last executing test programs:

15.104875824s ago: executing program 2 (id=1519):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c7072656665727265645f736c6f743d30303030303030303030303030303030303030312c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00b83578110c8182871d1a888ab910bda6ed5eb8d85850b69e5f00a4b2822944f8a40011442cbdd903ae8f5dbd229f91fe1093b9e1d8042b3023b0ec8f09897497044a104701d3013512e0487b6bd6650f232292d8b0155a94728bba1a8248fed123795bcc184683b33d0d5f4455ea61c1cb567c01edd33f14c229437ce876bf88798ec1e2f28b87b591031c3d50710d9cc51b760aff0105a5c3772f54bdf7395bb2bb7b4a0323ca"], 0x1, 0x4432, &(0x7f0000004480)="$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")
r0 = syz_io_uring_setup(0x6249, &(0x7f0000000080), 0x0, &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1e, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

13.307547002s ago: executing program 4 (id=1524):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x3c, r2, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x4a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xa8, 0x36}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008055}, 0x44040)

13.297986483s ago: executing program 2 (id=1525):
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
userfaultfd(0x80001)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x9, 0x4)
setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000003d80)=0x2, 0x4)

9.82780862s ago: executing program 4 (id=1534):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xc, 0x4, 0x0, 0x2, 0x30, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x58, 0x0, 0x5, [0x401, 0x5, 0x400]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x1c, 0x3, 0x8}, @noop]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9.75887677s ago: executing program 0 (id=1535):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="000c00e14872290000000000"], 0x0, 0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@local, @initdev, <r1=>0x0}, &(0x7f00000001c0)=0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40080, 0x0)
io_setup(0x4, &(0x7f0000010440)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0xfdfe}])
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r5, r4, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)

9.213399734s ago: executing program 4 (id=1537):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0x10, 0x6, "4f982237ba41"}, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18ef60c00000ce3f04cd8c7909cb5c91c6065bee5b95000000000008000000a25795ca0cc45914a1009757ad8562a5486c357e606d3b355a4d3c8ae7f3e63ab4f3c85ddb65955559b8fad825e415a376dad188cf25a7dbc83cb4ae125d1df422be97c7fafdb96ae6ad2ebdcf0598161e89b0e5b3a5d6f9b94b2043268f7c71ca7ac09bea1aed3853012fda942597d0ffc8f8c671f7406401fd754ff6323f63a1ebda3443d1"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000000000000002"])

9.140022394s ago: executing program 2 (id=1538):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000002304e800000000000000fa850000d6cb707a807e637e128c8c688c4b08e5c591a91e2b7f271313d71f5fd3c88758f449ce4230273aee4e66d08d90087e32e7595169631c9d8a5bb62b0c7eaa2691f039811098320b60cc5453a8521a86e1008000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
iopl(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3d, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0xc000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0)

8.117623219s ago: executing program 2 (id=1539):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket(0x2b, 0x1, 0x1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

8.116689339s ago: executing program 3 (id=1540):
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2000412, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="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"], 0x0, 0x9eb8, &(0x7f0000020ec0)="$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")
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c696f636861727365743d6370313235352c756d61736b3d3030303030303030303030303030303030303030303033452c757466383d312cb54c8a34786c6174653d312c757466383d312c"], 0x1, 0x235, &(0x7f00000002c0)="$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")
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x200c590, &(0x7f0000000380)={[{@dioread_nolock}, {@minixdf}, {@noblock_validity}, {@nouid32}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x12, 0x4f2, &(0x7f0000000a40)="$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")
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[])
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0)
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x0, 0x5, 0x3, 0x0, 0x0, "f759ca14860e00", '\x00', "03000500", "f859ad13", ["8bada940ed86af0a00", "c2a4a1104ecfc02000000040", '\x00', "00113a071fa0fcd9b100"]})
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil)
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000140)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet(0x2, 0x1, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000080)=@ready={0x0, 0x0, 0x8, "f6cdb1c3", {0x1, 0xb, 0x51, 0x1, 0x10}})

8.04159438s ago: executing program 2 (id=1541):
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f0000000480)={[{@dmode={'dmode', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@anchor={'anchor', 0x3d, 0x4}}, {@shortad}, {@mode={'mode', 0x3d, 0x1}}, {@gid_ignore}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0x1, 0xc3f, &(0x7f0000000f00)="$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")
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special})
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000100))
poll(0x0, 0x0, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x48, 0x0, 0x400000a, 0x0, 0x0, @void, @value}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0xffffd845, 0x101, 0x4, 0x80000000, 0x14, "8c180ec25822a0b3a8bf0f8758db79e90e231c"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x1b, 0x1, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4000001)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)

7.721106891s ago: executing program 2 (id=1542):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xfffa, [0xfffffffc, 0xffffffff], 0xfffd}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmmsg$inet(r2, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="08cc6c9ce466c22e1eec39a0ce755f74315fd0835e6dac41295fc8e6bcc815dcfa29479b2b85976c9d8cd311449bf8cb6724fbdc02665d0ff70a5f3affa2f0737435237283ee4d418ae2086ef14d21326c10298dacc6632cc901ba1a62d76beaf4cea7bb50f11e5b8effb91f090f53aed39b5ab90457e50cb46c", 0x7a}], 0x1}}], 0x7ffffff8, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
recvmmsg(r3, &(0x7f00000010c0)=[{{&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000000700)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000640)=""/185, 0xb9}], 0x7, &(0x7f0000000780)=""/180, 0xb4}, 0x6}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000840)=""/215, 0xd7}], 0x2, &(0x7f0000000940)=""/179, 0xb3}, 0x7}, {{&(0x7f0000000a00)=@ieee802154, 0x80, &(0x7f0000000500)=[{&(0x7f0000000a80)=""/229, 0xe5}], 0x1, &(0x7f0000000b80)=""/250, 0xfa}, 0x3}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c80)=""/116, 0x74}, {&(0x7f0000000d00)=""/129, 0x81}, {&(0x7f0000000dc0)=""/39, 0x27}, {&(0x7f0000000e00)=""/43, 0x2b}, {&(0x7f0000000e40)=""/118, 0x76}, {&(0x7f0000000ec0)=""/27, 0x1b}, {&(0x7f0000000f00)=""/147, 0x93}], 0x7, &(0x7f0000001040)=""/112, 0x70}, 0x35}], 0x4, 0x12000, &(0x7f00000011c0)={0x0, 0x3938700})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
listen(r4, 0x0)
close(r4)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3, &(0x7f0000000000), 0x4)
r6 = accept$alg(r3, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="8b", 0x1)
recvmmsg(r6, &(0x7f0000006100), 0x400000000000682, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000003380)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x6b}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1)

6.690027496s ago: executing program 4 (id=1546):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a69bbc104f959941760f010203010902240001040000000904330202020c070c09050102100000fa00090582024000000000"], 0x0)
set_tid_address(0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001580)={0x1, 0x0, &(0x7f0000001540)=[0x0]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}, 0x1, 0x0, 0x0, 0x24004004}, 0x0)
accept4(r5, 0x0, 0x0, 0x0)
socket(0x840000000002, 0x3, 0x100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
syz_emit_ethernet(0x8e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, {[@rr={0x7, 0xf, 0x0, [@remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@multicast2}, {@multicast1}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x6, "3451559d"}, {0x0, 0x12, "b62816f151324af82ac460ca06000000"}]}]}}}}}}}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000001240)=@urb_type_iso={0x0, {0x3}, 0x7, 0x84, &(0x7f0000000140)="06bd0dd28cc4af44227eae366010603c447da9ce9f81465f28c67059346e066d67494739499e1c90440a300db51e04977baffa887827f34b8c0db83859530f55b5e5ea39d2883521a2eee01af1390d1b3dec7fec817859af71266ee57ac06ac40ee118d84b2c5c09d31d101c42f3dbcc9df4c63791ed5360f50f7b3774cc4c2e5d1c960a5b559f15758d0edf441bc87cb58c6d8d73f77e74cbc8ff69103a440e12c015edb2c7d6387e28bb8cc812fe85664cb99a47537c2224711f99ec11503abe966b02a7464f017b5409774e8009186aa7d06e22227bfa77362bb50382547faad034f075dfa0414e", 0xe9, 0x1ff, 0x84ec, 0x3a, 0x4, 0x43, &(0x7f0000000240)="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", [{0x609, 0x7fffffff, 0x8}, {0x5568, 0x9, 0x400}, {0x3, 0x6, 0x80000001}, {0x9348, 0x6d, 0xf6}, {0x34, 0x4, 0x2}, {0x6d5efb19, 0x7}, {0x9, 0x5d, 0x4}, {0x56fa, 0x4, 0x8}, {0x5, 0x38a8c190, 0x80000000}, {0x7, 0x0, 0x7}, {0xaf, 0x7, 0x6}, {0x3, 0x3, 0x707b}, {0x6, 0x0, 0x7}, {0x800, 0x9, 0xfffffff9}, {0x5, 0x8, 0x8}, {0x2, 0x6, 0x1}, {0xd61, 0xa4, 0x7fffffff}, {0x9, 0x2, 0x4}, {0x8, 0x3, 0x6}, {0x6, 0x3, 0x2}, {0x400, 0x0, 0x7}, {0x8a4d, 0x7ff, 0x6}, {0xa, 0x9, 0x6}, {0x2, 0x6f, 0x6}, {0xcfa6, 0xffc, 0xc}, {0x3, 0xdad}, {0xfffffff8, 0x37, 0x1}, {0x87, 0xfff, 0x6}, {0xffffff0d, 0x6, 0x4}, {0x10, 0x1, 0x5}, {0x8001, 0x80000000, 0xfffffff2}, {0x4, 0x400, 0x8}, {0x6, 0x400, 0x1000}, {0x9, 0x6, 0xeab5}, {0xb, 0x6, 0x3}, {0xd, 0x9, 0x5f6}, {0x2, 0x4, 0xfffffffd}, {0x4, 0x4, 0x755a76c4}, {0x3, 0xe9a, 0xe840}, {0x576922af, 0x7, 0x35b4}, {0x4, 0xff, 0xc}, {0x4, 0xe, 0x8001}, {0x5, 0x9, 0x5}, {0x10001, 0x3b, 0x9}, {0xed, 0x2f58, 0xf}, {0x5, 0x7, 0x45}, {0x7, 0x1, 0x58}, {0x6, 0x6, 0x5}, {0x5, 0x5, 0x6d2}, {0x1, 0xff, 0x1}, {0x2, 0x80, 0x800}, {0x4, 0x6, 0x40}, {0x8, 0xa3, 0x7fb7a03f}, {0x6, 0x436, 0x1}, {0x1, 0x0, 0x3409}, {0x3, 0x9, 0x8001}, {0x3eb42ecb, 0x1ff, 0x100}, {0xfffffff7, 0x604, 0x835b}]})
syz_usb_control_io$printer(r0, 0x0, 0x0)

6.268865938s ago: executing program 0 (id=1547):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xc, 0x4, 0x0, 0x2, 0x30, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x58, 0x0, 0x5, [0x401, 0x5, 0x400]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x1c, 0x3, 0x8}, @noop]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

5.95412333s ago: executing program 0 (id=1549):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000002304e800000000000000fa850000d6cb707a807e637e128c8c688c4b08e5c591a91e2b7f271313d71f5fd3c88758f449ce4230273aee4e66d08d90087e32e7595169631c9d8a5bb62b0c7eaa2691f039811098320b60cc5453a8521a86e1008000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
iopl(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3d, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0xc000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0)

4.973484705s ago: executing program 0 (id=1550):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000002304e800000000000000fa850000d6cb707a807e637e128c8c688c4b08e5c591a91e2b7f271313d71f5fd3c88758f449ce4230273aee4e66d08d90087e32e7595169631c9d8a5bb62b0c7eaa2691f039811098320b60cc5453a8521a86e1008000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
gettid()
iopl(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xc0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3d, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0xc000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"})
r3 = syz_open_dev$admmidi(0x0, 0x20, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r3, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x23, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000099ff0540cdabeecdb9050000000200021b0002000000000904980000010351000904000000ffffff00f8e7469a887b9670534109d02da5dcb3a2876003d82129e4d1798a398dc12fab6a577564ec42b734cd3e1ee95f60d4d8f55025109319c63b96d9cf99ea9f15997e8fe7454a65743125cccfcfece34e493441f2d9639ef58e6a2bcef4f23024bcd6835ac1cceaa179b62152db"], 0x0)

4.839955306s ago: executing program 1 (id=1551):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket(0x2b, 0x1, 0x1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

4.524553467s ago: executing program 3 (id=1552):
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f0000000480)={[{@dmode={'dmode', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@anchor={'anchor', 0x3d, 0x4}}, {@shortad}, {@mode={'mode', 0x3d, 0x1}}, {@gid_ignore}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0x1, 0xc3f, &(0x7f0000000f00)="$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")
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special})
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000100))
poll(0x0, 0x0, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x48, 0x0, 0x400000a, 0x0, 0x0, @void, @value}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0xffffd845, 0x101, 0x4, 0x80000000, 0x14, "8c180ec25822a0b3a8bf0f8758db79e90e231c"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x1b, 0x1, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4000001)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)

4.160303979s ago: executing program 3 (id=1553):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3c0, 0x100, 0x100, 0x100, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010101, @loopback, 0xffffffff, 0xffffff00, 0xe, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xff, 0x8, 0x9, 0x3, 0x100, 0x1, 'ipvlan1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x214}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "49ad4e710a0ac815795c9655392c948f7412a694eca2564e5059a666f668"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@multicast1, @private=0xa010101, 0xffffffff, 0x0, 0x8, 0x0, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x8000, 0xff, 0x8, 0x655, 0x8, 0x9, 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x20}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7fff, 0x75c62e5, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000c00)=ANY=[@ANYBLOB="010f004000000000014d564b00000000b0000000000900003a3d1d1484ccf5fa36fc7c3e9e92f0681f22a4574a8b28c67b5e95be40b7182974bb9c5d08b9816b2ebe356d5ac0caaae37aa4a543ac"])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
r4 = socket(0xa, 0x801, 0x0)
getsockopt$bt_BT_SECURITY(r4, 0x6, 0x22, 0x0, 0x20000000)

4.03179155s ago: executing program 3 (id=1554):
r0 = syz_io_uring_setup(0x2ce, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x800, 0x59}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000040))
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==")
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b52, &(0x7f0000000040)={0x0, 0x0})
ioctl$VT_ACTIVATE(r2, 0x5606, 0xfffffffffffff800)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000340)={[0xfffffffffffffff9]}, 0x0, 0x8)
r4 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x180, 0xe000060, 0xffffff6a, 0x180, 0x4, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@empty, @local, [], [], 'wg2\x00', 'rose0\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@limit={{0x48}, {0x48000000, 0x180}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408)
rt_sigpending(&(0x7f00000001c0), 0x8)
sync()
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x2000000, 0x10, 0x0, &(0x7f0000000600)="168e43acc18169514039c5bcdb7a44ca", 0x0, 0xc699, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x6, 0x4823, 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r7, &(0x7f0000002d40)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x163)
open(&(0x7f0000000180)='./bus\x00', 0xb0a55c71230ad511, 0x8a)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'})

4.00536824s ago: executing program 1 (id=1555):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x2c100)
syz_genetlink_get_family_id$batadv(0x0, r0)

3.96167338s ago: executing program 1 (id=1556):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4432, &(0x7f0000004480)="$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")
r0 = syz_io_uring_setup(0x6249, &(0x7f0000000080), &(0x7f0000000100)=<r1=>0x0, 0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1e, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

3.826841191s ago: executing program 4 (id=1557):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000200)={[{@user_xattr}, {@nogrpid}, {@nodioread_nolock}, {@errors_remount}, {@user_xattr}, {@nodelalloc}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x101}}], [{@uid_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@flag='ro'}, {@subj_type={'subj_type', 0x3d, '-'}}]}, 0x1, 0x7b7, &(0x7f00000005c0)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVrVQOmlrbCsIRlyIYKGga9swmYaYSSZkJqUJWbSIIIigxYWgG9d+1J1b0bV/gxsRaamaFisuZOTORzL5mjTfsfn94Cbn3Dn3nvPMnXvumbmHmQD2rd70TybiWER8kEQcqa9PIqKjmmqPGKiVezQ3m0uXJCqV139LqmUezs3mommb1KF65mhEfPdOxKnM8npL0zOjg4VCfrKe7yuPTfSVpmdOj4wNDueH8+Pnz/b3n7vw3IXzTRtNbC7WP36YOXzvw1ee+Wrgr7efuvP+90kMxOH6Y81xNOncTH290Vt/TjrSp3CRlzez4z0o2e0GsCHpqdlWO8vjWByJtmoKAHiSpdf/CgCwzySu/wCwzzQ+B3g4N5trLLv7icTOuv9SRHTV4m/c36w90l6/Z9dVvQ/a/TCJ9ujInYjaDZOtut/VGxGffvPmF+kSq9+HBNhyN29FxNWe3uX9f7JszsJ6nXmMMr1L8vo/2DnfpuOfiyuN/zLz45+YH/8s6Fzh3N2I3ogDzfnl53/m7oobvrgFldfHfy/U5ralgTaN/+YnrfW01XP/STPHI2KkkE/7tv9GxMno6Lw2UsifbVHHyQd/P1jtsebx3++33/o8rT/9v1Aic7d9ySy0ocHy4GZibnb/VsTT7Qtz+x4t6/+7qmPdpcc/XXe51Y6PLyRfff7dT1YrlsafxttYlse/vSqfRZyIleNvSFrOT+xLD/+Z2t9Fu57fwdc/fdy9Wv3Nxz9d0vob7wV2Qnr8u1vH35M0z9csbW39a8e/8uv/QPJGNd3oPG4MlsuTZyMOJK8tX39uYdtGvlE+jb8W6dL4My1f/+l7wquPGWP7vV+/3Hj887ZlimUa/9C6jv/6E3cejbZtPP70+PdXUyfra1r3fwfr/yeXTjG+uVIDN/7MAQAAAAAAAAAAAAAAAAAAAAAAAMDjy0TE4Ugy2fl0JpPN1n7D+//RnSkUS+VT14pT40NR/a3snujINL7q8kgtnzS+/7SnKX9uSf7ZiPhfRHzUebCaz+aKhaHdDh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6g6t8vv/qV86d7t1AMC26VqzxIP8omylUqlsY3sAgO239vUfAHjStLj+H9zJdgAAO8f7fwDYf1z/AWD/cf0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgm12+dCldKn/OzebS/ND16anR4vXTQ/nSaHZsKpfNFScnssPF4nAhn80Vx9baX6FYnOiP8akbfeV8qdxXmp65MlacGi9fGRkbHM5fyXfsSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsD6l6ZnRwUIhP/lEJN6LiD3QjO1IJLEnmrEriZ9P/3i0VZnba7yMB/ZEFIsTF7si9kAzVk/sds8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8O/wTwAAAP//PSkhcA==")
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x1000, 0x20, 0x4}, 0x18)
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x8970, &(0x7f0000000080)={'sit0\x00', 0x0})
r4 = socket$caif_stream(0x25, 0x1, 0x3)
dup(r4)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r5 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
write$binfmt_script(r5, &(0x7f0000000600), 0xfec8)
recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680})

3.652787971s ago: executing program 3 (id=1558):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400a, &(0x7f00000003c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@noblock_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000340)="05000000010000", 0x7)
ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x5)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x800004000f36, 0xd)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
ptrace$pokeuser(0x6, r0, 0x10, 0x5)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={0x0}, 0x18)
getresuid(&(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000240))
stat(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40))

3.193844444s ago: executing program 1 (id=1559):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xc, 0x4, 0x0, 0x2, 0x30, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x58, 0x0, 0x5, [0x401, 0x5, 0x400]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x1c, 0x3, 0x8}, @noop]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.429685058s ago: executing program 1 (id=1560):
gettid()
iopl(0x3)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x3d, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0xc000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0)

1.077662585s ago: executing program 0 (id=1561):
capget(0x0, &(0x7f0000000180)={0x0, 0x5, 0x7})
add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000240)="f20ea80400000000000000008c0c", 0xe, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000000)=ANY=[], 0x1, 0x5fdf, &(0x7f0000000b00)="$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")
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003)

1.027994595s ago: executing program 1 (id=1562):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x40})
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001000)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000780)="fc7f4d772926e97d", 0x8, 0x1, 0x0, 0x1, r1}])
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600)={0x60002004})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff)

243.842349ms ago: executing program 0 (id=1563):
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8082, &(0x7f0000000480)={[{@dmode={'dmode', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@anchor={'anchor', 0x3d, 0x4}}, {@shortad}, {@mode={'mode', 0x3d, 0x1}}, {@gid_ignore}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'cp852'}}]}, 0x1, 0xc3f, &(0x7f0000000f00)="$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")
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special})
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000100))
poll(0x0, 0x0, 0x9)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x48, 0x0, 0x400000a, 0x0, 0x0, @void, @value}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0xffffd845, 0x101, 0x4, 0x80000000, 0x14, "8c180ec25822a0b3a8bf0f8758db79e90e231c"})
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x1b, 0x1, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4000001)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)

75.716559ms ago: executing program 3 (id=1564):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000001880), 0x40000000000027c, 0x10002, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1e5, &(0x7f0000000700)="$eJzsmbGLE0EUxr+Z3UvOQxQbCxsLDzzR2+xuVK654gRLQbgTtQzeekQ3iSQrJAHBYGNjaSHY+g9YWKSysLOz1UIFwcKU1iMzO9mdZLOauBbBez/I7DezM2/mvd18zYIgiEPL1y8/Pz+7srV3AcBRrKOsx79b6RxuzP/04uH559tXX77++Opd89ij4XQ8BkCI+fe3AbzdsYDHx1VfiMnV6/q6B57oG+A4p/VNMDjjs4p0dQCG23r4nqFbR7QIA3anFe7frYeBKxtPNr5sqoCYON9owLAPYFVvwYzzdXr9+7UQaMciDMZiRYz3ydxaVPypfqMdjm2jBPJ53Xr6ZCD7jh53jfp54PC0roJhV+stlOE4TloSI/9TdhrfyuRfMEkUr9FMcWLzHwf8fwUr+AQBLEEW8wk2PSL/0MnIydHwfXbVt2U5/F8IZVwAMrc+rIXhtQKRS9oEcl+J2D+YDZw1/MmGnfhHJWo8qHR6/c16o3YQHARN369edi+67iW/oowobn/jf6vKn9aM+Cs5c0ushG4titpeF4jaXtL349Zw3N03rR9qDVf+x7FxJo4hXxWVdnn2Hkz/uLpKtWHlHp4gCIIgCIIgCIIgCIIgCGIhToPFH8LiD1UiB/+6mv0rAAD//90/aw8=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

0s ago: executing program 4 (id=1565):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket(0x2b, 0x1, 0x1)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

oint
[  258.666689][ T5321] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  258.832559][ T6427] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  258.901764][ T6454] loop3: detected capacity change from 0 to 256
[  258.937676][ T6454] exfat: Bad value for 'uid'
[  259.194426][ T4167] attempt to access beyond end of device
[  259.194426][ T4167] loop2: rw=2049, want=45120, limit=40427
[  259.197415][ T6431] loop0: detected capacity change from 0 to 40427
[  259.206013][ T5321] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[  259.221349][ T5321] usb 2-1: config 0 has no interface number 0
[  259.228361][ T5321] usb 2-1: config 0 interface 156 has no altsetting 0
[  259.235378][ T5321] usb 2-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  259.254412][ T5321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.317927][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'.
[  259.965141][ T5321] usb 2-1: config 0 descriptor??
[  260.037273][ T5321] hub 2-1:0.156: bad descriptor, ignoring hub
[  260.057266][ T5321] hub: probe of 2-1:0.156 failed with error -5
[  260.065224][ T5321] option 2-1:0.156: GSM modem (1-port) converter detected
[  260.237691][ T6464] loop4: detected capacity change from 0 to 16
[  260.562065][ T6447] loop1: detected capacity change from 0 to 32768
[  260.851064][ T6447] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.595 (6447)
[  262.466503][ T6474] netlink: 'syz.2.604': attribute type 1 has an invalid length.
[  262.591721][ T6464] erofs: (device loop4): mounted with root inode @ nid 36.
[  262.793950][ T6447] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  262.852939][ T6447] BTRFS info (device loop1): using free space tree
[  262.906425][ T6447] BTRFS info (device loop1): has skinny extents
[  263.816334][ T6503] loop3: detected capacity change from 0 to 256
[  263.878597][ T6503] exfat: Bad value for 'errors'
[  264.314501][ T6511] tmpfs: Unknown parameter 'usrquota'
[  265.257893][ T6515] loop3: detected capacity change from 0 to 1024
[  265.292761][ T6517] loop4: detected capacity change from 0 to 256
[  265.350064][   T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  265.438784][ T6517] exfat: Bad value for 'uid'
[  265.443848][ T6447] BTRFS error (device loop1): open_ctree failed
[  265.456144][ T6515] EXT4-fs (loop3): Ignoring removed orlov option
[  265.471193][ T6515] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  265.498682][ T6521] bridge0: port 3(syz_tun) entered blocking state
[  265.519063][ T6521] bridge0: port 3(syz_tun) entered disabled state
[  265.548541][ T6521] device syz_tun entered promiscuous mode
[  265.555104][ T6521] bridge0: port 3(syz_tun) entered blocking state
[  265.561869][ T6521] bridge0: port 3(syz_tun) entered forwarding state
[  265.608749][ T6521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.614'.
[  265.643468][ T6515] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  265.667827][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.336707][ T5321] usb 2-1: USB disconnect, device number 8
[  266.354662][ T5321] option 2-1:0.156: device disconnected
[  266.531282][ T6538] netlink: 'syz.2.617': attribute type 1 has an invalid length.
[  267.246554][   T23] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  267.274682][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.345517][   T23] usb 1-1: Product: syz
[  267.370481][   T23] usb 1-1: Manufacturer: syz
[  267.611439][   T23] usb 1-1: config 0 descriptor??
[  269.056606][   T23] usb 1-1: can't set config #0, error -71
[  269.068759][   T23] usb 1-1: USB disconnect, device number 4
[  271.377668][ T6570] loop3: detected capacity change from 0 to 16
[  271.825412][ T6571] loop1: detected capacity change from 0 to 256
[  271.955669][ T6570] erofs: (device loop3): mounted with root inode @ nid 36.
[  272.157455][ T6571] exfat: Bad value for 'uid'
[  274.090306][ T6595] netlink: 'syz.3.631': attribute type 1 has an invalid length.
[  279.145116][ T6627] loop0: detected capacity change from 0 to 16
[  280.124830][ T6632] loop1: detected capacity change from 0 to 256
[  280.260844][ T6616] loop4: detected capacity change from 0 to 40427
[  280.941685][ T6632] exfat: Bad value for 'errors'
[  282.653182][ T6647] tmpfs: Unknown parameter 'usrquota'
[  282.866988][ T6653] netlink: 'syz.0.648': attribute type 1 has an invalid length.
[  285.056502][ T6661] loop2: detected capacity change from 0 to 4096
[  285.111643][ T6661] ntfs3: Unknown parameter 'windows_names'
[  287.784757][ T6694] netlink: 'syz.3.663': attribute type 1 has an invalid length.
[  291.239888][ T6716] loop3: detected capacity change from 0 to 16
[  292.109590][ T6716] erofs: (device loop3): mounted with root inode @ nid 36.
[  292.849043][ T6720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.670'.
[  292.993773][ T6729] loop2: detected capacity change from 0 to 256
[  293.027476][ T6729] exfat: Bad value for 'errors'
[  294.389907][ T6743] tmpfs: Unknown parameter 'usrquota'
[  296.031793][ T6756] loop0: detected capacity change from 0 to 16
[  299.818144][ T6769] loop3: detected capacity change from 0 to 1024
[  302.284524][ T6771] loop1: detected capacity change from 0 to 32768
[  302.480845][ T6771] XFS (loop1): Mounting V5 Filesystem
[  302.601256][ T6785] loop0: detected capacity change from 0 to 32768
[  302.613424][ T6771] XFS (loop1): Ending clean mount
[  302.714106][ T4166] XFS (loop1): Unmounting Filesystem
[  302.746586][ T6785] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.690 (6785)
[  302.818681][ T6785] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  302.840866][ T6784] loop2: detected capacity change from 0 to 32768
[  302.863428][ T6785] BTRFS info (device loop0): setting nodatacow, compression disabled
[  302.890775][ T6785] BTRFS info (device loop0): setting datacow
[  302.907358][ T6785] BTRFS info (device loop0): doing ref verification
[  302.921450][ T6785] BTRFS info (device loop0): force clearing of disk cache
[  302.947224][ T6784] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.692 (6784)
[  302.966594][ T6785] BTRFS info (device loop0): turning off barriers
[  302.977607][ T6785] BTRFS info (device loop0): enabling ssd optimizations
[  302.984566][ T6785] BTRFS info (device loop0): using spread ssd allocation scheme
[  303.032809][ T6785] BTRFS info (device loop0): using free space tree
[  303.067560][ T4303] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4303)
[  303.074605][ T6785] BTRFS info (device loop0): has skinny extents
[  305.112263][ T4697] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  305.273264][ T6830] xt_NFQUEUE: number of total queues is 0
[  306.583235][ T6836] loop1: detected capacity change from 0 to 16
[  306.618137][ T6785] BTRFS error (device loop0): open_ctree failed
[  306.653358][ T6836] erofs: (device loop1): mounted with root inode @ nid 36.
[  306.699121][ T4697] usb 5-1: Using ep0 maxpacket: 16
[  307.385763][ T6842] loop7: detected capacity change from 0 to 16384
[  308.538336][ T6846] loop_set_status: loop7 () has still dirty pages (nrpages=416)
[  308.940916][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.709'.
[  309.076499][ T4697] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  309.095751][ T4697] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  309.114057][ T4697] usb 5-1: Product: syz
[  309.120434][ T4697] usb 5-1: config 0 descriptor??
[  309.137661][ T4697] usb 5-1: can't set config #0, error -71
[  309.156090][ T4697] usb 5-1: USB disconnect, device number 3
[  309.247294][ T6868] vivid-002: disconnect
[  310.645799][ T6867] vivid-002: reconnect
[  311.069086][ T6879] loop2: detected capacity change from 0 to 2048
[  311.162927][ T6879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.354741][ T6866] loop4: detected capacity change from 0 to 32768
[  311.988341][ T4213] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  312.420294][ T6866] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  312.433229][ T6866] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  312.464120][ T4213] usb 4-1: Using ep0 maxpacket: 8
[  312.473097][ T6900] loop1: detected capacity change from 0 to 16
[  312.537468][ T6866] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[  312.546982][ T4697] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  312.553894][ T4697] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  312.572470][ T6900] erofs: (device loop1): mounted with root inode @ nid 36.
[  312.657817][ T6903] loop0: detected capacity change from 0 to 16
[  312.775564][ T6903] erofs: (device loop0): mounted with root inode @ nid 36.
[  312.882022][ T4697] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 328ms
[  312.927156][ T4213] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  313.014905][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.230704][ T4697] gfs2: fsid=syz:syz.0: jid=0: Done
[  313.372601][ T4213] usb 4-1: Product: syz
[  313.415044][ T6866] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  313.570959][ T4213] usb 4-1: Manufacturer: syz
[  313.665569][ T6866] gfs2: fsid=syz:syz.0: can't start logd thread: -4
[  313.675100][ T4213] usb 4-1: SerialNumber: syz
[  313.763712][ T4213] usb 4-1: config 0 descriptor??
[  314.837671][ T4213] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71
[  314.844952][ T4213] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  314.965164][ T4213] usb 4-1: USB disconnect, device number 4
[  315.491631][ T6921] vivid-003: disconnect
[  316.708125][ T6932] vivid-003: reconnect
[  316.859894][ T6936] loop1: detected capacity change from 0 to 2048
[  316.942640][ T6936] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  316.956624][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  316.962969][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  317.709288][ T6955] loop0: detected capacity change from 0 to 16
[  317.729263][ T6955] erofs: (device loop0): mounted with root inode @ nid 36.
[  319.729987][ T6970] loop3: detected capacity change from 0 to 256
[  319.751276][ T6972] vivid-003: disconnect
[  320.589963][ T6970] exfat: Bad value for 'uid'
[  321.252087][ T6978] vivid-003: reconnect
[  322.123327][ T6999] loop4: detected capacity change from 0 to 16
[  322.170624][ T6999] erofs: (device loop4): mounted with root inode @ nid 36.
[  324.352319][ T7034] vivid-002: disconnect
[  324.395689][ T7035] loop1: detected capacity change from 0 to 256
[  324.428897][ T7035] exfat: Bad value for 'errors'
[  324.792574][ T7042] tmpfs: Unknown parameter 'usrquota'
[  325.687707][ T7040] vivid-002: reconnect
[  328.891355][ T7082] loop3: detected capacity change from 0 to 256
[  329.147215][ T7082] exfat: Bad value for 'errors'
[  329.765206][ T7094] tmpfs: Unknown parameter 'usrquota'
[  336.365651][ T7184] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.811'.
[  336.408689][ T7181] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.811'.
[  337.495985][ T7196] loop1: detected capacity change from 0 to 16
[  337.688967][ T7196] erofs: (device loop1): mounted with root inode @ nid 36.
[  337.739054][ T7200] netlink: 'syz.3.818': attribute type 10 has an invalid length.
[  337.838834][ T7200] device hsr_slave_0 left promiscuous mode
[  337.845422][ T7200] device hsr_slave_1 left promiscuous mode
[  339.054230][ T7220] netlink: 'syz.2.826': attribute type 29 has an invalid length.
[  339.102143][ T7220] netlink: 'syz.2.826': attribute type 29 has an invalid length.
[  339.133602][ T7220] netlink: 'syz.2.826': attribute type 29 has an invalid length.
[  340.106256][ T7235] loop0: detected capacity change from 0 to 2048
[  340.889096][ T7241] loop3: detected capacity change from 0 to 16
[  341.329116][ T7241] erofs: (device loop3): mounted with root inode @ nid 36.
[  341.376409][ T7235] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  342.116806][ T7235] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.149262][ T7257] loop4: detected capacity change from 0 to 2048
[  342.229123][ T7257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  344.427505][ T7295] loop1: detected capacity change from 0 to 16
[  344.484808][ T7296] netlink: 'syz.3.852': attribute type 1 has an invalid length.
[  344.500471][ T4399] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  344.611543][ T7295] erofs: (device loop1): mounted with root inode @ nid 36.
[  344.672226][ T7302] loop2: detected capacity change from 0 to 2048
[  344.710778][ T7302] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.019113][ T7305] loop1: detected capacity change from 0 to 2048
[  345.066622][ T4399] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[  345.082730][ T4399] usb 5-1: config 0 has no interface number 0
[  345.099282][ T7305] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  345.124347][ T4399] usb 5-1: config 0 interface 156 has no altsetting 0
[  345.139283][ T7305] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.213103][ T4399] usb 5-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  346.079221][ T4399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.109277][ T4399] usb 5-1: config 0 descriptor??
[  346.157252][ T4399] hub 5-1:0.156: bad descriptor, ignoring hub
[  346.163367][ T4399] hub: probe of 5-1:0.156 failed with error -5
[  346.307520][ T4399] option 5-1:0.156: GSM modem (1-port) converter detected
[  347.880083][ T4697] usb 5-1: USB disconnect, device number 4
[  347.906973][ T4697] option 5-1:0.156: device disconnected
[  348.116288][ T7336] loop1: detected capacity change from 0 to 16
[  348.142934][ T7345] loop0: detected capacity change from 0 to 2048
[  348.177082][ T7336] erofs: (device loop1): mounted with root inode @ nid 36.
[  348.370655][ T7347] netlink: 'syz.3.867': attribute type 1 has an invalid length.
[  348.430364][ T7345] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  348.472633][ T7345] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.396422][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  349.806958][   T23] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[  349.848963][   T23] usb 5-1: config 0 has no interface number 0
[  349.994549][   T23] usb 5-1: config 0 interface 156 has no altsetting 0
[  350.115022][   T23] usb 5-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  350.284079][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.379024][   T23] usb 5-1: config 0 descriptor??
[  350.427118][   T23] hub 5-1:0.156: bad descriptor, ignoring hub
[  350.439640][ T7375] fuse: Bad value for 'group_id'
[  350.444685][   T23] hub: probe of 5-1:0.156 failed with error -5
[  350.455910][   T23] option 5-1:0.156: GSM modem (1-port) converter detected
[  350.889543][ T7382] loop2: detected capacity change from 0 to 16
[  351.005624][ T7382] erofs: (device loop2): mounted with root inode @ nid 36.
[  351.419945][ T7393] loop2: detected capacity change from 0 to 256
[  351.457000][ T7393] exfat: Bad value for 'uid'
[  351.474725][ T7357] loop4: detected capacity change from 0 to 32768
[  354.248337][ T4269] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4269)
[  354.347590][   T23] usb 5-1: USB disconnect, device number 5
[  354.356175][ T7420] loop3: detected capacity change from 0 to 16
[  354.370242][   T23] option 5-1:0.156: device disconnected
[  354.447058][ T7420] erofs: (device loop3): mounted with root inode @ nid 36.
[  355.155174][ T7436] loop3: detected capacity change from 0 to 256
[  355.217043][ T7436] exfat: Bad value for 'uid'
[  355.615955][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'.
[  356.226407][ T4356] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  356.596584][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.640018][ T7461] loop4: detected capacity change from 0 to 16
[  356.653811][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.665083][ T4356] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  356.676545][ T4356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.688157][ T4356] usb 2-1: config 0 descriptor??
[  356.746104][ T7461] erofs: (device loop4): mounted with root inode @ nid 36.
[  356.827312][   T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  357.086430][   T23] usb 4-1: Using ep0 maxpacket: 8
[  357.168304][ T4356] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x2
[  357.215681][ T4356] pyra 0003:1E7D:2CF6.0003: item fetching failed at offset 3/7
[  357.255374][ T4356] pyra 0003:1E7D:2CF6.0003: parse failed
[  357.273721][ T4356] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -22
[  357.406775][ T4356] usb 2-1: USB disconnect, device number 9
[  357.406860][   T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  357.426422][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.435205][   T23] usb 4-1: Product: syz
[  357.439674][   T23] usb 4-1: Manufacturer: syz
[  357.444892][   T23] usb 4-1: SerialNumber: syz
[  357.472038][   T23] usb 4-1: config 0 descriptor??
[  357.746619][   T23] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  357.863191][ T7482] loop2: detected capacity change from 0 to 256
[  357.915165][ T4355] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  357.937801][ T7482] exfat: Bad value for 'uid'
[  358.284591][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'.
[  358.310063][ T4355] usb 1-1: Using ep0 maxpacket: 16
[  358.427507][ T4355] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  358.617447][ T4355] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  358.640171][ T4355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.703710][ T4355] usb 1-1: Product: syz
[  358.712827][ T4355] usb 1-1: Manufacturer: syz
[  358.718989][ T4355] usb 1-1: SerialNumber: syz
[  358.740287][ T4355] usb 1-1: config 0 descriptor??
[  359.056727][ T7499] loop1: detected capacity change from 0 to 16
[  360.036491][   T23] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  360.055723][   T23] usb 4-1: USB disconnect, device number 5
[  360.111456][ T7499] erofs: (device loop1): mounted with root inode @ nid 36.
[  361.724106][ T7512] loop3: detected capacity change from 0 to 2048
[  361.767791][ T4355] usb 1-1: USB disconnect, device number 5
[  362.427776][ T7523] netlink: 104 bytes leftover after parsing attributes in process `syz.2.924'.
[  362.484633][ T7525] loop1: detected capacity change from 0 to 256
[  362.659439][ T7531] loop2: detected capacity change from 0 to 64
[  362.728717][ T7525] exfat: Bad value for 'uid'
[  362.750701][ T7512] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  362.784104][ T7512] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.062404][ T7537] netlink: 'syz.0.926': attribute type 1 has an invalid length.
[  363.192323][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'.
[  364.370549][ T7546] loop2: detected capacity change from 0 to 16
[  364.445784][ T7546] erofs: (device loop2): mounted with root inode @ nid 36.
[  366.495099][ T4213] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  366.557541][ T7565] device syz_tun entered promiscuous mode
[  366.581736][ T4356] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  366.614707][ T7565] device syz_tun left promiscuous mode
[  366.646052][ T7574] loop2: detected capacity change from 0 to 64
[  366.826562][ T4213] usb 4-1: Using ep0 maxpacket: 8
[  366.920101][ T7578] loop1: detected capacity change from 0 to 2048
[  367.159192][ T7584] loop4: detected capacity change from 0 to 16
[  367.226835][ T7578] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  367.301009][ T7578] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  367.327384][ T7584] erofs: (device loop4): mounted with root inode @ nid 36.
[  367.357866][ T4213] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  367.369934][ T7572] loop0: detected capacity change from 0 to 32768
[  367.404698][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.545666][ T7572] XFS (loop0): Mounting V5 Filesystem
[  367.628193][ T4213] usb 4-1: Product: syz
[  367.640679][ T4213] usb 4-1: Manufacturer: syz
[  367.654311][ T4213] usb 4-1: SerialNumber: syz
[  367.687071][ T7572] XFS (loop0): Ending clean mount
[  367.697900][ T7572] XFS (loop0): Quotacheck needed: Please wait.
[  367.711191][ T4213] usb 4-1: config 0 descriptor??
[  367.764349][ T7572] XFS (loop0): Quotacheck: Done.
[  367.926512][ T4171] XFS (loop0): Unmounting Filesystem
[  368.022636][ T4213] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  368.431640][ T7605] netlink: 'syz.1.947': attribute type 1 has an invalid length.
[  368.736611][ T4356] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  369.126797][ T4356] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  369.152576][ T4356] usb 2-1: can't read configurations, error -22
[  369.316444][ T4356] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  369.523611][ T4213] usb write operation failed. (-71)
[  369.536702][ T4213] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  369.554201][ T4213] dvbdev: DVB: registering new adapter (Terratec H7)
[  369.565115][ T4213] usb 4-1: media controller created
[  369.836594][ T4213] usb read operation failed. (-71)
[  369.856436][ T4213] usb write operation failed. (-71)
[  369.868499][ T4213] dvb_usb_az6007: probe of 4-1:0.0 failed with error -5
[  369.900618][ T4213] usb 4-1: USB disconnect, device number 6
[  369.926644][ T4356] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  369.992981][ T4356] usb 2-1: can't read configurations, error -22
[  370.097663][ T4356] usb usb2-port1: attempt power cycle
[  370.455410][ T7629] loop3: detected capacity change from 0 to 256
[  370.566624][ T4356] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  370.577387][ T7632] loop4: detected capacity change from 0 to 2048
[  370.587579][ T7629] exfat: Bad value for 'errors'
[  370.841937][ T7632] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  371.221265][ T7639] tmpfs: Unknown parameter 'usrquota'
[  372.344711][ T7632] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  372.346486][ T4356] usb 2-1: device descriptor read/all, error -71
[  372.766423][ T4399] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  373.022932][ T7659] loop1: detected capacity change from 0 to 256
[  373.067348][ T7659] exfat: Bad value for 'uid'
[  373.076517][ T4399] usb 4-1: Using ep0 maxpacket: 8
[  373.358969][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'.
[  373.474242][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'.
[  373.861571][ T7672] netlink: 'syz.2.968': attribute type 1 has an invalid length.
[  374.171601][ T4399] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  374.187464][ T4399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.196078][ T4399] usb 4-1: Product: syz
[  374.201204][ T4399] usb 4-1: Manufacturer: syz
[  374.205816][ T4399] usb 4-1: SerialNumber: syz
[  374.279441][ T7677] netlink: 'syz.1.970': attribute type 1 has an invalid length.
[  374.309073][ T4399] usb 4-1: config 0 descriptor??
[  374.656772][ T4399] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  374.712260][ T7668] bond0: (slave bond_slave_0): Releasing backup interface
[  375.137195][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.973'.
[  375.245514][ T7687] loop2: detected capacity change from 0 to 2048
[  375.316452][ T4356] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  375.474778][ T7687] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  375.485997][ T7687] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  375.656093][ T7693] netlink: 20 bytes leftover after parsing attributes in process `syz.0.977'.
[  375.691535][ T4356] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  375.722996][ T4356] usb 2-1: can't read configurations, error -22
[  375.828302][ T7701] vivid-001: disconnect
[  375.959575][ T4356] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  376.501692][ T7707] netlink: 'syz.4.981': attribute type 1 has an invalid length.
[  376.627747][ T7706] vivid-001: reconnect
[  376.700290][ T7712] loop0: detected capacity change from 0 to 256
[  376.708307][ T7712] exfat: Bad value for 'errors'
[  376.847331][ T4356] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  376.871647][ T4356] usb 2-1: can't read configurations, error -22
[  376.892255][ T4356] usb usb2-port1: attempt power cycle
[  377.018934][ T7719] tmpfs: Unknown parameter 'usrquota'
[  377.634621][ T4399] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  377.681575][ T4399] usb 4-1: USB disconnect, device number 7
[  378.186426][ T4356] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  378.399187][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  378.405503][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  378.406496][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.461975][ T4356] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.500681][ T4356] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  378.511753][ T4356] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.552874][ T7742] vivid-000: disconnect
[  378.702000][ T7741] netlink: 'syz.0.993': attribute type 1 has an invalid length.
[  379.418819][ T7738] vivid-000: reconnect
[  379.588447][ T4356] usb 2-1: config 0 descriptor??
[  379.683357][ T7758] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  379.910579][ T4399] hid (null): global environment stack underflow
[  379.939482][ T4399] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2
[  379.972218][ T4399] hid-generic 0000:0000:0000.0004: global environment stack underflow
[  380.006704][ T4399] hid-generic 0000:0000:0000.0004: item 0 2 1 11 parsing failed
[  380.038756][ T4399] hid-generic: probe of 0000:0000:0000.0004 failed with error -22
[  380.068046][ T4356] belkin 0003:1020:0006.0005: unknown global tag 0xe
[  380.125946][ T7775] netlink: 'syz.0.1001': attribute type 1 has an invalid length.
[  380.360979][ T4356] belkin 0003:1020:0006.0005: item 0 2 1 14 parsing failed
[  380.368591][ T4356] belkin 0003:1020:0006.0005: parse failed
[  380.374910][ T4356] belkin: probe of 0003:1020:0006.0005 failed with error -22
[  380.384772][ T4356] usb 2-1: USB disconnect, device number 16
[  380.879527][ T7781] netlink: 'syz.0.1006': attribute type 1 has an invalid length.
[  381.082617][ T7788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1008'.
[  381.112574][ T7789] vivid-004: disconnect
[  381.259122][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1008'.
[  381.268593][ T7790] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1008'.
[  381.600068][ T7801] loop2: detected capacity change from 0 to 1024
[  382.490462][ T7810] netlink: 'syz.0.1017': attribute type 1 has an invalid length.
[  382.870985][ T5321] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  383.206411][ T5321] usb 2-1: Using ep0 maxpacket: 16
[  383.296422][ T4356] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  383.326538][ T5321] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  383.429451][ T7817] netlink: 'syz.2.1018': attribute type 1 has an invalid length.
[  383.487417][ T7786] vivid-004: reconnect
[  383.560727][ T5321] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  383.569910][ T4356] usb 4-1: Using ep0 maxpacket: 8
[  383.582583][ T5321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.628657][ T5321] usb 2-1: Product: syz
[  383.647584][ T5321] usb 2-1: Manufacturer: syz
[  383.657944][ T5321] usb 2-1: SerialNumber: syz
[  383.684997][ T5321] usb 2-1: config 0 descriptor??
[  383.751593][ T4356] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  383.784636][ T4356] usb 4-1: config 179 has no interface number 0
[  383.802078][ T4356] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  383.818304][ T4356] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  383.837575][ T4356] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  383.851929][ T4356] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  383.869227][ T4356] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  383.883226][ T4356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.946801][ T7812] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  384.239813][   T23] usb 4-1: USB disconnect, device number 8
[  384.496471][ T5321] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  384.766543][ T5321] usb 1-1: Using ep0 maxpacket: 32
[  385.066549][ T5321] usb 1-1: config 0 has no interfaces?
[  385.130510][ T7846] netlink: 'syz.3.1030': attribute type 1 has an invalid length.
[  385.161149][ T7848] netlink: 'syz.2.1031': attribute type 1 has an invalid length.
[  385.243286][ T4279] usb 2-1: USB disconnect, device number 17
[  385.276848][ T5321] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  385.303974][ T5321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.349443][ T5321] usb 1-1: Product: syz
[  385.356111][ T7852] vivid-003: disconnect
[  385.536554][ T5321] usb 1-1: Manufacturer: syz
[  385.541185][ T5321] usb 1-1: SerialNumber: syz
[  385.555155][ T5321] usb 1-1: config 0 descriptor??
[  386.036562][ T4279] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  386.257387][ T7851] vivid-003: reconnect
[  386.330523][ T5321] usb 1-1: USB disconnect, device number 7
[  386.396429][ T4279] usb 3-1: Using ep0 maxpacket: 8
[  386.437547][ T7864] kvm: emulating exchange as write
[  386.476109][ T7862] dccp_close: ABORT with 32 bytes unread
[  386.557905][ T4279] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  386.578199][ T4279] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  386.594788][ T4279] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  386.630540][ T4279] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  386.652671][ T4279] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  386.665178][ T4279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.979226][ T4279] usb 3-1: GET_CAPABILITIES returned 0
[  386.984747][ T4279] usbtmc 3-1:16.0: can't read capabilities
[  387.185339][ T7882] loop4: detected capacity change from 0 to 2048
[  387.236435][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.248100][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.257176][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.266254][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.275319][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.284386][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.293454][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.302520][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.311589][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.320654][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.329731][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.338793][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.347853][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.356925][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.366012][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  387.375071][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2
[  387.459386][ T7882] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  387.502009][ T7882] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  387.669164][ T4399] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  387.689340][ T4399] Bluetooth: hci1: Injecting HCI hardware error event
[  387.707304][ T4177] Bluetooth: hci1: hardware error 0x00
[  387.969691][ T7889] netlink: 'syz.4.1045': attribute type 1 has an invalid length.
[  387.998090][ T4356] usb 3-1: USB disconnect, device number 5
[  390.129071][ T7920] loop4: detected capacity change from 0 to 2048
[  390.227004][ T7920] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  390.246641][ T4279] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  390.270279][ T7920] UDF-fs: warning (device loop4): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  390.756649][ T4279] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  390.784005][ T4279] usb 2-1: config 0 has no interface number 0
[  390.979207][ T7929] netlink: 'syz.3.1058': attribute type 1 has an invalid length.
[  391.064784][ T7936] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  391.127517][ T4279] usb 2-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  391.229358][ T4279] usb 2-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0xBD, skipping
[  391.270972][ T4279] usb 2-1: config 0 interface 188 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  391.516555][ T4279] usb 2-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=42.9b
[  391.530173][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.547190][ T4279] usb 2-1: Product: syz
[  391.561978][ T4279] usb 2-1: Manufacturer: syz
[  391.572389][ T4279] usb 2-1: SerialNumber: syz
[  391.595917][ T4279] usb 2-1: config 0 descriptor??
[  391.626897][ T7917] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  391.648028][ T4279] option 2-1:0.188: GSM modem (1-port) converter detected
[  391.776381][ T4356] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  391.862254][ T4279] usb 2-1: USB disconnect, device number 18
[  391.878031][ T4279] option 2-1:0.188: device disconnected
[  392.196555][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.238556][ T7954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1070'.
[  392.265470][ T4356] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.295498][ T4356] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00
[  392.312309][ T4356] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.327240][ T4356] usb 1-1: config 0 descriptor??
[  392.451393][ T7958] netlink: 'syz.4.1072': attribute type 1 has an invalid length.
[  392.558114][ T7965] vivid-004: disconnect
[  392.626661][ T5321] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  392.820846][ T4356] wacom 0003:056A:00BB.0006: Unknown device_type for 'HID 056a:00bb'. Assuming pen.
[  392.860543][ T4356] wacom 0003:056A:00BB.0006: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.0-1/input0
[  392.893909][ T4356] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BB.0006/input/input7
[  393.056584][ T5321] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  393.831603][ T5321] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  394.514330][ T4356] usb 1-1: USB disconnect, device number 8
[  394.555887][ T5321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  394.747352][ T5321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  394.762080][ T5321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  394.787881][ T7970] vivid-004: reconnect
[  394.916889][ T5321] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  394.927713][ T5321] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  394.935803][ T5321] usb 4-1: Product: syz
[  394.940511][ T5321] usb 4-1: Manufacturer: syz
[  395.015445][ T5321] cdc_wdm 4-1:1.0: skipping garbage
[  395.022908][ T5321] cdc_wdm 4-1:1.0: skipping garbage
[  395.043414][ T5321] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  395.053353][ T5321] cdc_wdm 4-1:1.0: Unknown control protocol
[  395.835386][ T4356] usb 4-1: USB disconnect, device number 9
[  397.174010][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1083'.
[  397.198633][ T7993] device geneve0 entered promiscuous mode
[  397.604152][ T7993] device geneve0 left promiscuous mode
[  397.641171][ T7998] netlink: 'syz.4.1084': attribute type 1 has an invalid length.
[  397.712076][ T5321] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0
[  397.770829][ T5321] hid-generic 0000:0003:0000.0007: unknown main item tag 0x0
[  397.829505][ T5321] hid-generic 0000:0003:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  398.024303][ T8011] vivid-001: disconnect
[  398.920666][ T8010] vivid-001: reconnect
[  399.306030][ T8004] loop4: detected capacity change from 0 to 32768
[  399.345620][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  399.670707][ T8023] device batadv_slave_0 entered promiscuous mode
[  399.715228][ T8033] netlink: 'syz.3.1097': attribute type 1 has an invalid length.
[  399.782789][ T8004] XFS (loop4): Mounting V5 Filesystem
[  400.052133][ T8004] XFS (loop4): Ending clean mount
[  400.062305][ T8004] XFS (loop4): Quotacheck needed: Please wait.
[  400.131117][ T8004] XFS (loop4): Quotacheck: Done.
[  400.215262][ T4179] XFS (loop4): Unmounting Filesystem
[  400.316763][ T5321] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  400.456555][ T8057] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  400.465687][ T8057] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  400.478103][ T8057] vhci_hcd vhci_hcd.0: Device attached
[  400.490414][ T8058] usbip_core: unknown command
[  400.495120][ T8058] vhci_hcd: unknown pdu 0
[  400.500000][ T8058] usbip_core: unknown command
[  400.508696][ T5797] vhci_hcd: stop threads
[  400.513607][ T5797] vhci_hcd: release socket
[  400.522685][ T5797] vhci_hcd: disconnect device
[  400.713109][ T8064] loop4: detected capacity change from 0 to 256
[  400.779360][ T8064] exfat: Bad value for 'errors'
[  401.113572][ T8066] tmpfs: Unknown parameter 'usrquota'
[  401.276728][ T5321] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  401.290096][ T5321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.304046][ T5321] usb 3-1: Product: syz
[  401.309438][ T8073] netlink: 'syz.3.1108': attribute type 1 has an invalid length.
[  401.318567][ T5321] usb 3-1: Manufacturer: syz
[  401.324465][ T5321] usb 3-1: SerialNumber: syz
[  401.356922][ T5321] usb 3-1: config 0 descriptor??
[  401.626840][ T8083] loop1: detected capacity change from 0 to 2048
[  401.915022][ T8083] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  402.043181][ T8083] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  403.079084][ T5321] usb 3-1: USB disconnect, device number 6
[  403.130196][ T8118] netlink: 'syz.4.1121': attribute type 1 has an invalid length.
[  403.385322][ T8124] loop3: detected capacity change from 0 to 256
[  403.597709][ T8124] exfat: Bad value for 'errors'
[  404.113020][ T8132] tmpfs: Unknown parameter 'usrquota'
[  407.123497][   T26] audit: type=1326 audit(1733295276.029:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d22aff19 code=0x7ffc0000
[  407.171722][   T26] audit: type=1326 audit(1733295276.059:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d22aff19 code=0x7ffc0000
[  407.210951][   T26] audit: type=1326 audit(1733295276.059:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d22aff19 code=0x7ffc0000
[  407.340090][ T8163] loop4: detected capacity change from 0 to 256
[  407.377129][ T8163] exfat: Bad value for 'errors'
[  407.393086][   T26] audit: type=1326 audit(1733295276.059:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f47d22aff19 code=0x7ffc0000
[  407.415921][   T26] audit: type=1326 audit(1733295276.069:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d22aff19 code=0x7ffc0000
[  407.625910][ T8167] tmpfs: Unknown parameter 'usrquota'
[  407.741850][   T26] audit: type=1326 audit(1733295276.069:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8160 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f47d22e27c5 code=0x7ffc0000
[  407.915160][   T26] audit: type=1326 audit(1733295276.069:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f47d22aff19 code=0x7ffc0000
[  408.112270][   T26] audit: type=1326 audit(1733295276.069:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8158 comm="syz.2.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47d22aff19 code=0x7ffc0000
[  408.585179][ T8185] fuse: Bad value for 'fd'
[  409.066446][ T4213] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  409.987309][ T8203] vivid-000: disconnect
[  410.016413][   T23] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  410.189801][ T4213] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[  410.211869][ T4213] usb 5-1: config 0 has no interface number 0
[  410.220769][ T4213] usb 5-1: config 0 interface 156 has no altsetting 0
[  410.238525][ T4213] usb 5-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  410.256199][ T4213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.279159][ T4213] usb 5-1: config 0 descriptor??
[  410.327188][ T4213] hub 5-1:0.156: bad descriptor, ignoring hub
[  410.334445][ T4213] hub: probe of 5-1:0.156 failed with error -5
[  410.351166][ T4213] option 5-1:0.156: GSM modem (1-port) converter detected
[  410.376606][   T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  410.387930][   T23] usb 4-1: config 0 has no interface number 0
[  410.402062][   T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  410.423583][   T23] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  410.434698][   T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  410.444132][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.455790][   T23] usb 4-1: config 0 descriptor??
[  410.476682][ T8195] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  410.502502][   T23] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  410.717038][   T23] usb 4-1: USB disconnect, device number 10
[  410.744530][   T23] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected
[  410.818004][ T8202] vivid-000: reconnect
[  411.008571][ T8189] loop4: detected capacity change from 0 to 32768
[  411.095966][ T8189] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  411.126651][ T8189] BTRFS info (device loop4): using free space tree
[  411.152412][ T8189] BTRFS info (device loop4): has skinny extents
[  411.279666][ T8231] fuse: Bad value for 'fd'
[  411.424694][ T5321] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  411.601289][ T8189] BTRFS info (device loop4): enabling ssd optimizations
[  411.633082][ T8238] loop1: detected capacity change from 0 to 2048
[  411.866468][ T5321] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.917679][ T8238] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.938056][ T5321] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  411.991412][ T5321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.122602][ T4213] usb 5-1: USB disconnect, device number 6
[  412.146306][ T5206] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  412.182614][ T5321] usb 1-1: config 0 descriptor??
[  412.280878][ T5321] pwc: Askey VC010 type 2 USB webcam detected.
[  412.637718][ T4213] option 5-1:0.156: device disconnected
[  412.737032][ T8259] vivid-000: disconnect
[  413.006967][ T5321] pwc: recv_control_msg error -32 req 02 val 2b00
[  413.126910][ T5321] pwc: recv_control_msg error -32 req 02 val 2700
[  413.561432][ T5321] pwc: recv_control_msg error -32 req 02 val 2c00
[  413.572377][ T8258] vivid-000: reconnect
[  413.733994][ T5321] pwc: recv_control_msg error -32 req 04 val 1000
[  413.770187][ T8275] fuse: Bad value for 'fd'
[  413.780196][ T8277] loop3: detected capacity change from 0 to 256
[  413.780820][ T5321] pwc: recv_control_msg error -32 req 04 val 1300
[  413.811190][ T8277] exfat: Bad value for 'uid'
[  414.056578][ T5321] pwc: recv_control_msg error -71 req 02 val 2000
[  414.091053][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1168'.
[  414.106520][ T5321] pwc: recv_control_msg error -71 req 02 val 2100
[  414.138544][ T5321] pwc: recv_control_msg error -71 req 04 val 1500
[  414.156012][ T8283] loop2: detected capacity change from 0 to 2048
[  414.196602][ T5321] pwc: recv_control_msg error -71 req 02 val 2500
[  414.239197][ T5321] pwc: recv_control_msg error -71 req 02 val 2400
[  414.276497][ T5321] pwc: recv_control_msg error -71 req 02 val 2600
[  414.306721][ T5321] pwc: recv_control_msg error -71 req 02 val 2900
[  414.324986][ T8283] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  414.725571][ T5321] pwc: recv_control_msg error -71 req 02 val 2800
[  415.786522][ T5321] pwc: recv_control_msg error -71 req 04 val 1100
[  415.946441][ T5321] pwc: recv_control_msg error -71 req 04 val 1200
[  415.961777][ T5321] pwc: Registered as video103.
[  415.967831][ T5321] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  416.378895][ T5321] usb 1-1: USB disconnect, device number 9
[  418.222526][ T5321] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  418.473619][ T8334] loop1: detected capacity change from 0 to 256
[  418.507048][ T8334] exfat: Bad value for 'uid'
[  418.884328][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'.
[  423.124730][ T8371] loop0: detected capacity change from 0 to 256
[  423.217044][ T8371] exfat: Bad value for 'errors'
[  423.242098][ T8376] loop4: detected capacity change from 0 to 256
[  423.307005][ T8376] exfat: Bad value for 'uid'
[  423.328421][ T8379] vivid-003: disconnect
[  423.488626][ T8371] tmpfs: Unknown parameter 'usrquota'
[  423.515068][ T5321] usb 3-1: unable to read config index 0 descriptor/all
[  423.712432][ T5321] usb 3-1: can't read configurations, error -71
[  424.228156][ T8378] vivid-003: reconnect
[  424.824011][ T8395] device gretap0 entered promiscuous mode
[  425.887995][ T8423] loop0: detected capacity change from 0 to 256
[  425.927085][ T8423] exfat: Bad value for 'uid'
[  425.932383][ T8425] sctp: [Deprecated]: syz.4.1212 (pid 8425) Use of struct sctp_assoc_value in delayed_ack socket option.
[  425.932383][ T8425] Use struct sctp_sack_info instead
[  426.361630][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'.
[  426.384449][ T5321] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  427.192047][ T5321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.227114][ T5321] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  427.243132][ T5321] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  427.252634][ T5321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.274039][ T5321] usb 4-1: config 0 descriptor??
[  427.406463][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  427.596597][ T1111] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  427.658466][ T1108] usb 5-1: Using ep0 maxpacket: 8
[  427.777338][ T1108] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  427.790471][ T4279] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  427.794786][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  427.800154][ T5321] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  427.813009][ T1108] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  427.823647][ T5321] cm6533_jd 0003:0D8C:0022.0008: item fetching failed at offset 4/5
[  427.838735][ T1108] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  427.846658][ T5321] cm6533_jd 0003:0D8C:0022.0008: parse failed
[  427.868017][ T1108] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  427.879857][ T8446] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  427.883427][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.899007][ T5321] cm6533_jd: probe of 0003:0D8C:0022.0008 failed with error -22
[  428.048176][ T1111] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  428.048226][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.055474][ T1111] usb 1-1: config 0 descriptor??
[  428.090509][ T5321] usb 4-1: USB disconnect, device number 11
[  428.171640][ T1111] usb 1-1: selecting invalid altsetting 3
[  428.176563][ T1108] usb 5-1: GET_CAPABILITIES returned 0
[  428.182702][ T1111] comedi comedi0: could not set alternate setting 3 in high speed
[  428.188473][ T1108] usbtmc 5-1:16.0: can't read capabilities
[  428.193986][ T1111] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  428.208613][ T4279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  428.242306][ T4279] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.282361][ T1111] usbduxsigma: probe of 1-1:0.0 failed with error -22
[  428.345565][ T1111] usb 1-1: USB disconnect, device number 10
[  428.466733][ T4279] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  428.483568][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.503427][ T4279] usb 2-1: Product: syz
[  428.506376][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  428.509590][ T4279] usb 2-1: Manufacturer: syz
[  428.520041][ T4361] usb 5-1: USB disconnect, device number 7
[  428.523027][ T4279] usb 2-1: SerialNumber: syz
[  428.617925][ T4279] usb 2-1: selecting invalid altsetting 1
[  429.040452][ T8462] kvm: pic: single mode not supported
[  429.040580][ T8462] kvm: pic: level sensitive irq not supported
[  429.150590][ T8465] loop4: detected capacity change from 0 to 256
[  429.196936][ T8465] exfat: Bad value for 'uid'
[  429.276395][ T4279] usb 2-1: selecting invalid altsetting 1
[  429.343392][ T4279] cdc_ncm 2-1:1.0: bind() failure
[  429.766174][ T4279] usb 2-1: USB disconnect, device number 19
[  429.836457][ T1108] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  429.922856][ T8483] CIFS: VFS: Malformed UNC in devname
[  430.217877][ T8493] loop3: detected capacity change from 0 to 256
[  430.257069][ T8493] exfat: Bad value for 'uid'
[  430.339128][ T8495] netlink: 'syz.1.1236': attribute type 1 has an invalid length.
[  430.661573][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'.
[  431.143255][ T1108] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  431.143294][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.143320][ T1108] usb 1-1: Product: syz
[  431.143339][ T1108] usb 1-1: Manufacturer: syz
[  431.143358][ T1108] usb 1-1: SerialNumber: syz
[  431.154356][ T1108] usb 1-1: config 0 descriptor??
[  431.435279][ T8491] loop4: detected capacity change from 0 to 32768
[  431.626742][ T4279] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  431.897255][ T4279] usb 3-1: Using ep0 maxpacket: 8
[  432.246508][ T4279] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  432.257598][ T4279] usb 3-1: config 0 has no interfaces?
[  432.306519][ T1108] usb 1-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32
[  432.316531][ T1108] usb 1-1: Firmware version (0.0) predates our first public release.
[  432.324623][ T1108] usb 1-1: Please update to version 0.2 or newer
[  432.362933][ T8491] XFS (loop4): Mounting V5 Filesystem
[  432.368710][ T1108] usb 1-1: Firmware: build 
[  432.373381][ T1108] usb 1-1: atusb_probe: initialization failed, error = -32
[  432.384485][ T1108] atusb: probe of 1-1:0.0 failed with error -32
[  432.452569][ T4279] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  432.487373][ T8491] XFS (loop4): Ending clean mount
[  432.494943][ T8491] XFS (loop4): Quotacheck needed: Please wait.
[  432.517674][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  432.540042][ T4279] usb 3-1: Product: syz
[  432.545710][ T4279] usb 3-1: Manufacturer: syz
[  432.553167][ T4279] usb 3-1: SerialNumber: syz
[  432.568996][ T4279] usb 3-1: config 0 descriptor??
[  432.583986][ T8491] XFS (loop4): Quotacheck: Done.
[  432.586555][ T5321] usb 1-1: USB disconnect, device number 11
[  432.660415][ T4179] XFS (loop4): Unmounting Filesystem
[  433.056478][ T5321] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  433.148694][ T8540] loop0: detected capacity change from 0 to 256
[  433.177153][ T8540] exfat: Bad value for 'uid'
[  433.503615][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'.
[  433.596473][ T8542] netlink: 'syz.4.1251': attribute type 1 has an invalid length.
[  433.690602][ T5321] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.721884][ T5321] usb 2-1: config 0 interface 0 has no altsetting 0
[  433.765793][ T5321] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  433.800927][ T5321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.853351][ T5321] usb 2-1: config 0 descriptor??
[  434.216913][ T4279] usb 3-1: USB disconnect, device number 9
[  434.401182][ T5321] hid-alps 0003:044E:1215.0009: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.1-1/input0
[  434.807009][ T5321] usb 2-1: USB disconnect, device number 20
[  435.027918][ T1108] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  435.166034][ T8568] loop2: detected capacity change from 0 to 256
[  435.207043][ T8568] exfat: Bad value for 'uid'
[  435.432144][ T1108] usb 5-1: Using ep0 maxpacket: 32
[  435.449100][ T8568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'.
[  435.776533][ T1108] usb 5-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32
[  435.801495][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.821712][ T1108] usb 5-1: Product: syz
[  435.825901][ T1108] usb 5-1: Manufacturer: syz
[  435.841929][ T1108] usb 5-1: SerialNumber: syz
[  435.854212][ T1108] usb 5-1: config 0 descriptor??
[  435.961967][   T26] audit: type=1326 audit(1733295304.869:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dec9e4f19 code=0x7ffc0000
[  436.034077][   T26] audit: type=1326 audit(1733295304.869:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f6dec9e4f19 code=0x7ffc0000
[  436.100492][   T26] audit: type=1326 audit(1733295304.869:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8582 comm="syz.3.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dec9e4f19 code=0x7ffc0000
[  436.268294][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1274'.
[  436.454233][ T8603] loop0: detected capacity change from 0 to 256
[  436.486850][ T8603] exfat: Bad value for 'uid'
[  436.603051][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'.
[  436.765991][ T8606] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1278'.
[  436.846396][ T1108] usb 5-1: reset high-speed USB device number 8 using dummy_hcd
[  436.886574][ T1108] usb 5-1: device reset changed ep0 maxpacket size!
[  436.912787][ T1108] usb 5-1: USB disconnect, device number 8
[  437.076455][ T1108] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  437.122957][ T8608] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  437.146636][ T8608] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  437.352191][ T1108] usb 5-1: Using ep0 maxpacket: 8
[  437.476613][ T1108] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  437.491086][ T1108] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  437.666951][ T1108] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  437.680796][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.695546][ T1108] usb 5-1: Product: syz
[  437.700191][ T4399] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  437.707992][ T1108] usb 5-1: Manufacturer: syz
[  437.712722][ T1108] usb 5-1: SerialNumber: syz
[  437.786621][ T1108] usb 5-1: can't set config #1, error -71
[  437.802313][ T1108] usb 5-1: USB disconnect, device number 9
[  437.946359][ T4399] usb 1-1: Using ep0 maxpacket: 16
[  438.072011][ T4399] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  438.246446][ T4399] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  438.516452][ T4399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.706493][ T4399] usb 1-1: Product: syz
[  438.722538][ T4399] usb 1-1: Manufacturer: syz
[  438.731273][ T4399] usb 1-1: SerialNumber: syz
[  438.752416][ T4399] usb 1-1: config 0 descriptor??
[  438.970231][ T8636] vivid-000: disconnect
[  439.138890][ T4399] usb 1-1: Limiting number of CPorts to U8_MAX
[  439.166442][ T4399] usb 1-1: Not enough endpoints found in device, aborting!
[  439.227937][ T8634] vivid-000: reconnect
[  439.344004][ T8648] loop2: detected capacity change from 0 to 256
[  439.376787][ T8648] exfat: Bad value for 'uid'
[  439.492375][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'.
[  439.777362][ T8644] loop3: detected capacity change from 0 to 32768
[  439.828680][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  439.835383][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  439.905467][ T8644] XFS (loop3): Mounting V5 Filesystem
[  439.974202][ T8644] XFS (loop3): Ending clean mount
[  439.981293][ T8644] XFS (loop3): Quotacheck needed: Please wait.
[  440.044707][ T8644] XFS (loop3): Quotacheck: Done.
[  440.103214][ T4174] XFS (loop3): Unmounting Filesystem
[  440.146407][ T1108] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  440.342888][ T5321] usb 1-1: USB disconnect, device number 12
[  440.506628][ T1108] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[  440.514926][ T1108] usb 5-1: config 0 has no interface number 0
[  440.525063][ T8665] CIFS: VFS: Malformed UNC in devname
[  440.549317][ T1108] usb 5-1: config 0 interface 156 has no altsetting 0
[  440.571895][ T1108] usb 5-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  440.613378][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.650175][ T1108] usb 5-1: config 0 descriptor??
[  440.687121][ T1108] hub 5-1:0.156: bad descriptor, ignoring hub
[  440.706070][ T1108] hub: probe of 5-1:0.156 failed with error -5
[  440.722270][ T1108] option 5-1:0.156: GSM modem (1-port) converter detected
[  440.961816][ T8677] vivid-002: disconnect
[  441.149512][ T8676] vivid-002: reconnect
[  441.407165][ T8652] loop4: detected capacity change from 0 to 32768
[  441.454310][ T8652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1292 (8652)
[  441.491484][ T8652] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  441.506638][ T8652] BTRFS info (device loop4): using free space tree
[  441.513165][ T8652] BTRFS info (device loop4): has skinny extents
[  441.559647][ T4279] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  441.586530][ T5321] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  441.805793][ T8652] BTRFS info (device loop4): enabling ssd optimizations
[  441.846385][ T5321] usb 3-1: Using ep0 maxpacket: 8
[  441.956067][ T4275] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  441.987365][ T5321] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  442.003310][ T5321] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  442.007394][ T4361] usb 5-1: USB disconnect, device number 10
[  442.014006][ T5321] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  442.036119][ T5321] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  442.040119][ T4361] option 5-1:0.156: device disconnected
[  442.126769][ T4279] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  442.146893][ T5321] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  442.156023][ T5321] usb 3-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0
[  442.164942][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.176493][ T4279] usb 4-1: Product: syz
[  442.180678][ T4279] usb 4-1: Manufacturer: syz
[  442.195530][ T5321] usb 3-1: Product: syz
[  442.208420][ T4279] usb 4-1: SerialNumber: syz
[  442.227897][ T4279] usb 4-1: config 0 descriptor??
[  442.268432][ T4279] gspca_main: sq905c-2.14.0 probing 2770:9052
[  442.322886][ T8707] loop0: detected capacity change from 0 to 256
[  442.346844][ T8707] exfat: Bad value for 'uid'
[  442.466488][ T5321] usb 3-1: GET_CAPABILITIES returned 0
[  442.478192][ T5321] usbtmc 3-1:16.0: can't read capabilities
[  442.514687][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1304'.
[  442.684010][ T5321] usb 3-1: USB disconnect, device number 10
[  442.786391][ T4279] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  442.801584][ T4279] sq905c 4-1:0.0: Get version command failed
[  442.814203][ T4279] sq905c: probe of 4-1:0.0 failed with error -71
[  442.834162][ T4279] usb 4-1: USB disconnect, device number 12
[  443.248244][ T8729] vivid-000: disconnect
[  443.436558][ T4364] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  443.451525][ T8728] vivid-000: reconnect
[  443.686769][ T4364] usb 5-1: Using ep0 maxpacket: 8
[  444.128259][ T4364] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  444.137719][ T4213] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  444.204103][ T4364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.395166][ T4364] usb 5-1: config 0 descriptor??
[  444.400400][ T4213] usb 3-1: Using ep0 maxpacket: 16
[  444.516965][ T4213] usb 3-1: config 157 interface 0 has no altsetting 0
[  444.686553][ T4213] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  444.734323][ T4213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.820511][ T4213] usb 3-1: Product: syz
[  444.825364][ T4213] usb 3-1: Manufacturer: syz
[  444.874906][ T4213] usb 3-1: SerialNumber: syz
[  445.588647][ T4213] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  445.608304][ T4213] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  445.620415][ T4213] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  445.629635][ T4213] usb 3-1: media controller created
[  445.650478][ T4213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  445.734787][ T8759] fuse: Unknown parameter 'user_id00000000000000000000'
[  445.736659][ T4213] zl10353_read_register: readreg error (reg=127, ret==-71)
[  445.803832][ T4213] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5
[  445.835525][ T4213] usb 3-1: USB disconnect, device number 11
[  445.976650][ T8768] vivid-001: disconnect
[  446.106534][ T5321] usb 4-1: new low-speed USB device number 13 using dummy_hcd
[  446.166484][ T4279] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  446.538563][ T5321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  446.555146][ T5321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  446.565037][ T4279] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping
[  446.581733][ T5321] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[  446.593268][ T4279] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  446.608029][ T5321] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  446.620685][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.634021][ T5321] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.654055][ T4279] usb 2-1: config 0 descriptor??
[  446.686675][ T8764] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  446.708695][ T5321] hub 4-1:1.0: bad descriptor, ignoring hub
[  446.714615][ T5321] hub: probe of 4-1:1.0 failed with error -5
[  446.736774][ T5321] cdc_wdm 4-1:1.0: skipping garbage
[  446.742673][ T5321] cdc_wdm 4-1:1.0: skipping garbage
[  446.758681][ T5321] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  446.764593][ T5321] cdc_wdm 4-1:1.0: Unknown control protocol
[  446.802040][ T8767] vivid-001: reconnect
[  446.936541][ T4279] ath6kl: Failed to submit usb control message: -71
[  446.944763][ T4279] ath6kl: unable to send the bmi data to the device: -71
[  446.965278][ T4279] ath6kl: Unable to send get target info: -71
[  446.979673][ T4279] ath6kl: Failed to init ath6kl core: -71
[  447.001532][ T4279] ath6kl_usb: probe of 2-1:0.0 failed with error -71
[  447.045045][ T4279] usb 2-1: USB disconnect, device number 21
[  447.116489][ T4364] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  447.129352][ T4364] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading RX_CTL register: ffffffe0
[  447.862895][ T4279] usb 4-1: USB disconnect, device number 13
[  447.969284][ T4364] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  447.980131][ T4364] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading Medium Status register: ffffffe0
[  448.206453][ T4364] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71
[  448.228937][ T8795] fuse: Bad value for 'fd'
[  448.366838][ T4177] Bluetooth: Unexpected continuation frame (len 4)
[  448.371561][ T4364] asix: probe of 5-1:0.0 failed with error -5
[  448.382518][ T8800] vivid-001: disconnect
[  448.396774][    T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  448.440375][ T4364] usb 5-1: USB disconnect, device number 11
[  448.672640][    T7] usb 3-1: Using ep0 maxpacket: 8
[  449.007702][    T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  449.030755][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.057688][    T7] usb 3-1: Product: syz
[  449.071246][    T7] usb 3-1: Manufacturer: syz
[  449.083222][    T7] usb 3-1: SerialNumber: syz
[  449.128422][    T7] usb 3-1: config 0 descriptor??
[  449.164846][ T8799] vivid-001: reconnect
[  449.306489][ T4364] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  449.321892][ T8817] loop3: detected capacity change from 0 to 512
[  449.406481][    T7] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  449.431855][ T8817] EXT4-fs (loop3): 1 orphan inode deleted
[  449.438098][ T8817] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  449.451705][ T8817] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  449.486466][ T4279] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  449.546438][ T4364] usb 5-1: Using ep0 maxpacket: 32
[  449.593755][ T8822] loop3: detected capacity change from 0 to 2048
[  449.676450][ T4364] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  449.685025][ T4364] usb 5-1: config 0 has no interface number 0
[  449.694182][ T4364] usb 5-1: config 0 interface 12 has no altsetting 0
[  449.703557][ T8822] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  449.876777][ T4279] usb 2-1: config 0 has an invalid interface number: 156 but max is 0
[  449.884966][ T4279] usb 2-1: config 0 has no interface number 0
[  449.891431][ T4279] usb 2-1: config 0 interface 156 has no altsetting 0
[  449.898278][ T4279] usb 2-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  449.907403][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.991403][ T4279] usb 2-1: config 0 descriptor??
[  450.130329][ T4279] hub 2-1:0.156: bad descriptor, ignoring hub
[  450.203525][ T4279] hub: probe of 2-1:0.156 failed with error -5
[  450.315797][ T4279] option 2-1:0.156: GSM modem (1-port) converter detected
[  450.646607][ T4364] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  450.665940][ T4364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.694501][ T4364] usb 5-1: Product: syz
[  450.698801][ T4364] usb 5-1: Manufacturer: syz
[  450.703409][ T4364] usb 5-1: SerialNumber: syz
[  450.740511][ T4364] usb 5-1: config 0 descriptor??
[  450.814918][ T8830] loop3: detected capacity change from 0 to 128
[  450.904098][ T8813] loop1: detected capacity change from 0 to 32768
[  450.914596][ T8830] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  450.941870][ T8830] xt_limit: Overflow, try lower: 1207959552/384
[  450.961889][ T8830] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  450.985920][ T8813] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1341 (8813)
[  451.008535][ T8832] netlink: 'syz.0.1346': attribute type 1 has an invalid length.
[  451.055329][ T8813] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  451.077966][ T8813] BTRFS info (device loop1): using free space tree
[  451.102156][ T8813] BTRFS info (device loop1): has skinny extents
[  451.404992][ T8813] BTRFS info (device loop1): enabling ssd optimizations
[  451.551270][ T5263] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  451.562636][ T8857] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  451.570922][ T8857] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  451.579480][ T8857] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  451.777320][ T4213] usb 2-1: USB disconnect, device number 22
[  451.794237][ T4213] option 2-1:0.156: device disconnected
[  452.216459][    T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  452.236502][    T7] usb 3-1: USB disconnect, device number 12
[  452.396585][ T4364] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[  452.407358][ T4364] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  452.448188][ T4364] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  452.475331][ T4364] f81534: probe of 5-1:0.12 failed with error -71
[  452.523110][ T4364] usb 5-1: USB disconnect, device number 12
[  453.224416][ T8872] loop4: detected capacity change from 0 to 512
[  453.481137][ T8880] vivid-003: disconnect
[  453.941932][ T8872] EXT4-fs (loop4): 1 orphan inode deleted
[  454.146941][ T8872] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  454.204777][ T8872] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  454.311830][ T8879] vivid-003: reconnect
[  454.342604][ T8888] loop2: detected capacity change from 0 to 2048
[  454.524608][ T8888] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  454.820824][ T8900] netlink: 'syz.3.1360': attribute type 1 has an invalid length.
[  456.007285][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.014570][ T8899] loop4: detected capacity change from 0 to 4096
[  456.092265][ T8908] loop1: detected capacity change from 0 to 256
[  456.237372][ T8908] exfat: Bad value for 'errors'
[  456.262749][ T8913] ieee802154 phy0 wpan0: encryption failed: -22
[  456.295986][ T8899] ntfs: volume version 3.1.
[  456.567034][ T4275] Bluetooth: hci5: Frame reassembly failed (-84)
[  456.588736][ T4275] Bluetooth: hci5: Frame reassembly failed (-84)
[  456.655564][ T8917] tmpfs: Unknown parameter 'usrquota'
[  457.090163][ T8913] "syz.2.1363" (8913) uses obsolete ecb(arc4) skcipher
[  457.273415][ T8919] loop3: detected capacity change from 0 to 128
[  457.358978][ T8921] vivid-003: disconnect
[  457.403093][ T8913] netlink: 'syz.2.1363': attribute type 9 has an invalid length.
[  457.561281][ T8919] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  457.638477][ T8919] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  457.981983][ T8929] loop3: detected capacity change from 0 to 512
[  458.188903][ T8929] EXT4-fs (loop3): 1 orphan inode deleted
[  458.206363][ T8929] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  458.212473][ T8920] vivid-003: reconnect
[  458.244524][ T8929] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  458.698371][ T5321] Bluetooth: hci5: command 0x1003 tx timeout
[  458.705823][ T4182] Bluetooth: hci5: sending frame failed (-49)
[  459.046468][ T8945] netlink: 'syz.3.1375': attribute type 1 has an invalid length.
[  460.475963][ T8954] loop0: detected capacity change from 0 to 4096
[  460.640010][ T8954] ntfs: volume version 3.1.
[  460.796351][ T5321] Bluetooth: hci5: command 0x1001 tx timeout
[  460.802525][ T4182] Bluetooth: hci5: sending frame failed (-49)
[  460.814015][ T8956] loop1: detected capacity change from 0 to 256
[  460.867691][ T8956] exfat: Bad value for 'errors'
[  460.903761][ T8951] loop3: detected capacity change from 0 to 32768
[  460.969595][ T8951] jfs: Unrecognized mount option "0
" or missing value
[  461.237716][ T8960] tmpfs: Unknown parameter 'usrquota'
[  463.148591][ T8973] loop4: detected capacity change from 0 to 512
[  463.193113][ T8975] "syz.3.1384" (8975) uses obsolete ecb(arc4) skcipher
[  463.259932][ T5321] Bluetooth: hci5: command 0x1009 tx timeout
[  463.496192][ T8973] EXT4-fs (loop4): 1 orphan inode deleted
[  463.503857][ T8973] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  463.516071][ T8973] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.803533][ T8986] loop4: detected capacity change from 0 to 128
[  463.930168][ T8986] VFS: Found a Xenix FS (block size = 512) on device loop4
[  464.026206][ T8986] sysv_free_block: trying to free block not in datazone
[  464.079246][   T26] audit: type=1804 audit(1733295332.989:46): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1387" name="/newroot/233/file0" dev="loop4" ino=2 res=1 errno=0
[  464.136539][    T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  464.194041][ T8990] loop3: detected capacity change from 0 to 4096
[  464.304865][ T8990] ntfs: volume version 3.1.
[  464.375110][ T8993] vivid-002: disconnect
[  464.436385][ T4361] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  464.686520][    T7] usb 1-1: config 0 has an invalid interface number: 156 but max is 0
[  464.697557][    T7] usb 1-1: config 0 has no interface number 0
[  464.704456][    T7] usb 1-1: config 0 interface 156 has no altsetting 0
[  464.723174][    T7] usb 1-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  464.740013][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.757636][    T7] usb 1-1: config 0 descriptor??
[  464.810839][ T4361] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  464.817053][    T7] hub 1-1:0.156: bad descriptor, ignoring hub
[  464.830012][    T7] hub: probe of 1-1:0.156 failed with error -5
[  464.831375][ T4361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.844213][    T7] option 1-1:0.156: GSM modem (1-port) converter detected
[  464.881100][ T4361] usb 5-1: config 0 descriptor??
[  464.933354][ T4361] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  465.288773][ T8992] vivid-002: reconnect
[  465.494943][ T8988] loop0: detected capacity change from 0 to 32768
[  465.607474][ T8988] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1388 (8988)
[  465.650882][ T8988] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  465.670314][ T8988] BTRFS info (device loop0): using free space tree
[  465.681534][ T8988] BTRFS info (device loop0): has skinny extents
[  465.926405][ T8988] BTRFS info (device loop0): enabling ssd optimizations
[  466.024299][ T4415] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  466.064243][ T9012] loop1: detected capacity change from 0 to 32768
[  466.086594][    T7] usb 1-1: USB disconnect, device number 13
[  466.093430][    T7] option 1-1:0.156: device disconnected
[  466.127615][ T9012] jfs: Unrecognized mount option "0
" or missing value
[  466.301177][ T4361] usb 5-1: USB disconnect, device number 13
[  466.785414][ T9028] loop1: detected capacity change from 0 to 128
[  466.789248][ T9030] loop3: detected capacity change from 0 to 512
[  466.852903][ T9028] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  466.875547][ T9032] loop2: detected capacity change from 0 to 128
[  466.912071][ T9030] EXT4-fs (loop3): 1 orphan inode deleted
[  466.962380][ T9028] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  467.032976][ T9030] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  467.067194][ T9032] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  467.096890][ T9030] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  467.117961][ T4179] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  467.166145][ T9032] xt_limit: Overflow, try lower: 1207959552/384
[  467.367393][ T9032] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  467.446213][ T9038] loop1: detected capacity change from 0 to 4096
[  467.864207][ T9038] ntfs: volume version 3.1.
[  467.970132][ T9055] netlink: 'syz.4.1399': attribute type 1 has an invalid length.
[  468.104270][ T9059] loop2: detected capacity change from 0 to 256
[  468.251946][ T9059] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  468.419657][ T9059] exFAT-fs (loop2): hint_cluster is invalid (17)
[  468.446457][ T9063] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1406'.
[  468.849346][ T9052] loop0: detected capacity change from 0 to 32768
[  468.887220][ T9052] jfs: Unrecognized mount option "./file0" or missing value
[  469.090060][ T5321] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  469.517083][ T5321] usb 3-1: config 0 has an invalid interface number: 156 but max is 0
[  469.536861][ T5321] usb 3-1: config 0 has no interface number 0
[  469.542986][ T5321] usb 3-1: config 0 interface 156 has no altsetting 0
[  469.562408][ T5321] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  469.581826][ T5321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.610566][ T5321] usb 3-1: config 0 descriptor??
[  469.667250][ T5321] hub 3-1:0.156: bad descriptor, ignoring hub
[  469.676319][ T5321] hub: probe of 3-1:0.156 failed with error -5
[  469.699358][ T5321] option 3-1:0.156: GSM modem (1-port) converter detected
[  469.736180][ T9075] loop4: detected capacity change from 0 to 512
[  469.880216][ T9075] EXT4-fs (loop4): 1 orphan inode deleted
[  469.921337][ T9075] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  469.966466][ T9075] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  470.076443][ T5321] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  470.094605][ T9076] loop0: detected capacity change from 0 to 32768
[  470.170009][ T9076] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  470.238413][ T9084] loop4: detected capacity change from 0 to 128
[  470.287227][ T9084] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  470.293627][ T4171] ocfs2: Unmounting device (7,0) on (node local)
[  470.336547][ T5321] usb 4-1: Using ep0 maxpacket: 16
[  470.373545][ T9084] xt_limit: Overflow, try lower: 1207959552/384
[  470.476514][ T5321] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  470.494861][ T5321] usb 4-1: config 0 has no interface number 0
[  470.496464][ T9084] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  470.535435][ T5321] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  470.590318][ T5321] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  470.606553][ T5321] usb 4-1: config 0 interface 41 has no altsetting 0
[  470.626198][ T9068] loop2: detected capacity change from 0 to 32768
[  470.823295][ T9068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1408 (9068)
[  470.836468][ T5321] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  470.845529][ T5321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.889795][ T5321] usb 4-1: Product: syz
[  470.893989][ T5321] usb 4-1: Manufacturer: syz
[  470.941995][ T5321] usb 4-1: SerialNumber: syz
[  470.955733][ T9068] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  471.000418][ T5321] usb 4-1: config 0 descriptor??
[  471.015727][ T9068] BTRFS info (device loop2): using free space tree
[  471.036356][ T9099] loop1: detected capacity change from 0 to 16
[  471.068355][ T9068] BTRFS info (device loop2): has skinny extents
[  471.076838][ T9078] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  471.083904][ T9078] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  471.180653][ T9099] erofs: (device loop1): mounted with root inode @ nid 36.
[  471.190467][ T9099] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  471.376622][ T9078] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  471.393939][ T9068] BTRFS info (device loop2): enabling ssd optimizations
[  471.408705][ T9078] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  471.466414][   T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  471.503409][ T4415] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  471.663255][ T4210] usb 3-1: USB disconnect, device number 13
[  471.670179][ T4210] option 3-1:0.156: device disconnected
[  471.931331][ T5321] CoreChips: probe of 4-1:0.41 failed with error -71
[  471.936456][   T21] usb 5-1: Using ep0 maxpacket: 16
[  472.657428][ T9128] netlink: 'syz.1.1421': attribute type 1 has an invalid length.
[  472.943142][ T5321] usb 4-1: USB disconnect, device number 14
[  473.656524][   T21] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  473.670236][   T21] usb 5-1: config 0 has no interface number 0
[  473.687290][   T21] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  473.700243][   T21] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  473.710846][   T21] usb 5-1: config 0 interface 41 has no altsetting 0
[  473.728595][ T9133] loop0: detected capacity change from 0 to 512
[  473.876746][   T21] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  473.912553][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.932274][ T9145] loop3: detected capacity change from 0 to 128
[  473.934344][   T21] usb 5-1: Product: syz
[  473.952003][ T9133] EXT4-fs (loop0): 1 orphan inode deleted
[  473.957891][   T21] usb 5-1: Manufacturer: syz
[  473.968295][ T9133] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  473.974977][   T21] usb 5-1: SerialNumber: syz
[  474.001659][ T9133] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  474.007574][   T21] usb 5-1: config 0 descriptor??
[  474.070443][ T9145] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  474.075513][   T21] usb 5-1: can't set config #0, error -71
[  474.104578][   T21] usb 5-1: USB disconnect, device number 14
[  474.136803][ T9145] xt_limit: Overflow, try lower: 1207959552/384
[  474.156423][ T4355] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  474.331616][ T9145] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  474.593334][ T4355] usb 2-1: Using ep0 maxpacket: 8
[  474.799342][ T9161] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  474.807577][ T9161] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  474.816031][ T9161] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  475.248923][ T9165] "syz.0.1432" (9165) uses obsolete ecb(arc4) skcipher
[  475.426839][ T9167] loop2: detected capacity change from 0 to 4096
[  475.446460][ T4355] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  475.455534][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.465379][ T4355] usb 2-1: Product: syz
[  475.493199][ T4355] usb 2-1: Manufacturer: syz
[  475.501894][ T4355] usb 2-1: SerialNumber: syz
[  475.520334][ T4355] usb 2-1: config 0 descriptor??
[  475.558707][ T9167] ntfs: volume version 3.1.
[  475.826562][ T4355] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  476.548281][ T9174] loop3: detected capacity change from 0 to 16
[  476.828672][ T4355] usb write operation failed. (-71)
[  477.298063][    T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  477.314042][ T4355] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  477.327041][ T4355] dvbdev: DVB: registering new adapter (Terratec H7)
[  477.333818][ T4355] usb 2-1: media controller created
[  477.874518][ T9174] erofs: (device loop3): mounted with root inode @ nid 36.
[  478.130294][ T9171] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  478.176506][ T4355] usb read operation failed. (-71)
[  478.196521][ T4355] usb write operation failed. (-71)
[  478.207219][ T4355] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5
[  478.240939][ T4355] usb 2-1: USB disconnect, device number 23
[  478.433101][ T9187] ieee802154 phy0 wpan0: encryption failed: -22
[  478.496611][    T7] usb 3-1: config 0 has an invalid interface number: 156 but max is 0
[  478.532124][    T7] usb 3-1: config 0 has no interface number 0
[  478.582835][    T7] usb 3-1: config 0 interface 156 has no altsetting 0
[  478.595257][ T9187] "syz.0.1440" (9187) uses obsolete ecb(arc4) skcipher
[  478.607009][    T7] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  478.616192][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.635412][ T9195] loop3: detected capacity change from 0 to 512
[  478.650999][ T9187] netlink: 'syz.0.1440': attribute type 9 has an invalid length.
[  478.673638][    T7] usb 3-1: config 0 descriptor??
[  478.691563][ T5206] Bluetooth: hci5: Frame reassembly failed (-84)
[  478.731831][    T7] hub 3-1:0.156: bad descriptor, ignoring hub
[  478.748550][    T7] hub: probe of 3-1:0.156 failed with error -5
[  478.767511][    T7] option 3-1:0.156: GSM modem (1-port) converter detected
[  479.023124][ T9201] loop1: detected capacity change from 0 to 16
[  479.704703][ T9195] EXT4-fs (loop3): 1 orphan inode deleted
[  479.713483][ T9195] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  479.745811][ T9195] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  479.977030][ T9201] erofs: (device loop1): mounted with root inode @ nid 36.
[  480.179890][ T9209] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  480.188166][ T9209] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  480.196756][ T9209] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  480.565262][ T4355] Bluetooth: hci5: command 0x1003 tx timeout
[  480.582102][ T4182] Bluetooth: hci5: sending frame failed (-49)
[  481.029737][ T9215] loop3: detected capacity change from 0 to 256
[  481.123171][ T9215] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  481.300357][ T9223] loop2: detected capacity change from 0 to 256
[  481.363964][ T9223] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  481.391971][   T21] usb 3-1: USB disconnect, device number 14
[  481.485242][ T9223] exFAT-fs (loop2): hint_cluster is invalid (17)
[  481.512855][ T9223] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1450'.
[  481.551039][ T9223] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  481.557590][ T9223] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  481.569933][   T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  481.574586][ T9223] vhci_hcd vhci_hcd.0: Device attached
[  481.579852][   T21] option 3-1:0.156: device disconnected
[  481.709591][ T9232] loop3: detected capacity change from 0 to 16
[  481.799097][ T9232] erofs: (device loop3): mounted with root inode @ nid 36.
[  481.836402][   T23] usb 5-1: Using ep0 maxpacket: 16
[  481.957048][   T23] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  482.015104][   T23] usb 5-1: config 0 has no interface number 0
[  482.131585][   T23] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  482.355665][   T23] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  482.393165][   T23] usb 5-1: config 0 interface 41 has no altsetting 0
[  482.425202][ T9229] vhci_hcd: connection closed
[  482.425428][ T4276] vhci_hcd: stop threads
[  482.445455][ T4276] vhci_hcd: release socket
[  482.455583][ T4276] vhci_hcd: disconnect device
[  482.506438][ T4355] vhci_hcd: vhci_device speed not set
[  482.570532][   T23] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  482.585456][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.599094][   T23] usb 5-1: Product: syz
[  482.604287][   T23] usb 5-1: Manufacturer: syz
[  482.612013][   T23] usb 5-1: SerialNumber: syz
[  482.626436][    T7] Bluetooth: hci5: command 0x1001 tx timeout
[  482.629958][   T23] usb 5-1: config 0 descriptor??
[  482.649919][ T4182] Bluetooth: hci5: sending frame failed (-49)
[  482.656808][ T9219] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  482.674197][ T9219] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  482.737580][ T9242] loop3: detected capacity change from 0 to 128
[  482.809710][ T9242] VFS: Found a Xenix FS (block size = 512) on device loop3
[  482.834611][ T4174] sysv_free_block: trying to free block not in datazone
[  482.843689][ T4174] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  482.873045][ T9245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  482.880627][ T9245] batman_adv: batadv0: Removing interface: batadv_slave_0
[  482.912396][ T9245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  482.930792][ T9245] batman_adv: batadv0: Removing interface: batadv_slave_1
[  483.075461][ T9219] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  483.082690][ T9219] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  483.596583][   T23] CoreChips: probe of 5-1:0.41 failed with error -22
[  483.702333][ T9256] "syz.3.1458" (9256) uses obsolete ecb(arc4) skcipher
[  483.820164][   T23] usb 5-1: USB disconnect, device number 15
[  484.326383][   T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  484.566362][   T23] usb 3-1: Using ep0 maxpacket: 16
[  484.706643][ T4355] Bluetooth: hci5: command 0x1009 tx timeout
[  484.816424][   T21] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  484.826586][   T23] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  484.844810][   T23] usb 3-1: config 0 has no interface number 0
[  484.875135][ T9275] loop3: detected capacity change from 0 to 16
[  484.916746][   T23] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  484.952436][   T23] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  484.964365][   T23] usb 3-1: config 0 interface 41 has no altsetting 0
[  485.003057][ T9275] erofs: (device loop3): mounted with root inode @ nid 36.
[  485.176965][   T23] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  485.206619][   T21] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[  485.270545][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.291652][   T21] usb 5-1: config 0 has no interface number 0
[  485.372681][   T21] usb 5-1: config 0 interface 156 has no altsetting 0
[  485.391895][   T23] usb 3-1: Product: syz
[  485.484040][   T23] usb 3-1: Manufacturer: syz
[  485.495872][   T21] usb 5-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22
[  485.512087][   T23] usb 3-1: SerialNumber: syz
[  485.532943][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.542040][   T23] usb 3-1: config 0 descriptor??
[  485.566780][ T9264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  485.584128][ T9264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  485.600005][   T21] usb 5-1: config 0 descriptor??
[  485.637047][   T21] hub 5-1:0.156: bad descriptor, ignoring hub
[  485.644228][   T21] hub: probe of 5-1:0.156 failed with error -5
[  485.667699][   T21] option 5-1:0.156: GSM modem (1-port) converter detected
[  485.814286][ T9264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  485.826538][ T9264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  486.040677][ T9284] loop1: detected capacity change from 0 to 128
[  486.052230][ T9283] "syz.3.1468" (9283) uses obsolete ecb(arc4) skcipher
[  486.066582][   T23] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  486.086547][   T23] CoreChips: probe of 3-1:0.41 failed with error -71
[  486.107599][   T23] usb 3-1: USB disconnect, device number 15
[  486.122205][ T9284] VFS: Found a Xenix FS (block size = 512) on device loop1
[  486.172601][ T4166] sysv_free_block: trying to free block not in datazone
[  486.193695][ T4166] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  486.296927][ T9266] loop4: detected capacity change from 0 to 32768
[  486.415288][ T9266] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1461 (9266)
[  486.514516][ T9289] netlink: 'syz.1.1469': attribute type 1 has an invalid length.
[  486.637161][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  486.790793][ T9266] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  486.799845][   T23] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  486.815989][ T9295] "syz.2.1472" (9295) uses obsolete ecb(arc4) skcipher
[  486.818288][ T9266] BTRFS info (device loop4): using free space tree
[  486.829962][ T9266] BTRFS info (device loop4): has skinny extents
[  486.854258][ T9266] BTRFS info (device loop4): enabling ssd optimizations
[  486.866419][ T4355] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  486.913749][ T4276] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  487.006601][ T4214] usb 5-1: USB disconnect, device number 16
[  487.014597][ T4214] option 5-1:0.156: device disconnected
[  487.156376][ T4355] usb 4-1: Using ep0 maxpacket: 8
[  487.176521][   T23] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  487.185099][   T23] usb 2-1: can't read configurations, error -22
[  487.336367][   T23] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  487.467721][ T4355] usb 4-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice=6a.96
[  487.476957][ T4355] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.484960][ T4355] usb 4-1: Product: syz
[  487.489746][ T4355] usb 4-1: Manufacturer: syz
[  487.494357][ T4355] usb 4-1: SerialNumber: syz
[  487.512695][ T4355] usb 4-1: config 0 descriptor??
[  487.569054][ T4355] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state.
[  487.687541][ T4355] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  487.696591][   T23] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  487.705621][   T23] usb 2-1: can't read configurations, error -22
[  487.718115][   T23] usb usb2-port1: attempt power cycle
[  487.723334][ T4355] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800))
[  487.732768][ T4355] usb 4-1: media controller created
[  487.750394][ T4355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  488.166484][   T23] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  488.173164][ T4355] dvb-usb: bulk message failed: -22 (6/0)
[  488.268153][ T9283] loop3: detected capacity change from 0 to 1024
[  488.386917][   T23] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  488.405137][   T23] usb 2-1: can't read configurations, error -22
[  488.426084][ T4355] dvb-usb: bulk message failed: -22 (6/0)
[  488.433202][ T4355] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)'
[  488.581947][ T9323] loop2: detected capacity change from 0 to 128
[  488.626512][ T4355] rc_core: IR keymap rc-avermedia-m135a not found
[  488.636363][ T4355] Registered IR keymap rc-empty
[  488.643895][ T4355] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  488.663227][ T9323] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  488.671913][ T4355] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input11
[  488.690847][ T9323] xt_limit: Overflow, try lower: 1207959552/384
[  488.716619][ T4355] dvb-usb: schedule remote query interval to 150 msecs.
[  488.736668][ T4355] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected.
[  488.829399][ T4355] usb 4-1: USB disconnect, device number 15
[  488.852068][ T9325] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  489.058522][ T4355] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected.
[  489.101887][ T9324] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  489.110225][ T9324] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  489.118719][ T9324] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  489.126853][   T23] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  489.397659][   T23] usb 2-1: unable to read config index 0 descriptor/start: -71
[  489.397694][   T23] usb 2-1: can't read configurations, error -71
[  489.400421][   T23] usb usb2-port1: unable to enumerate USB device
[  489.438860][ T9336] loop1: detected capacity change from 0 to 128
[  489.510111][ T9336] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  489.630582][ T9336] xt_limit: Overflow, try lower: 1207959552/384
[  489.716476][ T4364] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  489.783148][ T9336] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  490.006480][ T4364] usb 5-1: Using ep0 maxpacket: 16
[  490.126529][ T4364] usb 5-1: config 4 has an invalid interface number: 51 but max is 0
[  490.135092][ T4364] usb 5-1: config 4 has no interface number 0
[  490.145800][ T4364] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  490.161977][ T4364] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  490.172471][ T4364] usb 5-1: config 4 interface 51 has no altsetting 0
[  490.255712][ T9349] loop3: detected capacity change from 0 to 4096
[  490.346487][ T4364] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  490.370301][ T4364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.401362][ T4364] usb 5-1: Product: syz
[  490.406586][ T4364] usb 5-1: Manufacturer: syz
[  490.414757][ T4364] usb 5-1: SerialNumber: syz
[  490.446780][ T9337] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  490.457428][ T9337] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  490.490578][ T9349] ntfs: volume version 3.1.
[  491.996051][ T9361] ieee802154 phy0 wpan0: encryption failed: -22
[  492.011686][ T9366] loop0: detected capacity change from 0 to 128
[  492.739449][ T9364] loop2: detected capacity change from 0 to 16
[  492.813635][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  492.818569][ T9364] erofs: (device loop2): mounted with root inode @ nid 36.
[  492.822418][ T9372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  492.839358][ T4364] cdc_eem: probe of 5-1:4.51 failed with error -71
[  492.845809][ T9361] "syz.1.1486" (9361) uses obsolete ecb(arc4) skcipher
[  492.861046][  T155] Bluetooth: hci5: Frame reassembly failed (-84)
[  492.872873][ T9366] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  492.887900][ T4364] usb 5-1: USB disconnect, device number 17
[  492.912251][ T9372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  492.933748][ T9372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  493.044035][ T9366] xt_limit: Overflow, try lower: 1207959552/384
[  493.135834][ T9370] netlink: 'syz.3.1489': attribute type 1 has an invalid length.
[  493.245359][ T9375] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  493.451419][ T9361] netlink: 'syz.1.1486': attribute type 9 has an invalid length.
[  493.466703][ T9146] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  493.781144][ T9377] loop2: detected capacity change from 0 to 32768
[  493.905882][ T9377] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  493.916539][ T9146] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  493.924986][ T9146] usb 4-1: can't read configurations, error -22
[  494.044915][ T4167] ocfs2: Unmounting device (7,2) on (node local)
[  494.146345][ T9146] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  494.526470][ T9146] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  494.535091][ T9146] usb 4-1: can't read configurations, error -22
[  494.552140][ T9146] usb usb4-port1: attempt power cycle
[  494.866552][ T5321] Bluetooth: hci5: command 0x1003 tx timeout
[  494.873148][ T4182] Bluetooth: hci5: sending frame failed (-49)
[  495.088955][ T9146] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  495.356668][ T9146] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  495.365154][ T9146] usb 4-1: can't read configurations, error -22
[  495.421510][ T9404] loop2: detected capacity change from 0 to 2048
[  495.484340][ T9404] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  495.505771][ T9404] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  495.556427][ T9146] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  495.916589][ T9146] usb 4-1: unable to read config index 0 descriptor/all
[  495.944077][ T9146] usb 4-1: can't read configurations, error -71
[  495.945495][ T9408] "syz.4.1501" (9408) uses obsolete ecb(arc4) skcipher
[  495.974604][ T9146] usb usb4-port1: unable to enumerate USB device
[  496.019658][ T9414] loop3: detected capacity change from 0 to 256
[  496.209596][ T9415] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  496.218057][ T9415] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  496.228208][ T9415] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  496.257694][ T9414] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  497.187211][ T9420] loop4: detected capacity change from 0 to 16
[  497.936395][ T4355] Bluetooth: hci5: command 0x1001 tx timeout
[  497.945301][ T4182] Bluetooth: hci5: sending frame failed (-49)
[  498.095344][ T9414] exFAT-fs (loop3): hint_cluster is invalid (17)
[  498.098669][ T9420] erofs: (device loop4): mounted with root inode @ nid 36.
[  498.147850][ T9414] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1503'.
[  498.482013][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  499.102393][ T9441] netlink: 'syz.0.1510': attribute type 1 has an invalid length.
[  500.110493][ T9443] netlink: 'syz.2.1511': attribute type 1 has an invalid length.
[  500.124953][ T4355] Bluetooth: hci5: command 0x1009 tx timeout
[  500.436338][ T5321] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  500.663149][ T9451] loop3: detected capacity change from 0 to 32768
[  500.816554][ T5321] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  500.828276][ T5321] usb 3-1: can't read configurations, error -22
[  500.986390][ T5321] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  501.398633][ T1427] ieee802154 phy0 wpan0: encryption failed: -22
[  501.404969][ T1427] ieee802154 phy1 wpan1: encryption failed: -22
[  501.406568][ T5321] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  501.482474][ T5321] usb 3-1: can't read configurations, error -22
[  501.490584][ T5321] usb usb3-port1: attempt power cycle
[  501.696370][ T4211] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  501.896481][ T5321] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  501.956353][ T4211] usb 5-1: Using ep0 maxpacket: 16
[  502.011136][ T9459] loop0: detected capacity change from 0 to 512
[  502.058300][ T9460] loop3: detected capacity change from 0 to 2048
[  502.076395][ T4211] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  502.084506][ T4211] usb 5-1: config 0 has no interface number 0
[  502.090839][ T4211] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  502.102131][ T4211] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  502.121698][ T4211] usb 5-1: config 0 interface 41 has no altsetting 0
[  502.126766][ T9459] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  502.142269][ T5321] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  502.154230][ T5321] usb 3-1: can't read configurations, error -22
[  502.157590][ T9460] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  502.163888][ T9459] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  502.183791][ T9460] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  502.185427][ T9459] EXT4-fs (loop0): 1 truncate cleaned up
[  502.201612][ T9459] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback.
[  502.301186][ T4211] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  502.316608][ T5321] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  502.327156][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.335469][ T4211] usb 5-1: Product: syz
[  502.343576][ T4211] usb 5-1: Manufacturer: syz
[  502.354258][ T4211] usb 5-1: SerialNumber: syz
[  502.527665][ T4211] usb 5-1: config 0 descriptor??
[  502.589085][ T9455] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  502.607174][ T9455] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  502.676477][ T5321] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  502.726802][ T5321] usb 3-1: can't read configurations, error -22
[  502.744618][ T5321] usb usb3-port1: unable to enumerate USB device
[  502.901979][ T9455] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  503.010540][ T9466] loop3: detected capacity change from 0 to 128
[  503.011437][ T9455] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  503.069949][ T9466] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  503.176633][ T9466] xt_limit: Overflow, try lower: 1207959552/384
[  503.422209][ T9466] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  503.499905][ T4211] CoreChips: probe of 5-1:0.41 failed with error -22
[  503.833957][ T4402] usb 5-1: USB disconnect, device number 18
[  503.888366][ T9468] loop2: detected capacity change from 0 to 32768
[  504.103999][ T9480] loop3: detected capacity change from 0 to 16
[  504.590724][ T4355] Bluetooth: hci0: command 0x0c1a tx timeout
[  504.624082][ T9468] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  504.684671][ T9480] erofs: (device loop3): mounted with root inode @ nid 36.
[  504.812749][ T4167] ocfs2: Unmounting device (7,2) on (node local)
[  505.226455][ T9492] netlink: 'syz.1.1522': attribute type 1 has an invalid length.
[  505.848007][ T9494] loop0: detected capacity change from 0 to 128
[  505.921828][ T9494] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  506.098294][ T9494] xt_limit: Overflow, try lower: 1207959552/384
[  506.246055][ T9498] loop1: detected capacity change from 0 to 2048
[  506.321801][ T9500] netlink: 'syz.3.1529': attribute type 1 has an invalid length.
[  506.355934][ T9498] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  506.424978][ T9494] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  506.459019][ T9498] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  506.606432][   T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  506.642146][ T4355] Bluetooth: hci0: command 0x0406 tx timeout
[  506.706735][ T9509] loop0: detected capacity change from 0 to 128
[  507.038611][   T23] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  507.224334][ T9514] loop1: detected capacity change from 0 to 16
[  507.912627][   T23] usb 4-1: can't read configurations, error -22
[  507.956319][ T9509] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  507.972613][ T9514] erofs: (device loop1): mounted with root inode @ nid 36.
[  508.076387][   T23] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  508.111739][ T9509] xt_limit: Overflow, try lower: 1207959552/384
[  508.195285][ T9509] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  508.323807][ T9522] loop1: detected capacity change from 0 to 128
[  508.415594][ T9522] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  508.459879][ T9522] xt_limit: Overflow, try lower: 1207959552/384
[  508.494575][ T9522] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  508.536517][   T23] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  508.545182][   T23] usb 4-1: can't read configurations, error -22
[  508.553930][   T23] usb usb4-port1: attempt power cycle
[  508.655481][ T9528] loop1: detected capacity change from 0 to 256
[  508.729475][   T21] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  508.761099][ T9528] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  508.810640][ T9528] exFAT-fs (loop1): hint_cluster is invalid (17)
[  508.871064][ T9528] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1536'.
[  508.935907][ T9528] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  508.942539][ T9528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  508.984980][ T9528] vhci_hcd vhci_hcd.0: Device attached
[  509.143974][   T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  509.151664][   T21] usb 1-1: Using ep0 maxpacket: 16
[  509.246105][ T9537] netlink: 'syz.2.1538': attribute type 1 has an invalid length.
[  509.286564][   T21] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  509.336378][ T4211] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  509.395753][   T21] usb 1-1: config 0 has no interface number 0
[  509.402432][   T23] usb 4-1: device not accepting address 22, error -71
[  509.500483][   T21] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  509.622758][   T21] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  509.633450][ T4211] usb 5-1: Using ep0 maxpacket: 8
[  509.725549][   T21] usb 1-1: config 0 interface 41 has no altsetting 0
[  509.951310][ T9532] vhci_hcd: connection closed
[  509.987177][ T1409] vhci_hcd: stop threads
[  509.996693][ T4211] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  510.005738][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.042036][ T9541] loop3: detected capacity change from 0 to 128
[  510.049502][ T1409] vhci_hcd: release socket
[  510.056458][ T5321] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  510.064243][ T1409] vhci_hcd: disconnect device
[  510.069399][   T21] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  510.086783][ T4211] usb 5-1: Product: syz
[  510.091265][ T9543] loop2: detected capacity change from 0 to 2048
[  510.092923][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.105954][ T4211] usb 5-1: Manufacturer: syz
[  510.110613][ T4211] usb 5-1: SerialNumber: syz
[  510.115698][   T21] usb 1-1: Product: syz
[  510.122323][ T9541] VFS: Found a Xenix FS (block size = 512) on device loop3
[  510.127826][ T4211] usb 5-1: config 0 descriptor??
[  510.141253][ T9543] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  510.142511][ T9541] sysv_free_block: trying to free block not in datazone
[  510.155970][ T9543] UDF-fs: warning (device loop2): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  510.166436][   T21] usb 1-1: Manufacturer: syz
[  510.176084][   T21] usb 1-1: SerialNumber: syz
[  510.185207][   T26] audit: type=1804 audit(1733295379.099:47): pid=9541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1540" name="/newroot/337/file0" dev="loop3" ino=2 res=1 errno=0
[  510.220185][   T21] usb 1-1: config 0 descriptor??
[  510.236632][ T9525] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  510.247036][ T9525] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  510.386557][ T4211] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  510.405913][ T9546] ieee802154 phy0 wpan0: encryption failed: -22
[  510.432362][ T9546] "syz.2.1542" (9546) uses obsolete ecb(arc4) skcipher
[  510.439368][ T4275] Bluetooth: hci5: Frame reassembly failed (-84)
[  510.469029][ T9525] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  510.474707][ T9546] netlink: 'syz.2.1542': attribute type 9 has an invalid length.
[  510.484478][ T9525] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  510.563656][ T9548] loop1: detected capacity change from 0 to 128
[  510.581136][ T9548] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  510.603037][ T9548] xt_limit: Overflow, try lower: 1207959552/384
[  510.631481][ T9548] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  510.636402][   T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  510.696561][ T4211] usb write operation failed. (-71)
[  510.703841][ T4211] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  510.715343][ T4211] dvbdev: DVB: registering new adapter (Terratec H7)
[  510.733246][ T4211] usb 5-1: media controller created
[  510.750226][ T9551] loop1: detected capacity change from 0 to 512
[  510.756668][ T4211] usb read operation failed. (-71)
[  510.776570][ T4211] usb write operation failed. (-71)
[  510.783294][ T4211] dvb_usb_az6007: probe of 5-1:0.0 failed with error -5
[  510.792462][ T4211] usb 5-1: USB disconnect, device number 19
[  510.804035][ T9551] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  510.833259][ T9551] EXT4-fs (loop1): 1 truncate cleaned up
[  510.839568][ T9551] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback.
[  510.876912][   T23] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  510.922346][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.937798][   T21] CoreChips: probe of 1-1:0.41 failed with error -22
[  511.027038][   T23] usb 4-1: config 0 descriptor??
[  511.110314][   T23] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  511.169264][ T4211] usb 1-1: USB disconnect, device number 14
[  511.453710][ T9558] loop1: detected capacity change from 0 to 512
[  511.530274][ T9558] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  511.549598][ T9558] EXT4-fs (loop1): 1 truncate cleaned up
[  511.555338][ T9558] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback.
[  511.686396][ T4211] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  511.936549][ T4211] usb 5-1: Using ep0 maxpacket: 16
[  512.056560][ T4211] usb 5-1: config 4 has an invalid interface number: 51 but max is 0
[  512.067881][ T4211] usb 5-1: config 4 has no interface number 0
[  512.075152][ T4211] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  512.088677][ T4211] usb 5-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  512.106392][ T4211] usb 5-1: config 4 interface 51 has no altsetting 0
[  512.276617][ T4211] usb 5-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  512.297526][ T4211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.322658][ T4211] usb 5-1: Product: syz
[  512.339145][ T4211] usb 5-1: Manufacturer: syz
[  512.343933][ T4211] usb 5-1: SerialNumber: syz
[  512.428852][ T9572] netlink: 'syz.0.1549': attribute type 1 has an invalid length.
[  512.476364][    T7] Bluetooth: hci5: command 0x1003 tx timeout
[  512.488202][ T4182] Bluetooth: hci5: sending frame failed (-49)
[  513.019003][ T9556] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  513.110562][   T23] usb 4-1: USB disconnect, device number 23
[  513.116858][ T9556] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  513.299464][ T9575] netlink: 'syz.0.1550': attribute type 1 has an invalid length.
[  513.574919][ T4174] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  513.716983][ T4211] cdc_eem: probe of 5-1:4.51 failed with error -71
[  513.731753][ T4211] usb 5-1: USB disconnect, device number 20
[  513.754874][ T9582] loop3: detected capacity change from 0 to 2048
[  513.796434][ T4402] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  513.805248][ T9582] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  513.824382][ T9582] UDF-fs: warning (device loop3): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  513.978421][ T9584] "syz.3.1553" (9584) uses obsolete ecb(arc4) skcipher
[  514.034206][ T9587] loop3: detected capacity change from 0 to 128
[  514.046031][ T9587] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  514.070956][ T9587] xt_limit: Overflow, try lower: 1207959552/384
[  514.245534][ T9591] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  514.246007][ T4402] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  514.287117][ T4402] usb 1-1: can't read configurations, error -22
[  514.299814][ T9595] loop4: detected capacity change from 0 to 2048
[  514.376768][ T9595] EXT4-fs (loop4): Unrecognized mount option "uid=00000000000000000000" or missing value
[  514.546351][    T7] Bluetooth: hci5: command 0x1001 tx timeout
[  514.562653][ T4182] Bluetooth: hci5: sending frame failed (-49)
[  514.577048][ T4402] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  514.585293][ T9592] loop1: detected capacity change from 0 to 32768
[  514.664393][ T9598] loop3: detected capacity change from 0 to 512
[  514.747876][ T9598] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  514.762120][ T9592] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  514.841056][ T9598] EXT4-fs (loop3): 1 truncate cleaned up
[  514.871155][ T9598] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback.
[  514.911844][ T4166] ocfs2: Unmounting device (7,1) on (node local)
[  515.198200][ T5321] vhci_hcd: vhci_device speed not set
[  516.131630][ T9611] netlink: 'syz.1.1560': attribute type 1 has an invalid length.
[  517.008135][    T7] Bluetooth: hci5: command 0x1009 tx timeout
[  518.070728][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  518.083610][ T9623] 
[  518.085961][ T9623] ======================================================
[  518.092960][ T9623] WARNING: possible circular locking dependency detected
[  518.099959][ T9623] 5.15.173-syzkaller #0 Not tainted
[  518.105133][ T9623] ------------------------------------------------------
[  518.112126][ T9623] syz.4.1565/9623 is trying to acquire lock:
[  518.118084][ T9623] ffff88807c462950 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xcf/0x1a0
[  518.129488][ T9623] 
[  518.129488][ T9623] but task is already holding lock:
[  518.136865][ T9623] ffff88807c4616a0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530
[  518.145837][ T9623] 
[  518.145837][ T9623] which lock already depends on the new lock.
[  518.145837][ T9623] 
[  518.156221][ T9623] 
[  518.156221][ T9623] the existing dependency chain (in reverse order) is:
[  518.165225][ T9623] 
[  518.165225][ T9623] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}:
[  518.172944][ T9623]        lock_acquire+0x1db/0x4f0
[  518.177954][ T9623]        lock_sock_nested+0x44/0x100
[  518.183223][ T9623]        smc_listen_out+0x84/0x320
[  518.188323][ T9623]        process_one_work+0x8a1/0x10c0
[  518.193772][ T9623]        worker_thread+0xaca/0x1280
[  518.198977][ T9623]        kthread+0x3f6/0x4f0
[  518.203554][ T9623]        ret_from_fork+0x1f/0x30
[  518.208479][ T9623] 
[  518.208479][ T9623] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}:
[  518.218627][ T9623]        validate_chain+0x1649/0x5930
[  518.224009][ T9623]        __lock_acquire+0x1295/0x1ff0
[  518.229369][ T9623]        lock_acquire+0x1db/0x4f0
[  518.234379][ T9623]        __flush_work+0xeb/0x1a0
[  518.239306][ T9623]        __cancel_work_timer+0x519/0x6a0
[  518.244974][ T9623]        smc_clcsock_release+0x5e/0xe0
[  518.250439][ T9623]        __smc_release+0x3b9/0x530
[  518.255540][ T9623]        smc_close_non_accepted+0xd4/0x1e0
[  518.261331][ T9623]        smc_close_active+0x9f3/0xdb0
[  518.266687][ T9623]        __smc_release+0xa6/0x530
[  518.271693][ T9623]        smc_release+0x2d5/0x530
[  518.276610][ T9623]        sock_close+0xcd/0x230
[  518.281360][ T9623]        __fput+0x3fe/0x8e0
[  518.285850][ T9623]        task_work_run+0x129/0x1a0
[  518.290945][ T9623]        exit_to_user_mode_loop+0x106/0x130
[  518.296834][ T9623]        exit_to_user_mode_prepare+0xb1/0x140
[  518.302879][ T9623]        syscall_exit_to_user_mode+0x5d/0x240
[  518.308929][ T9623]        do_syscall_64+0x47/0xb0
[  518.313847][ T9623]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  518.320247][ T9623] 
[  518.320247][ T9623] other info that might help us debug this:
[  518.320247][ T9623] 
[  518.330455][ T9623]  Possible unsafe locking scenario:
[  518.330455][ T9623] 
[  518.337885][ T9623]        CPU0                    CPU1
[  518.343231][ T9623]        ----                    ----
[  518.348576][ T9623]   lock(sk_lock-AF_SMC/1);
[  518.353069][ T9623]                                lock((work_completion)(&new_smc->smc_listen_work));
[  518.362503][ T9623]                                lock(sk_lock-AF_SMC/1);
[  518.369509][ T9623]   lock((work_completion)(&new_smc->smc_listen_work));
[  518.376429][ T9623] 
[  518.376429][ T9623]  *** DEADLOCK ***
[  518.376429][ T9623] 
[  518.384552][ T9623] 2 locks held by syz.4.1565/9623:
[  518.389658][ T9623]  #0: ffff888072b40210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230
[  518.399822][ T9623]  #1: ffff88807c4616a0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x22d/0x530
[  518.409209][ T9623] 
[  518.409209][ T9623] stack backtrace:
[  518.415085][ T9623] CPU: 1 PID: 9623 Comm: syz.4.1565 Not tainted 5.15.173-syzkaller #0
[  518.423227][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  518.433268][ T9623] Call Trace:
[  518.436538][ T9623]  <TASK>
[  518.439473][ T9623]  dump_stack_lvl+0x1e3/0x2d0
[  518.444160][ T9623]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  518.449800][ T9623]  ? print_circular_bug+0x12b/0x1a0
[  518.454989][ T9623]  check_noncircular+0x2f8/0x3b0
[  518.459927][ T9623]  ? add_chain_block+0x850/0x850
[  518.464850][ T9623]  ? lockdep_lock+0x11f/0x2a0
[  518.469520][ T9623]  ? lock_release+0xb9/0x9a0
[  518.474101][ T9623]  ? read_lock_is_recursive+0x10/0x10
[  518.479477][ T9623]  ? _find_first_zero_bit+0xcf/0xf0
[  518.484678][ T9623]  validate_chain+0x1649/0x5930
[  518.489525][ T9623]  ? check_path+0x40/0x40
[  518.493847][ T9623]  ? reacquire_held_locks+0x660/0x660
[  518.499210][ T9623]  ? __bfs+0x359/0x6e0
[  518.503287][ T9623]  ? check_path+0x40/0x40
[  518.507605][ T9623]  ? noop_count+0x30/0x30
[  518.511925][ T9623]  ? look_up_lock_class+0x77/0x120
[  518.517028][ T9623]  ? register_lock_class+0x100/0x9a0
[  518.522331][ T9623]  ? validate_chain+0x112/0x5930
[  518.527282][ T9623]  ? is_dynamic_key+0x1f0/0x1f0
[  518.532129][ T9623]  ? mark_lock+0x98/0x340
[  518.536458][ T9623]  __lock_acquire+0x1295/0x1ff0
[  518.541311][ T9623]  lock_acquire+0x1db/0x4f0
[  518.545803][ T9623]  ? __flush_work+0xcf/0x1a0
[  518.550400][ T9623]  ? read_lock_is_recursive+0x10/0x10
[  518.555766][ T9623]  ? reacquire_held_locks+0x660/0x660
[  518.561134][ T9623]  ? reacquire_held_locks+0x660/0x660
[  518.566499][ T9623]  ? reacquire_held_locks+0x660/0x660
[  518.571863][ T9623]  ? mark_lock+0x98/0x340
[  518.576187][ T9623]  __flush_work+0xeb/0x1a0
[  518.580594][ T9623]  ? __flush_work+0xcf/0x1a0
[  518.585178][ T9623]  ? flush_work+0x20/0x20
[  518.589508][ T9623]  ? print_irqtrace_events+0x210/0x210
[  518.594958][ T9623]  ? __cancel_work_timer+0x467/0x6a0
[  518.600242][ T9623]  __cancel_work_timer+0x519/0x6a0
[  518.605351][ T9623]  ? cancel_work_sync+0x20/0x20
[  518.610197][ T9623]  ? __local_bh_enable_ip+0x164/0x1f0
[  518.615559][ T9623]  ? lockdep_hardirqs_on+0x94/0x130
[  518.620749][ T9623]  ? __local_bh_enable_ip+0x164/0x1f0
[  518.626117][ T9623]  ? __smc_release+0x3b1/0x530
[  518.630876][ T9623]  ? _local_bh_enable+0xa0/0xa0
[  518.635723][ T9623]  smc_clcsock_release+0x5e/0xe0
[  518.640653][ T9623]  __smc_release+0x3b9/0x530
[  518.645238][ T9623]  smc_close_non_accepted+0xd4/0x1e0
[  518.650515][ T9623]  smc_close_active+0x9f3/0xdb0
[  518.655361][ T9623]  __smc_release+0xa6/0x530
[  518.659857][ T9623]  smc_release+0x2d5/0x530
[  518.664268][ T9623]  sock_close+0xcd/0x230
[  518.668522][ T9623]  ? sock_mmap+0x90/0x90
[  518.672770][ T9623]  __fput+0x3fe/0x8e0
[  518.676771][ T9623]  task_work_run+0x129/0x1a0
[  518.681362][ T9623]  exit_to_user_mode_loop+0x106/0x130
[  518.686741][ T9623]  exit_to_user_mode_prepare+0xb1/0x140
[  518.692288][ T9623]  syscall_exit_to_user_mode+0x5d/0x240
[  518.697829][ T9623]  do_syscall_64+0x47/0xb0
[  518.702235][ T9623]  ? clear_bhb_loop+0x15/0x70
[  518.706909][ T9623]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  518.712793][ T9623] RIP: 0033:0x7f9bacc94f19
[  518.717217][ T9623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  518.736823][ T9623] RSP: 002b:00007f9baab0b058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  518.745233][ T9623] RAX: 0000000000000000 RBX: 00007f9bace5afa0 RCX: 00007f9bacc94f19
[  518.753195][ T9623] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[  518.761163][ T9623] RBP: 00007f9bacd08986 R08: 0000000000000000 R09: 0000000000000000
[  518.769123][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  518.777084][ T9623] R13: 0000000000000000 R14: 00007f9bace5afa0 R15: 00007ffdc500b7c8
[  518.785045][ T9623]  </TASK>
[  519.348444][ T9627] loop3: detected capacity change from 0 to 16
[  519.426949][ T9627] erofs: (device loop3): mounted with root inode @ nid 36.