] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  834.186928][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1500'.
[  834.287103][T11475] udc usbip-vudc.0: failed to start g1: -19
[  834.370393][T11475] UDC core: g1: couldn't find an available UDC or it's busy
[  835.437846][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  835.446011][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  835.756375][T11495] loop7: detected capacity change from 0 to 512
[  835.857651][T11496] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  835.869233][T11495] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  835.902849][T11496] udc usbip-vudc.0: failed to start g1: -19
[  835.910656][T11496] UDC core: g1: couldn't find an available UDC or it's busy
[  835.914099][T11495] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  837.175871][T11519] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  837.252918][T11519] udc usbip-vudc.0: failed to start g1: -19
[  837.304185][T11519] UDC core: g1: couldn't find an available UDC or it's busy
[  837.322350][T11526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1513'.
[  837.354661][ T7350] EXT4-fs (loop7): unmounting filesystem.
[  839.024893][T11549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'.
[  839.935908][T11557] loop7: detected capacity change from 0 to 256
[  839.958786][T11552] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  839.988237][T11557] exfat: Deprecated parameter 'namecase'
[  839.994490][T11552] udc usbip-vudc.0: failed to start g1: -19
[  840.001002][T11552] UDC core: g1: couldn't find an available UDC or it's busy
[  840.051146][T11557] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  840.417188][T11566] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  840.455062][T11566] udc usbip-vudc.0: failed to start g1: -19
[  840.500918][T11566] UDC core: g1: couldn't find an available UDC or it's busy
[  841.803430][T11578] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  841.839333][T11578] udc usbip-vudc.0: failed to start g1: -19
[  841.860065][T11578] UDC core: g1: couldn't find an available UDC or it's busy
[  844.497537][T11594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  844.642045][T11598] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1540'.
[  844.770965][T11603] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1543'.
[  848.505265][T11651] loop5: detected capacity change from 0 to 1024
[  848.672132][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1559'.
[  848.929038][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1563'.
[  851.952238][  T955] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  852.244377][  T955] usb 8-1: Using ep0 maxpacket: 8
[  852.294927][  T955] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  852.308188][  T955] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  852.322749][  T955] usb 8-1: config 0 interface 0 has no altsetting 0
[  852.329584][  T955] usb 8-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  852.818914][  T955] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.841909][  T955] usb 8-1: config 0 descriptor??
[  853.098281][T11686] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  853.105748][T11686] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  853.138443][T11686] vhci_hcd vhci_hcd.0: Device attached
[  853.233414][T11700] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  853.382054][T11200] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  853.437321][  T955] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0
[  853.444359][  T955] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0
[  853.451589][  T955] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0
[  853.459122][  T955] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0
[  853.466129][  T955] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0
[  853.473221][  T955] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0
[  853.480277][  T955] lenovo 0003:17EF:6009.0005: unknown main item tag 0x0
[  853.571329][ T4345] vhci_hcd: vhci_device speed not set
[  853.589285][  T955] lenovo 0003:17EF:6009.0005: hidraw0: USB HID v0.05 Device [HID 17ef:6009] on usb-dummy_hcd.7-1/input0
[  853.871014][T11200] usb 3-1: config 0 has no interfaces?
[  853.906993][T11200] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  854.032090][ T4345] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  854.054788][  T955] usb 8-1: USB disconnect, device number 8
[  854.163053][T11200] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.192968][T11200] usb 3-1: config 0 descriptor??
[  854.807722][T11688] usbip_core: unknown command
[  854.829477][T11688] vhci_hcd: unknown pdu 0
[  854.880016][T11200] usb 3-1: USB disconnect, device number 13
[  854.931266][T11688] usbip_core: unknown command
[  854.966987][ T4969] vhci_hcd: stop threads
[  854.972125][ T4969] vhci_hcd: release socket
[  854.981431][ T4969] vhci_hcd: disconnect device
[  855.053452][T11710] fido_id[11710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  855.079113][T11712] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  855.212424][T11712] udc usbip-vudc.0: failed to start g1: -19
[  855.543910][T11712] UDC core: g1: couldn't find an available UDC or it's busy
[  856.462209][T11724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1581'.
[  858.192352][   T26] audit: type=1800 audit(1786864781.482:301): pid=11739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1588" name="iTerminal" dev="configfs" ino=58717 res=0 errno=0
[  858.302580][T11741] netlink: 'syz.3.1589': attribute type 62 has an invalid length.
[  859.599908][ T4345] vhci_hcd: vhci_device speed not set
[  861.067662][T11785] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1603'.
[  864.186344][T11816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1616'.
[  865.743771][T11839] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1620'.
[  866.844554][T11853] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1630'.
[  868.371873][   T26] audit: type=1800 audit(1786864790.871:302): pid=11871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1637" name="idProduct" dev="configfs" ino=58988 res=0 errno=0
[  869.090615][T11879] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1640'.
[  869.411650][T11881] loop5: detected capacity change from 0 to 164
[  869.500033][T11881] rock: directory entry would overflow storage
[  869.506278][T11881] rock: sig=0x5252, size=5, remaining=3
[  869.623224][T11889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1646'.
[  869.865159][T11898] netlink: 'syz.3.1650': attribute type 49 has an invalid length.
[  869.984755][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1649'.
[  870.820679][T11914] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  871.196879][T11914] udc usbip-vudc.0: failed to start g1: -19
[  871.350289][T11914] UDC core: g1: couldn't find an available UDC or it's busy
[  873.082335][T11949] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1664'.
[  873.271134][   T22] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  873.535476][   T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  873.617111][   T22] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  873.701533][   T22] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  873.743954][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  873.773165][   T22] usb 6-1: SerialNumber: syz
[  874.104310][   T22] usb 6-1: 0:2 : does not exist
[  874.161765][   T22] usb 6-1: unit 120 not found!
[  874.221778][   T22] usb 6-1: unit 48 not found!
[  874.271644][   T22] usb 6-1: unit 52 not found!
[  874.562915][   T22] usb 6-1: USB disconnect, device number 8
[  874.691902][T11956] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  874.723669][T11956] udc usbip-vudc.0: failed to start g1: -19
[  874.730027][T11956] UDC core: g1: couldn't find an available UDC or it's busy
[  874.782168][T11958] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  874.813365][T11958] udc usbip-vudc.0: failed to start g1: -19
[  874.828920][T11958] UDC core: g1: couldn't find an available UDC or it's busy
[  874.974462][ T7806] udevd[7806]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  875.042898][T11968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'.
[  875.063373][T11969] loop7: detected capacity change from 0 to 256
[  875.100987][T11969] exfat: Deprecated parameter 'utf8'
[  875.130186][T11969] exfat: Deprecated parameter 'namecase'
[  875.145889][T11969] exfat: Deprecated parameter 'namecase'
[  875.162832][T11969] exfat: Deprecated parameter 'utf8'
[  875.222838][T11969] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  875.653044][T11985] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  875.661195][T11985] udc usbip-vudc.0: failed to start g1: -19
[  875.668624][T11985] UDC core: g1: couldn't find an available UDC or it's busy
[  875.774384][T11988] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1682'.
[  876.369605][T11990] loop7: detected capacity change from 0 to 512
[  876.460870][T11990] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  876.540161][T11990] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  876.550896][T11993] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  876.552831][T11993] udc usbip-vudc.0: failed to start g1: -19
[  876.565365][T11993] UDC core: g1: couldn't find an available UDC or it's busy
[  876.704713][T11990] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.1685: Invalid block bitmap block 0 in block_group 0
[  876.774435][T11990] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  876.796356][T11990] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.1685: attempt to clear invalid blocks 983261 len 1
[  876.849734][T11990] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.1685: Invalid inode table block 0 in block_group 0
[  876.877611][T11990] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  876.903897][T12009] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  876.915059][T12009] udc usbip-vudc.0: failed to start g1: -19
[  876.933312][T11990] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem
[  876.943521][T12009] UDC core: g1: couldn't find an available UDC or it's busy
[  876.973949][T11990] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.1685: Invalid inode table block 0 in block_group 0
[  877.002196][T11990] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  877.013082][T11990] EXT4-fs error (device loop7): ext4_truncate:4325: inode #11: comm syz.7.1685: mark_inode_dirty error
[  877.025693][T11990] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem
[  877.035936][T11990] EXT4-fs error (device loop7): __ext4_get_inode_loc:4520: comm syz.7.1685: Invalid inode table block 0 in block_group 0
[  877.049890][T11990] EXT4-fs (loop7): 1 truncate cleaned up
[  877.055631][T11990] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  877.114735][T11439] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  877.372717][T11439] usb 6-1: unable to get BOS descriptor or descriptor too short
[  877.426674][T11439] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  877.632008][T11439] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  877.780727][T11439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.953208][T11439] usb 6-1: Product: syz
[  877.957457][T11439] usb 6-1: Manufacturer: syz
[  877.965578][T11439] usb 6-1: SerialNumber: syz
[  878.086491][T12020] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  878.156775][T12020] udc usbip-vudc.0: failed to start g1: -19
[  878.163124][T12020] UDC core: g1: couldn't find an available UDC or it's busy
[  878.177591][ T7350] EXT4-fs (loop7): unmounting filesystem.
[  878.234781][T11439] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  878.284983][T11200] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  878.496542][T11439] usb 6-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  878.644060][T11439] usb 6-1: found format II with max.bitrate = 4, frame size=7372
[  878.931394][T12025] loop7: detected capacity change from 0 to 512
[  878.959190][T12025] EXT4-fs (loop7): Test dummy encryption mode enabled
[  879.022521][T11439] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  879.045677][T12025] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.1698: inode has both inline data and extents flags
[  879.066289][T11200] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  879.082720][T11439] usb 6-1: USB disconnect, device number 9
[  879.108301][T11200] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  879.139840][T12025] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1698: couldn't read orphan inode 15 (err -117)
[  879.159071][T12025] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  879.191541][T11200] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  879.232162][T11200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  879.254689][T11200] usb 4-1: SerialNumber: syz
[  879.283961][ T7350] EXT4-fs (loop7): unmounting filesystem.
[  879.392548][ T7806] udevd[7806]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  879.684970][T11200] usb 4-1: 0:2 : does not exist
[  879.689973][T11200] usb 4-1: unit 120 not found!
[  879.703189][T11200] usb 4-1: unit 48 not found!
[  879.709105][T11200] usb 4-1: unit 52 not found!
[  879.795035][T12036] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1701'.
[  880.356462][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1702'.
[  880.503341][T12040] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  880.561977][T11200] usb 4-1: USB disconnect, device number 10
[  880.581449][T12040] udc usbip-vudc.0: failed to start g1: -19
[  880.587781][T12040] UDC core: g1: couldn't find an available UDC or it's busy
[  880.673902][   T26] audit: type=1800 audit(1786864802.236:303): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1705" name="UDC" dev="configfs" ino=59590 res=0 errno=0
[  880.711731][T12043] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind()
[  880.730774][T12043] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP
[  880.755265][T12043] udc dummy_udc.0: failed to start g1: -22
[  880.776510][T12043] configfs-gadget.g1: probe of gadget.0 failed with error -22
[  880.785578][T12043] UDC core: g1: couldn't find an available UDC or it's busy
[  880.874108][ T7806] udevd[7806]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  880.994263][T12047] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  881.024400][T12047] udc usbip-vudc.0: failed to start g1: -19
[  881.048373][T12047] UDC core: g1: couldn't find an available UDC or it's busy
[  884.580011][T12098] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1717'.
[  884.843049][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'.
[  884.876999][T12092] loop5: detected capacity change from 0 to 2048
[  884.939068][T12092] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  885.032638][T12104] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  885.800250][T12115] netlink: 'syz.3.1724': attribute type 5 has an invalid length.
[  887.622033][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1729'.
[  888.297682][T12121] loop5: detected capacity change from 0 to 32768
[  888.755251][T12121] ERROR: (device loop5): dbDiscardAG: -EIO
[  888.755251][T12121] 
[  888.817669][T12121] ERROR: (device loop5): remounting filesystem as read-only
[  888.872470][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1732'.
[  888.949247][T12141] program syz.3.1733 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  888.973708][T12125] loop7: detected capacity change from 0 to 32768
[  889.035996][T12125] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1726 (12125)
[  889.074116][T12125] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  889.134438][T12125] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  889.192027][T12125] BTRFS info (device loop7): use zlib compression, level 3
[  889.246592][T12125] BTRFS info (device loop7): using free space tree
[  889.350789][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1735'.
[  889.697971][T12169] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1734'.
[  891.856140][T12191] syz.5.1743[12191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  891.856250][T12191] syz.5.1743[12191] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  891.929235][T12125] BTRFS error (device loop7): open_ctree failed: -22
[  894.107140][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1749'.
[  898.297776][T12261] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1763'.
[  902.007230][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  902.014042][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  904.651516][T12332] bridge0: port 4(syz_tun) entered blocking state
[  904.658592][T12332] bridge0: port 4(syz_tun) entered disabled state
[  906.119941][T12354] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1799'.
[  906.329036][T12356] loop5: detected capacity change from 0 to 4096
[  906.372657][T12356] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  906.524017][T12356] ntfs3: loop5: Failed to load $Extend.
[  909.578082][ T4317] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  909.783711][ T4317] usb 8-1: Using ep0 maxpacket: 8
[  909.790842][ T4317] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  909.813161][ T4317] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  910.015452][ T4317] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  910.025798][ T4317] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  910.039144][ T4317] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  910.048557][ T4317] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.183782][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'.
[  910.286033][ T4317] usb 8-1: GET_CAPABILITIES returned 0
[  910.291615][ T4317] usbtmc 8-1:16.0: can't read capabilities
[  910.421495][T12400] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  910.456271][T12400] udc usbip-vudc.0: failed to start g1: -19
[  910.490588][T12400] UDC core: g1: couldn't find an available UDC or it's busy
[  910.558386][    C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  910.579051][T12378] usbtmc 8-1:16.0: Unable to send data, error -71
[  910.602163][ T4317] usb 8-1: USB disconnect, device number 9
[  910.657439][T12396] loop5: detected capacity change from 0 to 32768
[  910.801216][T12396] XFS (loop5): Mounting V5 Filesystem
[  910.985146][T12396] XFS (loop5): Ending clean mount
[  911.963635][ T4521] XFS (loop5): Unmounting Filesystem
[  913.806704][T12443] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  913.997432][T12192] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  914.214074][T12192] usb 8-1: Using ep0 maxpacket: 16
[  914.224572][T12192] usb 8-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  914.245365][T12192] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.253837][T12192] usb 8-1: Product: syz
[  914.264507][T12192] usb 8-1: Manufacturer: syz
[  914.275437][T12192] usb 8-1: SerialNumber: syz
[  914.298987][T12192] usb 8-1: config 0 descriptor??
[  914.336849][T12192] gspca_main: spca508-2.14.0 probing 041e:4018
[  915.713679][T12192] gspca_spca508: reg_read err -110
[  915.730389][T12192] gspca_spca508: reg_read err -32
[  915.954257][T12192] gspca_spca508: reg_read err -71
[  915.965388][T12192] gspca_spca508: reg_read err -71
[  916.109594][T12192] gspca_spca508: reg write: error -71
[  916.115099][T12192] spca508: probe of 8-1:0.0 failed with error -71
[  916.184851][T12192] usb 8-1: USB disconnect, device number 10
[  916.401961][ T4320] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  916.610073][ T4320] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  916.629614][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.664928][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1841'.
[  916.695508][ T4320] usb 6-1: config 0 descriptor??
[  916.713240][ T4320] cp210x 6-1:0.0: cp210x converter detected
[  917.147798][ T4320] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  917.379222][ T4320] cp210x 6-1:0.0: failed to get vendor val 0x370c size 15: -71
[  917.395356][ T4320] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  917.504746][ T4320] usb 6-1: cp210x converter now attached to ttyUSB0
[  917.527734][ T4320] usb 6-1: USB disconnect, device number 10
[  917.615516][ T4320] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  917.648978][ T4320] cp210x 6-1:0.0: device disconnected
[  918.665870][ T4320] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  918.881395][ T4320] usb 8-1: Using ep0 maxpacket: 8
[  918.891017][ T4320] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  918.909343][ T4320] usb 8-1: config 0 has no interface number 0
[  918.922930][ T4320] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  918.946353][ T4320] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  918.966893][ T4320] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.999262][ T4320] usb 8-1: config 0 descriptor??
[  919.040350][ T4320] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  919.456780][ T4320] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  919.675451][ T4320] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  919.696246][ T4320] usb 4-1: config 0 interface 0 has no altsetting 0
[  919.733517][ T4320] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  919.754085][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  919.773203][ T4320] usb 4-1: Product: syz
[  919.781230][ T4320] usb 4-1: Manufacturer: syz
[  919.788649][ T4320] usb 4-1: SerialNumber: syz
[  919.801098][ T4320] usb 4-1: config 0 descriptor??
[  919.839177][ T4320] usb 4-1: selecting invalid altsetting 0
[  919.897298][T12540] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  919.930013][T12540] udc usbip-vudc.0: failed to start g1: -19
[  919.972676][T12540] UDC core: g1: couldn't find an available UDC or it's busy
[  920.135229][ T4320] usb 4-1: USB disconnect, device number 11
[  920.356799][   T22] usb 8-1: USB disconnect, device number 11
[  920.381304][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1864'.
[  920.541187][T12554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'.
[  921.595274][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1865'.
[  921.686897][T12568] loop7: detected capacity change from 0 to 4096
[  921.709626][T12192] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  921.743494][T12568] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512)
[  921.833344][T12568] ntfs3: loop7: Failed to load $Extend.
[  921.948051][T12192] usb 4-1: Using ep0 maxpacket: 8
[  921.957034][T12192] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  922.002176][T12192] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  922.012326][T12192] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  922.055596][T12192] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  922.132040][T12192] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  922.141184][T12192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.406667][T12192] usb 4-1: GET_CAPABILITIES returned 0
[  922.412248][T12192] usbtmc 4-1:16.0: can't read capabilities
[  923.326609][T12192] usb 4-1: USB disconnect, device number 12
[  923.554150][T12584] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  923.591770][T12584] udc usbip-vudc.0: failed to start g1: -19
[  923.618557][T12584] UDC core: g1: couldn't find an available UDC or it's busy
[  923.908689][T12194] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  924.405887][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1882'.
[  924.991990][T12194] usb 8-1: Using ep0 maxpacket: 32
[  925.001392][T12194] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  925.010842][T12194] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.021546][T12194] usb 8-1: config 0 descriptor??
[  925.132725][  T955] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  925.251369][T12194] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  925.265154][T12194] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  925.273629][ T4287] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  925.276983][T12194] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  925.289849][T12194] usb 8-1: media controller created
[  925.308140][T12194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  925.338384][  T955] usb 4-1: Using ep0 maxpacket: 8
[  925.352917][  T955] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  925.362273][  T955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.370316][  T955] usb 4-1: Product: syz
[  925.375168][  T955] usb 4-1: Manufacturer: syz
[  925.379804][  T955] usb 4-1: SerialNumber: syz
[  925.387146][  T955] usb 4-1: config 0 descriptor??
[  925.397373][  T955] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  925.405538][T11444] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  925.413307][  T955] pctv452e: pctv452e_power_ctrl: 1
[  925.413307][  T955] 
[  925.420849][  T955] usb 4-1: selecting invalid altsetting 3
[  925.427312][  T955] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  925.427312][  T955] 
[  925.438317][  T955] dvb-usb: bulk message failed: -22 (5/0)
[  925.450738][  T955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  925.462081][  T955] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  925.475907][  T955] usb 4-1: media controller created
[  925.482448][T12194] az6027: usb out operation failed. (-71)
[  925.487535][  T955] dvb-usb: bulk message failed: -22 (8/0)
[  925.497716][ T4287] usb 6-1: Using ep0 maxpacket: 8
[  925.499959][T12194] az6027: usb out operation failed. (-71)
[  925.510874][T12194] stb0899_attach: Driver disabled by Kconfig
[  925.515333][  T955] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  925.526164][ T4287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  925.538049][  T955] dvb-usb: MAC address reading failed.
[  925.544231][T12194] az6027: no front-end attached
[  925.544231][T12194] 
[  925.544983][ T4287] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  925.561264][T12194] az6027: usb out operation failed. (-71)
[  925.570893][T12194] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  925.579350][ T4287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.593255][T12194] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input20
[  925.604213][ T4287] usb 6-1: config 0 descriptor??
[  925.624419][T12194] dvb-usb: schedule remote query interval to 400 msecs.
[  925.628566][  T955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  925.641619][T12194] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  925.654289][T11444] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  925.672835][T11444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  925.692362][T12194] usb 8-1: USB disconnect, device number 12
[  925.733325][T11444] usb 3-1: config 0 descriptor??
[  925.754940][T11444] cp210x 3-1:0.0: cp210x converter detected
[  925.799615][T12194] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  925.877517][ T4287] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  925.888265][  T955] DVB: Unable to find symbol stb0899_attach()
[  925.894794][  T955] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  926.042393][  T955] rc_core: IR keymap rc-tt-1500 not found
[  926.048439][  T955] Registered IR keymap rc-empty
[  926.056972][  T955] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  926.070077][  T955] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input21
[  926.108810][  T955] dvb-usb: schedule remote query interval to 100 msecs.
[  926.113846][T12194] usb 6-1: USB disconnect, device number 11
[  926.149258][  T955] pctv452e: pctv452e_power_ctrl: 0
[  926.149258][  T955] 
[  926.172393][  T955] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  926.197534][T11444] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  926.226719][  T955] usb 4-1: USB disconnect, device number 13
[  926.253395][T11444] usb 3-1: cp210x converter now attached to ttyUSB0
[  926.368434][  T955] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  926.450218][T11444] usb 3-1: USB disconnect, device number 14
[  926.479852][T11444] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  926.901845][T11444] cp210x 3-1:0.0: device disconnected
[  927.646385][T12628] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  927.698590][T12628] udc usbip-vudc.0: failed to start g1: -19
[  927.716863][T12628] UDC core: g1: couldn't find an available UDC or it's busy
[  928.045746][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1896'.
[  928.959160][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1895'.
[  929.042329][T12645] loop5: detected capacity change from 0 to 4096
[  929.074408][T12645] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  929.154518][T12645] ntfs3: loop5: Inode r=19 is not in use!
[  929.197612][T12645] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  929.279859][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1893'.
[  931.296188][T12671] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  931.304288][T12671] udc usbip-vudc.0: failed to start g1: -19
[  931.312590][T12671] UDC core: g1: couldn't find an available UDC or it's busy
[  931.561553][T12677] af_packet: tpacket_rcv: packet too big, clamped from 116 to 4294967272. macoff=96
[  931.667915][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'.
[  931.685297][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'.
[  931.696636][ T4287] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  931.706346][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'.
[  931.750799][T12681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'.
[  931.919931][ T4287] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  931.937356][ T4287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  931.972374][ T4287] usb 4-1: config 0 descriptor??
[  931.998476][ T4287] cp210x 4-1:0.0: cp210x converter detected
[  932.022175][T12691] loop7: detected capacity change from 0 to 4096
[  932.050467][T12691] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  932.073702][T12691] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  932.103981][T12691] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  932.151356][T12691] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  932.198942][T12691] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  932.375462][T12691] ntfs: volume version 3.1.
[  932.562060][T12691] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  932.587132][ T4287] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  933.028706][T12691] ntfs: (device loop7): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  933.062744][ T4287] usb 4-1: cp210x converter now attached to ttyUSB0
[  933.207985][T12691] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  933.223094][T12691] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  933.244128][ T4287] usb 4-1: USB disconnect, device number 14
[  933.257572][T12691] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  933.270008][ T4287] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  933.292551][ T4287] cp210x 4-1:0.0: device disconnected
[  933.469383][T12710] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  933.484498][T12710] udc usbip-vudc.0: failed to start g1: -19
[  933.510996][T12710] UDC core: g1: couldn't find an available UDC or it's busy
[  933.548862][T12192] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  933.729061][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1924'.
[  933.787606][T12192] usb 6-1: Using ep0 maxpacket: 8
[  933.794966][T12192] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  933.855312][T12192] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  933.892266][T12192] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  933.926260][T12192] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  933.959830][T12192] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  933.991483][T12192] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  934.002063][T12727] using random self ethernet address
[  934.012952][T12727] using random host ethernet address
[  934.018640][T12192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.054196][T12192] usbtmc: probe of 6-1:16.0 failed with error -22
[  934.414582][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1925'.
[  934.531613][T12736] wlan0 speed is unknown, defaulting to 1000
[  936.287932][T12758] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  936.337492][T12758] udc usbip-vudc.0: failed to start g1: -19
[  936.344150][T12758] UDC core: g1: couldn't find an available UDC or it's busy
[  936.597367][T11439] usb 6-1: USB disconnect, device number 12
[  937.318437][ T4287] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  937.535069][ T4287] usb 6-1: Using ep0 maxpacket: 8
[  937.543107][ T4287] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  937.583616][ T4287] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  938.095227][ T4287] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.202440][ T4287] usb 6-1: Product: syz
[  938.515228][ T4287] usb 6-1: Manufacturer: syz
[  938.519912][ T4287] usb 6-1: SerialNumber: syz
[  938.575571][ T4287] usb 6-1: config 0 descriptor??
[  938.623633][ T4287] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  938.667836][ T4287] usb 6-1: setting power ON
[  938.691821][ T4287] dvb-usb: bulk message failed: -22 (2/0)
[  938.756239][ T4287] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  938.792281][ T4287] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  938.817189][T12774] dvb-usb: bulk message failed: -22 (3/0)
[  938.837174][T12774] dvb-usb: bulk message failed: -22 (5/0)
[  938.843088][ T4287] usb 6-1: media controller created
[  938.861541][T12774] dvb-usb: bulk message failed: -22 (3/0)
[  938.907604][ T4287] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  938.959774][ T4287] usb 6-1: selecting invalid altsetting 6
[  938.974816][ T4287] usb 6-1: digital interface selection failed (-22)
[  938.985756][T12802] loop7: detected capacity change from 0 to 128
[  939.003294][ T4287] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  939.051983][ T4287] usb 6-1: setting power OFF
[  939.093062][ T4287] dvb-usb: bulk message failed: -22 (2/0)
[  939.123540][ T4287] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  939.144521][ T4287] (NULL device *): no alternate interface
[  939.225137][ T4287] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  939.274026][ T4287] usb 6-1: USB disconnect, device number 13
[  939.470885][ T7705] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  939.569851][T12814] loop5: detected capacity change from 0 to 512
[  939.662406][T12814] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1956: inode has both inline data and extents flags
[  939.680911][T12814] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1956: couldn't read orphan inode 15 (err -117)
[  939.690774][ T7705] usb 3-1: Using ep0 maxpacket: 8
[  939.702687][ T7705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  939.714007][ T7705] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  939.724314][T12814] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  939.733418][ T7705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  939.741571][T12194] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  939.765286][ T7705] usb 3-1: config 0 descriptor??
[  939.780457][T12814] fscrypt (loop5, inode 18): Unsupported encryption flags (0xae)
[  939.850574][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  939.950686][T12194] usb 4-1: Using ep0 maxpacket: 32
[  939.959331][T12194] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  940.003829][ T7705] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  940.014371][T12194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.052126][T12194] usb 4-1: config 0 descriptor??
[  940.267812][ T7705] usb 3-1: USB disconnect, device number 15
[  940.283104][T12194] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  940.304097][T12194] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  940.325231][T12194] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  940.355428][T12194] usb 4-1: media controller created
[  940.408835][T12194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  940.509291][T12194] az6027: usb out operation failed. (-71)
[  940.530237][T12194] az6027: usb out operation failed. (-71)
[  940.537105][T12194] stb0899_attach: Driver disabled by Kconfig
[  940.547377][T12194] az6027: no front-end attached
[  940.547377][T12194] 
[  940.565882][T12194] az6027: usb out operation failed. (-71)
[  940.576516][T12194] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  940.600254][T12194] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input22
[  940.613157][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1957'.
[  940.654807][T12194] dvb-usb: schedule remote query interval to 400 msecs.
[  940.672937][T12194] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  940.711408][T12194] usb 4-1: USB disconnect, device number 15
[  940.774897][T12194] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  942.479413][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'.
[  943.979296][T12192] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  944.891684][T12192] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  944.911671][T12192] usb 3-1: config 0 interface 0 has no altsetting 0
[  944.925429][T12192] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  944.954867][T12192] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  944.971490][T12192] usb 3-1: Product: syz
[  944.980907][T12192] usb 3-1: Manufacturer: syz
[  944.985589][T12192] usb 3-1: SerialNumber: syz
[  945.013102][T12192] usb 3-1: config 0 descriptor??
[  945.035092][T12192] usb 3-1: selecting invalid altsetting 0
[  945.214904][T11439] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  945.254841][ T4287] usb 3-1: USB disconnect, device number 16
[  945.419080][T11439] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  945.442205][T11439] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.450396][T11439] usb 6-1: Product: syz
[  945.462698][T11439] usb 6-1: Manufacturer: syz
[  945.467819][T11439] usb 6-1: SerialNumber: syz
[  945.741211][T11439] rtl8150 6-1:1.0: couldn't reset the device
[  945.754668][T11439] rtl8150: probe of 6-1:1.0 failed with error -5
[  945.789227][T11439] usb 6-1: USB disconnect, device number 14
[  946.877253][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'.
[  947.253104][T12922] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1992'.
[  949.098984][T12970] loop5: detected capacity change from 0 to 512
[  949.114611][T12970] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  949.173550][T12970] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  949.207048][T12970] EXT4-fs (loop5): 1 truncate cleaned up
[  949.220948][T12970] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  949.241918][   T26] audit: type=1800 audit(1786864865.530:304): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2011" name="file2" dev="loop5" ino=16 res=0 errno=0
[  949.265856][T11439] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  949.352309][ T4521] EXT4-fs (loop5): unmounting filesystem.
[  949.471703][T11439] usb 3-1: Using ep0 maxpacket: 16
[  949.478856][T11439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  949.535010][T11439] usb 3-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  949.571600][T11439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.601161][T11439] usb 3-1: config 0 descriptor??
[  949.615879][T12966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  949.915881][ T4320] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  950.091526][T11439] apple 0003:05AC:025B.0006: unknown main item tag 0x0
[  950.098495][T11439] apple 0003:05AC:025B.0006: unknown main item tag 0x0
[  950.117196][T11439] apple 0003:05AC:025B.0006: unknown main item tag 0x0
[  950.128369][T11439] apple 0003:05AC:025B.0006: unknown main item tag 0x0
[  950.140455][ T4320] usb 6-1: config 0 has no interfaces?
[  950.149391][ T4320] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  950.159429][T11439] apple 0003:05AC:025B.0006: unknown main item tag 0x0
[  950.173574][T11439] apple 0003:05AC:025B.0006: unknown main item tag 0x0
[  950.180911][ T4320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.197146][T11439] apple 0003:05AC:025B.0006: unknown main item tag 0x0
[  950.209936][ T4320] usb 6-1: config 0 descriptor??
[  950.215071][T11439] apple 0003:05AC:025B.0006: unknown main item tag 0x0
[  950.224464][T11439] apple 0003:05AC:025B.0006: unknown main item tag 0x0
[  950.240784][T11439] apple 0003:05AC:025B.0006: unexpected long global item
[  950.266268][T11439] apple 0003:05AC:025B.0006: parse failed
[  950.500275][ T7705] usb 6-1: USB disconnect, device number 15
[  950.821375][T11439] apple: probe of 0003:05AC:025B.0006 failed with error -22
[  950.838826][T11439] usb 3-1: USB disconnect, device number 17
[  952.047388][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2018'.
[  952.867964][T13034] netlink: 'syz.2.2030': attribute type 10 has an invalid length.
[  952.982723][T13034] team0: Port device dummy0 added
[  953.214088][T13041] device ip6gre1 entered promiscuous mode
[  955.272749][T13068] loop7: detected capacity change from 0 to 1024
[  956.925961][T13096] netlink: 'syz.2.2050': attribute type 29 has an invalid length.
[  956.940410][T13096] netlink: 'syz.2.2050': attribute type 29 has an invalid length.
[  956.969857][T13094] netlink: 'syz.2.2050': attribute type 29 has an invalid length.
[  957.402136][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2055'.
[  957.491623][T13112] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  957.537501][T13112] udc usbip-vudc.0: failed to start g1: -19
[  957.544921][T13112] UDC core: g1: couldn't find an available UDC or it's busy
[  957.643435][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2048'.
[  957.771938][T13125] Mass Storage Function, version: 2009/09/11
[  957.794354][T13125] LUN: removable file: (no medium)
[  957.813040][T13125] LUN: removable file: (no medium)
[  958.078234][T13135] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  958.123991][T13135] udc usbip-vudc.0: failed to start g1: -19
[  958.148206][T13135] UDC core: g1: couldn't find an available UDC or it's busy
[  958.546975][T13145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2068'.
[  958.779374][T13152] Mass Storage Function, version: 2009/09/11
[  958.792508][T13152] LUN: removable file: (no medium)
[  958.811359][T13150] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  958.818946][T13150] udc usbip-vudc.0: failed to start g1: -19
[  958.890701][T13150] UDC core: g1: couldn't find an available UDC or it's busy
[  958.980717][T13137] loop5: detected capacity change from 0 to 32768
[  959.036404][T13137] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2064 (13137)
[  959.146554][T13137] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  959.171972][T13137] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  959.195124][T13137] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  959.231605][T13158] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  959.240873][T13158] udc usbip-vudc.0: failed to start g1: -19
[  959.251283][T13137] BTRFS info (device loop5): use zstd compression, level 3
[  959.272369][T13158] UDC core: g1: couldn't find an available UDC or it's busy
[  959.280266][T13137] BTRFS info (device loop5): use no compression
[  959.298384][T13137] BTRFS info (device loop5): using free space tree
[  959.681034][T13137] BTRFS info (device loop5): enabling ssd optimizations
[  959.971909][T13159] loop7: detected capacity change from 0 to 32768
[  960.059160][T13159] BTRFS warning: duplicate device /dev/loop7 devid 1 generation 8 scanned by syz.7.2074 (13159)
[  960.181083][ T4521] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  960.380138][T13199] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  960.402650][T13199] udc usbip-vudc.0: failed to start g1: -19
[  960.443533][T13199] UDC core: g1: couldn't find an available UDC or it's busy
[  960.485870][T13201] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  960.518838][T13201] udc usbip-vudc.0: failed to start g1: -19
[  960.552964][T13201] UDC core: g1: couldn't find an available UDC or it's busy
[  960.584082][ T9940] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by udevd (9940)
[  962.540304][ T8485] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  962.548453][ T8485] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  962.558180][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2089'.
[  962.576885][ T8485] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  962.911936][T13244] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  962.972860][T13244] udc usbip-vudc.0: failed to start g1: -19
[  963.003414][T13244] UDC core: g1: couldn't find an available UDC or it's busy
[  963.028570][T13242] fido_id[13242]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  963.298991][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2093'.
[  964.807618][T13280] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  964.870127][T13280] ==================================================================
[  964.878282][T13280] BUG: KASAN: double-free in __kmem_cache_free+0xb6/0x200
[  964.885544][T13280] Free of addr ffff888026e9f2a0 by task syz.2.2112/13280
[  964.892603][T13280] 
[  964.894989][T13280] CPU: 0 PID: 13280 Comm: syz.2.2112 Not tainted syzkaller #0
[  964.902490][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  964.912592][T13280] Call Trace:
[  964.915980][T13280]  <TASK>
[  964.919010][T13280]  dump_stack_lvl+0x188/0x24e
[  964.923826][T13280]  ? __lock_acquire+0x7c40/0x7c40
[  964.928927][T13280]  ? show_regs_print_info+0x12/0x12
[  964.934181][T13280]  ? load_image+0x410/0x410
[  964.938761][T13280]  ? __virt_addr_valid+0x467/0x540
[  964.943953][T13280]  print_report+0xa8/0x210
[  964.948428][T13280]  ? __kmem_cache_free+0xb6/0x200
[  964.953505][T13280]  kasan_report_invalid_free+0xdd/0x100
[  964.959109][T13280]  ? __kmem_cache_free+0xb6/0x200
[  964.964182][T13280]  ? __kmem_cache_free+0xb6/0x200
[  964.969253][T13280]  ____kasan_slab_free+0x149/0x1f0
[  964.974415][T13280]  slab_free_freelist_hook+0x133/0x1b0
[  964.979922][T13280]  ? rcu_is_watching+0x11/0xa0
[  964.984866][T13280]  ? ncm_unbind+0x7e/0x330
[  964.989424][T13280]  __kmem_cache_free+0xb6/0x200
[  964.994360][T13280]  ncm_unbind+0x7e/0x330
[  964.998664][T13280]  purge_configs_funcs+0x241/0x3a0
[  965.003919][T13280]  configfs_composite_bind+0xc78/0xf60
[  965.009446][T13280]  ? os_desc_qw_sign_store+0x100/0x100
[  965.014954][T13280]  gadget_bind_driver+0x2af/0x760
[  965.020050][T13280]  ? gadget_match_driver+0x130/0x130
[  965.025386][T13280]  really_probe+0x24a/0xb40
[  965.030011][T13280]  ? pm_runtime_barrier+0x147/0x1c0
[  965.035306][T13280]  __driver_probe_device+0x1f5/0x390
[  965.040641][T13280]  driver_probe_device+0x4f/0x420
[  965.045722][T13280]  __driver_attach+0x43d/0x6c0
[  965.050527][T13280]  ? driver_attach+0x40/0x40
[  965.055189][T13280]  bus_for_each_dev+0x182/0x1f0
[  965.060107][T13280]  ? __lock_acquire+0x7c40/0x7c40
[  965.065189][T13280]  ? bus_remove_file+0xd0/0xd0
[  965.070001][T13280]  ? do_raw_spin_unlock+0x11d/0x230
[  965.075255][T13280]  bus_add_driver+0x324/0x5d0
[  965.079980][T13280]  driver_register+0x32d/0x430
[  965.084791][T13280]  usb_gadget_register_driver_owner+0xf5/0x260
[  965.091008][T13280]  gadget_dev_desc_UDC_store+0x1c3/0x2e0
[  965.096697][T13280]  configfs_write_iter+0x30b/0x400
[  965.101897][T13280]  ? gadget_dev_desc_UDC_show+0x80/0x80
[  965.107499][T13280]  vfs_write+0x482/0x9a0
[  965.111900][T13280]  ? file_end_write+0x250/0x250
[  965.116807][T13280]  ? __fget_files+0x3fc/0x460
[  965.121574][T13280]  ? __fdget_pos+0x2ae/0x360
[  965.126223][T13280]  ? ksys_write+0x70/0x260
[  965.130699][T13280]  ksys_write+0x14d/0x260
[  965.135080][T13280]  ? __ia32_sys_read+0x80/0x80
[  965.139915][T13280]  ? lockdep_hardirqs_on+0x94/0x140
[  965.145157][T13280]  do_syscall_64+0x4c/0xa0
[  965.149650][T13280]  ? clear_bhb_loop+0x60/0xb0
[  965.154471][T13280]  ? clear_bhb_loop+0x60/0xb0
[  965.159196][T13280]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.165139][T13280] RIP: 0033:0x7f150e19e019
[  965.169667][T13280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  965.189380][T13280] RSP: 002b:00007f150f058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  965.197924][T13280] RAX: ffffffffffffffda RBX: 00007f150e425fa0 RCX: 00007f150e19e019
[  965.205966][T13280] RDX: 000000000000000c RSI: 0000200000002100 RDI: 0000000000000003
[  965.213989][T13280] RBP: 00007f150e23500c R08: 0000000000000000 R09: 0000000000000000
[  965.222007][T13280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  965.230028][T13280] R13: 00007f150e426038 R14: 00007f150e425fa0 R15: 00007ffd7a485ee8
[  965.238084][T13280]  </TASK>
[  965.241142][T13280] 
[  965.243496][T13280] Allocated by task 13244:
[  965.248024][T13280]  kasan_set_track+0x4b/0x70
[  965.252664][T13280]  __kasan_kmalloc+0x8e/0xa0
[  965.257301][T13280]  ncm_bind+0x147/0xd90
[  965.261505][T13280]  usb_add_function+0x2d9/0x980
[  965.266387][T13280]  configfs_composite_bind+0xa02/0xf60
[  965.271905][T13280]  gadget_bind_driver+0x2af/0x760
[  965.276989][T13280]  really_probe+0x24a/0xb40
[  965.281540][T13280]  __driver_probe_device+0x1f5/0x390
[  965.286880][T13280]  driver_probe_device+0x4f/0x420
[  965.291948][T13280]  __driver_attach+0x43d/0x6c0
[  965.296763][T13280]  bus_for_each_dev+0x182/0x1f0
[  965.301657][T13280]  bus_add_driver+0x324/0x5d0
[  965.306405][T13280]  driver_register+0x32d/0x430
[  965.311208][T13280]  usb_gadget_register_driver_owner+0xf5/0x260
[  965.317419][T13280]  gadget_dev_desc_UDC_store+0x1c3/0x2e0
[  965.323104][T13280]  configfs_write_iter+0x30b/0x400
[  965.328272][T13280]  vfs_write+0x482/0x9a0
[  965.332567][T13280]  ksys_write+0x14d/0x260
[  965.336954][T13280]  do_syscall_64+0x4c/0xa0
[  965.341440][T13280]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.347407][T13280] 
[  965.349761][T13280] Freed by task 13244:
[  965.353867][T13280]  kasan_set_track+0x4b/0x70
[  965.358515][T13280]  kasan_save_free_info+0x27/0x40
[  965.363647][T13280]  ____kasan_slab_free+0x126/0x1f0
[  965.368809][T13280]  slab_free_freelist_hook+0x133/0x1b0
[  965.374316][T13280]  __kmem_cache_free+0xb6/0x200
[  965.379209][T13280]  ncm_unbind+0x7e/0x330
[  965.383504][T13280]  purge_configs_funcs+0x241/0x3a0
[  965.388660][T13280]  configfs_composite_bind+0xc78/0xf60
[  965.394158][T13280]  gadget_bind_driver+0x2af/0x760
[  965.399230][T13280]  really_probe+0x24a/0xb40
[  965.403769][T13280]  __driver_probe_device+0x1f5/0x390
[  965.409089][T13280]  driver_probe_device+0x4f/0x420
[  965.414242][T13280]  __driver_attach+0x43d/0x6c0
[  965.419062][T13280]  bus_for_each_dev+0x182/0x1f0
[  965.423977][T13280]  bus_add_driver+0x324/0x5d0
[  965.428691][T13280]  driver_register+0x32d/0x430
[  965.433499][T13280]  usb_gadget_register_driver_owner+0xf5/0x260
[  965.439697][T13280]  gadget_dev_desc_UDC_store+0x1c3/0x2e0
[  965.445370][T13280]  configfs_write_iter+0x30b/0x400
[  965.450526][T13280]  vfs_write+0x482/0x9a0
[  965.454806][T13280]  ksys_write+0x14d/0x260
[  965.459180][T13280]  do_syscall_64+0x4c/0xa0
[  965.463655][T13280]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.469596][T13280] 
[  965.471946][T13280] The buggy address belongs to the object at ffff888026e9f2a0
[  965.471946][T13280]  which belongs to the cache kmalloc-16 of size 16
[  965.485867][T13280] The buggy address is located 0 bytes inside of
[  965.485867][T13280]  16-byte region [ffff888026e9f2a0, ffff888026e9f2b0)
[  965.498949][T13280] 
[  965.501318][T13280] The buggy address belongs to the physical page:
[  965.507774][T13280] page:ffffea00009ba7c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888026e9fc40 pfn:0x26e9f
[  965.519303][T13280] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  965.526920][T13280] raw: 00fff00000000200 ffffea000066ca48 ffffea0000a12f48 ffff8880174413c0
[  965.535554][T13280] raw: ffff888026e9fc40 000000000080007c 00000001ffffffff 0000000000000000
[  965.544196][T13280] page dumped because: kasan: bad access detected
[  965.550640][T13280] page_owner tracks the page as allocated
[  965.556395][T13280] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 9, tgid 9 (kworker/u4:0), ts 10797485354, free_ts 10790544331
[  965.568496][T13283] loop7: detected capacity change from 0 to 512
[  965.574073][T13280]  post_alloc_hook+0x173/0x1a0
[  965.585219][T13280]  get_page_from_freelist+0x206b/0x2180
[  965.590822][T13280]  __alloc_pages+0x1ec/0x4f0
[  965.595468][T13280]  alloc_slab_page+0x4f/0x180
[  965.600199][T13280]  new_slab+0x87/0x2d0
[  965.604312][T13280]  ___slab_alloc+0xbc5/0x1240
[  965.609060][T13280]  __kmem_cache_alloc_node+0x126/0x270
[  965.614566][T13280]  __kmalloc_node+0xa2/0x240
[  965.619287][T13280]  blk_mq_alloc_and_init_hctx+0x4a1/0xd90
[  965.625106][T13280]  blk_mq_realloc_hw_ctxs+0x183/0x420
[  965.630534][T13280]  blk_mq_init_allocated_queue+0x57e/0x17f0
[  965.636468][T13280]  blk_mq_init_queue+0xa5/0x120
[  965.641372][T13280]  scsi_alloc_sdev+0x70d/0xae0
[  965.646249][T13280]  scsi_probe_and_add_lun+0x1a0/0x44b0
[  965.651816][T13280]  __scsi_scan_target+0x1d4/0x1050
[  965.656981][T13280]  scsi_scan_host_selected+0x374/0x6a0
[  965.662493][T13280] page last free stack trace:
[  965.667202][T13280]  free_unref_page_prepare+0x8e5/0x9e0
[  965.672710][T13280]  free_unref_page+0x2e/0x3f0
[  965.677437][T13280]  __mmdrop+0xb0/0x480
[  965.681625][T13280]  free_bprm+0x122/0x2d0
[  965.685984][T13280]  kernel_execve+0x3e5/0x980
[  965.690623][T13280]  call_usermodehelper_exec_async+0x207/0x350
[  965.693522][T13283] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  965.696812][T13280]  ret_from_fork+0x1f/0x30
[  965.696869][T13280] 
[  965.713473][T13280] Memory state around the buggy address:
[  965.719143][T13280]  ffff888026e9f180: 00 00 fc fc 00 06 fc fc 00 01 fc fc 00 00 fc fc
[  965.727240][T13280]  ffff888026e9f200: 00 00 fc fc fa fb fc fc 00 00 fc fc 00 00 fc fc
[  965.735337][T13280] >ffff888026e9f280: 00 01 fc fc fa fb fc fc fa fb fc fc 00 00 fc fc
[  965.743438][T13280]                                ^
[  965.748609][T13280]  ffff888026e9f300: fa fb fc fc 00 06 fc fc 00 00 fc fc 00 06 fc fc
[  965.756704][T13280]  ffff888026e9f380: 00 00 fc fc 00 00 fc fc 00 00 fc fc 00 07 fc fc
[  965.764798][T13280] ==================================================================
[  965.841926][T13280] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  965.849201][T13280] CPU: 1 PID: 13280 Comm: syz.2.2112 Not tainted syzkaller #0
[  965.856704][T13280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  965.866800][T13280] Call Trace:
[  965.870117][T13280]  <TASK>
[  965.873167][T13280]  dump_stack_lvl+0x188/0x24e
[  965.877902][T13280]  ? memcpy+0x3c/0x60
[  965.881927][T13280]  ? show_regs_print_info+0x12/0x12
[  965.887181][T13280]  ? load_image+0x410/0x410
[  965.891735][T13280]  panic+0x2d3/0x710
[  965.895676][T13280]  ? bpf_jit_dump+0xd0/0xd0
[  965.900232][T13280]  ? _raw_spin_unlock_irqrestore+0x10d/0x120
[  965.906253][T13280]  ? _raw_spin_unlock+0x40/0x40
[  965.911146][T13280]  ? print_memory_metadata+0x314/0x400
[  965.916649][T13280]  ? __kmem_cache_free+0xb6/0x200
[  965.921715][T13280]  check_panic_on_warn+0x80/0xa0
[  965.926694][T13280]  ? __kmem_cache_free+0xb6/0x200
[  965.931785][T13280]  end_report+0x66/0x110
[  965.936075][T13280]  kasan_report_invalid_free+0xe8/0x100
[  965.941672][T13280]  ? __kmem_cache_free+0xb6/0x200
[  965.946735][T13280]  ? __kmem_cache_free+0xb6/0x200
[  965.951796][T13280]  ____kasan_slab_free+0x149/0x1f0
[  965.956987][T13280]  slab_free_freelist_hook+0x133/0x1b0
[  965.962526][T13280]  ? rcu_is_watching+0x11/0xa0
[  965.967339][T13280]  ? ncm_unbind+0x7e/0x330
[  965.971804][T13280]  __kmem_cache_free+0xb6/0x200
[  965.976692][T13280]  ncm_unbind+0x7e/0x330
[  965.980978][T13280]  purge_configs_funcs+0x241/0x3a0
[  965.986143][T13280]  configfs_composite_bind+0xc78/0xf60
[  965.991650][T13280]  ? os_desc_qw_sign_store+0x100/0x100
[  965.997152][T13280]  gadget_bind_driver+0x2af/0x760
[  966.002223][T13280]  ? gadget_match_driver+0x130/0x130
[  966.007551][T13280]  really_probe+0x24a/0xb40
[  966.012088][T13280]  ? pm_runtime_barrier+0x147/0x1c0
[  966.017323][T13280]  __driver_probe_device+0x1f5/0x390
[  966.022645][T13280]  driver_probe_device+0x4f/0x420
[  966.027710][T13280]  __driver_attach+0x43d/0x6c0
[  966.032510][T13280]  ? driver_attach+0x40/0x40
[  966.037139][T13280]  bus_for_each_dev+0x182/0x1f0
[  966.042027][T13280]  ? __lock_acquire+0x7c40/0x7c40
[  966.047104][T13280]  ? bus_remove_file+0xd0/0xd0
[  966.051899][T13280]  ? do_raw_spin_unlock+0x11d/0x230
[  966.057132][T13280]  bus_add_driver+0x324/0x5d0
[  966.061850][T13280]  driver_register+0x32d/0x430
[  966.066656][T13280]  usb_gadget_register_driver_owner+0xf5/0x260
[  966.072855][T13280]  gadget_dev_desc_UDC_store+0x1c3/0x2e0
[  966.078533][T13280]  configfs_write_iter+0x30b/0x400
[  966.083685][T13280]  ? gadget_dev_desc_UDC_show+0x80/0x80
[  966.089269][T13280]  vfs_write+0x482/0x9a0
[  966.093556][T13280]  ? file_end_write+0x250/0x250
[  966.098446][T13280]  ? __fget_files+0x3fc/0x460
[  966.103173][T13280]  ? __fdget_pos+0x2ae/0x360
[  966.107808][T13280]  ? ksys_write+0x70/0x260
[  966.112270][T13280]  ksys_write+0x14d/0x260
[  966.116648][T13280]  ? __ia32_sys_read+0x80/0x80
[  966.121459][T13280]  ? lockdep_hardirqs_on+0x94/0x140
[  966.126693][T13280]  do_syscall_64+0x4c/0xa0
[  966.131154][T13280]  ? clear_bhb_loop+0x60/0xb0
[  966.135876][T13280]  ? clear_bhb_loop+0x60/0xb0
[  966.140594][T13280]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  966.146535][T13280] RIP: 0033:0x7f150e19e019
[  966.150982][T13280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.170641][T13280] RSP: 002b:00007f150f058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  966.179095][T13280] RAX: ffffffffffffffda RBX: 00007f150e425fa0 RCX: 00007f150e19e019
[  966.187106][T13280] RDX: 000000000000000c RSI: 0000200000002100 RDI: 0000000000000003
[  966.195107][T13280] RBP: 00007f150e23500c R08: 0000000000000000 R09: 0000000000000000
[  966.203134][T13280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  966.211159][T13280] R13: 00007f150e426038 R14: 00007f150e425fa0 R15: 00007ffd7a485ee8
[  966.219191][T13280]  </TASK>
[  966.222830][T13280] Kernel Offset: disabled
[  966.227256][T13280] Rebooting in 86400 seconds..