last executing test programs:

46.293733596s ago: executing program 4 (id=1102):
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$key(0xf, 0x3, 0x2)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2}, &(0x7f0000000140)=0x28)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
io_setup(0x9, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x22c5, r1, &(0x7f0000000200)="6e9c3b800d0c22f458d569de6fbb481c5a415594e328a456d49ae54e451e1870fe31f3ecf325ca36c0d7610445b982c67a8771803b0e35bc64f5a72b63d97570c3600ba0c79b8b274a8ca96474a80e88fde95039119fd399c2cff443059000fa5da7d93d4b77b5d8e64bbe1204aa", 0x6e, 0xc0, 0x0, 0x2}])
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001b40)=""/4029, &(0x7f00000001c0)=0xfbd)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2}}, 0x20)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpgrp(0x0)
sendmmsg$unix(r5, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002700)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x0)
syz_usb_connect(0x0, 0x352, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x6b, 0x75, 0xc, 0x40, 0xbb4, 0xa1b, 0x5c24, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x340, 0x1, 0xb8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x5, 0x29, 0x77, 0x62, 0x0, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0x8, 0x2, 0x20, [@generic={0xab, 0x21, "3eb51e21119765a84b82399970948fbc237b48907f2c9680759dd318b3e7b361e76c61556d3464ac450f553dcec1fc26caf1d4b11d86f45bfac5bd1656de5b90326c256cd1fc7495b057fa716a8bd09a16869294a10d6132480935763dd7619f350d274e143f77093e7e23babf5c78e1d49efd1af2d9df046d55abc01ff35d141b9b512c78cce2bbf1e12e086bced0eba97cd8bb724e0283b6b2220a7cc81fb146c2f1c2db1202d82a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x11, 0xfc, 0x92, [@generic={0xce, 0x24, "7207607856541d6c96eb9bd6f2e27b9d3d49514396ac196e7fe3dec3935dd7b821202a3d0d7e2adbe0de4190b25d397f8bd364ce07953a02a9d3e8acd8f8458f1b86d1088c744f0873145a600532675d10c3aa1401c6bc913839f9f639bc5557539028b33d57bd776c2cb0ff07913b26630dee4d7afc2b4dad92ae32b76b15a220c381476f5756b5b837bd2cd56eacc9769449b1d425b4db19ad8efb73085166a8d6878064074f0260baa245362f5e8dbdaa7451540c41f6c11bdd32af5128e9045d097c17cc42f7d0746a7d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0x20, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0xfffa}, @generic={0x101, 0xf, "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"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x6, 0x9, 0x5, [@generic={0xc, 0x24, "8b95b83c99754540d9f6"}, @generic={0x66, 0xe, "918267aaea6d2133658a30bc068cb0414e904592860d54a49277db5e5208be9f1a93d454c15634284b32764fb1ba29101e574ea963deb72823c1b8f13fd97adeb31015993a07609e2594d1a9166170cd56a4849771101f679d6c1ffbe2684047e9ad3452"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0xeb, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0xd8f}]}}]}}]}}]}}, 0x0)

43.326705641s ago: executing program 4 (id=1109):
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x200844, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x1, 0x251, &(0x7f0000001080)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)

42.100336159s ago: executing program 4 (id=1116):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x80, 0x20002e)
fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x0, 0x2002)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040))
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xffffff35, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0})
getpid()
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000380)={{0x4, 0x4}, 'port1\x00', 0x50, 0x1100c, 0x0, 0x0, 0xcf4, 0x1, 0x0, 0x0, 0x2, 0x6})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x8, 0x0, 0x9}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES16=r0, @ANYRES32=r5], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)

41.173128871s ago: executing program 4 (id=1119):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a0500000000000000d300e6d602000000000000000000000001"})
io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='i', 0x1}])

40.808273987s ago: executing program 4 (id=1120):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20)

40.412883488s ago: executing program 4 (id=1122):
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x20)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x0)
syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="3c82bf073aaebbbbbbbbbbbb86dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000001090780200000000"], 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000200)={0x1, 0x101})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xc3, &(0x7f0000000540)=""/195}]})
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5})
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb000000000000000000020000d0"]}, 0x111)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x20000)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000200)=[0x0]})

11.033020397s ago: executing program 3 (id=1205):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="1e8292", 0xfff6}], 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

10.807753652s ago: executing program 1 (id=1208):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0x0)
syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="3c82bf073aaebbbbbbbbbbbb86dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000001090780200000000"], 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000200)={0x1, 0x101})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xc3, &(0x7f0000000540)=""/195}]})
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb000000000000000000020000d0"]}, 0x111)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000200)=[0x0]})

8.952119706s ago: executing program 0 (id=1209):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000069111200000000008510000002000000850000000500000095000000000000009500a50500000000a1521c8c818a4f42204ddd2a1763059335b3f9c2188b5aa6aedbf9297a97dfaa154ec665f9cad5153a9ad1"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x0, @remote, 0x0, 0x200000001, 'ovf\x00', 0x0, 0x0, 0x29}, 0x2c)
mkdirat(0xffffffffffffff9c, 0x0, 0xc1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800000000000008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
recvfrom$inet(r2, &(0x7f0000000180)=""/85, 0x55, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

8.943725527s ago: executing program 1 (id=1210):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6)
poll(&(0x7f0000000000)=[{}], 0x1, 0xf49)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x17, &(0x7f0000000500)=@ringbuf={{}, {}, {}, [@printk={@lu}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/238}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000240), 0x4)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000980)={0x0, 0xffffffff, 0x95})

8.943318578s ago: executing program 3 (id=1211):
open(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x0, 0x4, 0x2, 0x0, 0x1400}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400", @ANYRES32], 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
rt_sigqueueinfo(0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r2, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r2)

5.851302342s ago: executing program 0 (id=1212):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x164, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x124, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x94, 0x6, [@m_bpf={0x50, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x25, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b"}, {0xc}, {0xc}}}, @m_ctinfo={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x164}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

5.842136814s ago: executing program 1 (id=1213):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a053103000000000001090224000100000000090400000103001c0009210000000122070009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x7, {0x7, 0x0, "009c16d900"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

5.796784451s ago: executing program 2 (id=1214):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$rxrpc(0x21, 0x2, 0xa)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0)
sendfile(r5, r4, 0x0, 0x100000002)

5.786923622s ago: executing program 0 (id=1215):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0xd, 0x1, 0x0, 0x0, 0x0)

5.726111372s ago: executing program 0 (id=1216):
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$key(0xf, 0x3, 0x2)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2}, &(0x7f0000000140)=0x28)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
io_setup(0x9, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x22c5, r1, &(0x7f0000000200)="6e9c3b800d0c22f458d569de6fbb481c5a415594e328a456d49ae54e451e1870fe31f3ecf325ca36c0d7610445b982c67a8771803b0e35bc64f5a72b63d97570c3600ba0c79b8b274a8ca96474a80e88fde95039119fd399c2cff443059000fa5da7d93d4b77b5d8e64bbe1204aa", 0x6e, 0xc0, 0x0, 0x2}])
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001b40)=""/4029, &(0x7f00000001c0)=0xfbd)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2}}, 0x20)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpgrp(0x0)
sendmmsg$unix(r5, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002700)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x0)
syz_usb_connect(0x0, 0x352, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x6b, 0x75, 0xc, 0x40, 0xbb4, 0xa1b, 0x5c24, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x340, 0x1, 0xb8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x5, 0x29, 0x77, 0x62, 0x0, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0x8, 0x2, 0x20, [@generic={0xab, 0x21, "3eb51e21119765a84b82399970948fbc237b48907f2c9680759dd318b3e7b361e76c61556d3464ac450f553dcec1fc26caf1d4b11d86f45bfac5bd1656de5b90326c256cd1fc7495b057fa716a8bd09a16869294a10d6132480935763dd7619f350d274e143f77093e7e23babf5c78e1d49efd1af2d9df046d55abc01ff35d141b9b512c78cce2bbf1e12e086bced0eba97cd8bb724e0283b6b2220a7cc81fb146c2f1c2db1202d82a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x11, 0xfc, 0x92, [@generic={0xce, 0x24, "7207607856541d6c96eb9bd6f2e27b9d3d49514396ac196e7fe3dec3935dd7b821202a3d0d7e2adbe0de4190b25d397f8bd364ce07953a02a9d3e8acd8f8458f1b86d1088c744f0873145a600532675d10c3aa1401c6bc913839f9f639bc5557539028b33d57bd776c2cb0ff07913b26630dee4d7afc2b4dad92ae32b76b15a220c381476f5756b5b837bd2cd56eacc9769449b1d425b4db19ad8efb73085166a8d6878064074f0260baa245362f5e8dbdaa7451540c41f6c11bdd32af5128e9045d097c17cc42f7d0746a7d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0x20, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0xfffa}, @generic={0x101, 0xf, "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"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x6, 0x9, 0x5, [@generic={0xc, 0x24, "8b95b83c99754540d9f6"}, @generic={0x66, 0xe, "918267aaea6d2133658a30bc068cb0414e904592860d54a49277db5e5208be9f1a93d454c15634284b32764fb1ba29101e574ea963deb72823c1b8f13fd97adeb31015993a07609e2594d1a9166170cd56a4849771101f679d6c1ffbe2684047e9ad3452"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0xeb, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0xd8f}]}}]}}]}}]}}, 0x0)

5.685034068s ago: executing program 2 (id=1217):
syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000005c0)={[{@sb={'sb', 0x3d, 0x1}, 0x22}, {@delalloc}, {@resuid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000002}}, {@dioread_nolock}, {@sysvgroups}, {@nomblk_io_submit}, {@noauto_da_alloc}, {@bsdgroups}, {@journal_dev={'journal_dev', 0x3d, 0x8003}}]}, 0x1, 0x5d8, &(0x7f0000000bc0)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
ppoll(&(0x7f0000000280)=[{r2}, {r1}, {}], 0x3, &(0x7f0000000480)={0x0, 0x989680}, 0x0, 0x0)

3.564724833s ago: executing program 0 (id=1218):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2400, 0x110, 0x8}, 0x18)
syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=")
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000640)="400f3241d39efbffff7f36460f75510b2ef3420f090f01c5f20f0766260f01734cc74424ed00170000000044240200380000ff2c24410f3065450fa0", 0x3b}], 0x1, 0x1e, &(0x7f0000000140)=[@cr0={0x0, 0x60000001}, @cr4={0x1, 0x464530}], 0x22)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x1811155c9beceda3, 0x9, 0x0, 0x70bd2d, 0x0, [@sadb_lifetime={0x4, 0x4, 0x1, 0x7, 0xa53, 0x100000001}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x10000000000002}]}, 0x48}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000900), 0x7, 0x4c6, &(0x7f0000000100)="$eJzs3EFsFFUfAPD/bFtaoHzsx8eHgqiLaGw0tlBQOJgYjCYeNDHiQY9NWwhSqKE1EUJkSQweDYl349GrB6/qzXgy8YpHE0NCDBfA05jZnW23292l3W670v5+ybLvzbzZN2/fvDdv3mMbwJZVyv5JIoYj4lZE7I6IQmOCUvXt/t2rkw/uXp2Mcpqe/ivJDot7WTyX5O8788hIIaLwebK4o87c5SvnJ2Zmpi/l8bH5Cx+PzV2+8tK5CxNnp89OXxw/efL4saMnXhl/efWFapJfVq57Bz6bPbj/rQ9vvjPZX9s+lL/Xl6NbSlFqdioVz3U7sx7bVRdO+tulfG39T4YVy67/rLoGKu1/d/RF28oDNpE0TdPB1rvLaaPry7YAj6wken0GQG/UbvTZ82/t1WwgsG19hh89d+dU9QEoK/f9/BXxdGVjbR5koOH5tptKEfFB+e+vs1es0zwEAEC9H0/VRoIN479ixL66dP/J11CKEfHfiNgTEf+LiL0R8f+opn0sIh5v+Py+iEjb5F9qiC8f/xRur62E7WXjv1fzta3F8V/Ur4IV+/LYrojagHn6SP6djMTA4JlzM9NH2+Tx0xu/fdlqX/34L3tl+dfGgvl53O5vmKCbmpif6LjADe5cjzjQ31j+pD8iWVgJSCJif0QcWMXnFuvC51749uBCZGBpuoeXvyJtuo7WhaWK9JuI56v1X44l9b+YY9J+fXJsKGamj4xlV8GRpnn88uuNd1vl/9Dyf/9H4yFvnvjhdN6y1i6r/x1113/U1m8Xy19MIpKF9dq51edx4/cvWj7TdHr9b0ver4Rrz6WfTszPXzoasS15e/n28cVja/HsPcrV8o8cbt7+9+THZN/EExGRXcRPRsRTUX1CLEV67VBEPBMRh9uU/+fXn/2o8/Kvr6z8U037vyX1v7he3yqQlKupm+zqO3/o1oMWncfK6v94JTSSb2ne/yVLuog2Z7oksNbvDwAAAB4FhYgYrptLGo5CYXS0Oge0N3YUZmbn5l88M/vJxanqbwSKMVCozXRV54MHktr8Z7EuPt4QP5bPG3/Vt70SH52cnZnqacmBnZU2nxRGF/qCavvP/NmdKWbg38xPfmDrelj733dzg04E2HDu/7B11bX/coskZf9TBjanldz/zQXC5tSs/V/r4Bjg0ZJqy7Clrab96ytgc+mP9xbChZ6eCbDR3NNhS1rRj+Q7DqSDzXcNxfLEMdT+A/uis9PY3iSvngSykVVPct/eyVG1v6bQMk0UVveBg9GdOj2z9q/l7L6uX/xpvj7W7Rr8bkPaabNA+35jfHj9+iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu+icAAP//KPXcbw==")
rmdir(&(0x7f0000000340)='./file0\x00')
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0)
r6 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x9c)
sendto$inet6(r6, &(0x7f0000000600)="100a1c151defa7884d7e3f1b502532fcb074d756b7686c14b009aec3eeb211c2bfdd8e8655e3bc689352130bfc498df896b156543ee94a6a6d", 0x39, 0x40, 0x0, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3c}}, 0x0)

3.553758595s ago: executing program 2 (id=1219):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
accept(0xffffffffffffffff, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(r2)

3.552371555s ago: executing program 3 (id=1220):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0x0)
syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="3c82bf073aaebbbbbbbbbbbb86dd6001010000101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000001090780200000000"], 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000200)={0x1, 0x101})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xc3, &(0x7f0000000540)=""/195}]})
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6})
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb000000000000000000020000d0"]}, 0x111)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, &(0x7f0000000380)=""/233, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000340)={0x1, 0x0, &(0x7f0000000200)=[0x0]})

3.495021784s ago: executing program 2 (id=1221):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000002c0)={0x0, 0x0, 0x7, {0x7, 0x0, "009c16d900"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.577757085s ago: executing program 1 (id=1222):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000069111200000000008510000002000000850000000500000095000000000000009500a50500000000a1521c8c818a4f42204ddd2a1763059335b3f9c2188b5aa6aedbf9297a97dfaa154ec665f9cad5153a9ad1"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x0, @remote, 0x0, 0x200000001, 'ovf\x00', 0x0, 0x0, 0x29}, 0x2c)
mkdirat(0xffffffffffffff9c, 0x0, 0xc1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800000000000008c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
recvfrom$inet(r2, &(0x7f0000000180)=""/85, 0x55, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

2.509854205s ago: executing program 0 (id=1223):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10)
syz_emit_ethernet(0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="f60db9be9ce2aaaadcaaaaaa8100000088a8"], 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main, @local]}}, 0x0}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000038230000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x10)
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000280)=0x4)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000f70c2285d2aa7c0b8758e767a09d6aca5ef7c95584f221c6d832fe34acd2f0ad83c6bcc9664e6710a666a088c13eee069ef6006a77c6096e298649eda6409c6d7a0dfefb9c8aac4c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.509366965s ago: executing program 3 (id=1224):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6)
poll(&(0x7f0000000000)=[{}], 0x1, 0xf49)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x17, &(0x7f0000000500)=@ringbuf={{}, {}, {}, [@printk={@lu}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/238}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000240), 0x4)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000980)={0x0, 0xffffffff, 0x95})

194.07689ms ago: executing program 1 (id=1225):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x164, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x124, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x94, 0x6, [@m_bpf={0x50, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x25, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b"}, {0xc}, {0xc}}}, @m_ctinfo={0x40, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x164}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

189.759951ms ago: executing program 2 (id=1226):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0xd, 0x1, 0x0, 0x0, 0x0)

188.232671ms ago: executing program 3 (id=1227):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a0500000000000000d300e6d602000000000000000000000001"})
io_submit(0x0, 0x3, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)='i', 0x1}])

128.18717ms ago: executing program 1 (id=1228):
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x4}, @l2cap_cid_signaling={{0x0, 0x2}}}, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$key(0xf, 0x3, 0x2)
getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2}, &(0x7f0000000140)=0x28)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
io_setup(0x9, &(0x7f0000000180)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x22c5, r1, &(0x7f0000000200)="6e9c3b800d0c22f458d569de6fbb481c5a415594e328a456d49ae54e451e1870fe31f3ecf325ca36c0d7610445b982c67a8771803b0e35bc64f5a72b63d97570c3600ba0c79b8b274a8ca96474a80e88fde95039119fd399c2cff443059000fa5da7d93d4b77b5d8e64bbe1204aa", 0x6e, 0xc0, 0x0, 0x2}])
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000001b40)=""/4029, &(0x7f00000001c0)=0xfbd)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)}}, 0x20)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2}}, 0x20)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = getpgrp(0x0)
sendmmsg$unix(r5, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002700)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000004ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000100000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x38}}], 0x2, 0x0)
syz_usb_connect(0x0, 0x352, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x6b, 0x75, 0xc, 0x40, 0xbb4, 0xa1b, 0x5c24, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x340, 0x1, 0xb8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5a, 0x0, 0x5, 0x29, 0x77, 0x62, 0x0, [], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0x8, 0x2, 0x20, [@generic={0xab, 0x21, "3eb51e21119765a84b82399970948fbc237b48907f2c9680759dd318b3e7b361e76c61556d3464ac450f553dcec1fc26caf1d4b11d86f45bfac5bd1656de5b90326c256cd1fc7495b057fa716a8bd09a16869294a10d6132480935763dd7619f350d274e143f77093e7e23babf5c78e1d49efd1af2d9df046d55abc01ff35d141b9b512c78cce2bbf1e12e086bced0eba97cd8bb724e0283b6b2220a7cc81fb146c2f1c2db1202d82a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x9}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x11, 0xfc, 0x92, [@generic={0xce, 0x24, "7207607856541d6c96eb9bd6f2e27b9d3d49514396ac196e7fe3dec3935dd7b821202a3d0d7e2adbe0de4190b25d397f8bd364ce07953a02a9d3e8acd8f8458f1b86d1088c744f0873145a600532675d10c3aa1401c6bc913839f9f639bc5557539028b33d57bd776c2cb0ff07913b26630dee4d7afc2b4dad92ae32b76b15a220c381476f5756b5b837bd2cd56eacc9769449b1d425b4db19ad8efb73085166a8d6878064074f0260baa245362f5e8dbdaa7451540c41f6c11bdd32af5128e9045d097c17cc42f7d0746a7d"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0x20, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0xfffa}, @generic={0x101, 0xf, "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"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x6, 0x9, 0x5, [@generic={0xc, 0x24, "8b95b83c99754540d9f6"}, @generic={0x66, 0xe, "918267aaea6d2133658a30bc068cb0414e904592860d54a49277db5e5208be9f1a93d454c15634284b32764fb1ba29101e574ea963deb72823c1b8f13fd97adeb31015993a07609e2594d1a9166170cd56a4849771101f679d6c1ffbe2684047e9ad3452"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0xeb, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1f, 0xd8f}]}}]}}]}}]}}, 0x0)

108.322564ms ago: executing program 2 (id=1229):
open(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x0, 0x4, 0x2, 0x0, 0x1400}, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400", @ANYRES32], 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
rt_sigqueueinfo(0x0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r2, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc)
close(r2)

0s ago: executing program 3 (id=1230):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
accept(0xffffffffffffffff, 0x0, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(r2)

kernel console output (not intermixed with test programs):

oo short (expected 156, got 27)
[  298.098738][ T3596] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  298.263432][ T3605] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  298.264498][ T3596] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  298.282571][ T3612] usb 2-1: config 32 has an invalid interface number: 77 but max is 1
[  298.293310][ T3605] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  298.302492][ T3605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.320403][ T3612] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  298.331263][ T3596] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  298.348270][ T3612] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  298.359948][ T3596] usb 5-1: Product: syz
[  298.364860][ T3596] usb 5-1: Manufacturer: syz
[  298.369666][ T3596] usb 5-1: SerialNumber: syz
[  298.374475][ T3612] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  298.375243][ T3605] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1
[  298.385966][ T3612] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[  298.404982][ T3596] usb 5-1: config 0 descriptor??
[  298.413852][ T3612] usb 2-1: config 32 has no interface number 0
[  298.420383][ T3612] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  298.431654][ T3612] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  298.442929][ T3612] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  298.455725][ T3596] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  298.465749][ T3612] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  298.483638][ T3612] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  298.494660][ T3596] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  298.505499][ T3612] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  298.516541][ T3612] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  298.527845][ T3612] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  298.540525][ T3612] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  298.552550][ T3612] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  298.562692][ T3612] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  298.577142][ T3612] usb 2-1: config 32 interface 77 has no altsetting 0
[  298.743342][ T3612] usb 2-1: Dual-Role OTG device on HNP port
[  298.763326][ T3612] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  298.772440][ T3612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.781098][ T3612] usb 2-1: Product: syz
[  298.785337][ T3612] usb 2-1: Manufacturer: syz
[  298.789950][ T3612] usb 2-1: SerialNumber: syz
[  298.973294][ T2964] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  299.114668][ T3612] option 2-1:32.77: GSM modem (1-port) converter detected
[  299.129574][ T3612] usb 2-1: USB disconnect, device number 27
[  299.137839][ T3612] option 2-1:32.77: device disconnected
[  299.333338][ T2964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.344925][ T2964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.354841][ T2964] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  299.364559][ T2964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.375614][ T2964] usb 1-1: config 0 descriptor??
[  300.559951][ T3604] usb 5-1: USB disconnect, device number 26
[  300.579051][ T3604] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  300.603384][ T2964] usbhid 1-1:0.0: can't add hid device: -71
[  300.609491][ T2964] usbhid: probe of 1-1:0.0 failed with error -71
[  300.666409][ T2964] usb 1-1: USB disconnect, device number 25
[  300.689257][ T3612] usb 4-1: USB disconnect, device number 37
[  300.757060][ T6550] ieee802154 phy0 wpan0: encryption failed: -22
[  300.758804][ T6546] loop0: detected capacity change from 0 to 1024
[  300.812430][ T6546] ext3: Bad value for 'sb'
[  301.188906][ T3604] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  301.273296][   T26] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  301.353212][ T2964] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  301.373871][ T6567] loop1: detected capacity change from 0 to 8
[  301.429123][ T6561] netlink: 32 bytes leftover after parsing attributes in process `syz.1.943'.
[  301.533231][   T26] usb 3-1: Using ep0 maxpacket: 16
[  301.583562][ T3604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.594966][ T3604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.606272][ T2964] usb 1-1: Using ep0 maxpacket: 8
[  301.627091][ T3604] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  301.652304][ T3604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.668827][ T3604] usb 5-1: config 0 descriptor??
[  301.693295][   T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  301.703783][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  301.718270][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  301.728164][   T26] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  301.738326][   T26] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  301.803316][ T2964] usb 1-1: config 32 has an invalid interface number: 77 but max is 1
[  301.816485][ T2964] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  301.827985][ T2964] usb 1-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  301.833476][   T26] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  301.838801][ T2964] usb 1-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  301.859062][ T2964] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2
[  301.864881][   T26] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  301.868115][ T2964] usb 1-1: config 32 has no interface number 0
[  301.876193][   T26] usb 3-1: Manufacturer: syz
[  301.887297][ T2964] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  301.898906][ T2964] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  301.910251][ T2964] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  301.927067][ T2964] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  301.932084][   T26] usb 3-1: config 0 descriptor??
[  301.938487][ T2964] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  301.954752][ T2964] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  301.968363][ T6556] netlink: 'syz.4.941': attribute type 4 has an invalid length.
[  301.976382][ T2964] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  301.987743][ T2964] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  302.000602][ T2964] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  302.011960][ T2964] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  302.025589][ T2964] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  302.040393][ T2964] usb 1-1: config 32 interface 77 has no altsetting 0
[  302.193318][ T3596] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  302.203363][ T2964] usb 1-1: Dual-Role OTG device on HNP port
[  302.215308][ T3604] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0
[  302.222138][ T3604] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0
[  302.223401][ T2964] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  302.244156][ T2964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.245966][ T3604] arvo 0003:1E7D:30D4.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  302.252794][ T2964] usb 1-1: Product: syz
[  302.272659][ T2964] usb 1-1: Manufacturer: syz
[  302.278241][ T2964] usb 1-1: SerialNumber: syz
[  302.393180][   T26] rc_core: IR keymap rc-hauppauge not found
[  302.399185][   T26] Registered IR keymap rc-empty
[  302.409335][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.433311][ T3604] arvo 0003:1E7D:30D4.001E: couldn't init struct arvo_device
[  302.440942][ T3604] arvo 0003:1E7D:30D4.001E: couldn't install keyboard
[  302.448560][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.466140][ T3604] arvo: probe of 0003:1E7D:30D4.001E failed with error -71
[  302.483460][ T3604] usb 5-1: USB disconnect, device number 27
[  302.493746][   T26] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  302.520690][   T26] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input83
[  302.540379][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.573239][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.583603][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.594859][ T3596] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.606313][ T3596] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  302.613263][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.615642][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.632113][ T3596] usb 2-1: config 0 descriptor??
[  302.645102][ T2964] option 1-1:32.77: GSM modem (1-port) converter detected
[  302.645616][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.668858][ T2964] usb 1-1: USB disconnect, device number 26
[  302.679544][ T2964] option 1-1:32.77: device disconnected
[  302.693605][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.742070][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.783245][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.813677][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.853308][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.883955][   T26] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  302.915598][   T26] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  302.928691][   T26] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  302.941398][   T26] usb 3-1: USB disconnect, device number 23
[  303.215544][ T3596] usbhid 2-1:0.0: can't add hid device: -71
[  303.221908][ T3596] usbhid: probe of 2-1:0.0 failed with error -71
[  303.283271][ T3605] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  303.423562][   T26] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  303.684008][ T3605] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  303.695479][   T26] usb 3-1: Using ep0 maxpacket: 32
[  303.762654][ T3605] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  303.833828][   T26] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  303.872284][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  303.927939][ T3605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.009984][ T3596] usb 2-1: USB disconnect, device number 28
[  304.403547][ T3605] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1
[  304.500102][ T6595] ieee802154 phy0 wpan0: encryption failed: -22
[  304.513583][   T26] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  304.523283][   T26] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  304.532215][   T26] usb 3-1: Product: syz
[  304.536663][   T26] usb 3-1: Manufacturer: syz
[  304.541282][   T26] usb 3-1: SerialNumber: syz
[  304.550582][   T26] usb 3-1: config 0 descriptor??
[  304.594870][   T26] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  304.620699][   T26] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  304.696753][ T6600] binder: 6598:6600 unknown command 0
[  304.702403][ T6600] binder: 6598:6600 ioctl c0306201 20000280 returned -22
[  305.333438][   T26] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  305.408760][ T3605] usb 3-1: USB disconnect, device number 24
[  305.447495][ T3605] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  305.583256][   T26] usb 2-1: Using ep0 maxpacket: 16
[  305.723491][   T26] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.738784][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  305.750164][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  305.760759][   T26] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  305.770955][   T26] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  305.863487][   T26] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  305.878384][   T26] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  305.890466][   T26] usb 2-1: Manufacturer: syz
[  305.907879][   T26] usb 2-1: config 0 descriptor??
[  306.003291][ T3605] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  306.303473][   T26] rc_core: IR keymap rc-hauppauge not found
[  306.309425][   T26] Registered IR keymap rc-empty
[  306.314821][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  306.343307][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  306.353743][ T3604] usb 5-1: USB disconnect, device number 28
[  306.383861][   T26] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  306.403543][ T3605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.405894][ T6620] loop4: detected capacity change from 0 to 1024
[  306.417672][   T26] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input86
[  306.422295][ T6620] ext3: Bad value for 'sb'
[  306.434611][ T3605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.449747][ T3605] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  306.459969][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  306.467332][ T3605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.478876][ T3605] usb 3-1: config 0 descriptor??
[  306.503375][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  306.533413][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  306.553579][ T2964] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  306.563848][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  306.910133][ T6611] netlink: 'syz.2.960': attribute type 4 has an invalid length.
[  306.939800][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  306.993491][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  307.033254][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  307.073574][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  307.123704][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  307.163606][   T26] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  307.245170][ T3605] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0
[  307.294314][   T26] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  307.345492][ T3605] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0
[  307.429855][   T26] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  307.523562][ T3605] arvo 0003:1E7D:30D4.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  307.616957][   T26] usb 2-1: USB disconnect, device number 29
[  307.693975][ T3605] arvo 0003:1E7D:30D4.001F: couldn't init struct arvo_device
[  307.794477][ T3605] arvo 0003:1E7D:30D4.001F: couldn't install keyboard
[  307.910352][ T3605] arvo: probe of 0003:1E7D:30D4.001F failed with error -71
[  307.940443][ T6635] ieee802154 phy0 wpan0: encryption failed: -22
[  307.963453][ T3605] usb 3-1: USB disconnect, device number 25
[  307.973662][ T2964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.993543][ T2964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.020235][ T2964] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  308.067025][ T6642] loop2: detected capacity change from 0 to 16
[  308.074255][ T2964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.137533][ T6642] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  308.179898][ T6647] loop3: detected capacity change from 0 to 256
[  308.189855][ T6647] exfat: Deprecated parameter 'codepage'
[  308.196153][ T6647] exfat: Bad value for 'codepage'
[  308.314045][ T6647] loop3: detected capacity change from 0 to 1024
[  308.382421][ T2964] usb 1-1: config 0 descriptor??
[  308.982157][ T3660] hfsplus: b-tree write err: -5, ino 4
[  309.003435][ T2964] usbhid 1-1:0.0: can't add hid device: -71
[  309.010836][ T2964] usbhid: probe of 1-1:0.0 failed with error -71
[  309.048195][ T2964] usb 1-1: USB disconnect, device number 27
[  309.464093][   T26] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  309.763526][   T26] usb 2-1: Using ep0 maxpacket: 32
[  309.959269][   T26] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  309.978612][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.019162][   T26] usb 2-1: config 0 descriptor??
[  310.095539][   T26] gspca_main: sunplus-2.14.0 probing 041e:400b
[  310.203204][ T3612] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  310.433181][ T2964] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  310.513233][ T3596] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  310.573421][ T3612] usb 4-1: config 184 has an invalid interface number: 90 but max is 0
[  310.581831][ T3612] usb 4-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config
[  310.598407][ T3612] usb 4-1: config 184 has no interface number 0
[  310.604945][ T3612] usb 4-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  310.621915][ T3612] usb 4-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  310.635857][ T3612] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24
[  310.644952][ T3612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.753223][ T3596] usb 1-1: Using ep0 maxpacket: 16
[  310.803509][ T2964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.825815][ T2964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.836255][ T2964] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  310.845511][ T2964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.864994][ T2964] usb 3-1: config 0 descriptor??
[  310.873465][ T3596] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.893241][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  310.904621][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  310.921772][ T6678] binder: 6674:6678 unknown command 0
[  310.930091][ T6678] binder: 6674:6678 ioctl c0306201 20000280 returned -22
[  310.937994][ T3596] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  310.959451][ T3596] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.063387][ T3596] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  311.072850][ T3596] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  311.083257][   T26] gspca_sunplus: reg_r err -110
[  311.088535][   T26] sunplus: probe of 2-1:0.0 failed with error -110
[  311.092987][ T3596] usb 1-1: Manufacturer: syz
[  311.126328][ T3596] usb 1-1: config 0 descriptor??
[  311.152833][ T6669] netlink: 'syz.2.981': attribute type 4 has an invalid length.
[  311.384662][ T2964] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0
[  311.391765][ T2964] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0
[  311.400752][ T2964] arvo 0003:1E7D:30D4.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  311.553287][ T3596] rc_core: IR keymap rc-hauppauge not found
[  311.559816][ T3596] Registered IR keymap rc-empty
[  311.594702][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  311.603456][ T2964] arvo 0003:1E7D:30D4.0020: couldn't init struct arvo_device
[  311.619188][ T2964] arvo 0003:1E7D:30D4.0020: couldn't install keyboard
[  311.665101][ T2964] arvo: probe of 0003:1E7D:30D4.0020 failed with error -71
[  311.673477][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  311.696065][ T2964] usb 3-1: USB disconnect, device number 26
[  311.713672][ T3596] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  311.732791][ T3596] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input87
[  311.757824][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  311.793523][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  311.833259][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  311.857866][ T3612] usb 2-1: USB disconnect, device number 30
[  311.864424][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  311.913763][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  311.956277][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  312.003715][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  312.084148][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  312.174436][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  312.255751][ T3596] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  312.376527][ T3596] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  312.467809][ T3596] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  312.654036][ T3596] usb 1-1: USB disconnect, device number 28
[  312.757877][ T2964] usb 4-1: USB disconnect, device number 38
[  312.827439][ T6696] loop2: detected capacity change from 0 to 256
[  312.935278][   T27] audit: type=1326 audit(1719475406.262:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.3.986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f944ef75ae9 code=0x0
[  313.003223][   T27] audit: type=1804 audit(1719475406.302:265): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.985" name="/root/syzkaller.RSRGiW/26/cgroup.controllers" dev="sda1" ino=2015 res=1 errno=0
[  313.163989][ T6703] loop1: detected capacity change from 0 to 256
[  313.578980][ T6708] random: crng reseeded on system resumption
[  314.302694][ T6703] FAT-fs (loop1): Directory bread(block 64) failed
[  314.339874][ T6703] FAT-fs (loop1): Directory bread(block 65) failed
[  314.388453][ T6703] FAT-fs (loop1): Directory bread(block 66) failed
[  314.403799][   T27] audit: type=1326 audit(1719475406.572:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6695 comm="syz.2.984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9701575ae9 code=0x0
[  314.441659][ T6703] FAT-fs (loop1): Directory bread(block 67) failed
[  314.472987][ T6703] FAT-fs (loop1): Directory bread(block 68) failed
[  314.840936][ T6703] FAT-fs (loop1): Directory bread(block 69) failed
[  314.871408][ T6703] FAT-fs (loop1): Directory bread(block 70) failed
[  314.878413][ T6703] FAT-fs (loop1): Directory bread(block 71) failed
[  314.885564][ T6703] FAT-fs (loop1): Directory bread(block 72) failed
[  314.892131][ T6703] FAT-fs (loop1): Directory bread(block 73) failed
[  314.953259][ T3596] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  315.123534][ T2964] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  315.984699][ T6211] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  316.083252][ T3596] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  316.102283][ T3596] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  316.120956][ T3596] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  316.130143][ T2964] usb 4-1: Using ep0 maxpacket: 8
[  316.143512][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.163310][ T3598] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  316.173852][ T3596] usb 3-1: config 0 descriptor??
[  316.253161][ T6211] usb 2-1: Using ep0 maxpacket: 32
[  316.333381][ T2964] usb 4-1: config 32 has an invalid interface number: 77 but max is 1
[  316.348450][ T2964] usb 4-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  316.358262][ T2964] usb 4-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  316.368809][ T2964] usb 4-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  316.382079][ T2964] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2
[  316.393442][ T6211] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  316.401763][ T2964] usb 4-1: config 32 has no interface number 0
[  316.406150][ T6211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  316.419198][ T2964] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  316.430326][ T3598] usb 1-1: Using ep0 maxpacket: 32
[  316.450638][ T2964] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  316.462716][ T2964] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  316.474889][ T2964] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  316.486299][ T2964] usb 4-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  316.499045][ T2964] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  316.510065][ T2964] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  316.545648][ T2964] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  316.557129][ T3598] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  316.566400][ T2964] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  316.580378][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.590521][ T2964] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  316.603578][ T6211] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  316.603876][ T2964] usb 4-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  316.626965][ T3598] usb 1-1: config 0 descriptor??
[  316.632219][ T2964] usb 4-1: config 32 interface 77 has no altsetting 0
[  316.647656][ T6211] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  316.664967][ T3598] gspca_main: sunplus-2.14.0 probing 041e:400b
[  316.679469][ T6211] usb 2-1: Product: syz
[  316.688420][ T6211] usb 2-1: Manufacturer: syz
[  316.694828][ T6211] usb 2-1: SerialNumber: syz
[  316.707716][ T6211] usb 2-1: config 0 descriptor??
[  316.765427][ T6211] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  316.788500][ T6211] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  316.803550][ T2964] usb 4-1: Dual-Role OTG device on HNP port
[  316.823256][ T2964] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  316.837988][ T2964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.858787][ T2964] usb 4-1: Product: syz
[  316.878969][ T2964] usb 4-1: Manufacturer: syz
[  316.884390][ T2964] usb 4-1: SerialNumber: syz
[  316.965091][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  316.971580][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  317.244411][ T2964] option 4-1:32.77: GSM modem (1-port) converter detected
[  317.276224][ T2964] usb 4-1: USB disconnect, device number 39
[  317.296402][ T2964] option 4-1:32.77: device disconnected
[  317.474233][ T3595] usb 3-1: USB disconnect, device number 27
[  317.653533][ T3598] gspca_sunplus: reg_r err -110
[  317.662463][ T3598] sunplus: probe of 1-1:0.0 failed with error -110
[  317.805431][ T6740] loop3: detected capacity change from 0 to 1024
[  317.824890][ T6740] ext3: Bad value for 'sb'
[  317.942311][ T6744] loop3: detected capacity change from 0 to 256
[  318.033261][ T3595] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  318.131260][ T3598] usb 2-1: USB disconnect, device number 31
[  318.138905][ T3598] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  318.163196][ T6211] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  318.226696][   T27] audit: type=1326 audit(1719475411.552:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6743 comm="syz.3.999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f944ef75ae9 code=0x0
[  318.413284][ T6211] usb 5-1: device descriptor read/64, error -71
[  318.683323][ T6211] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  318.852877][   T27] audit: type=1326 audit(1719475412.172:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6748 comm="syz.1.1000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1175175ae9 code=0x0
[  318.953230][ T6211] usb 5-1: device descriptor read/64, error -71
[  318.994202][   T27] audit: type=1804 audit(1719475412.312:269): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1001" name="/root/syzkaller.KG2XVB/18/cgroup.controllers" dev="sda1" ino=2003 res=1 errno=0
[  319.147982][ T6211] usb usb5-port1: attempt power cycle
[  319.148394][ T3595] usb 3-1: config 184 has an invalid interface number: 90 but max is 0
[  319.166379][ T3595] usb 3-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config
[  319.177033][ T3595] usb 3-1: config 184 has no interface number 0
[  319.183479][ T3595] usb 3-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  319.195411][ T3595] usb 3-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  319.208866][ T3595] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24
[  319.282792][ T6758] random: crng reseeded on system resumption
[  319.796312][ T6757] binder: 6753:6757 unknown command 0
[  319.805565][ T6757] binder: 6753:6757 ioctl c0306201 20000280 returned -22
[  319.943304][ T6211] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  320.073409][ T6211] usb 5-1: device descriptor read/8, error -71
[  320.249525][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.286550][ T3596] usb 1-1: USB disconnect, device number 29
[  320.317917][ T6761] loop1: detected capacity change from 0 to 256
[  320.359278][ T6761] FAT-fs (loop1): Directory bread(block 64) failed
[  320.371250][ T6761] FAT-fs (loop1): Directory bread(block 65) failed
[  320.373180][ T6211] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  320.378550][ T6761] FAT-fs (loop1): Directory bread(block 66) failed
[  320.411071][ T6761] FAT-fs (loop1): Directory bread(block 67) failed
[  320.418003][ T6761] FAT-fs (loop1): Directory bread(block 68) failed
[  320.429717][ T6761] FAT-fs (loop1): Directory bread(block 69) failed
[  320.439841][ T6761] FAT-fs (loop1): Directory bread(block 70) failed
[  320.454283][ T6761] FAT-fs (loop1): Directory bread(block 71) failed
[  320.461697][ T6761] FAT-fs (loop1): Directory bread(block 72) failed
[  320.477995][ T6761] FAT-fs (loop1): Directory bread(block 73) failed
[  320.493311][ T6211] usb 5-1: device descriptor read/8, error -71
[  320.623434][ T6211] usb usb5-port1: unable to enumerate USB device
[  320.691317][ T6767] ieee802154 phy0 wpan0: encryption failed: -22
[  320.853209][ T3596] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  321.113167][ T6211] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  321.183294][   T26] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  321.213430][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.241630][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.266103][ T3596] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  321.282284][ T3596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.320062][ T3596] usb 1-1: config 0 descriptor??
[  321.393282][ T6211] usb 4-1: Using ep0 maxpacket: 16
[  321.444136][   T26] usb 2-1: Using ep0 maxpacket: 8
[  321.533301][ T6211] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.552991][ T6211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  321.591183][ T6211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  321.620597][ T6211] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  321.650556][ T6211] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  321.651268][ T3595] usb 3-1: USB disconnect, device number 28
[  321.683375][   T26] usb 2-1: config 32 has an invalid interface number: 77 but max is 1
[  321.691759][   T26] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  321.732208][   T26] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  321.762292][   T26] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  321.808220][   T26] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[  321.812372][ T6777] loop2: detected capacity change from 0 to 1024
[  321.833655][ T6211] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  321.835370][ T6777] ext3: Bad value for 'sb'
[  321.842733][ T6211] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  321.856743][   T26] usb 2-1: config 32 has no interface number 0
[  321.857708][ T3596] wacom 0003:056A:0331.0021: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[  321.863151][   T26] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  321.885144][ T6211] usb 4-1: Manufacturer: syz
[  321.891891][ T6211] usb 4-1: config 0 descriptor??
[  321.899163][   T26] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  321.910308][   T26] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  321.922803][   T26] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  321.935846][   T26] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  321.948771][   T26] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  321.959766][   T26] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  321.971000][   T26] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  321.982297][   T26] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  321.993550][   T26] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  322.003673][   T26] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  322.017571][   T26] usb 2-1: config 32 interface 77 has no altsetting 0
[  322.034599][ T3596] usb 1-1: USB disconnect, device number 30
[  322.108142][ T6779] loop2: detected capacity change from 0 to 16
[  322.146086][ T6779] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  322.203519][   T26] usb 2-1: Dual-Role OTG device on HNP port
[  322.229116][   T26] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  322.251990][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.290409][   T26] usb 2-1: Product: syz
[  322.294941][   T26] usb 2-1: Manufacturer: syz
[  322.299810][   T26] usb 2-1: SerialNumber: syz
[  322.411455][ T6211] rc_core: IR keymap rc-hauppauge not found
[  322.419292][ T6211] Registered IR keymap rc-empty
[  322.424892][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.463680][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.503690][ T6211] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  322.523341][ T6211] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input92
[  322.600158][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.634022][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.684080][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.695521][   T26] option 2-1:32.77: GSM modem (1-port) converter detected
[  322.713890][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.725941][   T27] audit: type=1326 audit(1719475416.052:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6786 comm="syz.0.1014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7775ae9 code=0x0
[  322.741372][   T26] usb 2-1: USB disconnect, device number 32
[  322.753920][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.956349][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  322.966851][   T26] option 2-1:32.77: device disconnected
[  323.092622][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  323.275313][ T6797] random: crng reseeded on system resumption
[  325.233486][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  325.263187][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  325.298271][ T6211] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  325.340930][ T6211] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  325.365787][ T6211] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  325.446642][ T6211] usb 4-1: USB disconnect, device number 40
[  325.487646][ T6799] loop2: detected capacity change from 0 to 256
[  325.597840][ T6802] ieee802154 phy0 wpan0: encryption failed: -22
[  325.721861][ T6799] FAT-fs (loop2): Directory bread(block 64) failed
[  325.785589][ T6799] FAT-fs (loop2): Directory bread(block 65) failed
[  325.792439][ T6799] FAT-fs (loop2): Directory bread(block 66) failed
[  325.799757][ T6799] FAT-fs (loop2): Directory bread(block 67) failed
[  325.933815][ T6799] FAT-fs (loop2): Directory bread(block 68) failed
[  325.951613][ T6799] FAT-fs (loop2): Directory bread(block 69) failed
[  326.150488][ T6799] FAT-fs (loop2): Directory bread(block 70) failed
[  326.291447][ T6799] FAT-fs (loop2): Directory bread(block 71) failed
[  326.310663][ T6812] loop4: detected capacity change from 0 to 1024
[  326.471519][ T6799] FAT-fs (loop2): Directory bread(block 72) failed
[  326.512207][ T6812] ext3: Bad value for 'sb'
[  326.576759][ T6799] FAT-fs (loop2): Directory bread(block 73) failed
[  326.586751][ T6814] loop3: detected capacity change from 0 to 128
[  326.604444][ T6814] EXT4-fs: Ignoring removed nobh option
[  326.723959][ T6814] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  326.733051][ T3595] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  326.778809][ T6814] ext4 filesystem being mounted at /root/syzkaller.KG2XVB/22/mnt supports timestamps until 2038 (0x7fffffff)
[  326.796959][ T6818] loop0: detected capacity change from 0 to 16
[  326.857936][ T6818] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  326.923243][ T3595] usb 2-1: device descriptor read/64, error -71
[  326.943464][ T6814] loop3: detected capacity change from 128 to 0
[  327.107666][ T6369] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  327.152092][ T6369] EXT4-fs error (device loop3): htree_dirblock_to_tree:1082: inode #2: comm syz-executor: Directory block failed checksum
[  327.195734][ T3605] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  327.288286][ T6369] EXT4-fs (loop3): unmounting filesystem.
[  327.547278][   T27] audit: type=1326 audit(1719475420.872:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6833 comm="syz.2.1031" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9701575ae9 code=0x0
[  327.569770][ T3595] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  327.603770][ T3605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.617213][ T3605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.627125][ T3605] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  327.636541][ T3605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.646297][ T3605] usb 5-1: config 0 descriptor??
[  327.743457][ T3629] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  327.863439][ T3595] usb 2-1: device descriptor read/64, error -71
[  327.929512][ T6837] random: crng reseeded on system resumption
[  328.283929][ T3595] usb usb2-port1: attempt power cycle
[  328.455776][ T3660] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.611365][ T3660] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.769232][ T3605] wacom 0003:056A:0331.0022: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0
[  328.795821][ T3660] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.830955][ T6843] loop2: detected capacity change from 0 to 1024
[  328.839243][ T6843] ext3: Bad value for 'sb'
[  328.863224][ T3629] usb 1-1: Using ep0 maxpacket: 8
[  328.882004][ T3660] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.898489][ T3595] usb usb2-port1: Cannot enable. Maybe the USB cable is bad?
[  328.966365][ T3598] usb 5-1: USB disconnect, device number 33
[  329.001383][ T3551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  329.011913][ T3551] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  329.021203][ T3551] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  329.035238][ T3551] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  329.035726][ T6847] loop2: detected capacity change from 0 to 256
[  329.051887][ T3551] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  329.059539][ T3551] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  329.064950][ T6847] FAT-fs (loop2): Directory bread(block 64) failed
[  329.066828][ T3595] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  329.080188][ T6847] FAT-fs (loop2): Directory bread(block 65) failed
[  329.093309][ T3629] usb 1-1: config 32 has an invalid interface number: 77 but max is 1
[  329.101561][ T3629] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  329.104230][ T6847] FAT-fs (loop2): Directory bread(block 66) failed
[  329.116712][ T3629] usb 1-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  329.134497][ T6847] FAT-fs (loop2): Directory bread(block 67) failed
[  329.150392][ T6847] FAT-fs (loop2): Directory bread(block 68) failed
[  329.157197][ T6847] FAT-fs (loop2): Directory bread(block 69) failed
[  329.171662][ T6847] FAT-fs (loop2): Directory bread(block 70) failed
[  329.179771][ T3629] usb 1-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  329.191487][ T3629] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2
[  329.198121][ T6847] FAT-fs (loop2): Directory bread(block 71) failed
[  329.200932][ T3629] usb 1-1: config 32 has no interface number 0
[  329.213400][ T3629] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  329.221655][ T6847] FAT-fs (loop2): Directory bread(block 72) failed
[  329.224453][ T3629] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  329.224487][ T3629] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  329.224517][ T3629] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  329.224544][ T3629] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  329.224568][ T3629] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  329.224592][ T3629] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  329.224621][ T3629] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  329.274797][ T6847] FAT-fs (loop2): Directory bread(block 73) failed
[  329.275029][ T3629] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  329.316889][ T3595] usb 2-1: config 184 has an invalid interface number: 90 but max is 0
[  329.326739][ T3629] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  329.345087][ T3629] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  329.350291][ T3595] usb 2-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config
[  329.364466][ T3629] usb 1-1: config 32 interface 77 has no altsetting 0
[  329.370010][ T3595] usb 2-1: config 184 has no interface number 0
[  329.386557][ T3595] usb 2-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  329.398381][ T3595] usb 2-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  329.411884][ T3595] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24
[  329.421023][ T3595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.533550][ T3629] usb 1-1: Dual-Role OTG device on HNP port
[  329.548542][ T6852] loop2: detected capacity change from 0 to 16
[  329.556111][ T6852] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  329.563694][ T3629] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  329.572812][ T3629] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.590019][ T3629] usb 1-1: Product: syz
[  329.603172][ T3629] usb 1-1: Manufacturer: syz
[  329.607904][ T3629] usb 1-1: SerialNumber: syz
[  329.741590][ T6844] chnl_net:caif_netlink_parms(): no params data found
[  329.838333][ T6863] loop4: detected capacity change from 0 to 256
[  330.233404][   T27] audit: type=1326 audit(1719475423.502:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6862 comm="syz.4.1042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65f375ae9 code=0x0
[  330.255210][    C1] vkms_vblank_simulate: vblank timer overrun
[  330.560650][ T3629] option 1-1:32.77: GSM modem (1-port) converter detected
[  330.702394][ T3629] usb 1-1: USB disconnect, device number 31
[  330.738646][ T3629] option 1-1:32.77: device disconnected
[  330.759070][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.770898][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.779501][ T6844] device bridge_slave_0 entered promiscuous mode
[  330.800488][ T6870] ieee802154 phy0 wpan0: encryption failed: -22
[  330.815616][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.834813][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.851157][ T6844] device bridge_slave_1 entered promiscuous mode
[  330.934653][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.947424][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.963351][ T3551] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  330.972088][ T3551] Bluetooth: hci0: Injecting HCI hardware error event
[  330.981164][ T3566] Bluetooth: hci0: hardware error 0x00
[  331.042632][   T27] audit: type=1326 audit(1719475424.362:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6873 comm="syz.2.1045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9701575ae9 code=0x0
[  331.085824][ T6844] team0: Port device team_slave_0 added
[  331.144389][    C1] sd 0:0:1:0: [sda] tag#5929 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  331.154912][    C1] sd 0:0:1:0: [sda] tag#5929 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  331.170275][ T6844] team0: Port device team_slave_1 added
[  331.232236][ T6877] binder: 6875:6877 unknown command 0
[  331.255028][ T3551] Bluetooth: hci3: command tx timeout
[  331.433326][ T6877] binder: 6875:6877 ioctl c0306201 20000280 returned -22
[  331.634312][ T6882] loop0: detected capacity change from 0 to 256
[  331.641347][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  331.663281][ T3595] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  331.723700][ T6883] random: crng reseeded on system resumption
[  332.205191][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.236564][ T6882] FAT-fs (loop0): Directory bread(block 64) failed
[  332.251721][ T6882] FAT-fs (loop0): Directory bread(block 65) failed
[  332.263284][ T3595] usb 5-1: device descriptor read/64, error -71
[  332.273364][ T6882] FAT-fs (loop0): Directory bread(block 66) failed
[  332.282677][ T6882] FAT-fs (loop0): Directory bread(block 67) failed
[  332.293043][ T6844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  332.311913][ T6882] FAT-fs (loop0): Directory bread(block 68) failed
[  332.318643][ T6882] FAT-fs (loop0): Directory bread(block 69) failed
[  332.335404][ T6844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  332.342374][ T6844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  332.376628][ T6882] FAT-fs (loop0): Directory bread(block 70) failed
[  332.385802][ T6882] FAT-fs (loop0): Directory bread(block 71) failed
[  332.392536][ T6882] FAT-fs (loop0): Directory bread(block 72) failed
[  332.406851][ T6882] FAT-fs (loop0): Directory bread(block 73) failed
[  332.426793][ T6844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  332.553292][ T3595] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  332.588753][ T3598] usb 2-1: USB disconnect, device number 36
[  332.641845][ T6844] device hsr_slave_0 entered promiscuous mode
[  332.699938][ T6893] loop1: detected capacity change from 0 to 16
[  332.707629][ T6893] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  332.738705][ T6844] device hsr_slave_1 entered promiscuous mode
[  332.770877][ T3595] usb 5-1: device descriptor read/64, error -71
[  332.787197][ T3660] device hsr_slave_0 left promiscuous mode
[  332.793890][ T3660] device hsr_slave_1 left promiscuous mode
[  332.800366][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.809084][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.818959][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.826429][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.836816][ T3660] device bridge_slave_1 left promiscuous mode
[  332.843462][ T3660] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.851885][ T3660] device bridge_slave_0 left promiscuous mode
[  332.859388][ T3660] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.871717][ T3660] device veth1_macvtap left promiscuous mode
[  332.873430][ T3605] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  332.883746][ T3660] device veth0_macvtap left promiscuous mode
[  332.891527][ T3660] device veth1_vlan left promiscuous mode
[  332.899132][ T3595] usb usb5-port1: attempt power cycle
[  332.903317][ T3660] device veth0_vlan left promiscuous mode
[  333.043226][ T3566] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  333.104904][ T3660] team0 (unregistering): Port device team_slave_1 removed
[  333.128543][ T3660] team0 (unregistering): Port device team_slave_0 removed
[  333.141559][ T3660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  333.156906][ T3660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.227218][ T3660] bond0 (unregistering): Released all slaves
[  333.283272][ T3566] Bluetooth: hci3: command tx timeout
[  333.288978][ T3605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.300084][ T3605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.309985][ T3605] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  333.313393][ T3595] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  333.319450][ T3605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.337495][ T3605] usb 3-1: config 0 descriptor??
[  333.402885][ T6899] loop1: detected capacity change from 0 to 256
[  333.433427][ T3595] usb 5-1: device descriptor read/8, error -71
[  333.723188][   T27] audit: type=1326 audit(1719475427.042:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.1.1054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1175175ae9 code=0x0
[  334.006225][ T3605] wacom 0003:056A:0331.0023: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0
[  334.262536][ T3605] usb 3-1: USB disconnect, device number 29
[  334.390632][ T3595] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  334.463376][ T3629] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  334.638728][ T3595] usb 5-1: device not accepting address 37, error -71
[  334.656378][ T3595] usb usb5-port1: unable to enumerate USB device
[  334.670707][ T6844] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  334.702971][ T6844] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  334.721625][ T6844] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  334.731929][   T27] audit: type=1326 audit(1719475428.052:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.2.1058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9701575ae9 code=0x0
[  334.732562][ T6844] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  334.756235][ T3629] usb 1-1: Using ep0 maxpacket: 32
[  335.113376][ T3629] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  335.133303][ T3629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  335.219881][ T6916] random: crng reseeded on system resumption
[  335.470563][ T3566] Bluetooth: hci3: command tx timeout
[  335.643446][ T3629] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  335.673232][ T3629] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  335.681789][ T3629] usb 1-1: Product: syz
[  335.737423][ T3629] usb 1-1: Manufacturer: syz
[  335.768486][ T3629] usb 1-1: SerialNumber: syz
[  335.792481][ T3629] usb 1-1: config 0 descriptor??
[  335.843961][ T6844] 8021q: adding VLAN 0 to HW filter on device bond0
[  335.880426][ T3629] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  335.923040][ T3629] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  335.962052][ T6844] 8021q: adding VLAN 0 to HW filter on device team0
[  335.992818][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  336.011315][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  336.036924][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  336.048135][ T6919] loop2: detected capacity change from 0 to 256
[  336.069496][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  336.098768][  T151] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.106004][  T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.131576][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  336.140848][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  336.143211][ T3595] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  336.152968][  T151] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.163607][  T151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.179621][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  336.181973][ T6919] FAT-fs (loop2): Directory bread(block 64) failed
[  336.192614][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  336.214808][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  336.240833][ T6919] FAT-fs (loop2): Directory bread(block 65) failed
[  336.264893][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  336.275706][ T6919] FAT-fs (loop2): Directory bread(block 66) failed
[  336.282288][ T6919] FAT-fs (loop2): Directory bread(block 67) failed
[  336.290484][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  336.299842][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  336.308182][ T6919] FAT-fs (loop2): Directory bread(block 68) failed
[  336.317107][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  336.325074][ T6919] FAT-fs (loop2): Directory bread(block 69) failed
[  336.331692][ T6919] FAT-fs (loop2): Directory bread(block 70) failed
[  336.339282][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  336.347417][ T6919] FAT-fs (loop2): Directory bread(block 71) failed
[  336.357081][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  336.368425][ T6919] FAT-fs (loop2): Directory bread(block 72) failed
[  336.382023][ T6844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  336.393236][ T6919] FAT-fs (loop2): Directory bread(block 73) failed
[  336.398374][ T3595] usb 5-1: Using ep0 maxpacket: 8
[  336.409289][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  336.423011][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  336.432809][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  336.451137][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  336.599319][  T151] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  336.603427][ T3595] usb 5-1: config 32 has an invalid interface number: 77 but max is 1
[  336.623294][ T3595] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  336.645455][ T3605] usb 1-1: USB disconnect, device number 32
[  336.662041][ T3595] usb 5-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  336.673871][ T3605] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  336.689539][ T3595] usb 5-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  336.721363][ T3595] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2
[  336.740917][ T3595] usb 5-1: config 32 has no interface number 0
[  336.764992][ T3595] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  336.802416][ T6934] loop0: detected capacity change from 0 to 16
[  336.806591][ T3595] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  336.831801][ T6934] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  336.862457][ T3595] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  336.867486][ T6844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  336.891617][ T3595] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  336.911855][ T3595] usb 5-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  336.929771][ T3595] usb 5-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  336.949413][ T3595] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  336.964344][ T3595] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  336.988549][ T3595] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  336.989289][  T151] usb 2-1: config 184 has an invalid interface number: 90 but max is 0
[  337.009998][ T3595] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  337.025641][ T6844] device veth0_vlan entered promiscuous mode
[  337.033325][  T151] usb 2-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config
[  337.040409][ T3595] usb 5-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  337.056091][ T6844] device veth1_vlan entered promiscuous mode
[  337.067455][ T3595] usb 5-1: config 32 interface 77 has no altsetting 0
[  337.069178][  T151] usb 2-1: config 184 has no interface number 0
[  337.090939][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  337.091626][  T151] usb 2-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  337.108798][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  337.109858][  T151] usb 2-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  337.130291][  T151] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24
[  337.134702][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  337.140006][  T151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.174455][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  337.184071][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  337.192614][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  337.201469][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  337.215875][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  337.229861][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  337.241394][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  337.253418][ T3595] usb 5-1: Dual-Role OTG device on HNP port
[  337.261792][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  337.271438][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  337.273416][ T3595] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  337.298844][ T6844] device veth0_macvtap entered promiscuous mode
[  337.311742][ T3595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.325013][ T6844] device veth1_macvtap entered promiscuous mode
[  337.336192][ T3595] usb 5-1: Product: syz
[  337.340414][ T3595] usb 5-1: Manufacturer: syz
[  337.372439][ T3595] usb 5-1: SerialNumber: syz
[  337.382236][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.407130][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.431011][ T3595] usb 5-1: can't set config #32, error -71
[  337.452416][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.466684][ T3595] usb 5-1: USB disconnect, device number 38
[  337.499779][ T6941] loop4: detected capacity change from 0 to 256
[  337.507048][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.517913][    C1] sd 0:0:1:0: [sda] tag#5950 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  337.528366][    C1] sd 0:0:1:0: [sda] tag#5950 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  337.537777][ T3566] Bluetooth: hci3: command tx timeout
[  337.540179][ T6940] binder: 6937:6940 unknown command 0
[  337.549153][ T2964] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  337.599859][ T6940] binder: 6937:6940 ioctl c0306201 20000280 returned -22
[  337.622871][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.667299][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.680511][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  337.704212][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.721479][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  337.750982][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.796528][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.823644][ T2964] usb 3-1: device descriptor read/64, error -71
[  337.836989][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.863938][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.874070][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.885155][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.895802][ T6844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  337.907035][ T6844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  337.920588][ T6844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.062143][   T27] audit: type=1326 audit(1719475431.362:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm="syz.4.1067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd65f375ae9 code=0x0
[  338.501689][   T27] audit: type=1326 audit(1719475431.822:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6948 comm="syz.0.1069" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7775ae9 code=0x0
[  338.658294][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  338.667261][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  338.675751][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  338.684683][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  338.693933][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  338.702818][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  338.726372][ T6844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.748635][ T6844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.780235][ T6844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.813202][ T2964] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  338.822414][ T6844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.932248][ T6952] random: crng reseeded on system resumption
[  339.492629][ T3604] usb 2-1: USB disconnect, device number 37
[  339.561880][ T6956] loop1: detected capacity change from 0 to 256
[  339.581647][ T6956] FAT-fs (loop1): Directory bread(block 64) failed
[  339.594432][ T6956] FAT-fs (loop1): Directory bread(block 65) failed
[  339.601079][ T6956] FAT-fs (loop1): Directory bread(block 66) failed
[  339.612628][ T6956] FAT-fs (loop1): Directory bread(block 67) failed
[  339.620755][ T6956] FAT-fs (loop1): Directory bread(block 68) failed
[  339.636841][ T6956] FAT-fs (loop1): Directory bread(block 69) failed
[  339.647651][ T6956] FAT-fs (loop1): Directory bread(block 70) failed
[  339.657009][ T6956] FAT-fs (loop1): Directory bread(block 71) failed
[  339.667899][ T6956] FAT-fs (loop1): Directory bread(block 72) failed
[  339.676840][ T6956] FAT-fs (loop1): Directory bread(block 73) failed
[  339.716011][ T3605] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  339.860694][   T96] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.890384][   T96] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.903288][ T2964] usb 3-1: device descriptor read/64, error -71
[  339.949505][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  339.980641][   T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.002143][   T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.023705][ T2964] usb usb3-port1: attempt power cycle
[  340.041931][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  340.061102][   T27] audit: type=1804 audit(1719475433.382:278): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1074" name="/root/syzkaller.0Tgrbo/148/cgroup.controllers" dev="sda1" ino=2013 res=1 errno=0
[  340.123391][ T3605] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.148722][ T3605] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  340.183667][ T3605] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  340.192994][ T3605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.205361][ T3605] usb 5-1: config 0 descriptor??
[  340.284462][    C1] sd 0:0:1:0: [sda] tag#5894 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  340.294952][    C1] sd 0:0:1:0: [sda] tag#5894 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  340.397074][ T6974] binder: 6971:6974 unknown command 0
[  340.511401][ T6974] binder: 6971:6974 ioctl c0306201 20000280 returned -22
[  341.277548][ T6984] loop0: detected capacity change from 0 to 256
[  341.318462][ T3605] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  341.594778][ T3605] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  341.733150][   T27] audit: type=1326 audit(1719475435.052:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.1080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7775ae9 code=0x0
[  342.175661][ T3605] usb 2-1: Using ep0 maxpacket: 8
[  342.186399][ T6991] loop2: detected capacity change from 0 to 256
[  342.215756][ T6991] FAT-fs (loop2): Directory bread(block 64) failed
[  342.222474][ T6991] FAT-fs (loop2): Directory bread(block 65) failed
[  342.235278][ T6991] FAT-fs (loop2): Directory bread(block 66) failed
[  342.242258][ T6991] FAT-fs (loop2): Directory bread(block 67) failed
[  342.253913][ T6991] FAT-fs (loop2): Directory bread(block 68) failed
[  342.260571][ T6991] FAT-fs (loop2): Directory bread(block 69) failed
[  342.272125][ T6991] FAT-fs (loop2): Directory bread(block 70) failed
[  342.280213][ T6991] FAT-fs (loop2): Directory bread(block 71) failed
[  342.297291][ T6991] FAT-fs (loop2): Directory bread(block 72) failed
[  342.309950][ T6991] FAT-fs (loop2): Directory bread(block 73) failed
[  342.446539][ T6211] usb 5-1: USB disconnect, device number 39
[  342.493209][ T2964] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  342.513520][ T3605] usb 2-1: config 32 has an invalid interface number: 77 but max is 1
[  342.522756][ T3605] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  342.531848][ T3605] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping
[  342.542266][ T3605] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config
[  342.553295][ T3605] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2
[  342.562714][ T3605] usb 2-1: config 32 has no interface number 0
[  342.570520][ T3605] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64
[  342.582621][ T3605] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  342.598345][ T3605] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  342.615455][ T3605] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64
[  342.626994][ T3605] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping
[  342.638043][ T3605] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping
[  342.649140][ T3605] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  342.660526][ T3605] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  342.671875][ T3605] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  342.689033][ T3605] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0
[  342.699385][ T3605] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12
[  342.714157][ T3605] usb 2-1: config 32 interface 77 has no altsetting 0
[  342.759099][ T3612] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  342.820247][ T7002] loop4: detected capacity change from 0 to 8
[  342.846297][ T7001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1087'.
[  342.853549][ T2964] usb 4-1: config 184 has an invalid interface number: 90 but max is 0
[  342.863808][ T2964] usb 4-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config
[  342.875703][ T2964] usb 4-1: config 184 has no interface number 0
[  342.875762][ T2964] usb 4-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  342.887855][ T6211] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  342.893620][ T2964] usb 4-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  342.901229][ T3605] usb 2-1: Dual-Role OTG device on HNP port
[  342.921011][ T2964] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24
[  342.932265][ T2964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.945897][ T3605] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33
[  342.958909][ T3605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.973149][ T3605] usb 2-1: Product: syz
[  342.977349][ T3605] usb 2-1: Manufacturer: syz
[  342.982190][ T3605] usb 2-1: SerialNumber: syz
[  343.123375][ T6211] usb 3-1: device descriptor read/64, error -71
[  343.133484][ T3612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.149594][ T3612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.160046][ T3612] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  343.169400][ T3612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.180026][ T3612] usb 1-1: config 0 descriptor??
[  343.194348][ T3605] option 2-1:32.77: GSM modem (1-port) converter detected
[  343.197164][ T2964] usb 4-1: USB disconnect, device number 41
[  343.219246][ T3605] usb 2-1: USB disconnect, device number 38
[  343.232613][ T3605] option 2-1:32.77: device disconnected
[  343.373192][   T26] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  343.413238][ T6211] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  343.633197][ T6211] usb 3-1: device descriptor read/64, error -71
[  343.666903][ T3612] wacom 0003:056A:0331.0024: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[  343.753498][ T6211] usb usb3-port1: attempt power cycle
[  343.773494][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.784871][   T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.794850][   T26] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  343.804309][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.814596][   T26] usb 5-1: config 0 descriptor??
[  343.869152][ T3612] usb 1-1: USB disconnect, device number 33
[  343.972497][    C1] sd 0:0:1:0: [sda] tag#5900 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  343.982992][    C1] sd 0:0:1:0: [sda] tag#5900 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  344.173821][ T6211] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  344.273752][ T6211] usb 3-1: device descriptor read/8, error -71
[  344.279220][ T7006] netlink: 'syz.4.1089': attribute type 4 has an invalid length.
[  344.373263][ T7006] netlink: 'syz.4.1089': attribute type 4 has an invalid length.
[  344.559604][ T7020] loop3: detected capacity change from 0 to 256
[  344.573728][ T6211] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  344.724091][ T7020] FAT-fs (loop3): Directory bread(block 64) failed
[  344.747866][   T26] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0
[  344.780115][ T7020] FAT-fs (loop3): Directory bread(block 65) failed
[  344.862662][ T7020] FAT-fs (loop3): Directory bread(block 66) failed
[  344.882673][ T7027] loop0: detected capacity change from 0 to 256
[  344.929906][ T7020] FAT-fs (loop3): Directory bread(block 67) failed
[  345.005617][ T7020] FAT-fs (loop3): Directory bread(block 68) failed
[  345.065442][ T7020] FAT-fs (loop3): Directory bread(block 69) failed
[  345.103288][ T7020] FAT-fs (loop3): Directory bread(block 70) failed
[  345.154899][ T7020] FAT-fs (loop3): Directory bread(block 71) failed
[  345.221022][ T7020] FAT-fs (loop3): Directory bread(block 72) failed
[  345.281592][ T7020] FAT-fs (loop3): Directory bread(block 73) failed
[  345.428515][ T6211] usb 3-1: device descriptor read/8, error -71
[  345.434896][   T26] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0
[  345.456914][   T26] arvo 0003:1E7D:30D4.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0
[  345.489740][   T26] arvo 0003:1E7D:30D4.0025: couldn't init struct arvo_device
[  345.499689][   T26] arvo 0003:1E7D:30D4.0025: couldn't install keyboard
[  345.524471][   T26] arvo: probe of 0003:1E7D:30D4.0025 failed with error -71
[  345.554980][   T26] usb 5-1: USB disconnect, device number 40
[  345.579246][ T6211] usb usb3-port1: unable to enumerate USB device
[  345.634067][ T7034] loop4: detected capacity change from 0 to 1024
[  345.646768][ T7034] ext3: Bad value for 'sb'
[  345.934226][ T3594] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  345.942037][   T27] audit: type=1326 audit(1719475439.262:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.1095" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7775ae9 code=0x0
[  345.994324][ T7045] loop1: detected capacity change from 0 to 8
[  346.035884][ T7039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1100'.
[  346.124385][ T2964] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  346.133174][ T6211] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  346.383447][ T3594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  346.402028][ T3594] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  346.415319][ T6211] usb 3-1: Using ep0 maxpacket: 32
[  346.421117][ T3594] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  346.431172][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.441283][ T3594] usb 4-1: config 0 descriptor??
[  346.489081][ T3594] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  346.493572][ T2964] usb 5-1: config 184 has an invalid interface number: 90 but max is 0
[  346.504994][ T2964] usb 5-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config
[  346.520765][ T2964] usb 5-1: config 184 has no interface number 0
[  346.527188][ T2964] usb 5-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  346.538605][ T2964] usb 5-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  346.552016][ T6211] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  346.552036][ T2964] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24
[  346.566267][ T6211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  346.570010][ T2964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.647485][    C1] sd 0:0:1:0: [sda] tag#5894 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  346.657999][    C1] sd 0:0:1:0: [sda] tag#5894 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  346.669467][ T7053] binder: 7052:7053 unknown command 0
[  346.674972][ T7053] binder: 7052:7053 ioctl c0306201 20000280 returned -22
[  346.734335][   T27] audit: type=1326 audit(1719475440.062:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.0.1106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7775ae9 code=0x0
[  346.853391][ T6211] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  346.865980][ T6211] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  346.877439][ T6211] usb 3-1: Product: syz
[  346.881701][ T6211] usb 3-1: Manufacturer: syz
[  346.890253][ T6211] usb 3-1: SerialNumber: syz
[  346.900626][ T6211] usb 3-1: config 0 descriptor??
[  346.920507][ T3594] usb 5-1: USB disconnect, device number 41
[  346.949309][ T6211] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  346.961421][ T6211] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  347.134165][ T7060] random: crng reseeded on system resumption
[  348.725197][ T3605] usb 4-1: USB disconnect, device number 42
[  348.788493][ T3596] usb 3-1: USB disconnect, device number 37
[  348.809188][ T3596] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  348.860562][ T7081] loop4: detected capacity change from 0 to 256
[  348.925365][   T27] audit: type=1804 audit(1719475442.252:282): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1113" name="/root/syzkaller.VZviPQ/102/cgroup.controllers" dev="sda1" ino=2022 res=1 errno=0
[  348.941179][ T7084] loop2: detected capacity change from 0 to 1024
[  348.954080][ T7081] FAT-fs (loop4): Directory bread(block 64) failed
[  348.966868][ T7081] FAT-fs (loop4): Directory bread(block 65) failed
[  348.980940][ T7081] FAT-fs (loop4): Directory bread(block 66) failed
[  348.984669][ T7084] ext3: Bad value for 'sb'
[  349.011594][ T7081] FAT-fs (loop4): Directory bread(block 67) failed
[  349.024399][ T7081] FAT-fs (loop4): Directory bread(block 68) failed
[  349.033410][  T151] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  349.049040][ T7081] FAT-fs (loop4): Directory bread(block 69) failed
[  349.063360][ T7081] FAT-fs (loop4): Directory bread(block 70) failed
[  349.080319][ T7081] FAT-fs (loop4): Directory bread(block 71) failed
[  349.090574][ T7081] FAT-fs (loop4): Directory bread(block 72) failed
[  349.099810][ T7087] loop1: detected capacity change from 0 to 256
[  349.106463][ T7081] FAT-fs (loop4): Directory bread(block 73) failed
[  349.420119][  T151] usb 1-1: device descriptor read/64, error -71
[  349.513536][   T27] audit: type=1326 audit(1719475442.772:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.1.1114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1175175ae9 code=0x0
[  349.723344][  T151] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  349.963219][  T151] usb 1-1: device descriptor read/64, error -71
[  350.084117][  T151] usb usb1-port1: attempt power cycle
[  350.308087][    C1] sd 0:0:1:0: [sda] tag#5897 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  350.318625][    C1] sd 0:0:1:0: [sda] tag#5897 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  350.351853][ T7097] binder: 7095:7097 unknown command 0
[  350.408861][ T7097] binder: 7095:7097 ioctl c0306201 20000280 returned -22
[  350.523167][  T151] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  350.627337][  T151] usb 1-1: device descriptor read/8, error -71
[  350.914777][  T151] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  350.976448][ T7105] loop4: detected capacity change from 0 to 128
[  350.987185][ T7105] EXT4-fs: Ignoring removed nobh option
[  351.003393][  T151] usb 1-1: device descriptor read/8, error -71
[  351.010690][ T7105] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  351.029103][ T7105] ext4 filesystem being mounted at /root/syzkaller.8wbjfx/91/mnt supports timestamps until 2038 (0x7fffffff)
[  351.143427][  T151] usb usb1-port1: unable to enumerate USB device
[  351.163331][ T7105] loop4: detected capacity change from 128 to 0
[  351.241920][ T5661] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  351.285249][ T5661] EXT4-fs error (device loop4): htree_dirblock_to_tree:1082: inode #2: comm syz-executor: Directory block failed checksum
[  351.332084][ T5661] EXT4-fs (loop4): unmounting filesystem.
[  351.488705][  T151] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  351.645498][ T3691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.738711][ T3691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.755386][  T151] usb 2-1: Using ep0 maxpacket: 16
[  351.839191][ T3594] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  351.855865][ T3691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.893365][  T151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.914136][  T151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  351.941826][  T151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  351.960680][ T3691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.961906][  T151] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  352.001028][ T7118] ieee802154 phy0 wpan0: encryption failed: -22
[  352.010317][  T151] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  352.125175][  T151] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  352.150624][  T151] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  352.159404][  T151] usb 2-1: Manufacturer: syz
[  352.171829][  T151] usb 2-1: config 0 descriptor??
[  352.233409][ T3594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.251090][ T3594] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  352.264433][ T3594] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  352.273699][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.280749][ T7124] loop2: detected capacity change from 0 to 256
[  352.289222][ T3594] usb 4-1: config 0 descriptor??
[  352.320118][ T7124] FAT-fs (loop2): Directory bread(block 64) failed
[  352.330103][ T7124] FAT-fs (loop2): Directory bread(block 65) failed
[  352.337103][ T7124] FAT-fs (loop2): Directory bread(block 66) failed
[  352.349525][ T7124] FAT-fs (loop2): Directory bread(block 67) failed
[  352.356577][ T7124] FAT-fs (loop2): Directory bread(block 68) failed
[  352.365798][ T7124] FAT-fs (loop2): Directory bread(block 69) failed
[  352.368410][ T3594] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  352.372800][ T7124] FAT-fs (loop2): Directory bread(block 70) failed
[  352.386822][ T7124] FAT-fs (loop2): Directory bread(block 71) failed
[  352.394115][ T7124] FAT-fs (loop2): Directory bread(block 72) failed
[  352.400701][ T7124] FAT-fs (loop2): Directory bread(block 73) failed
[  352.508588][ T3605] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  352.593151][  T151] rc_core: IR keymap rc-hauppauge not found
[  352.599316][  T151] Registered IR keymap rc-empty
[  352.605665][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  352.636893][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  352.674366][  T151] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  352.696610][  T151] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input104
[  352.723385][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  352.761751][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  352.769130][ T3605] usb 1-1: Using ep0 maxpacket: 32
[  352.805402][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  352.843590][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  352.863261][ T3594] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  352.876780][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  352.893722][ T3605] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  352.910560][ T3605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.919859][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  352.945340][ T3605] usb 1-1: config 0 descriptor??
[  352.983701][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  352.995248][ T3605] gspca_main: sunplus-2.14.0 probing 041e:400b
[  353.013226][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  353.043409][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  353.078033][  T151] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  353.234128][  T151] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  353.242230][  T151] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  353.257223][  T151] usb 2-1: USB disconnect, device number 39
[  353.408461][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.431303][ T3594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.460815][ T3594] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  353.490117][ T3594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.529288][ T3691] device hsr_slave_0 left promiscuous mode
[  353.545195][ T3691] device hsr_slave_1 left promiscuous mode
[  353.555381][ T3594] usb 3-1: config 0 descriptor??
[  353.579068][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.621676][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.654543][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.662711][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.672053][ T3691] device bridge_slave_1 left promiscuous mode
[  353.678443][ T3691] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.689205][ T3691] device bridge_slave_0 left promiscuous mode
[  353.695920][ T3691] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.710216][ T3691] device veth1_macvtap left promiscuous mode
[  353.717572][ T3691] device veth0_macvtap left promiscuous mode
[  353.723896][ T3691] device veth1_vlan left promiscuous mode
[  353.729765][ T3691] device veth0_vlan left promiscuous mode
[  353.868199][   T27] audit: type=1326 audit(1719475447.192:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.0.1128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ee7775ae9 code=0x0
[  354.073397][ T3605] gspca_sunplus: reg_r err -110
[  354.082117][ T3605] sunplus: probe of 1-1:0.0 failed with error -110
[  354.228274][ T3691] team0 (unregistering): Port device team_slave_1 removed
[  354.263930][ T3691] team0 (unregistering): Port device team_slave_0 removed
[  354.283807][ T3691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.299084][ T3691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.345580][ T3594] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0
[  354.357170][ T3594] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0
[  354.370642][ T3594] arvo 0003:1E7D:30D4.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  354.378018][ T3691] bond0 (unregistering): Released all slaves
[  354.413306][ T3605] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  354.451467][ T7146] netlink: 'syz.2.1130': attribute type 4 has an invalid length.
[  354.459853][ T7144] netlink: 'syz.2.1130': attribute type 4 has an invalid length.
[  354.551494][   T26] usb 4-1: USB disconnect, device number 43
[  354.563543][ T3594] arvo 0003:1E7D:30D4.0026: couldn't init struct arvo_device
[  354.571146][ T3594] arvo 0003:1E7D:30D4.0026: couldn't install keyboard
[  354.579828][ T3594] arvo: probe of 0003:1E7D:30D4.0026 failed with error -71
[  354.594705][ T3594] usb 3-1: USB disconnect, device number 38
[  354.793451][ T3605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.827877][ T3605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.847658][ T3605] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  354.873574][ T3605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.888304][ T3605] usb 2-1: config 0 descriptor??
[  355.077874][   T26] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  355.407013][ T3605] wacom 0003:056A:0331.0027: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  355.523321][   T26] usb 4-1: config index 0 descriptor too short (expected 65535, got 27)
[  355.531706][   T26] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  355.563112][   T26] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  355.573566][   T26] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  355.582932][   T26] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  355.608502][ T3595] usb 2-1: USB disconnect, device number 40
[  355.613219][   T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.790774][   T26] usb 1-1: USB disconnect, device number 38
[  356.491147][ T7168] ieee802154 phy0 wpan0: encryption failed: -22
[  356.902285][ T7175] loop2: detected capacity change from 0 to 256
[  356.965385][ T7175] FAT-fs (loop2): Directory bread(block 64) failed
[  356.987873][ T7175] FAT-fs (loop2): Directory bread(block 65) failed
[  357.003251][ T7175] FAT-fs (loop2): Directory bread(block 66) failed
[  357.020044][ T7175] FAT-fs (loop2): Directory bread(block 67) failed
[  357.039837][ T7175] FAT-fs (loop2): Directory bread(block 68) failed
[  357.056871][ T7175] FAT-fs (loop2): Directory bread(block 69) failed
[  357.073291][ T7175] FAT-fs (loop2): Directory bread(block 70) failed
[  357.084673][ T7175] FAT-fs (loop2): Directory bread(block 71) failed
[  357.113416][ T7175] FAT-fs (loop2): Directory bread(block 72) failed
[  357.142856][ T7175] FAT-fs (loop2): Directory bread(block 73) failed
[  357.827799][ T7184] loop2: detected capacity change from 0 to 1024
[  357.844583][ T7184] ext3: Bad value for 'sb'
[  357.863744][ T3612] usb 4-1: USB disconnect, device number 44
[  358.293273][   T26] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  358.663196][ T3612] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  358.693513][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.720457][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.757739][   T26] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  358.800630][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.840186][   T26] usb 3-1: config 0 descriptor??
[  358.955276][ T3595] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  359.044166][ T3612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.091600][ T3612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.105570][ T7192] netlink: 'syz.2.1144': attribute type 4 has an invalid length.
[  359.121834][ T3612] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  359.154989][ T3612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.165453][ T7201] netlink: 'syz.2.1144': attribute type 4 has an invalid length.
[  359.196907][ T3612] usb 2-1: config 0 descriptor??
[  359.254629][ T3595] usb 4-1: Using ep0 maxpacket: 16
[  359.374846][ T3595] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  359.395752][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  359.408759][ T3595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  359.426668][ T3595] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  359.439158][ T3595] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  359.455165][   T26] arvo 0003:1E7D:30D4.0028: unknown main item tag 0x0
[  359.485614][   T26] arvo 0003:1E7D:30D4.0028: unknown main item tag 0x0
[  359.499707][   T26] arvo 0003:1E7D:30D4.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  359.533435][ T3595] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  359.542541][ T3595] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  359.579270][ T3595] usb 4-1: Manufacturer: syz
[  359.586873][ T3595] usb 4-1: config 0 descriptor??
[  359.673561][   T26] arvo 0003:1E7D:30D4.0028: couldn't init struct arvo_device
[  359.685808][   T26] arvo 0003:1E7D:30D4.0028: couldn't install keyboard
[  359.763382][   T26] arvo: probe of 0003:1E7D:30D4.0028 failed with error -71
[  359.890623][   T26] usb 3-1: USB disconnect, device number 39
[  359.922884][ T3612] wacom 0003:056A:0331.0029: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0
[  360.555028][ T3612] usb 2-1: USB disconnect, device number 41
[  360.674331][ T7217] ieee802154 phy0 wpan0: encryption failed: -22
[  360.813276][ T3595] rc_core: IR keymap rc-hauppauge not found
[  360.819241][ T3595] Registered IR keymap rc-empty
[  360.861306][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  361.540638][ T7225] loop2: detected capacity change from 0 to 1024
[  361.564910][ T7225] ext3: Bad value for 'sb'
[  361.715582][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  361.743869][ T3595] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  361.759122][ T3595] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input111
[  361.783987][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  361.813225][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  361.844000][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  361.873290][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  361.903314][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  361.933435][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  361.963275][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  361.993239][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  362.023270][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  362.054880][ T3595] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  362.084141][ T3595] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  362.092186][ T3595] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  362.102374][ T3595] usb 4-1: USB disconnect, device number 45
[  362.463239][ T3595] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  362.720553][    C1] sd 0:0:1:0: [sda] tag#5915 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  362.731091][    C1] sd 0:0:1:0: [sda] tag#5915 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  362.768452][ T7239] binder: 7236:7239 unknown command 0
[  362.800060][ T7239] binder: 7236:7239 ioctl c0306201 20000280 returned -22
[  362.823446][ T3595] usb 4-1: config index 0 descriptor too short (expected 65535, got 27)
[  362.840102][ T3595] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  362.857858][ T3595] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  362.888268][ T3595] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  362.918115][ T3595] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  362.952366][ T3595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.123867][ T3612] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  363.488046][ T3612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.511852][ T3612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.532328][ T3612] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  363.542636][ T3612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.568623][ T3612] usb 3-1: config 0 descriptor??
[  363.819361][ T7240] netlink: 'syz.2.1159': attribute type 4 has an invalid length.
[  363.872463][ T7240] netlink: 'syz.2.1159': attribute type 4 has an invalid length.
[  364.144549][ T3612] arvo 0003:1E7D:30D4.002A: unknown main item tag 0x0
[  364.151394][ T3612] arvo 0003:1E7D:30D4.002A: unknown main item tag 0x0
[  364.159812][ T3612] arvo 0003:1E7D:30D4.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  364.363405][ T3612] arvo 0003:1E7D:30D4.002A: couldn't init struct arvo_device
[  364.372898][ T3612] arvo 0003:1E7D:30D4.002A: couldn't install keyboard
[  364.403911][ T3612] arvo: probe of 0003:1E7D:30D4.002A failed with error -71
[  364.419596][ T7250] loop1: detected capacity change from 0 to 16
[  364.424241][ T3612] usb 3-1: USB disconnect, device number 40
[  364.432142][ T7250] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  364.573256][ T7252] ieee802154 phy0 wpan0: encryption failed: -22
[  364.642305][ T7254] loop1: detected capacity change from 0 to 256
[  364.663358][  T151] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  364.679638][ T7254] FAT-fs (loop1): Directory bread(block 64) failed
[  364.687719][ T7254] FAT-fs (loop1): Directory bread(block 65) failed
[  364.698394][ T7254] FAT-fs (loop1): Directory bread(block 66) failed
[  364.706303][ T7254] FAT-fs (loop1): Directory bread(block 67) failed
[  364.713726][ T7254] FAT-fs (loop1): Directory bread(block 68) failed
[  364.720852][ T7254] FAT-fs (loop1): Directory bread(block 69) failed
[  364.728283][ T7254] FAT-fs (loop1): Directory bread(block 70) failed
[  364.734977][ T7254] FAT-fs (loop1): Directory bread(block 71) failed
[  364.741764][ T7254] FAT-fs (loop1): Directory bread(block 72) failed
[  364.748581][ T7254] FAT-fs (loop1): Directory bread(block 73) failed
[  365.034263][  T151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.045478][  T151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.055386][  T151] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  365.064608][  T151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.066338][  T151] usb 1-1: config 0 descriptor??
[  365.081800][ T3605] usb 4-1: USB disconnect, device number 46
[  365.548389][  T151] wacom 0003:056A:0331.002B: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[  365.752460][ T3612] usb 1-1: USB disconnect, device number 39
[  365.857989][ T7263] loop3: detected capacity change from 0 to 1024
[  365.866191][ T7263] ext3: Bad value for 'sb'
[  366.862041][ T7273] loop0: detected capacity change from 0 to 16
[  366.870307][ T7273] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  367.077395][ T7277] random: crng reseeded on system resumption
[  367.884898][    C1] sd 0:0:1:0: [sda] tag#5921 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  367.895367][    C1] sd 0:0:1:0: [sda] tag#5921 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01
[  367.919703][ T7278] binder: 7274:7278 unknown command 0
[  367.941581][ T7278] binder: 7274:7278 ioctl c0306201 20000280 returned -22
[  369.334820][ T7290] loop1: detected capacity change from 0 to 256
[  369.358735][   T27] audit: type=1804 audit(1719475462.682:285): pid=7286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1173" name="/root/syzkaller.RSRGiW/73/cgroup.controllers" dev="sda1" ino=2034 res=1 errno=0
[  369.391288][ T7290] FAT-fs (loop1): Directory bread(block 64) failed
[  369.398232][ T7290] FAT-fs (loop1): Directory bread(block 65) failed
[  369.405048][ T7290] FAT-fs (loop1): Directory bread(block 66) failed
[  369.411800][ T7290] FAT-fs (loop1): Directory bread(block 67) failed
[  369.419935][ T7290] FAT-fs (loop1): Directory bread(block 68) failed
[  369.426741][ T7290] FAT-fs (loop1): Directory bread(block 69) failed
[  369.434953][ T7290] FAT-fs (loop1): Directory bread(block 70) failed
[  369.441687][ T7290] FAT-fs (loop1): Directory bread(block 71) failed
[  369.449477][ T7290] FAT-fs (loop1): Directory bread(block 72) failed
[  369.456218][ T7290] FAT-fs (loop1): Directory bread(block 73) failed
[  369.583237][ T3596] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  369.593294][ T3594] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  369.618246][ T7296] loop1: detected capacity change from 0 to 1024
[  369.637403][ T7296] ext3: Bad value for 'sb'
[  369.963293][ T3594] usb 4-1: config index 0 descriptor too short (expected 65535, got 27)
[  369.971904][ T3594] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[  369.980864][ T3594] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  369.983398][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  369.991453][ T3594] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255
[  370.006783][ T3596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  370.011632][ T3594] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  370.030527][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.032033][ T3596] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  370.048617][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.058665][ T3596] usb 3-1: config 0 descriptor??
[  370.308457][ T7288] netlink: 'syz.2.1175': attribute type 4 has an invalid length.
[  370.332030][ T7288] netlink: 'syz.2.1175': attribute type 4 has an invalid length.
[  370.575267][ T3596] arvo 0003:1E7D:30D4.002C: unknown main item tag 0x0
[  370.582222][ T3596] arvo 0003:1E7D:30D4.002C: unknown main item tag 0x0
[  370.590299][ T3596] arvo 0003:1E7D:30D4.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  370.783497][ T3596] arvo 0003:1E7D:30D4.002C: couldn't init struct arvo_device
[  370.791112][ T3596] arvo 0003:1E7D:30D4.002C: couldn't install keyboard
[  370.799208][ T3596] arvo: probe of 0003:1E7D:30D4.002C failed with error -71
[  370.809328][ T3596] usb 3-1: USB disconnect, device number 41
[  371.283320][ T3594] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  371.343631][   T26] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  371.673457][ T3594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.688949][ T3594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.698843][ T3594] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  371.709055][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.718761][ T3594] usb 1-1: config 0 descriptor??
[  371.724092][   T26] usb 2-1: config 184 has an invalid interface number: 90 but max is 0
[  371.732401][   T26] usb 2-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config
[  371.743478][   T26] usb 2-1: config 184 has no interface number 0
[  371.750162][   T26] usb 2-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  371.762373][   T26] usb 2-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  371.776678][   T26] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24
[  371.786222][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.217125][ T3594] wacom 0003:056A:0331.002D: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0
[  372.322293][ T3596] usb 4-1: USB disconnect, device number 47
[  372.416278][ T3594] usb 1-1: USB disconnect, device number 40
[  372.642840][ T7310] loop2: detected capacity change from 0 to 16
[  372.671631][ T7310] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  372.736695][ T7312] binder: 7309:7312 unknown command 0
[  372.747818][ T7312] binder: 7309:7312 ioctl c0306201 20000280 returned -22
[  373.220535][ T7316] random: crng reseeded on system resumption
[  374.146147][ T3596] usb 2-1: USB disconnect, device number 42
[  375.872868][ T7327] loop3: detected capacity change from 0 to 1024
[  375.881444][ T7327] ext3: Bad value for 'sb'
[  375.896485][   T27] audit: type=1804 audit(1719475469.222:286): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1188" name="/root/syzkaller.RSRGiW/79/cgroup.controllers" dev="sda1" ino=2037 res=1 errno=0
[  375.903137][ T7328] ieee802154 phy0 wpan0: encryption failed: -22
[  376.082989][ T7336] loop3: detected capacity change from 0 to 16
[  376.093980][ T7336] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  376.273240][ T3605] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  376.343184][ T3594] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  376.443263][ T3612] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  376.683397][ T3605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.697258][ T3605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.707489][ T3605] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  376.716853][ T3605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.726137][ T3605] usb 2-1: config 0 descriptor??
[  376.763354][ T3594] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  376.776253][ T3594] usb 1-1: too many endpoints for config 17 interface 0 altsetting 255: 255, using maximum allowed: 30
[  376.787509][ T3594] usb 1-1: config 17 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  376.800922][ T3594] usb 1-1: config 17 interface 0 has no altsetting 0
[  376.807814][ T3612] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  376.807866][ T3612] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  376.807893][ T3612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.831477][ T3612] usb 4-1: config 0 descriptor??
[  376.838359][ T3594] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  376.838390][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.885035][ T3594] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1
[  376.895345][ T3612] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  376.968288][ T7332] netlink: 'syz.1.1192': attribute type 4 has an invalid length.
[  376.976863][ T7332] netlink: 'syz.1.1192': attribute type 4 has an invalid length.
[  377.225265][ T3605] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0
[  377.232390][ T3605] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0
[  377.240293][ T3605] arvo 0003:1E7D:30D4.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[  377.443372][ T3605] arvo 0003:1E7D:30D4.002E: couldn't init struct arvo_device
[  377.450917][ T3605] arvo 0003:1E7D:30D4.002E: couldn't install keyboard
[  377.458610][ T3605] arvo: probe of 0003:1E7D:30D4.002E failed with error -71
[  377.467752][ T3605] usb 2-1: USB disconnect, device number 43
[  378.820217][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  378.826779][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  379.086285][ T3596] usb 1-1: USB disconnect, device number 41
[  379.226491][ T3594] usb 4-1: USB disconnect, device number 48
[  379.733322][ T3612] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  380.103332][ T3612] usb 3-1: config 184 has an invalid interface number: 90 but max is 0
[  380.111665][ T3612] usb 3-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config
[  380.122087][ T3612] usb 3-1: config 184 has no interface number 0
[  380.128420][ T3612] usb 3-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  380.139478][ T3612] usb 3-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  380.152718][ T3612] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24
[  380.161808][ T3612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.170713][ T3566] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  380.179537][ T3566] Bluetooth: hci3: Injecting HCI hardware error event
[  380.190981][ T3551] Bluetooth: hci3: hardware error 0x00
[  380.408027][ T3612] usb 3-1: USB disconnect, device number 42
[  380.771324][ T7364] loop1: detected capacity change from 0 to 256
[  380.801505][   T27] audit: type=1804 audit(1719475474.122:287): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1202" name="/root/syzkaller.vtJtzb/21/cgroup.controllers" dev="sda1" ino=2038 res=1 errno=0
[  380.825018][    C1] vkms_vblank_simulate: vblank timer overrun
[  380.870004][ T7364] FAT-fs (loop1): Directory bread(block 64) failed
[  380.883785][ T7364] FAT-fs (loop1): Directory bread(block 65) failed
[  380.900752][ T7364] FAT-fs (loop1): Directory bread(block 66) failed
[  380.910806][ T7364] FAT-fs (loop1): Directory bread(block 67) failed
[  380.931183][ T7364] FAT-fs (loop1): Directory bread(block 68) failed
[  380.943310][ T7364] FAT-fs (loop1): Directory bread(block 69) failed
[  380.949988][ T7364] FAT-fs (loop1): Directory bread(block 70) failed
[  380.957993][ T7366] loop0: detected capacity change from 0 to 1024
[  380.976690][ T7366] ext3: Bad value for 'sb'
[  380.985945][ T7364] FAT-fs (loop1): Directory bread(block 71) failed
[  380.992735][ T7364] FAT-fs (loop1): Directory bread(block 72) failed
[  381.001838][ T7364] FAT-fs (loop1): Directory bread(block 73) failed
[  381.493193][ T3612] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  382.253325][ T3551] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  382.673428][ T3612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.684432][ T3612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.694488][ T3612] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  382.703624][ T3612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.713014][ T3612] usb 3-1: config 0 descriptor??
[  382.958813][ T7372] netlink: 'syz.2.1206': attribute type 4 has an invalid length.
[  382.980638][ T7372] netlink: 'syz.2.1206': attribute type 4 has an invalid length.
[  383.432873][ T7391] random: crng reseeded on system resumption
[  384.287556][ T3596] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  384.296196][ T3612] usbhid 3-1:0.0: can't add hid device: -71
[  384.302244][ T3612] usbhid: probe of 3-1:0.0 failed with error -71
[  384.311069][ T3612] usb 3-1: USB disconnect, device number 43
[  384.707772][ T3596] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  384.718492][ T3596] usb 4-1: too many endpoints for config 17 interface 0 altsetting 255: 255, using maximum allowed: 30
[  384.734300][ T3596] usb 4-1: config 17 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  384.750208][ T3596] usb 4-1: config 17 interface 0 has no altsetting 0
[  384.759389][ T3596] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  384.771208][ T3596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.825025][ T3596] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1
[  386.256555][   T27] audit: type=1804 audit(1719475479.582:288): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1214" name="/root/syzkaller.0Tgrbo/180/cgroup.controllers" dev="sda1" ino=2040 res=1 errno=0
[  386.402505][ T7409] loop2: detected capacity change from 0 to 1024
[  386.410377][ T7409] ext3: Bad value for 'sb'
[  386.493290][ T3596] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  386.633198][ T3605] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  386.757262][ T3598] usb 4-1: USB disconnect, device number 49
[  386.863247][ T3596] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  386.876615][ T3596] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  386.885758][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.894957][ T3596] usb 2-1: config 0 descriptor??
[  386.934981][ T3596] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  387.003345][ T3605] usb 1-1: config 184 has an invalid interface number: 90 but max is 0
[  387.011719][ T3605] usb 1-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config
[  387.022053][ T3605] usb 1-1: config 184 has no interface number 0
[  387.028400][ T3605] usb 1-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  387.039475][ T3605] usb 1-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  387.053258][ T3605] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24
[  387.062353][ T3605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.315832][ T3598] usb 1-1: USB disconnect, device number 42
[  388.535167][ T7417] loop0: detected capacity change from 0 to 16
[  388.542647][ T7417] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  389.023325][ T3595] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  389.413674][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.467623][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  389.497253][ T3595] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  389.508107][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.552913][ T3595] usb 3-1: config 0 descriptor??
[  389.578736][ T3598] usb 2-1: USB disconnect, device number 44
[  389.916242][ T7432] random: crng reseeded on system resumption
[  390.741612][ T3595] wacom 0003:056A:0331.002F: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.2-1/input0
[  390.803420][ T3596] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  390.825185][ T3595] usb 3-1: USB disconnect, device number 44
[  391.163530][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.174748][ T3596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.184578][ T3596] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  391.193903][ T3596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.203482][ T3596] usb 1-1: config 0 descriptor??
[  391.450898][ T7430] netlink: 'syz.0.1223': attribute type 4 has an invalid length.
[  391.479199][ T7430] netlink: 'syz.0.1223': attribute type 4 has an invalid length.
[  391.783269][ T3596] usbhid 1-1:0.0: can't add hid device: -71
[  391.789331][ T3596] usbhid: probe of 1-1:0.0 failed with error -71
[  391.797696][ T3596] usb 1-1: USB disconnect, device number 43
[  391.885133][ T7441] loop3: detected capacity change from 0 to 128
[  391.904361][ T7441] EXT4-fs: Ignoring removed nobh option
[  391.936853][ T7441] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  391.951754][ T7441] ext4 filesystem being mounted at /root/syzkaller.vtJtzb/27/mnt supports timestamps until 2038 (0x7fffffff)
[  392.023185][ T7441] loop3: detected capacity change from 128 to 0
[  392.048932][ T6844] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  392.065990][ T6844] EXT4-fs error (device loop3): htree_dirblock_to_tree:1082: inode #2: comm syz-executor: Directory block failed checksum
[  392.099541][ T6844] EXT4-fs (loop3): unmounting filesystem.
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
remote cover enable write trace failed (errno 17)
SYZFAIL: repeatedly failed to execute the program
proc=4 req=1123 state=1 status=1 (errno 9: Bad file descriptor)
[  392.245485][  T151] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  392.273223][ T3595] usb 3-1: new high-speed USB device number 45 using dummy_hcd