last executing test programs:

5m49.481374095s ago: executing program 2 (id=519):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000100fff90900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d617463680000002400028008000300000c000008000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xd4}}, 0x0)

5m42.780873814s ago: executing program 2 (id=535):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0xb8, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_key={0x1, 0x8}, @sadb_sa={0x2, 0x1, 0x0, 0xfe, 0x0, 0x3, 0x2}, @sadb_lifetime={0x4, 0x3, 0xffffffff, 0x6, 0x5, 0x2}]}, 0x60}, 0x1, 0x7}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104c0000000000070000005157e7c59500740000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000), 0x4)

5m41.341457526s ago: executing program 2 (id=537):
syz_io_uring_setup(0x32ba, &(0x7f0000000180)={0x0, 0xc27c, 0x1000, 0x3, 0x43}, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, 0x0, 0xe)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
fsopen(0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)

5m34.772867798s ago: executing program 2 (id=558):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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")
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)="63f8df58b71c0777596ad550d695d7e2535070d0e0f92bfd84c2cd5fef199f5ca7bee594fec660af06d88e6bd4bda4adf8e0fb48b36a464426dfcc2a18b3b845777706e91c109b415b29bb2c20fa706429efeda77478fd1e7e985687963bf93eb93d07adaa2fdbf60b774c6005aa206d6edf5e4e2749a0dcbf686e914f672ee6fdcec75b8464ab1afd948a70a762d9e52cd6f10a", 0x94}, {&(0x7f0000000c40)="c7dfcf293383b865c168ad16fd9539b059e68fae3596edff82673de26e64a67850dabc5acafe8d74ebc105cba81095cdc553be7604185a6937c0a4941e8c52bbc34419be12aa9f3ac0384c4521915d4f19943cc13684ae0f6bb396561c6afad79a76d66d6b411c29cc56a7637186050d226770f82d40959c6f6851cd8c", 0x7d}], 0x2, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x4000)
chdir(&(0x7f0000000080)='./file0\x00')
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
close(r0)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8)
mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r5 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
socket$inet6(0xa, 0xa, 0x7)
getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8)

5m31.910680932s ago: executing program 2 (id=564):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x264f, &(0x7f0000000140)={0x0, 0xb1f7, 0x40, 0x0, 0x341}, &(0x7f00000000c0), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000002c0)="b421099553c2249e7a7f3d88397b12f8e6570722d2f5325fafd39269279b8604b2c00135ea3c1cc51f3cfb898e755eacb35445cd938edab1593b5cd7f6528344b40cb2f75100", 0x46)

5m28.524995287s ago: executing program 2 (id=571):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@decl_tag={0x8, 0x43, 0x0, 0x11, 0x1, 0x1}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000040)="09000000010001", 0x7)
listen(r5, 0x10001)

5m28.285184898s ago: executing program 32 (id=571):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@decl_tag={0x8, 0x43, 0x0, 0x11, 0x1, 0x1}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r5, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
sendto$inet6(r5, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000040)="09000000010001", 0x7)
listen(r5, 0x10001)

5m19.698623708s ago: executing program 0 (id=589):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc)
r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
unshare(0x400)
iopl(0x4)
read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_create_ruleset(&(0x7f0000000240)={0x2030}, 0x18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100}, 0x0)
landlock_restrict_self(r4, 0x0)

5m18.368887365s ago: executing program 0 (id=590):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe})
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5})
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x0)
iopl(0x5)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
symlink(0x0, &(0x7f00000002c0)='.\x02\x00')
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, 0x0, 0x26})
ptrace(0x10, 0x0)
capset(&(0x7f0000000000)={0x20080522}, 0x0)

5m18.119564606s ago: executing program 3 (id=593):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000440)={0x5, 0x2, 0x0, 0x2, 0x3, "1e141d2e1a43686db159f6623381fe4d17520b", 0x0, 0x2})
ioctl$TCXONC(r0, 0x540a, 0x2)

5m17.864875277s ago: executing program 3 (id=595):
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000028b8a70cca4cd748a3c7719b000200000000000000000023e07f849ec1b8501450032c595e7540acd94d1e27d6000000000000c55644e3240000"], 0x0, 0x42}, 0x20)
pipe2$watch_queue(0x0, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

5m15.830926844s ago: executing program 3 (id=598):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0)

5m12.988532477s ago: executing program 3 (id=603):
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
rmdir(&(0x7f0000000140)='./file1\x00')
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")

5m12.394120472s ago: executing program 0 (id=604):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

5m12.21845625s ago: executing program 3 (id=605):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
fsmount(r5, 0x1, 0xd)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
r7 = inotify_init1(0x0)
inotify_add_watch(r7, 0x0, 0x2000922)
close(r6)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000280)={[{@nobarrier}, {@gid}, {@creator={'creator', 0x3d, "cf44eee4"}}, {@creator={'creator', 0x3d, "64eb8ba9"}}, {@nodecompose}, {@umask}, {@uid}, {@nodecompose}]}, 0x3, 0x6a4, &(0x7f0000001b40)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=")
chown(&(0x7f00000003c0)='./file1\x00', 0x0, 0x0)

5m12.178462411s ago: executing program 0 (id=606):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0)

5m11.588924817s ago: executing program 0 (id=607):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = gettid()
timer_create(0x2, &(0x7f0000000340)={0x0, 0x20, 0x800000000004, @tid=r1}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r2, &(0x7f00000002c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x17}, 0x60)
listen(r2, 0x81)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_udplite(0xa, 0x2, 0x88)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1e7, &(0x7f0000000200)="$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")

5m11.363024576s ago: executing program 3 (id=608):
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000028b8a70cca4cd748a3c7719b000200000000000000000023e07f849ec1b8501450032c595e7540acd94d1e27d6000000000000c55644e3240000"], 0x0, 0x42}, 0x20)
pipe2$watch_queue(0x0, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

5m11.229233402s ago: executing program 0 (id=609):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x24004000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44840)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
close_range(r1, r1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, 0x0, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14)
ioctl$TIOCSETD(r3, 0x5423, 0x0)

4m54.613163147s ago: executing program 33 (id=608):
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000028b8a70cca4cd748a3c7719b000200000000000000000023e07f849ec1b8501450032c595e7540acd94d1e27d6000000000000c55644e3240000"], 0x0, 0x42}, 0x20)
pipe2$watch_queue(0x0, 0x80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

4m54.582509419s ago: executing program 34 (id=609):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32], 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x24004000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44840)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
close_range(r1, r1, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, 0x0, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14)
ioctl$TIOCSETD(r3, 0x5423, 0x0)

17.636827241s ago: executing program 7 (id=1250):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b02, 0x0)
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, 0x0)

17.066391755s ago: executing program 1 (id=1252):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc)
r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0)
landlock_restrict_self(r4, 0x0)

13.70003607s ago: executing program 1 (id=1259):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000b00)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

13.46461745s ago: executing program 6 (id=1261):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)

11.237038456s ago: executing program 7 (id=1264):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a092226"], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

9.98456899s ago: executing program 6 (id=1269):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc)
r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0)
landlock_restrict_self(r4, 0x0)

9.139049767s ago: executing program 5 (id=1270):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, 0x0, 0x0)

7.716175068s ago: executing program 5 (id=1272):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ppoll(&(0x7f0000000180)=[{r0, 0x21}], 0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})

7.405745561s ago: executing program 7 (id=1273):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000007c0)="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", 0x2000, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, &(0x7f0000000000)={0x150003, 0x0, {[0x7fff, 0x4, 0x9, 0x9, 0x2, 0x24ce, 0x1]}})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

7.068514036s ago: executing program 7 (id=1274):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
close(0x3)
write$P9_RVERSION(r0, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0)

5.700348314s ago: executing program 4 (id=1276):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000000000102"})

5.547079181s ago: executing program 5 (id=1277):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000700)={0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="9b6220c4"], 0x0, 0x0, 0x0}, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

5.484622484s ago: executing program 4 (id=1278):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc)
r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
unshare(0x400)
read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x2030}, 0x18, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0)
landlock_restrict_self(r4, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x212202, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x20, r6}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x80000000000005, &(0x7f0000000280)='u', 0x1)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00')
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0)

4.858992421s ago: executing program 1 (id=1279):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_io_uring_setup(0xc8f, &(0x7f0000000180)={0x0, 0xb491, 0x2000, 0x0, 0x387}, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000280)={0x80, 0x44}, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x2)

4.858464821s ago: executing program 4 (id=1280):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
inotify_init()
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)

4.776827204s ago: executing program 6 (id=1281):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x104, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x129c00, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f00000001c0))

4.776303754s ago: executing program 7 (id=1282):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b37, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000020601020000000000000000000000000500010006000000050005000a00000011000300686173683a69702c706f72740000000009000200ba000000000000000500040003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
syz_open_dev$vim2m(0x0, 0x47b, 0x2)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)

4.689305408s ago: executing program 4 (id=1283):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
close(0xffffffffffffffff)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', 0x0, 0x0)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0)
read$nci(r4, 0x0, 0x0)

4.496320397s ago: executing program 5 (id=1284):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0)

4.298835735s ago: executing program 6 (id=1285):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
r0 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffdc29, 0x1}}, 0x20)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

4.196969109s ago: executing program 5 (id=1286):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.957396112s ago: executing program 4 (id=1287):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev={0xac, 0x14, 0x14, 0x33}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

2.655252615s ago: executing program 6 (id=1288):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="000000000102"})

2.54398666s ago: executing program 1 (id=1289):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x12, 0x4, 0x5, 0x7fff, 0x6, 0x2, 0x6, 0x5, 0x400}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x40004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2.54246028s ago: executing program 4 (id=1290):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000b00)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

2.147161487s ago: executing program 6 (id=1291):
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240), 0xfffffecc)
r2 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000280)={0x100, r5}, 0x0)
landlock_restrict_self(r4, 0x0)

1.766107824s ago: executing program 1 (id=1292):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x64d, &(0x7f0000000d40)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020000000000000206ca2016021a25aaeef02f5e02d59601b4f6ec68decf445d7359cdd229e0bdbf6c2a1ea1e1b1661d936a6386a723f95e9698259d886c50322c6a0b5fae3b94957206e5925b4fcffffffffffffffa228"], 0x24, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
dup3(r1, r0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040))
open(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000"], 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

859.051292ms ago: executing program 7 (id=1293):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a914"], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
close(0x3)
write$P9_RVERSION(r0, &(0x7f0000000640)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x5ce)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0)

733.911488ms ago: executing program 1 (id=1294):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
inotify_init()
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
gettid()
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe)

0s ago: executing program 5 (id=1295):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
r0 = io_uring_setup(0x4505, &(0x7f0000000840)={0x0, 0x9a3d, 0x40, 0x1, 0x151})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xffffdc29, 0x1}}, 0x20)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000054, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @window={0x3, 0x5}], 0x8)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

kernel console output (not intermixed with test programs):

809760][   T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  427.863918][   T22] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  427.888708][   T22] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  427.899403][   T22] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  427.907928][   T22] usb 5-1: Product: syz
[  427.912204][   T22] usb 5-1: Manufacturer: syz
[  427.926697][   T22] cdc_wdm 5-1:1.0: skipping garbage
[  427.932202][   T22] cdc_wdm 5-1:1.0: skipping garbage
[  427.943494][   T22] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  427.949929][   T22] cdc_wdm 5-1:1.0: Unknown control protocol
[  429.262667][   T27] audit: type=1326 audit(1764203797.504:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  429.344349][   T27] audit: type=1326 audit(1764203797.504:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  429.523608][   T27] audit: type=1326 audit(1764203797.964:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feade38e1ff code=0x7ffc0000
[  429.634723][   T27] audit: type=1326 audit(1764203797.964:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  429.670091][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 4 bytes
[  431.001891][ T7783] loop1: detected capacity change from 0 to 512
[  431.029142][ T7783] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  431.103483][ T7783] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.831: bg 0: block 384: padding at end of block bitmap is not set
[  431.118318][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.125538][ T7783] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  431.136477][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.143050][ T7783] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.831: attempt to clear invalid blocks 983260 len 1
[  431.156483][   T27] audit: type=1326 audit(1764203797.964:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  431.179569][   T27] audit: type=1326 audit(1764203797.964:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  431.201704][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.208312][ T7783] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.831: Invalid inode table block 0 in block_group 0
[  431.221796][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.228361][ T7783] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  431.238914][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.245499][ T7783] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  431.255042][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.261994][ T7783] EXT4-fs error (device loop1): __ext4_get_inode_loc:4513: comm syz.1.831: Invalid inode table block 0 in block_group 0
[  431.275678][   T27] audit: type=1326 audit(1764203797.964:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  431.275722][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.304556][ T7783] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  431.314193][   T27] audit: type=1326 audit(1764203797.964:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.5.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  431.336674][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.343192][ T7783] EXT4-fs error (device loop1): ext4_truncate:4318: inode #11: comm syz.1.831: mark_inode_dirty error
[  431.355168][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.361713][ T7783] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  431.372371][ T7783] EXT4-fs (loop1): Remounting filesystem read-only
[  431.378965][ T7783] EXT4-fs (loop1): 1 truncate cleaned up
[  431.384655][ T7783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  431.495909][ T4268] EXT4-fs (loop1): unmounting filesystem.
[  431.538420][ T4331] usb 5-1: USB disconnect, device number 7
[  433.146545][ T7798] overlayfs: failed to get inode (-116)
[  433.153097][ T7798] overlayfs: failed to get inode (-116)
[  433.192208][ T7798] overlayfs: failed to get inode (-116)
[  433.226059][ T7798] overlayfs: failed to get inode (-116)
[  437.907202][ T7829] loop4: detected capacity change from 0 to 512
[  438.185103][ T7829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  438.246416][ T7829] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.842: bg 0: block 384: padding at end of block bitmap is not set
[  438.261011][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.267561][ T7829] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  438.276809][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.283328][ T7829] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.842: attempt to clear invalid blocks 983260 len 1
[  438.296976][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.303513][ T7829] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.842: Invalid inode table block 0 in block_group 0
[  438.318120][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.324680][ T7829] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  438.337168][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.343724][ T7829] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem
[  438.352598][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.359170][ T7829] EXT4-fs error (device loop4): __ext4_get_inode_loc:4513: comm syz.4.842: Invalid inode table block 0 in block_group 0
[  438.372081][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.378639][ T7829] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5929: Corrupt filesystem
[  438.388513][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.395065][ T7829] EXT4-fs error (device loop4): ext4_truncate:4318: inode #11: comm syz.4.842: mark_inode_dirty error
[  438.406722][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.413242][ T7829] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem
[  438.422607][ T7829] EXT4-fs (loop4): Remounting filesystem read-only
[  438.429343][ T7829] EXT4-fs (loop4): 1 truncate cleaned up
[  438.435284][ T7829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  438.508888][ T7836] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0
[  438.729367][ T7836] EXT4-fs (loop4): Remounting filesystem read-only
[  438.849305][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  440.317661][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.324031][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.900272][ T7860] loop6: detected capacity change from 0 to 8
[  440.965336][ T7860] SQUASHFS error: Unable to read directory block [629:fe]
[  442.554985][   T27] audit: type=1326 audit(1764203814.266:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  442.587877][   T27] audit: type=1326 audit(1764203814.266:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  442.610625][   T27] audit: type=1326 audit(1764203814.266:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feade38e1ff code=0x7ffc0000
[  442.759869][   T27] audit: type=1326 audit(1764203814.266:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  444.113823][   T27] audit: type=1326 audit(1764203814.266:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  444.175412][   T27] audit: type=1326 audit(1764203814.266:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  444.267132][   T27] audit: type=1326 audit(1764203814.266:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  444.364742][   T27] audit: type=1326 audit(1764203814.266:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  444.778079][ T7882] loop4: detected capacity change from 0 to 1024
[  444.797499][ T7882] EXT4-fs: Ignoring removed mblk_io_submit option
[  444.825668][ T7882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  444.915593][ T7882] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.853: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  444.975249][ T7882] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.853: couldn't read orphan inode 11 (err -117)
[  445.058925][ T7882] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  445.110273][ T7882] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.853: Invalid block bitmap block 0 in block_group 0
[  445.142805][ T7882] Quota error (device loop4): write_blk: dquota write failed
[  445.168895][ T7882] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  445.209682][ T7882] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.853: Failed to acquire dquot type 0
[  445.835750][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  446.154741][ T7902] loop7: detected capacity change from 0 to 32768
[  446.176515][ T7902] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.857 (7902)
[  446.201623][ T7902] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  446.211831][ T7902] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  446.220947][ T7902] BTRFS info (device loop7): using free space tree
[  447.719510][ T7902] BTRFS info (device loop7): enabling ssd optimizations
[  447.753797][ T4271] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  448.083764][ T4271] usb 7-1: Using ep0 maxpacket: 16
[  448.241682][ T4271] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  448.302258][ T4271] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  448.368194][ T4271] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  448.383911][ T5207] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  448.405449][ T4271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  448.413484][ T4271] usb 7-1: SerialNumber: syz
[  448.461191][ T7905] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  448.598496][ T5207] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  448.615127][ T6822] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  448.664150][ T5207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.693302][ T5207] usb 6-1: Product: syz
[  448.704993][ T4271] cdc_ether: probe of 7-1:1.0 failed with error -71
[  448.744357][ T4271] usb 7-1: USB disconnect, device number 4
[  448.750768][ T5207] usb 6-1: Manufacturer: syz
[  448.772221][ T5207] usb 6-1: SerialNumber: syz
[  449.469605][ T5207] usb 6-1: config 0 descriptor??
[  449.580702][   T27] audit: type=1326 audit(1764203823.298:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  449.656226][   T27] audit: type=1326 audit(1764203823.298:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  449.774316][   T27] audit: type=1326 audit(1764203823.298:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ce138e1ff code=0x7ffc0000
[  449.886375][   T27] audit: type=1326 audit(1764203823.298:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  449.890895][ T5207] airspy 6-1:0.0: Board ID: 00
[  450.001902][ T5207] airspy 6-1:0.0: Firmware version: 
[  450.031083][   T27] audit: type=1326 audit(1764203823.298:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  450.143331][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.863'.
[  450.156112][   T27] audit: type=1326 audit(1764203823.298:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  450.184725][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.863'.
[  450.278557][   T27] audit: type=1326 audit(1764203823.298:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  450.403816][   T22] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  450.440092][   T27] audit: type=1326 audit(1764203823.298:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  450.496052][ T5207] airspy 6-1:0.0: usb_control_msg() failed -71 request 12
[  450.539868][ T5207] airspy 6-1:0.0: Registered as swradio24
[  450.584205][ T5207] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  450.612987][ T5207] usb 6-1: USB disconnect, device number 4
[  450.733940][   T22] usb 8-1: Using ep0 maxpacket: 8
[  450.745716][   T22] usb 8-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  450.819580][ T7964] loop1: detected capacity change from 0 to 8
[  450.840951][ T7964] SQUASHFS error: Unable to read directory block [629:fe]
[  451.011929][   T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.020404][   T22] usb 8-1: Product: syz
[  451.025281][   T22] usb 8-1: Manufacturer: syz
[  451.029978][   T22] usb 8-1: SerialNumber: syz
[  451.052537][   T22] usb 8-1: config 0 descriptor??
[  451.115831][   T22] option 8-1:0.0: GSM modem (1-port) converter detected
[  451.347742][   T22] usb 8-1: USB disconnect, device number 5
[  451.372598][   T22] option 8-1:0.0: device disconnected
[  451.676606][ T7967] Set syz1 is full, maxelem 5134 reached
[  451.690627][ T7973] loop1: detected capacity change from 0 to 1024
[  451.781593][ T7976] loop5: detected capacity change from 0 to 1024
[  451.862657][ T7976] EXT4-fs: Ignoring removed mblk_io_submit option
[  451.926694][ T7976] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  452.065246][ T7976] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.868: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  452.108308][ T7976] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.868: couldn't read orphan inode 11 (err -117)
[  452.145526][ T7976] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  452.420532][ T7976] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.868: Invalid block bitmap block 0 in block_group 0
[  452.441236][ T7976] Quota error (device loop5): write_blk: dquota write failed
[  452.449043][ T7976] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  452.460738][ T7976] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.868: Failed to acquire dquot type 0
[  454.612854][ T7077] EXT4-fs (loop5): unmounting filesystem.
[  455.281931][ T8017] loop5: detected capacity change from 0 to 8
[  455.289571][ T7988] tipc: Started in network mode
[  455.308825][ T8017] SQUASHFS error: Unable to read directory block [629:fe]
[  455.329123][ T7988] tipc: Node identity d311fc2a, cluster identity 4711
[  455.552069][ T7988] tipc: Node number set to 3541171242
[  456.321069][ T8034] netlink: 'syz.5.881': attribute type 1 has an invalid length.
[  456.573854][   T22] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  457.840664][   T27] audit: type=1326 audit(1764204344.628:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  457.893679][   T22] usb 8-1: Using ep0 maxpacket: 8
[  457.922990][   T22] usb 8-1: config 0 has an invalid interface number: 17 but max is 0
[  458.047820][   T22] usb 8-1: config 0 has no interface number 0
[  458.167387][   T27] audit: type=1326 audit(1764204344.638:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  458.173985][   T22] usb 8-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=ca.f7
[  458.374083][   T27] audit: type=1326 audit(1764204344.658:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feade38e1ff code=0x7ffc0000
[  458.444257][   T22] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.527152][   T22] usb 8-1: config 0 descriptor??
[  458.586892][   T27] audit: type=1326 audit(1764204344.658:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  458.791524][   T22] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in warm state.
[  458.850969][   T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  458.852001][   T27] audit: type=1326 audit(1764204344.668:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  458.906012][ T4376] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  459.023932][   T22] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design)
[  459.053224][   T27] audit: type=1326 audit(1764204344.678:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  459.113674][ T4376] usb 5-1: Using ep0 maxpacket: 32
[  459.120440][ T4376] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  459.157629][   T22] usb 8-1: media controller created
[  459.189993][ T4376] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  459.262436][   T27] audit: type=1326 audit(1764204344.688:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  459.308184][   T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  459.325882][ T4376] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  459.397654][ T4376] usb 5-1: Product: syz
[  459.401853][ T4376] usb 5-1: Manufacturer: syz
[  459.477507][ T4376] usb 5-1: SerialNumber: syz
[  459.483271][   T27] audit: type=1326 audit(1764204344.688:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8039 comm="syz.5.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  459.571470][ T4376] usb 5-1: config 0 descriptor??
[  459.627783][ T8054] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  459.906892][ T4376] usb 5-1: USB disconnect, device number 8
[  459.921733][   T22] DVB: Unable to find symbol dib8000_attach()
[  459.930106][   T22] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design'
[  460.008160][   T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  460.084421][   T22] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design)
[  460.163717][   T22] usb 8-1: media controller created
[  461.142520][   T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  462.906627][   T22] DVB: Unable to find symbol dib8000_attach()
[  462.912843][   T22] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design'
[  464.140051][   T27] audit: type=1326 audit(1764204351.918:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.6.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  464.351488][   T27] audit: type=1326 audit(1764204351.918:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.6.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  464.713616][   T22] rc_core: IR keymap rc-dib0700-rc5 not found
[  464.719864][   T22] Registered IR keymap rc-empty
[  464.725253][   T27] audit: type=1326 audit(1764204351.928:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.6.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff11538e1ff code=0x7ffc0000
[  464.747730][   T22] dvb-usb: could not initialize remote control.
[  464.783862][   T22] dvb-usb: DiBcom STK8096-PVR reference design successfully initialized and connected.
[  464.831794][   T27] audit: type=1326 audit(1764204351.938:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.6.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  464.873651][ T5211] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  464.903799][   T22] usb 8-1: USB disconnect, device number 6
[  464.946732][   T27] audit: type=1326 audit(1764204351.938:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.6.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  465.057433][   T27] audit: type=1326 audit(1764204351.958:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.6.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  465.083740][ T5211] usb 5-1: Using ep0 maxpacket: 8
[  465.092149][ T5211] usb 5-1: unable to get BOS descriptor or descriptor too short
[  465.131810][ T5211] usb 5-1: config 4 interface 0 has no altsetting 0
[  465.164829][   T22] dvb-usb: DiBcom STK8096-PVR reference design successfully deinitialized and disconnected.
[  465.168515][ T5211] usb 5-1: string descriptor 0 read error: -22
[  465.189037][ T8103] Set syz1 is full, maxelem 5134 reached
[  465.208317][ T5211] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.ee
[  465.220607][   T27] audit: type=1326 audit(1764204351.958:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.6.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  465.276781][ T5211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.396136][   T27] audit: type=1326 audit(1764204351.958:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.6.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  465.439323][ T5211] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  465.482670][ T5211] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  465.577750][ T5211] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  465.605070][ T5211] usb 5-1: media controller created
[  466.506906][ T5211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  466.636240][ T5211] zl10353_read_register: readreg error (reg=127, ret==0)
[  466.786065][ T5211] usb 5-1: USB disconnect, device number 9
[  469.926261][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.898'.
[  469.944145][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.898'.
[  471.462194][   T27] audit: type=1326 audit(1764204360.236:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  471.491071][   T27] audit: type=1326 audit(1764204360.236:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  471.513990][   T27] audit: type=1326 audit(1764204360.256:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1902d8e1ff code=0x7ffc0000
[  471.536631][   T27] audit: type=1326 audit(1764204360.266:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  471.642847][ T4271] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  471.663671][   T27] audit: type=1326 audit(1764204360.266:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  471.793560][   T27] audit: type=1326 audit(1764204360.276:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  471.843603][ T4271] usb 7-1: Using ep0 maxpacket: 16
[  471.850371][ T4271] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  471.913285][ T4271] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  471.959184][   T27] audit: type=1326 audit(1764204360.286:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  472.007915][ T4271] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  472.043569][ T4271] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.051621][ T4271] usb 7-1: Product: syz
[  472.063628][   T27] audit: type=1326 audit(1764204360.286:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8148 comm="syz.1.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  472.086776][ T4271] usb 7-1: Manufacturer: syz
[  472.091410][ T4271] usb 7-1: SerialNumber: syz
[  472.322028][ T4271] usb 7-1: 0:2 : does not exist
[  472.347821][ T4271] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  472.423867][ T4271] usb 7-1: USB disconnect, device number 5
[  473.503219][ T4473] udevd[4473]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  476.927960][ T4376] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  477.128460][ T4376] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  477.143197][ T4376] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  477.171204][ T4376] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  477.225353][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0
[  477.247565][ T4376] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  477.275995][ T4376] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  477.312798][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0
[  477.342426][ T4376] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  477.362271][ T4376] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  477.386200][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0
[  477.412231][ T4376] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  477.432175][ T4376] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  477.444545][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0
[  477.452587][ T4376] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  477.491159][ T4376] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  477.524395][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0
[  477.539631][ T4376] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  477.553224][ T4376] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  477.564500][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0
[  477.572992][ T4376] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  477.592486][ T4376] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  477.608729][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0
[  477.618349][ T4376] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  477.627597][ T4376] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  477.638844][ T4376] usb 8-1: config 0 interface 0 has no altsetting 0
[  477.648370][ T4376] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  477.658131][ T4376] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  477.666708][ T4376] usb 8-1: Product: syz
[  477.671058][ T4376] usb 8-1: Manufacturer: syz
[  477.675970][ T4376] usb 8-1: SerialNumber: syz
[  477.684992][ T4376] usb 8-1: config 0 descriptor??
[  477.704237][ T4376] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0
[  479.129758][   T27] audit: type=1326 audit(1764204369.493:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  479.353035][ T4376] usb 8-1: USB disconnect, device number 7
[  479.374221][   T27] audit: type=1326 audit(1764204369.493:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  479.419523][ T4376] yurex 8-1:0.0: USB YUREX #0 now disconnected
[  479.504225][ T8230] loop6: detected capacity change from 0 to 1024
[  479.553473][   T27] audit: type=1326 audit(1764204369.493:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ce138e1ff code=0x7ffc0000
[  479.687027][ T8230] EXT4-fs: Ignoring removed mblk_io_submit option
[  479.692716][   T27] audit: type=1326 audit(1764204369.493:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  479.763256][ T8230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  479.847335][   T27] audit: type=1326 audit(1764204369.493:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  479.872580][ T8230] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.922: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  480.833562][   T27] audit: type=1326 audit(1764204369.493:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  480.867951][ T8230] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.922: couldn't read orphan inode 11 (err -117)
[  482.153575][ T8245] loop7: detected capacity change from 0 to 8
[  482.169393][ T8245] SQUASHFS error: Unable to read directory block [629:fe]
[  482.193606][   T27] audit: type=1326 audit(1764204369.493:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  482.229420][ T8230] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  482.309087][ T8230] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.922: Invalid block bitmap block 0 in block_group 0
[  482.359508][   T27] audit: type=1326 audit(1764204369.493:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8218 comm="syz.4.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  482.377265][ T8230] Quota error (device loop6): write_blk: dquota write failed
[  482.408040][ T8230] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  482.448359][ T8230] EXT4-fs error (device loop6): ext4_acquire_dquot:6809: comm syz.6.922: Failed to acquire dquot type 0
[  483.067960][ T6816] EXT4-fs (loop6): unmounting filesystem.
[  483.593880][ T5211] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  483.793718][ T5211] usb 8-1: Using ep0 maxpacket: 16
[  483.803058][ T5211] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.818210][ T5211] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  483.829690][ T5211] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  483.840300][ T5211] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.848587][ T5211] usb 8-1: Product: syz
[  483.852849][ T5211] usb 8-1: Manufacturer: syz
[  483.861902][ T5211] usb 8-1: SerialNumber: syz
[  484.085525][ T5211] usb 8-1: 0:2 : does not exist
[  484.102624][ T5211] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  484.142765][ T5211] usb 8-1: USB disconnect, device number 8
[  485.141022][ T8288] overlayfs: failed to resolve './file0': -2
[  485.211845][ T4473] udevd[4473]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  485.837791][ T4376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  485.900963][ T4376] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  485.986386][ T8305] loop7: detected capacity change from 0 to 8
[  486.002189][ T8305] SQUASHFS error: Unable to read directory block [629:fe]
[  486.009882][ T4271] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  486.245636][ T4271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.257161][ T4271] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  486.282413][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.326554][ T4271] usb 2-1: config 0 descriptor??
[  486.357317][ T4271] pwc: Askey VC010 type 2 USB webcam detected.
[  486.755620][ T4271] pwc: recv_control_msg error -32 req 02 val 2b00
[  486.781147][ T4271] pwc: recv_control_msg error -32 req 02 val 2700
[  486.802835][ T4271] pwc: recv_control_msg error -32 req 02 val 2c00
[  486.827044][ T4271] pwc: recv_control_msg error -32 req 04 val 1000
[  486.847660][ T4271] pwc: recv_control_msg error -32 req 04 val 1300
[  486.894652][ T4271] pwc: recv_control_msg error -32 req 04 val 1400
[  486.902104][ T4271] pwc: recv_control_msg error -32 req 02 val 2000
[  486.942750][ T4271] pwc: recv_control_msg error -32 req 02 val 2100
[  487.036141][ T8321] loop4: detected capacity change from 0 to 1024
[  487.073834][ T8321] EXT4-fs: Ignoring removed mblk_io_submit option
[  487.102588][ T8321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  487.181036][ T4271] pwc: recv_control_msg error -71 req 02 val 2500
[  487.193379][ T4271] pwc: recv_control_msg error -71 req 02 val 2400
[  487.193844][ T8321] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz.4.943: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  487.220978][ T4271] pwc: recv_control_msg error -71 req 02 val 2600
[  487.241303][ T4271] pwc: recv_control_msg error -71 req 02 val 2900
[  487.249521][ T4271] pwc: recv_control_msg error -71 req 02 val 2800
[  487.260414][ T4271] pwc: recv_control_msg error -71 req 04 val 1100
[  487.267508][ T4271] pwc: recv_control_msg error -71 req 04 val 1200
[  487.276048][ T4271] pwc: Registered as video103.
[  487.280971][ T8321] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.943: couldn't read orphan inode 11 (err -117)
[  487.295167][ T4271] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  487.310364][ T4271] usb 2-1: USB disconnect, device number 11
[  487.326127][ T8321] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  487.406861][ T8321] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.943: Invalid block bitmap block 0 in block_group 0
[  487.462017][ T8321] Quota error (device loop4): write_blk: dquota write failed
[  487.483649][ T8321] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  487.524346][ T8321] EXT4-fs error (device loop4): ext4_acquire_dquot:6809: comm syz.4.943: Failed to acquire dquot type 0
[  487.593625][  T126] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  487.793931][  T126] usb 6-1: Using ep0 maxpacket: 16
[  487.818173][  T126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.844214][  T126] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  487.860786][  T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.911672][  T126] usb 6-1: config 0 descriptor??
[  488.176355][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  489.201200][  T126] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  489.416647][ T8349] overlayfs: failed to resolve './file0': -2
[  489.856485][  T126] usb 6-1: USB disconnect, device number 5
[  490.438644][ T8365] binder: 8364:8365 unknown command 0
[  490.444176][ T8365] binder: 8364:8365 ioctl c0306201 200000000080 returned -22
[  490.636443][ T8367] loop4: detected capacity change from 0 to 1024
[  490.790364][ T8377] loop7: detected capacity change from 0 to 1024
[  490.814355][ T8377] EXT4-fs: Ignoring removed mblk_io_submit option
[  490.838474][ T8377] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  490.932583][ T8377] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.957: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  491.086147][ T8377] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.957: couldn't read orphan inode 11 (err -117)
[  491.105488][ T8377] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  491.201012][ T8377] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.957: Invalid block bitmap block 0 in block_group 0
[  491.297651][ T8377] Quota error (device loop7): write_blk: dquota write failed
[  491.361447][ T8377] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  491.445500][ T8377] EXT4-fs error (device loop7): ext4_acquire_dquot:6809: comm syz.7.957: Failed to acquire dquot type 0
[  493.317902][ T8408] loop6: detected capacity change from 0 to 8
[  493.334554][ T8408] SQUASHFS error: Unable to read directory block [629:fe]
[  494.643535][ T6822] EXT4-fs (loop7): unmounting filesystem.
[  495.374182][ T4376] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  495.587816][ T4376] usb 8-1: Using ep0 maxpacket: 32
[  495.618972][ T4376] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  495.648521][ T4376] usb 8-1: config 0 has no interface number 0
[  495.672564][ T4376] usb 8-1: config 0 interface 184 has no altsetting 0
[  495.694094][ T4376] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  495.706088][ T4376] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.882040][ T4376] usb 8-1: Product: syz
[  495.886315][ T4376] usb 8-1: Manufacturer: syz
[  495.890928][ T4376] usb 8-1: SerialNumber: syz
[  495.903235][ T4376] usb 8-1: config 0 descriptor??
[  496.137001][ T4376] smsc75xx v1.0.0
[  496.202841][ T8447] overlayfs: missing 'lowerdir'
[  496.594463][ T4376] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  496.605981][ T4376] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  499.103626][   T22] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  499.115049][ T4376] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71
[  499.143641][ T4376] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71
[  499.173559][ T4376] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  499.203422][ T4376] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  499.227856][ T4376] smsc75xx: probe of 8-1:0.184 failed with error -71
[  499.245590][ T4376] usb 8-1: USB disconnect, device number 9
[  499.322904][   T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.350988][   T22] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  499.363560][   T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.389304][   T22] usb 7-1: config 0 descriptor??
[  499.405646][   T22] pwc: Askey VC010 type 2 USB webcam detected.
[  499.423584][  T126] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  499.593601][  T126] usb 6-1: device descriptor read/64, error -71
[  499.821946][   T22] pwc: recv_control_msg error -32 req 02 val 2b00
[  499.832866][ T8488] loop4: detected capacity change from 0 to 1024
[  499.839764][   T22] pwc: recv_control_msg error -32 req 02 val 2700
[  499.870272][   T22] pwc: recv_control_msg error -32 req 02 val 2c00
[  499.876897][  T126] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  499.903410][   T22] pwc: recv_control_msg error -32 req 04 val 1000
[  499.945276][   T22] pwc: recv_control_msg error -32 req 04 val 1300
[  499.969382][   T22] pwc: recv_control_msg error -32 req 04 val 1400
[  500.012932][   T22] pwc: recv_control_msg error -32 req 02 val 2000
[  500.043574][  T126] usb 6-1: device descriptor read/64, error -71
[  500.103053][   T22] pwc: recv_control_msg error -32 req 02 val 2100
[  500.116296][   T22] pwc: recv_control_msg error -71 req 04 val 1500
[  500.123296][   T22] pwc: recv_control_msg error -71 req 02 val 2500
[  500.138271][   T22] pwc: recv_control_msg error -71 req 02 val 2400
[  500.165879][  T126] usb usb6-port1: attempt power cycle
[  500.198171][   T22] pwc: recv_control_msg error -71 req 02 val 2600
[  500.244721][   T22] pwc: recv_control_msg error -71 req 02 val 2900
[  500.299738][   T22] pwc: recv_control_msg error -71 req 02 val 2800
[  500.341487][   T22] pwc: recv_control_msg error -71 req 04 val 1100
[  500.373339][   T22] pwc: recv_control_msg error -71 req 04 val 1200
[  500.450007][   T22] pwc: Registered as video103.
[  500.491260][   T22] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14
[  500.640223][   T22] usb 7-1: USB disconnect, device number 6
[  500.646498][  T126] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  500.714062][  T126] usb 6-1: device descriptor read/8, error -71
[  500.968186][ T8512] overlayfs: missing 'lowerdir'
[  500.993662][  T126] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  501.181690][  T126] usb 6-1: device descriptor read/8, error -71
[  501.324655][  T126] usb usb6-port1: unable to enumerate USB device
[  501.417260][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.424890][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  502.392591][ T8519] loop1: detected capacity change from 0 to 8
[  502.432763][ T8519] SQUASHFS error: Unable to read directory block [629:fe]
[  503.717926][   T27] audit: type=1326 audit(1764204394.605:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.6.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  503.747094][   T27] audit: type=1326 audit(1764204394.615:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.6.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  503.770405][   T27] audit: type=1326 audit(1764204394.635:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.6.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff11538e1ff code=0x7ffc0000
[  503.793952][   T27] audit: type=1326 audit(1764204394.635:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.6.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  503.953692][   T27] audit: type=1326 audit(1764204394.635:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.6.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  504.063574][   T27] audit: type=1326 audit(1764204394.645:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.6.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  504.154281][   T27] audit: type=1326 audit(1764204394.645:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.6.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  504.254325][   T27] audit: type=1326 audit(1764204394.645:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.6.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  504.472360][ T4280] Bluetooth: hci5: Malformed LE Event: 0x0b
[  505.471918][  T126] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  505.757861][  T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  505.778356][  T126] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  505.807886][  T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.834719][  T126] usb 5-1: config 0 descriptor??
[  505.868289][  T126] pwc: Askey VC010 type 2 USB webcam detected.
[  507.439949][  T126] pwc: recv_control_msg error -32 req 02 val 2b00
[  507.453058][  T126] pwc: recv_control_msg error -32 req 02 val 2700
[  507.478371][  T126] pwc: recv_control_msg error -32 req 02 val 2c00
[  507.498932][  T126] pwc: recv_control_msg error -32 req 04 val 1000
[  507.519028][  T126] pwc: recv_control_msg error -32 req 04 val 1300
[  507.539132][  T126] pwc: recv_control_msg error -32 req 04 val 1400
[  507.556701][  T126] pwc: recv_control_msg error -32 req 02 val 2000
[  507.590046][  T126] pwc: recv_control_msg error -32 req 02 val 2100
[  507.601892][  T126] pwc: recv_control_msg error -71 req 04 val 1500
[  507.628944][  T126] pwc: recv_control_msg error -71 req 02 val 2500
[  507.658372][  T126] pwc: recv_control_msg error -71 req 02 val 2400
[  507.686764][  T126] pwc: recv_control_msg error -71 req 02 val 2600
[  507.707009][  T126] pwc: recv_control_msg error -71 req 02 val 2900
[  507.733719][ T5136] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  507.741507][  T126] pwc: recv_control_msg error -71 req 02 val 2800
[  507.761658][  T126] pwc: recv_control_msg error -71 req 04 val 1100
[  507.783824][  T126] pwc: recv_control_msg error -71 req 04 val 1200
[  507.832678][  T126] pwc: Registered as video103.
[  507.871155][  T126] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15
[  507.893568][ T5136] usb 2-1: device descriptor read/64, error -71
[  507.953818][  T126] usb 5-1: USB disconnect, device number 10
[  508.164286][ T5136] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  508.323750][ T5136] usb 2-1: device descriptor read/64, error -71
[  508.458767][ T5136] usb usb2-port1: attempt power cycle
[  508.587963][ T8579] loop6: detected capacity change from 0 to 524287999
[  508.608851][    C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  508.629482][    C0] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.639677][    C0] Buffer I/O error on dev loop6, logical block 65535968, async page read
[  508.750469][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2
[  508.779555][    C0] I/O error, dev loop6, sector 1104 op 0x0:(READ) flags 0x80700 phys_seg 91 prio class 2
[  508.801874][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.811142][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  508.898475][ T5136] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  508.952079][ T5136] usb 2-1: device descriptor read/8, error -71
[  509.002560][ T8598] overlayfs: failed to resolve './file1': -2
[  509.983815][ T5211] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  510.063651][ T5136] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  512.093230][ T5211] usb 5-1: Using ep0 maxpacket: 32
[  512.212192][ T5136] usb 2-1: device descriptor read/8, error -71
[  512.227251][ T5211] usb 5-1: device descriptor read/all, error -71
[  512.349575][ T5136] usb usb2-port1: unable to enumerate USB device
[  512.713783][ T5136] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  512.938724][ T5136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  513.039015][ T5136] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  513.182331][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.247854][ T5136] usb 2-1: config 0 descriptor??
[  513.332265][ T5136] pwc: Askey VC010 type 2 USB webcam detected.
[  513.756362][ T5136] pwc: recv_control_msg error -32 req 02 val 2b00
[  513.772292][ T5136] pwc: recv_control_msg error -32 req 02 val 2700
[  515.030019][ T5136] pwc: recv_control_msg error -32 req 02 val 2c00
[  515.058210][ T5136] pwc: recv_control_msg error -32 req 04 val 1000
[  515.078383][ T5136] pwc: recv_control_msg error -32 req 04 val 1300
[  515.100594][ T5136] pwc: recv_control_msg error -32 req 04 val 1400
[  515.128272][ T5136] pwc: recv_control_msg error -32 req 02 val 2000
[  515.165134][ T8633] loop5: detected capacity change from 0 to 8
[  515.181177][ T8633] SQUASHFS error: Unable to read directory block [629:fe]
[  515.366980][ T5136] pwc: recv_control_msg error -71 req 04 val 1500
[  515.385986][ T5136] pwc: recv_control_msg error -71 req 02 val 2500
[  515.419161][ T5136] pwc: recv_control_msg error -71 req 02 val 2400
[  515.439435][ T5136] pwc: recv_control_msg error -71 req 02 val 2600
[  515.459223][ T5136] pwc: recv_control_msg error -71 req 02 val 2900
[  515.488004][ T5136] pwc: recv_control_msg error -71 req 02 val 2800
[  515.514974][ T5136] pwc: recv_control_msg error -71 req 04 val 1100
[  515.552368][ T5136] pwc: recv_control_msg error -71 req 04 val 1200
[  515.583906][ T5136] pwc: Registered as video103.
[  515.589717][ T5136] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16
[  515.694037][ T5136] usb 2-1: USB disconnect, device number 16
[  521.853721][  T126] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  522.013651][  T126] usb 8-1: device descriptor read/64, error -71
[  522.293674][  T126] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  522.483726][  T126] usb 8-1: device descriptor read/64, error -71
[  522.623212][  T126] usb usb8-port1: attempt power cycle
[  523.103612][  T126] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  523.181072][  T126] usb 8-1: device descriptor read/8, error -71
[  523.235140][ T5207] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  523.423538][ T5136] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  523.463592][  T126] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  523.564859][  T126] usb 8-1: device descriptor read/8, error -71
[  524.203961][ T5207] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  524.373872][ T5136] usb 5-1: Using ep0 maxpacket: 16
[  524.393874][  T126] usb usb8-port1: unable to enumerate USB device
[  524.400364][ T5136] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  524.416149][ T5136] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.423715][ T5207] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  524.424542][ T5136] usb 5-1: Product: syz
[  524.439464][ T5136] usb 5-1: Manufacturer: syz
[  524.448916][ T5136] usb 5-1: SerialNumber: syz
[  524.457750][ T5207] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  524.487120][ T5136] usb 5-1: config 0 descriptor??
[  524.503899][ T5207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.510054][ T5136] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  524.546524][ T5207] usb 7-1: Product: syz
[  524.550992][ T5207] usb 7-1: Manufacturer: syz
[  524.587024][ T5207] usb 7-1: SerialNumber: syz
[  524.736769][ T5207] cdc_ncm 7-1:1.0: skipping garbage
[  524.887094][ T5136] ssu100: probe of 5-1:0.0 failed with error -110
[  524.892617][ T5207] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  524.900871][ T5207] cdc_ncm 7-1:1.0: bind() failure
[  525.861458][ T8751] loop6: detected capacity change from 0 to 128
[  526.063771][ T4482] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  526.090021][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1047'.
[  526.366937][ T4482] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.953143][ T4482] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  526.962663][ T4482] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.975352][ T4482] usb 8-1: config 0 descriptor??
[  527.021310][ T4482] pwc: Askey VC010 type 2 USB webcam detected.
[  527.035657][ T5326] usb 7-1: USB disconnect, device number 7
[  527.076905][ T5207] usb 5-1: USB disconnect, device number 13
[  527.418419][ T4482] pwc: recv_control_msg error -32 req 02 val 2b00
[  527.433930][ T4482] pwc: recv_control_msg error -32 req 02 val 2700
[  527.476529][ T4482] pwc: recv_control_msg error -32 req 02 val 2c00
[  527.494084][ T4482] pwc: recv_control_msg error -32 req 04 val 1000
[  527.505836][ T4482] pwc: recv_control_msg error -32 req 04 val 1300
[  527.517169][ T4482] pwc: recv_control_msg error -32 req 04 val 1400
[  527.528819][ T4482] pwc: recv_control_msg error -32 req 02 val 2000
[  527.557630][ T8788] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  527.567576][ T8788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  527.763036][ T4482] pwc: recv_control_msg error -71 req 04 val 1500
[  527.777609][ T4482] pwc: recv_control_msg error -71 req 02 val 2500
[  527.808627][ T4482] pwc: recv_control_msg error -71 req 02 val 2400
[  527.825367][ T4482] pwc: recv_control_msg error -71 req 02 val 2600
[  527.833162][ T4482] pwc: recv_control_msg error -71 req 02 val 2900
[  527.843229][ T4482] pwc: recv_control_msg error -71 req 02 val 2800
[  527.855051][ T4482] pwc: recv_control_msg error -71 req 04 val 1100
[  527.862536][ T4482] pwc: recv_control_msg error -71 req 04 val 1200
[  527.915295][ T4482] pwc: Registered as video103.
[  527.944766][ T4482] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input17
[  528.034798][ T4482] usb 8-1: USB disconnect, device number 14
[  528.383916][  T126] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  528.683665][  T126] usb 6-1: Using ep0 maxpacket: 16
[  528.700963][  T126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.748030][  T126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  528.846987][ T5326] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  528.886503][  T126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  529.083617][  T126] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  529.107035][  T126] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  529.143635][  T126] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  529.211779][  T126] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  529.238159][  T126] usb 6-1: Manufacturer: syz
[  529.268521][  T126] usb 6-1: config 0 descriptor??
[  529.512293][ T5326] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  529.746413][ T5326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.799053][ T5326] usb 2-1: Product: syz
[  529.801490][ T8819] loop4: detected capacity change from 0 to 1024
[  529.803253][ T5326] usb 2-1: Manufacturer: syz
[  529.868081][ T5326] usb 2-1: SerialNumber: syz
[  529.963530][  T126] rc_core: IR keymap rc-hauppauge not found
[  529.969670][  T126] Registered IR keymap rc-empty
[  530.000476][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  530.043637][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  530.090353][  T126] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  530.131718][  T126] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18
[  530.207242][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  530.317353][ T5326] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  530.616637][ T5326] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71
[  530.752445][ T5326] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  530.935164][ T5326] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  531.070388][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.103584][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.143657][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.183615][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.188714][ T5326] lan78xx: probe of 2-1:1.0 failed with error -71
[  531.213546][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.244379][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.273615][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.300238][ T5326] usb 2-1: USB disconnect, device number 17
[  531.323569][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.353576][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.383726][  T126] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  531.414885][  T126] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  531.434304][  T126] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  531.458930][  T126] usb 6-1: USB disconnect, device number 10
[  531.503674][ T4339] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  531.785064][ T5211] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  531.804517][ T8857] overlayfs: missing 'lowerdir'
[  531.813826][ T4339] usb 7-1: Using ep0 maxpacket: 32
[  531.836535][ T4339] usb 7-1: config 0 has an invalid interface number: 230 but max is 0
[  531.863541][ T4339] usb 7-1: config 0 has no interface number 0
[  531.870113][ T4339] usb 7-1: config 0 interface 230 has no altsetting 0
[  531.888589][ T4339] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  531.897978][ T4339] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.907513][ T4339] usb 7-1: Product: syz
[  531.921892][ T4339] usb 7-1: Manufacturer: syz
[  531.946826][ T4339] usb 7-1: SerialNumber: syz
[  531.994482][ T5211] usb 5-1: Using ep0 maxpacket: 8
[  532.007591][ T4339] usb 7-1: config 0 descriptor??
[  532.043333][ T4339] ums-usbat 7-1:0.230: USB Mass Storage device detected
[  532.049546][ T5211] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  532.086048][ T4339] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  532.122541][ T5211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.191563][ T5211] usb 5-1: Product: syz
[  532.248521][ T5211] usb 5-1: Manufacturer: syz
[  532.289223][ T5211] usb 5-1: SerialNumber: syz
[  532.344114][ T5211] usb 5-1: config 0 descriptor??
[  532.601308][ T5211] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  533.053646][ T5136] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  533.255295][ T5136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.280837][ T5136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.312000][ T5136] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  533.324537][ T5136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.356305][ T5136] usb 6-1: config 0 descriptor??
[  533.583944][ T5136] usbhid 6-1:0.0: can't add hid device: -71
[  533.591636][ T5136] usbhid: probe of 6-1:0.0 failed with error -71
[  533.651296][ T5136] usb 6-1: USB disconnect, device number 11
[  533.963596][ T4376] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  534.163850][ T4376] usb 8-1: Using ep0 maxpacket: 16
[  534.177798][ T4376] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  534.200151][ T4376] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  534.226005][ T4376] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  534.271484][ T4376] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  534.281364][ T5136] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  534.305217][ T4376] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.348369][ T4339] ums-usbat: probe of 7-1:0.230 failed with error -5
[  534.356205][ T4376] usb 8-1: Product: syz
[  534.375670][ T4376] usb 8-1: Manufacturer: syz
[  534.393704][ T4339] usb 7-1: USB disconnect, device number 8
[  534.403787][ T4376] usb 8-1: SerialNumber: syz
[  534.475376][ T5136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  534.513831][ T5136] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.621475][ T5211] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  534.819609][ T5211] usb 5-1: USB disconnect, device number 14
[  534.880850][ T5136] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice= 0.40
[  534.921113][ T5136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.966549][ T5136] usb 6-1: config 0 descriptor??
[  535.002768][ T5136] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  535.030051][ T4376] usb 8-1: 0:2 : does not exist
[  535.283772][ T5326] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  535.451865][ T8919] lo speed is unknown, defaulting to 1000
[  535.462532][ T8919] lo speed is unknown, defaulting to 1000
[  535.469764][ T8919] lo speed is unknown, defaulting to 1000
[  535.488383][ T5326] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  535.531090][ T5326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.544536][ T5326] usb 2-1: Product: syz
[  535.548739][ T5326] usb 2-1: Manufacturer: syz
[  535.553350][ T5326] usb 2-1: SerialNumber: syz
[  535.580653][ T5326] usb 2-1: config 0 descriptor??
[  535.592322][ T8923] loop5: detected capacity change from 0 to 2879
[  535.737942][   T22] lo speed is unknown, defaulting to 1000
[  535.744737][ T8919] infiniband s
z1: set active
[  535.749870][ T8919] infiniband s
z1: added lo
[  535.818313][ T5136] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19
[  535.853557][ T4482] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  535.910558][ T8919] RDS/IB: s
z1: added
[  535.929958][ T8919] smc: adding ib device s
z1 with port count 1
[  535.938732][ T8919] smc:    ib device s
z1 port 1 has pnetid 
[  535.953000][ T5136] lo speed is unknown, defaulting to 1000
[  535.965550][ T8919] lo speed is unknown, defaulting to 1000
[  536.018508][ T5326] airspy 2-1:0.0: Board ID: 00
[  536.019519][ T5136] usb 6-1: USB disconnect, device number 12
[  536.023629][ T5326] airspy 2-1:0.0: Firmware version: 
[  536.035074][ T4482] usb 5-1: Using ep0 maxpacket: 8
[  536.037085][ T4482] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  536.081983][ T4482] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  536.112372][ T4482] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  536.154616][ T4482] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  536.195784][ T4482] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  536.210546][ T4482] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.220240][ T5326] airspy 2-1:0.0: usb_control_msg() failed -71 request 11
[  536.241416][ T5326] videodev: could not get a free minor
[  536.270203][ T5326] airspy 2-1:0.0: Failed to register as video device (-23)
[  536.276611][ T4376] usb 8-1: 1:0: failed to get current value for ch 0 (-22)
[  536.300124][ T5326] airspy: probe of 2-1:0.0 failed with error -23
[  536.332697][ T5326] usb 2-1: USB disconnect, device number 18
[  536.357639][ T4376] usb 8-1: USB disconnect, device number 15
[  536.398464][ T8919] lo speed is unknown, defaulting to 1000
[  536.461024][ T4482] usb 5-1: usb_control_msg returned -32
[  536.469764][ T4482] usbtmc 5-1:16.0: can't read capabilities
[  536.652107][ T8919] lo speed is unknown, defaulting to 1000
[  536.872923][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  536.888808][ T8941] usbtmc 5-1:16.0: Unable to send data, error -71
[  538.243215][ T8919] lo speed is unknown, defaulting to 1000
[  538.526277][ T8919] lo speed is unknown, defaulting to 1000
[  539.166753][ T4376] usb 5-1: USB disconnect, device number 15
[  539.423610][ T5211] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  539.613560][ T5211] usb 8-1: Using ep0 maxpacket: 8
[  539.622944][ T5211] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  539.665168][ T5211] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.705793][ T5211] usb 8-1: Product: syz
[  539.718402][ T5211] usb 8-1: Manufacturer: syz
[  539.735946][ T5211] usb 8-1: SerialNumber: syz
[  539.746284][ T5211] usb 8-1: config 0 descriptor??
[  539.955449][ T5211] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  541.003568][ T4482] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  541.193664][ T4482] usb 7-1: Using ep0 maxpacket: 16
[  541.200509][ T4482] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.229322][ T4482] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.318456][ T4482] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  541.347369][ T4482] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  541.416641][ T4482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.560837][ T4482] usb 7-1: config 0 descriptor??
[  542.178670][ T5211] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71
[  542.183425][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.201789][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.209557][ T5211] usb 8-1: USB disconnect, device number 16
[  542.243839][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.276712][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.290988][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.305213][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.312776][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.320289][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.327864][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.335340][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.344342][ T4482] hid-generic 0003:0457:07DA.0004: unknown main item tag 0x0
[  542.372920][ T4482] hid-generic 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.6-1/input0
[  542.513656][ T4271] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  542.532086][ T5211] usb 7-1: USB disconnect, device number 9
[  542.554210][  T126] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  542.606700][ T9027] fido_id[9027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  542.732693][ T4271] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  542.743614][  T126] usb 5-1: Using ep0 maxpacket: 32
[  542.752504][  T126] usb 5-1: config 0 interface 0 has no altsetting 0
[  542.770541][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.846172][   T27] audit: type=1326 audit(1764204438.597:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  543.867224][  T126] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  543.877832][ T4271] usb 6-1: Product: syz
[  543.883715][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.891733][  T126] usb 5-1: Product: syz
[  543.898138][ T4271] usb 6-1: Manufacturer: syz
[  543.943959][ T4271] usb 6-1: SerialNumber: syz
[  543.971915][ T4271] usb 6-1: config 0 descriptor??
[  543.977561][  T126] usb 5-1: Manufacturer: syz
[  543.978104][   T27] audit: type=1326 audit(1764204438.607:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1902d8e1ff code=0x7ffc0000
[  544.004246][    C0] vkms_vblank_simulate: vblank timer overrun
[  544.021631][   T27] audit: type=1326 audit(1764204438.617:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  544.123620][  T126] usb 5-1: SerialNumber: syz
[  544.136965][   T27] audit: type=1326 audit(1764204438.617:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  544.146343][  T126] usb 5-1: config 0 descriptor??
[  544.159040][    C0] vkms_vblank_simulate: vblank timer overrun
[  544.181863][ T4271] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  544.251414][  T126] gs_usb 5-1:0.0: Required endpoints not found
[  544.261797][   T27] audit: type=1326 audit(1764204438.627:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  545.504842][   T27] audit: type=1326 audit(1764204438.627:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9021 comm="syz.1.1103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1902d8f749 code=0x7ffc0000
[  545.519042][ T4271] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32
[  546.922932][  T126] usb 6-1: USB disconnect, device number 13
[  546.986129][ T4271] usb 5-1: USB disconnect, device number 16
[  547.754270][ T4271] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  547.965027][ T4271] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  547.984146][ T4271] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  548.038569][ T4271] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  548.064221][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.092623][ T4271] usb 6-1: Product: syz
[  548.112838][ T4271] usb 6-1: Manufacturer: syz
[  548.159580][ T4271] usb 6-1: SerialNumber: syz
[  548.220372][ T4271] cdc_ncm 6-1:1.0: skipping garbage
[  548.257704][ T4271] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  548.279293][ T4271] cdc_ncm 6-1:1.0: bind() failure
[  548.603737][  T126] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  548.649043][ T9094] loop5: detected capacity change from 0 to 128
[  548.823590][  T126] usb 2-1: Using ep0 maxpacket: 16
[  548.832884][  T126] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  548.866965][  T126] usb 2-1: config 0 has no interface number 0
[  548.893592][  T126] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  548.904001][  T126] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  548.919695][  T126] usb 2-1: config 0 interface 41 has no altsetting 0
[  548.930575][  T126] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  548.951629][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.968766][  T126] usb 2-1: Product: syz
[  548.978700][  T126] usb 2-1: Manufacturer: syz
[  548.989048][  T126] usb 2-1: SerialNumber: syz
[  549.002473][  T126] usb 2-1: config 0 descriptor??
[  549.015437][ T9085] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  549.031124][ T9085] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  549.250392][ T9085] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  549.280907][ T9085] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  550.780971][ T5207] usb 6-1: USB disconnect, device number 14
[  550.784503][  T126] Error reading MAC address
[  550.803713][ T9107] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  550.811001][ T9107] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  551.580207][  T126] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  552.028186][  T126] usb 2-1: USB disconnect, device number 19
[  552.313576][ T5207] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  552.527916][ T5207] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  552.553545][ T5207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.598806][ T5207] usb 5-1: Product: syz
[  552.607645][ T5207] usb 5-1: Manufacturer: syz
[  552.612278][ T5207] usb 5-1: SerialNumber: syz
[  552.662183][ T5207] usb 5-1: config 0 descriptor??
[  552.883315][ T5207] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  554.173342][   T27] audit: type=1326 audit(1764204451.069:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.7.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  554.198916][ T5207] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[  554.243525][ T5206] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  554.270507][   T27] audit: type=1326 audit(1764204451.079:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.7.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  554.316504][   T27] audit: type=1326 audit(1764204451.089:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.7.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f52c038e1ff code=0x7ffc0000
[  554.339699][   T27] audit: type=1326 audit(1764204451.099:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.7.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  554.363025][   T27] audit: type=1326 audit(1764204451.099:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.7.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  554.434033][   T27] audit: type=1326 audit(1764204451.119:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.7.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  554.435607][ T5206] usb 7-1: Using ep0 maxpacket: 8
[  554.480927][   T27] audit: type=1326 audit(1764204451.119:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.7.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  554.495099][ T5206] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  554.539381][   T27] audit: type=1326 audit(1764204451.129:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9131 comm="syz.7.1121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  554.543880][ T5206] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  554.602673][ T5206] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  554.608845][ T4339] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  554.623040][ T5206] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  554.639576][ T5206] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  554.650193][ T5206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.767432][  T126] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  554.807761][ T4339] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  554.823504][ T4339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.833436][ T4339] usb 6-1: Product: syz
[  554.838307][ T4339] usb 6-1: Manufacturer: syz
[  554.845540][ T4339] usb 6-1: SerialNumber: syz
[  554.860060][ T4339] usb 6-1: config 0 descriptor??
[  554.878179][ T5206] usb 7-1: usb_control_msg returned -32
[  554.888235][ T5206] usbtmc 7-1:16.0: can't read capabilities
[  554.973639][  T126] usb 2-1: Using ep0 maxpacket: 8
[  554.987223][  T126] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  555.006817][  T126] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  555.027102][  T126] usb 2-1: Product: syz
[  555.031378][  T126] usb 2-1: Manufacturer: syz
[  555.047336][  T126] usb 2-1: SerialNumber: syz
[  555.058905][  T126] usb 2-1: config 0 descriptor??
[  555.076449][  T126] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  555.255844][ T5136] usb 5-1: USB disconnect, device number 17
[  555.290462][ T4339] airspy 6-1:0.0: Board ID: 00
[  555.295599][ T4339] airspy 6-1:0.0: Firmware version: 
[  555.478613][ T9170] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  555.487821][ T9170] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  555.497749][ T9170] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  555.506722][ T9170] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  555.513325][ T9170] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  555.527912][ T9170] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  555.539391][ T9170] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  555.692429][  T126] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22
[  555.702948][ T4339] airspy 6-1:0.0: usb_control_msg() failed -71 request 0e
[  555.712992][ T4339] airspy 6-1:0.0: Registered as swradio24
[  555.721454][  T126] videodev: could not get a free minor
[  555.727203][ T4339] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  555.735328][ T5206] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  555.737765][  T126] gspca_main: video_register_device err -23
[  555.760842][ T4339] usb 6-1: USB disconnect, device number 15
[  555.795412][  T126] gspca_zc3xx: probe of 2-1:0.0 failed with error -23
[  555.910847][  T126] usb 2-1: USB disconnect, device number 20
[  555.945232][ T5206] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  555.957415][ T5206] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  555.989667][ T5206] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  557.262792][ T5206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.285053][ T5206] usb 8-1: Product: syz
[  557.289262][ T5206] usb 8-1: Manufacturer: syz
[  557.294818][ T5206] usb 8-1: SerialNumber: syz
[  557.310537][ T5206] cdc_ncm 8-1:1.0: skipping garbage
[  557.328076][ T5206] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[  557.348843][ T5206] cdc_ncm 8-1:1.0: bind() failure
[  557.388940][ T5206] usb 7-1: USB disconnect, device number 10
[  557.749492][ T9192] loop7: detected capacity change from 0 to 128
[  557.979868][ T9196] loop6: detected capacity change from 0 to 32768
[  557.989181][ T9196] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1137 (9196)
[  558.011849][ T9196] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  558.022053][ T9196] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  558.030857][ T9196] BTRFS info (device loop6): using free space tree
[  558.165846][ T9196] BTRFS info (device loop6): enabling ssd optimizations
[  558.860821][ T5136] usb 8-1: USB disconnect, device number 17
[  559.893538][ T5206] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  560.003002][ T9238] overlayfs: missing 'lowerdir'
[  560.126420][ T5206] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.181451][ T6816] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  560.205220][ T5206] usb 5-1: config 0 has no interfaces?
[  560.226133][ T5206] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  560.266448][ T5206] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  560.298420][ T5206] usb 5-1: Product: syz
[  560.309909][ T5206] usb 5-1: Manufacturer: syz
[  560.320142][ T5206] usb 5-1: SerialNumber: syz
[  560.335247][ T5206] usb 5-1: config 0 descriptor??
[  560.555238][ T5206] usb 5-1: USB disconnect, device number 18
[  562.158214][ T5207] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  562.353526][ T5207] usb 8-1: Using ep0 maxpacket: 8
[  562.360275][ T5207] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  562.373527][ T5206] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  562.402575][ T5207] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  562.438664][ T5207] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  562.473508][ T5207] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  562.516942][ T5207] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  562.547359][ T5207] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.565408][ T5206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  562.611477][ T5206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  562.643884][ T5206] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  562.678207][ T5206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.709644][ T5206] usb 2-1: config 0 descriptor??
[  562.792538][ T5207] usb 8-1: usb_control_msg returned -32
[  562.798545][ T5207] usbtmc 8-1:16.0: can't read capabilities
[  562.858197][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.864579][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  563.138012][ T5206] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  563.166261][ T5206] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  563.190438][ T5206] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x0
[  563.537512][ T5206] hid-led: probe of 0003:0FC5:B080.0005 failed with error -71
[  564.650579][ T5206] usb 2-1: USB disconnect, device number 21
[  564.697089][ T5211] usb 8-1: USB disconnect, device number 18
[  564.933795][ T4281] Bluetooth: hci5: command 0x0406 tx timeout
[  565.111525][ T9309] loop1: detected capacity change from 0 to 32768
[  565.125962][ T9309] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1154 (9309)
[  565.140241][ T9309] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  565.150474][ T9309] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  565.159263][ T9309] BTRFS info (device loop1): using free space tree
[  566.548686][   T27] audit: type=1326 audit(1764204466.187:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  566.670772][   T27] audit: type=1326 audit(1764204466.187:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  566.739364][   T27] audit: type=1326 audit(1764204466.187:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feade38e1ff code=0x7ffc0000
[  566.762252][   T27] audit: type=1326 audit(1764204466.187:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  566.785134][   T27] audit: type=1326 audit(1764204466.187:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  566.810105][   T27] audit: type=1326 audit(1764204466.187:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  566.833682][   T27] audit: type=1326 audit(1764204466.187:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  566.856545][   T27] audit: type=1326 audit(1764204466.187:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9317 comm="syz.5.1157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feade38f749 code=0x7ffc0000
[  566.912398][ T9309] BTRFS info (device loop1): enabling ssd optimizations
[  567.011162][ T5207] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  567.473568][ T5207] usb 8-1: Using ep0 maxpacket: 32
[  567.480467][ T5207] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  567.542295][ T5207] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.567824][ T5207] usb 8-1: config 0 descriptor??
[  567.590505][ T5207] gspca_main: sunplus-2.14.0 probing 041e:400b
[  567.759656][ T4268] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  568.793499][ T5136] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  568.983596][ T5136] usb 2-1: Using ep0 maxpacket: 8
[  568.998640][ T5207] gspca_sunplus: reg_w_riv err -71
[  569.004473][ T5207] sunplus: probe of 8-1:0.0 failed with error -71
[  569.005918][ T5136] usb 2-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d
[  569.023723][ T5207] usb 8-1: USB disconnect, device number 19
[  569.079575][ T5136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.088912][ T5136] usb 2-1: Product: syz
[  569.106794][ T5136] usb 2-1: Manufacturer: syz
[  569.111628][ T5136] usb 2-1: SerialNumber: syz
[  569.146243][ T5136] usb 2-1: config 0 descriptor??
[  569.153776][   T14] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  569.200147][ T5136] gspca_main: sonixj-2.14.0 probing 0c45:6128
[  569.353503][   T14] usb 5-1: Using ep0 maxpacket: 16
[  569.361088][   T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  569.397406][   T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  569.438650][   T14] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  569.463595][  T126] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  569.464673][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.479736][   T14] usb 5-1: Product: syz
[  569.484425][   T14] usb 5-1: Manufacturer: syz
[  569.489303][   T14] usb 5-1: SerialNumber: syz
[  569.595420][ T5136] gspca_sonixj: reg_r err -32
[  569.610378][ T5136] sonixj: probe of 2-1:0.0 failed with error -32
[  569.659132][  T126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.672617][  T126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.697716][  T126] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  569.708097][   T14] usb 5-1: 0:2 : does not exist
[  569.712609][  T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.724345][   T14] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  569.730497][  T126] usb 6-1: config 0 descriptor??
[  569.836790][   T14] usb 5-1: USB disconnect, device number 19
[  570.225464][ T4473] udevd[4473]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  570.461794][  T126] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  570.560547][  T126] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  570.698392][  T126] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  570.809784][   T27] audit: type=1326 audit(1764204472.528:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9390 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce138f749 code=0x7ffc0000
[  570.917877][  T126] hid-led: probe of 0003:0FC5:B080.0006 failed with error -71
[  571.156023][  T126] usb 6-1: USB disconnect, device number 16
[  571.384093][   T27] audit: type=1326 audit(1764204472.528:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9390 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ce138e1ff code=0x7ffc0000
[  571.620049][   T14] usb 2-1: USB disconnect, device number 22
[  571.807433][ T9404] loop5: detected capacity change from 0 to 1024
[  571.847399][ T9408] misc userio: The device must be registered before sending interrupts
[  571.852941][ T9404] EXT4-fs: Ignoring removed mblk_io_submit option
[  571.883773][ T9408] misc userio: The device must be registered before sending interrupts
[  571.887649][ T9404] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  571.971732][ T9404] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.1171: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  572.071524][ T9404] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1171: couldn't read orphan inode 11 (err -117)
[  572.088430][ T9404] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  572.134887][ T9404] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.1171: Invalid block bitmap block 0 in block_group 0
[  572.148508][ T9348] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  572.171835][ T9404] __quota_error: 4 callbacks suppressed
[  572.171848][ T9404] Quota error (device loop5): write_blk: dquota write failed
[  572.196495][ T9404] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  572.215030][ T9404] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.1171: Failed to acquire dquot type 0
[  572.343752][ T9348] usb 5-1: Using ep0 maxpacket: 16
[  572.351587][ T9348] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  572.363596][   T14] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  572.393942][ T9348] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  572.412913][ T9348] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  572.441329][ T9348] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  572.463625][ T5207] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  572.473574][ T9348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.489557][ T9348] usb 5-1: Product: syz
[  572.494164][ T9348] usb 5-1: Manufacturer: syz
[  572.501251][ T9348] usb 5-1: SerialNumber: syz
[  572.553589][   T14] usb 7-1: Using ep0 maxpacket: 8
[  572.560387][   T14] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  572.612369][ T7077] EXT4-fs (loop5): unmounting filesystem.
[  572.621673][   T14] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  572.631470][   T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  572.643323][   T14] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  572.663531][ T5207] usb 2-1: Using ep0 maxpacket: 8
[  572.682563][ T5207] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  572.705798][   T14] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  572.796771][   T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.813925][ T5207] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  572.859364][   T14] hub 7-1:1.0: bad descriptor, ignoring hub
[  572.873541][ T5207] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  572.884206][   T14] hub: probe of 7-1:1.0 failed with error -5
[  572.892567][ T5207] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  572.914099][   T14] cdc_wdm 7-1:1.0: skipping garbage
[  572.920265][ T9348] usb 5-1: 0:2 : does not exist
[  572.938598][   T14] cdc_wdm 7-1:1.0: skipping garbage
[  572.956368][ T5207] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  572.967870][   T14] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  572.978887][   T14] cdc_wdm 7-1:1.0: Unknown control protocol
[  572.985379][ T5207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.221054][ T5207] usb 2-1: usb_control_msg returned -32
[  573.240681][ T5207] usbtmc 2-1:16.0: can't read capabilities
[  573.273537][ T4332] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  573.467405][ T4332] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  573.486843][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.519313][ T4332] usb 6-1: Product: syz
[  573.534854][ T4332] usb 6-1: Manufacturer: syz
[  573.548789][ T4332] usb 6-1: SerialNumber: syz
[  573.559120][ T4332] usb 6-1: config 0 descriptor??
[  573.572519][ T9416] usb 7-1: reset high-speed USB device number 11 using dummy_hcd
[  573.780290][ T4332] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  574.760928][   T27] audit: type=1326 audit(1764204476.775:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  574.818331][ T9348] usb 5-1: 1:0: failed to get current value for ch 0 (-22)
[  574.832466][ T9416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.847414][ T9416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.890857][ T9348] usb 5-1: USB disconnect, device number 20
[  574.912273][   T27] audit: type=1326 audit(1764204476.775:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  574.970630][   T27] audit: type=1326 audit(1764204476.775:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f52c038e1ff code=0x7ffc0000
[  575.021285][   T27] audit: type=1326 audit(1764204476.775:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  575.045529][ T5207] usb 7-1: USB disconnect, device number 11
[  575.078896][   T27] audit: type=1326 audit(1764204476.775:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  575.127056][   T27] audit: type=1326 audit(1764204476.775:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  575.190858][ T4481] usb 2-1: USB disconnect, device number 23
[  575.222327][   T27] audit: type=1326 audit(1764204476.775:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  575.283580][   T27] audit: type=1326 audit(1764204476.775:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.7.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c038f749 code=0x7ffc0000
[  575.305940][    C1] vkms_vblank_simulate: vblank timer overrun
[  575.723535][ T4481] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  575.808061][ T4332] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32
[  575.834037][ T4332] usb 6-1: USB disconnect, device number 17
[  576.018809][ T4481] usb 2-1: Using ep0 maxpacket: 8
[  576.032883][ T4481] usb 2-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d
[  576.043336][ T4481] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.066012][ T4481] usb 2-1: Product: syz
[  576.073793][ T4481] usb 2-1: Manufacturer: syz
[  576.083556][ T4481] usb 2-1: SerialNumber: syz
[  576.090166][ T4481] usb 2-1: config 0 descriptor??
[  576.100497][ T4481] gspca_main: sonixj-2.14.0 probing 0c45:6128
[  576.183742][  T126] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  576.443712][  T126] usb 8-1: Using ep0 maxpacket: 8
[  576.496685][  T126] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  576.505821][  T126] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  576.516272][  T126] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  576.526850][  T126] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  576.537520][  T126] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  576.553282][  T126] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  576.563304][  T126] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.657478][ T4481] gspca_sonixj: reg_r err -32
[  576.662784][ T4481] sonixj: probe of 2-1:0.0 failed with error -32
[  576.813597][ T9489] misc userio: No port type given on /dev/userio
[  576.825896][  T126] usb 8-1: GET_CAPABILITIES returned 0
[  576.831561][  T126] usbtmc 8-1:16.0: can't read capabilities
[  576.854266][ T9489] misc userio: The device must be registered before sending interrupts
[  576.903591][ T9489] misc userio: The device must be registered before sending interrupts
[  577.162266][ T9481] usbtmc 8-1:16.0: usb_control_msg returned -71
[  577.168985][ T4481] usb 8-1: USB disconnect, device number 20
[  577.203541][  T126] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  577.293656][ T5136] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  577.399786][  T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  577.420865][  T126] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.438435][  T126] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  577.447834][  T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.456196][  T126] usb 5-1: Product: syz
[  577.460952][  T126] usb 5-1: Manufacturer: syz
[  577.465694][  T126] usb 5-1: SerialNumber: syz
[  577.483629][ T5136] usb 7-1: Using ep0 maxpacket: 8
[  577.495635][ T5136] usb 7-1: config 0 has an invalid interface number: 33 but max is 1
[  577.510761][  T126] cdc_ncm 5-1:1.0: skipping garbage
[  577.532007][  T126] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  577.544753][ T5136] usb 7-1: config 0 has no interface number 1
[  577.571512][ T5136] usb 7-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  577.586503][  T126] cdc_ncm 5-1:1.0: bind() failure
[  577.645331][ T5136] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247
[  577.674999][ T5136] usb 7-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[  577.684431][ T5136] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.692514][ T5136] usb 7-1: Product: syz
[  577.703697][ T5136] usb 7-1: Manufacturer: syz
[  577.720519][ T5136] usb 7-1: SerialNumber: syz
[  577.749498][ T5136] usb 7-1: config 0 descriptor??
[  577.774387][ T5136] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  577.965948][ T9495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.052302][ T9504] loop4: detected capacity change from 0 to 128
[  578.326948][ T9495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.651217][ T9495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.695400][ T9495] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.765676][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.790698][ T4332] usb 2-1: USB disconnect, device number 24
[  578.841024][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.962402][ T2309] pvrusb2: Invalid read control endpoint
[  578.966598][ T5136] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[  578.980173][ T5136] usb 7-1: USB disconnect, device number 12
[  579.358478][ T4482] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  580.321142][ T4482] usb 8-1: Using ep0 maxpacket: 8
[  580.407463][ T5207] usb 5-1: USB disconnect, device number 21
[  580.465707][ T2309] usb 7-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  580.507640][ T4482] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  580.517709][ T2309] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  580.533677][ T5206] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  580.608908][ T4482] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  580.672999][ T4482] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  580.740254][ T4482] usb 8-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d
[  580.748720][ T5206] usb 6-1: Using ep0 maxpacket: 8
[  580.757014][ T5206] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  580.812703][ T4482] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.812716][ T5206] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  580.812742][ T5206] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  580.860310][ T4482] usb 8-1: Product: syz
[  580.884171][ T4482] usb 8-1: Manufacturer: syz
[  580.900755][ T5206] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  580.918426][ T4482] usb 8-1: SerialNumber: syz
[  580.948681][ T4482] ti_usb_3410_5052 8-1:1.0: TI USB 3410 1 port adapter converter detected
[  580.966483][ T5206] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  581.013330][ T5206] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.220194][   T14] usb 8-1: USB disconnect, device number 21
[  581.273982][ T5206] usb 6-1: usb_control_msg returned -32
[  581.282725][ T5206] usbtmc 6-1:16.0: can't read capabilities
[  582.775733][ T4332] usb 6-1: USB disconnect, device number 18
[  583.703564][ T4332] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  585.113666][ T4332] usb 6-1: Using ep0 maxpacket: 8
[  585.127484][ T4332] usb 6-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d
[  585.167920][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.240826][ T4332] usb 6-1: Product: syz
[  585.284183][ T4332] usb 6-1: Manufacturer: syz
[  585.311089][ T4332] usb 6-1: SerialNumber: syz
[  585.347954][ T4332] usb 6-1: config 0 descriptor??
[  585.396720][ T4332] gspca_main: sonixj-2.14.0 probing 0c45:6128
[  585.791224][ T4332] gspca_sonixj: reg_r err -32
[  585.796519][ T4332] sonixj: probe of 6-1:0.0 failed with error -32
[  587.226954][ T4332] usb 6-1: USB disconnect, device number 19
[  589.164434][ T9612] loop1: detected capacity change from 0 to 1024
[  589.223692][ T9612] EXT4-fs: Ignoring removed mblk_io_submit option
[  589.321434][ T9612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  589.414829][ T9612] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.1218: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  589.436709][ T9612] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1218: couldn't read orphan inode 11 (err -117)
[  589.575869][ T9612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  589.687468][ T9612] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1218: Invalid block bitmap block 0 in block_group 0
[  589.797235][ T9612] Quota error (device loop1): write_blk: dquota write failed
[  589.844493][ T9612] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  589.906071][ T9612] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.1218: Failed to acquire dquot type 0
[  590.312396][ T4268] EXT4-fs (loop1): unmounting filesystem.
[  590.779172][ T9631] loop4: detected capacity change from 0 to 32768
[  590.796725][ T9631] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1208 (9631)
[  590.815564][ T9631] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  590.825741][ T9631] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  590.834451][ T9631] BTRFS info (device loop4): using free space tree
[  591.300818][ T9631] BTRFS info (device loop4): enabling ssd optimizations
[  592.032105][   T27] audit: type=1800 audit(1764204494.735:212): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1223" name="/" dev="fuse" ino=9 res=0 errno=0
[  592.325832][ T4267] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  592.363615][ T4332] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  592.553705][ T4332] usb 6-1: Using ep0 maxpacket: 16
[  592.560689][ T4332] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  592.612511][ T4332] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  592.662710][ T4332] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  592.699907][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.732152][ T4332] usb 6-1: Product: syz
[  592.750956][ T4332] usb 6-1: Manufacturer: syz
[  592.770844][ T4332] usb 6-1: SerialNumber: syz
[  592.843477][ T4482] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[  593.020951][ T4332] usb 6-1: 0:2 : does not exist
[  593.032148][ T4332] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  593.046931][ T4482] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  593.076572][ T4482] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.088923][ T4332] usb 6-1: USB disconnect, device number 20
[  593.132509][ T4482] usb 8-1: Product: syz
[  593.150399][ T4482] usb 8-1: Manufacturer: syz
[  593.162030][ T6818] udevd[6818]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  593.171068][ T4482] usb 8-1: SerialNumber: syz
[  593.244225][ T4482] usb 8-1: config 0 descriptor??
[  593.497773][ T4482] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  595.309434][ T4482] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -110
[  596.850093][ T4482] usb 8-1: USB disconnect, device number 22
[  597.219714][   T27] audit: type=1326 audit(1764204500.937:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.6.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  597.476410][   T27] audit: type=1326 audit(1764204500.937:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.6.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  597.777872][   T27] audit: type=1326 audit(1764204500.937:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.6.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff11538e1ff code=0x7ffc0000
[  597.903143][   T27] audit: type=1326 audit(1764204500.937:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.6.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  598.047059][   T27] audit: type=1326 audit(1764204500.937:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.6.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  599.430707][   T27] audit: type=1326 audit(1764204500.937:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.6.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  599.553592][   T27] audit: type=1326 audit(1764204500.937:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.6.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  599.748600][   T27] audit: type=1326 audit(1764204500.937:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.6.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff11538f749 code=0x7ffc0000
[  600.087147][ T9735] device syzkaller1 entered promiscuous mode
[  600.837214][ T9752] loop4: detected capacity change from 0 to 8
[  600.893157][ T9752] SQUASHFS error: Unable to read directory block [629:fe]
[  601.933510][ T4481] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  601.963563][ T4317] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  602.137207][ T4481] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  602.154537][ T4481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.165501][ T4317] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  602.198473][ T4481] usb 6-1: Product: syz
[  602.254952][ T4481] usb 6-1: Manufacturer: syz
[  602.268535][ T4317] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  602.278669][ T4481] usb 6-1: SerialNumber: syz
[  602.301299][ T4481] usb 6-1: config 0 descriptor??
[  602.470336][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0
[  602.960430][ T4481] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  602.965642][ T4317] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  602.978277][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  602.986666][ T4317] usb 5-1: Product: syz
[  602.990974][ T4317] usb 5-1: Manufacturer: syz
[  602.997011][ T4317] usb 5-1: SerialNumber: syz
[  603.004500][ T4317] usb 5-1: config 0 descriptor??
[  603.056476][ T4317] usb 5-1: selecting invalid altsetting 0
[  603.235357][ T9762] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled
[  603.330015][ T4317] usb 5-1: USB disconnect, device number 22
[  603.653599][ T4376] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  603.853592][ T4376] usb 8-1: Using ep0 maxpacket: 8
[  603.860529][ T4376] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  603.899400][ T4376] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  603.915596][ T4376] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  603.931220][ T4376] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  603.950244][ T4376] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  603.983511][ T4376] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  604.002263][ T4376] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.246200][ T4376] usb 8-1: GET_CAPABILITIES returned 0
[  604.251823][ T4376] usbtmc 8-1:16.0: can't read capabilities
[  604.381106][ T4481] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32
[  604.409245][ T4481] usb 6-1: USB disconnect, device number 21
[  607.258469][ T9817] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1258'.
[  609.493991][ T9781] usbtmc 8-1:16.0: usb_control_msg returned -110
[  609.611344][    T7] usb 8-1: USB disconnect, device number 23
[  610.173744][    T7] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  610.885498][    T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.932226][    T7] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.073588][    T7] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  611.082778][    T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.173982][ T9864] loop4: detected capacity change from 0 to 8
[  611.620882][ T9864] SQUASHFS error: Unable to read directory block [629:fe]
[  611.740905][    T7] usb 8-1: config 0 descriptor??
[  611.951954][    T7] usbhid 8-1:0.0: can't add hid device: -71
[  611.967382][    T7] usbhid: probe of 8-1:0.0 failed with error -71
[  611.986240][    T7] usb 8-1: USB disconnect, device number 24
[  612.293577][ T4481] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  612.303680][ T4332] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  613.273589][ T4332] usb 2-1: Using ep0 maxpacket: 8
[  613.275261][ T4481] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  613.293063][ T4332] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  613.332149][ T4332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.342842][ T4332] usb 2-1: Product: syz
[  613.354310][ T4481] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  613.358792][ T4332] usb 2-1: Manufacturer: syz
[  613.384049][ T4332] usb 2-1: SerialNumber: syz
[  613.415969][ T4332] usb 2-1: config 0 descriptor??
[  613.432131][ T4481] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.512508][ T4481] usb 5-1: config 0 descriptor??
[  613.576545][ T4481] pwc: Askey VC010 type 2 USB webcam detected.
[  613.644169][ T4332] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  613.964614][ T4481] pwc: recv_control_msg error -32 req 02 val 2b00
[  613.979960][ T4481] pwc: recv_control_msg error -32 req 02 val 2700
[  614.008145][ T4481] pwc: recv_control_msg error -32 req 02 val 2c00
[  614.034309][ T4481] pwc: recv_control_msg error -32 req 04 val 1000
[  614.077777][ T4481] pwc: recv_control_msg error -32 req 04 val 1300
[  614.117942][ T4481] pwc: recv_control_msg error -32 req 04 val 1400
[  614.135082][ T4481] pwc: recv_control_msg error -32 req 02 val 2000
[  614.223506][ T4482] usb 8-1: new full-speed USB device number 25 using dummy_hcd
[  614.350381][ T4481] pwc: recv_control_msg error -71 req 04 val 1500
[  614.362250][ T4481] pwc: recv_control_msg error -71 req 02 val 2500
[  614.399239][ T4481] pwc: recv_control_msg error -71 req 02 val 2400
[  614.436527][ T4482] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  614.449022][ T4481] pwc: recv_control_msg error -71 req 02 val 2600
[  614.496824][ T4482] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  614.507475][ T4481] pwc: recv_control_msg error -71 req 02 val 2900
[  614.518173][ T4481] pwc: recv_control_msg error -71 req 02 val 2800
[  614.526383][ T4482] usb 8-1: config 0 interface 0 has no altsetting 0
[  614.549032][ T4482] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  614.567832][ T4481] pwc: recv_control_msg error -71 req 04 val 1100
[  614.577912][ T4482] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  614.598193][ T4482] usb 8-1: Product: syz
[  614.598318][ T4481] pwc: recv_control_msg error -71 req 04 val 1200
[  614.618251][ T4482] usb 8-1: Manufacturer: syz
[  614.622986][ T4482] usb 8-1: SerialNumber: syz
[  614.645407][ T4481] pwc: Registered as video103.
[  614.674842][ T4482] usb 8-1: config 0 descriptor??
[  614.699319][ T4481] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24
[  614.732092][ T4482] usb 8-1: selecting invalid altsetting 0
[  614.793921][ T4481] usb 5-1: USB disconnect, device number 23
[  614.964705][ T4482] usb 8-1: USB disconnect, device number 25
[  615.037492][ T9900] overlayfs: missing 'workdir'
[  615.050536][ T4332] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  615.088530][ T4332] usb 2-1: USB disconnect, device number 25
[  615.263240][ T9904] device syzkaller0 entered promiscuous mode
[  618.358426][ T4332] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  618.443679][ T9937] device syzkaller0 entered promiscuous mode
[  618.583667][ T4332] usb 6-1: Using ep0 maxpacket: 16
[  618.595699][ T4332] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  618.611863][ T4332] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  618.632689][ T4332] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  618.659589][ T9944] tipc: Started in network mode
[  618.667626][ T4332] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  618.673478][ T9944] tipc: Node identity 8ab8b8b1667e, cluster identity 4711
[  618.697929][ T4332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.710524][ T4332] usb 6-1: Product: syz
[  618.719583][ T4332] usb 6-1: Manufacturer: syz
[  618.724416][ T9944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  618.733839][ T9943] device syzkaller0 entered promiscuous mode
[  618.783355][ T4332] usb 6-1: SerialNumber: syz
[  618.803641][ T4318] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  618.842245][ T9943] tipc: Resetting bearer <eth:syzkaller0>
[  618.873284][ T9941] tipc: Resetting bearer <eth:syzkaller0>
[  618.963033][ T9941] tipc: Disabling bearer <eth:syzkaller0>
[  619.003563][ T4318] usb 5-1: Using ep0 maxpacket: 8
[  619.012855][ T4318] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  619.062971][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.110650][ T4318] usb 5-1: Product: syz
[  619.148247][ T4318] usb 5-1: Manufacturer: syz
[  619.163225][ T4318] usb 5-1: SerialNumber: syz
[  619.209542][ T4318] usb 5-1: config 0 descriptor??
[  619.228309][ T4332] usb 6-1: 0:2 : does not exist
[  619.279496][ T9948] loop1: detected capacity change from 0 to 1024
[  619.334079][ T9948] EXT4-fs: Ignoring removed mblk_io_submit option
[  619.358549][ T9948] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  619.419983][ T4318] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  619.434755][ T9948] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.1292: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  619.498171][ T9948] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1292: couldn't read orphan inode 11 (err -117)
[  619.558897][ T9948] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  619.625405][ T9948] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1292: Invalid block bitmap block 0 in block_group 0
[  619.711008][ T9948] Quota error (device loop1): write_blk: dquota write failed
[  619.768442][ T9948] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  619.839160][ T9948] EXT4-fs error (device loop1): ext4_acquire_dquot:6809: comm syz.1.1292: Failed to acquire dquot type 0
[  620.162309][ T4268] EXT4-fs (loop1): unmounting filesystem.
[  620.252009][ T4332] usb 6-1: 1:0: failed to get current value for ch 0 (-22)
[  620.338200][ T4332] usb 6-1: USB disconnect, device number 22
[  620.463571][ T4481] usb 8-1: new full-speed USB device number 26 using dummy_hcd
[  620.666063][ T4481] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  620.698680][ T4481] usb 8-1: config 0 interface 0 has no altsetting 0
[  620.737004][ T4481] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  620.767154][ T4481] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  620.782578][ T4481] usb 8-1: Product: syz
[  620.791819][ T4481] usb 8-1: Manufacturer: syz
[  620.801377][ T4481] usb 8-1: SerialNumber: syz
[  620.824925][ T4481] usb 8-1: config 0 descriptor??
[  620.826385][ T4318] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[  620.872512][ T4481] usb 8-1: selecting invalid altsetting 0
[  620.904052][ T4318] usb 5-1: USB disconnect, device number 24
[  622.233746][ T9957] ==================================================================
[  622.241839][ T9957] BUG: KASAN: slab-out-of-bounds in copy_to_urb+0x21f/0x410
[  622.249127][ T9957] Write of size 264 at addr ffff888019305600 by task syz.7.1293/9957
[  622.257226][ T9957] 
[  622.259556][ T9957] CPU: 1 PID: 9957 Comm: syz.7.1293 Not tainted syzkaller #0
[  622.266919][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  622.276973][ T9957] Call Trace:
[  622.280252][ T9957]  <TASK>
[  622.283176][ T9957]  dump_stack_lvl+0x168/0x22e
[  622.287887][ T9957]  ? __lock_acquire+0x7c50/0x7c50
[  622.292930][ T9957]  ? show_regs_print_info+0x12/0x12
[  622.298151][ T9957]  ? load_image+0x3b0/0x3b0
[  622.302679][ T9957]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  622.308051][ T9957]  ? __virt_addr_valid+0x188/0x540
[  622.313175][ T9957]  ? __virt_addr_valid+0x465/0x540
[  622.318307][ T9957]  ? copy_to_urb+0x21f/0x410
[  622.322892][ T9957]  print_report+0xa8/0x210
[  622.327301][ T9957]  kasan_report+0x10b/0x140
[  622.331807][ T9957]  ? copy_to_urb+0x21f/0x410
[  622.336413][ T9957]  ? copy_to_urb+0x21f/0x410
[  622.341020][ T9957]  kasan_check_range+0x27b/0x290
[  622.345961][ T9957]  memcpy+0x3c/0x60
[  622.349776][ T9957]  copy_to_urb+0x21f/0x410
[  622.354194][ T9957]  prepare_playback_urb+0x912/0x1440
[  622.359486][ T9957]  snd_usb_endpoint_start+0x49c/0x1280
[  622.364946][ T9957]  ? snd_usb_endpoint_get_clock_rate+0x100/0x100
[  622.371273][ T9957]  ? __rwlock_init+0x140/0x140
[  622.376056][ T9957]  start_endpoints+0xa1/0x270
[  622.380735][ T9957]  ? snd_usb_substream_playback_trigger+0x3d9/0x7d0
[  622.387354][ T9957]  snd_usb_substream_playback_trigger+0x3eb/0x7d0
[  622.393767][ T9957]  snd_pcm_action+0xda/0x230
[  622.398358][ T9957]  __snd_pcm_lib_xfer+0x179f/0x1c70
[  622.403555][ T9957]  ? fill_silence+0x240/0x240
[  622.408228][ T9957]  ? __snd_pcm_lib_xfer+0x1c70/0x1c70
[  622.413599][ T9957]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  622.419228][ T9957]  ? resample_expand+0x7e0/0x860
[  622.424158][ T9957]  ? pcm_lib_apply_appl_ptr+0x540/0x540
[  622.429712][ T9957]  snd_pcm_oss_write3+0x1b8/0x310
[  622.434730][ T9957]  snd_pcm_plug_write_transfer+0x2b4/0x4a0
[  622.440546][ T9957]  ? snd_pcm_plug_client_channels_buf+0x600/0x600
[  622.446956][ T9957]  ? snd_pcm_plug_client_channels_buf+0x466/0x600
[  622.453371][ T9957]  snd_pcm_oss_write+0xbae/0x1110
[  622.458431][ T9957]  ? snd_pcm_oss_read+0x8b0/0x8b0
[  622.463455][ T9957]  ? end_current_label_crit_section+0x14b/0x170
[  622.469708][ T9957]  ? common_file_perm+0x171/0x1c0
[  622.474729][ T9957]  ? fsnotify_perm+0x5a/0x550
[  622.479397][ T9957]  ? security_file_permission+0x75/0xa0
[  622.484936][ T9957]  ? snd_pcm_oss_read+0x8b0/0x8b0
[  622.489952][ T9957]  vfs_write+0x2c4/0x960
[  622.494209][ T9957]  ? file_end_write+0x250/0x250
[  622.499074][ T9957]  ? __fget_files+0x28/0x4d0
[  622.503661][ T9957]  ? __fget_files+0x44a/0x4d0
[  622.508337][ T9957]  ? __fdget_pos+0x1d4/0x360
[  622.512923][ T9957]  ? ksys_write+0x71/0x240
[  622.517379][ T9957]  ksys_write+0x143/0x240
[  622.521710][ T9957]  ? __ia32_sys_read+0x80/0x80
[  622.526479][ T9957]  ? lockdep_hardirqs_on+0x94/0x140
[  622.531678][ T9957]  do_syscall_64+0x4c/0xa0
[  622.536102][ T9957]  ? clear_bhb_loop+0x60/0xb0
[  622.540770][ T9957]  ? clear_bhb_loop+0x60/0xb0
[  622.545444][ T9957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  622.551337][ T9957] RIP: 0033:0x7f52c038f749
[  622.555757][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  622.575357][ T9957] RSP: 002b:00007f52c12ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  622.583760][ T9957] RAX: ffffffffffffffda RBX: 00007f52c05e5fa0 RCX: 00007f52c038f749
[  622.591727][ T9957] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000004
[  622.599709][ T9957] RBP: 00007f52c0413f91 R08: 0000000000000000 R09: 0000000000000000
[  622.607673][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  622.615640][ T9957] R13: 00007f52c05e6038 R14: 00007f52c05e5fa0 R15: 00007ffe4f96c188
[  622.624147][ T9957]  </TASK>
[  622.627156][ T9957] 
[  622.629473][ T9957] Allocated by task 9957:
[  622.633783][ T9957]  kasan_set_track+0x4b/0x70
[  622.638367][ T9957]  __kasan_kmalloc+0x8e/0xa0
[  622.642951][ T9957]  __kmalloc+0xb0/0x240
[  622.647195][ T9957]  snd_usb_endpoint_set_params+0x16bb/0x2a50
[  622.653166][ T9957]  snd_usb_hw_params+0x123a/0x19b0
[  622.658294][ T9957]  snd_pcm_hw_params+0x829/0x1c50
[  622.663317][ T9957]  snd_pcm_oss_change_params_locked+0x222c/0x3ee0
[  622.669738][ T9957]  snd_pcm_oss_write+0x2f8/0x1110
[  622.674751][ T9957]  vfs_write+0x2c4/0x960
[  622.678997][ T9957]  ksys_write+0x143/0x240
[  622.683333][ T9957]  do_syscall_64+0x4c/0xa0
[  622.687740][ T9957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  622.693625][ T9957] 
[  622.695938][ T9957] Last potentially related work creation:
[  622.701640][ T9957]  kasan_save_stack+0x3a/0x60
[  622.706318][ T9957]  __kasan_record_aux_stack+0xb2/0xc0
[  622.711689][ T9957]  kvfree_call_rcu+0x108/0x870
[  622.716474][ T9957]  kernfs_unlink_open_file+0x413/0x4c0
[  622.721922][ T9957]  kernfs_fop_release+0x12a/0x190
[  622.726955][ T9957]  __fput+0x22c/0x920
[  622.730933][ T9957]  task_work_run+0x1ca/0x250
[  622.735536][ T9957]  exit_to_user_mode_loop+0xe6/0x110
[  622.740813][ T9957]  exit_to_user_mode_prepare+0xee/0x180
[  622.746365][ T9957]  syscall_exit_to_user_mode+0x16/0x40
[  622.751833][ T9957]  do_syscall_64+0x58/0xa0
[  622.756244][ T9957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  622.762260][ T9957] 
[  622.764574][ T9957] Second to last potentially related work creation:
[  622.771145][ T9957]  kasan_save_stack+0x3a/0x60
[  622.775837][ T9957]  __kasan_record_aux_stack+0xb2/0xc0
[  622.781201][ T9957]  kvfree_call_rcu+0x108/0x870
[  622.785962][ T9957]  kernfs_unlink_open_file+0x413/0x4c0
[  622.791414][ T9957]  kernfs_fop_release+0x12a/0x190
[  622.796429][ T9957]  __fput+0x22c/0x920
[  622.800395][ T9957]  task_work_run+0x1ca/0x250
[  622.804972][ T9957]  exit_to_user_mode_loop+0xe6/0x110
[  622.810249][ T9957]  exit_to_user_mode_prepare+0xee/0x180
[  622.815791][ T9957]  syscall_exit_to_user_mode+0x16/0x40
[  622.821249][ T9957]  do_syscall_64+0x58/0xa0
[  622.825657][ T9957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  622.831540][ T9957] 
[  622.833872][ T9957] The buggy address belongs to the object at ffff888019305600
[  622.833872][ T9957]  which belongs to the cache kmalloc-128 of size 128
[  622.847913][ T9957] The buggy address is located 0 bytes inside of
[  622.847913][ T9957]  128-byte region [ffff888019305600, ffff888019305680)
[  622.861015][ T9957] 
[  622.863330][ T9957] The buggy address belongs to the physical page:
[  622.869732][ T9957] page:ffffea000064c140 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x19305
[  622.879869][ T9957] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  622.887412][ T9957] raw: 00fff00000000200 ffffea0001e43c00 dead000000000004 ffff8880174418c0
[  622.895983][ T9957] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  622.904548][ T9957] page dumped because: kasan: bad access detected
[  622.910973][ T9957] page_owner tracks the page as allocated
[  622.916697][ T9957] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4473, tgid 4473 (udevd), ts 359169208562, free_ts 359168840710
[  622.934481][ T9957]  post_alloc_hook+0x173/0x1a0
[  622.939241][ T9957]  get_page_from_freelist+0x1a26/0x1ac0
[  622.944783][ T9957]  __alloc_pages+0x1df/0x4e0
[  622.949365][ T9957]  alloc_slab_page+0x5d/0x160
[  622.954050][ T9957]  new_slab+0x87/0x2c0
[  622.958130][ T9957]  ___slab_alloc+0xbc6/0x1230
[  622.962798][ T9957]  __kmem_cache_alloc_node+0x1a0/0x260
[  622.968269][ T9957]  kmalloc_trace+0x26/0xe0
[  622.972692][ T9957]  kernfs_fop_open+0x7d3/0xcc0
[  622.977452][ T9957]  do_dentry_open+0x7e9/0x10d0
[  622.982209][ T9957]  path_openat+0x25c6/0x2e70
[  622.986806][ T9957]  do_filp_open+0x1c1/0x3c0
[  622.991320][ T9957]  do_sys_openat2+0x142/0x490
[  622.995995][ T9957]  __x64_sys_openat+0x135/0x160
[  623.000843][ T9957]  do_syscall_64+0x4c/0xa0
[  623.005256][ T9957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  623.011143][ T9957] page last free stack trace:
[  623.015815][ T9957]  free_unref_page_prepare+0x8b4/0x9a0
[  623.021288][ T9957]  free_unref_page+0x2e/0x3f0
[  623.025966][ T9957]  __vunmap+0x856/0xa00
[  623.030112][ T9957]  free_work+0x56/0x80
[  623.034176][ T9957]  process_one_work+0x898/0x1160
[  623.039105][ T9957]  worker_thread+0xaa2/0x1250
[  623.043773][ T9957]  kthread+0x29d/0x330
[  623.047840][ T9957]  ret_from_fork+0x1f/0x30
[  623.052268][ T9957] 
[  623.054581][ T9957] Memory state around the buggy address:
[  623.060194][ T9957]  ffff888019305500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  623.068241][ T9957]  ffff888019305580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  623.076288][ T9957] >ffff888019305600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc
[  623.084334][ T9957]                                                                 ^
[  623.092296][ T9957]  ffff888019305680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  623.100345][ T9957]  ffff888019305700: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc
[  623.108393][ T9957] ==================================================================
[  623.116450][ T9957] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  623.123627][ T9957] CPU: 1 PID: 9957 Comm: syz.7.1293 Not tainted syzkaller #0
[  623.130988][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  623.141045][ T9957] Call Trace:
[  623.144329][ T9957]  <TASK>
[  623.147253][ T9957]  dump_stack_lvl+0x168/0x22e
[  623.151927][ T9957]  ? memcpy+0x3c/0x60
[  623.155912][ T9957]  ? show_regs_print_info+0x12/0x12
[  623.161104][ T9957]  ? load_image+0x3b0/0x3b0
[  623.165617][ T9957]  panic+0x2c9/0x710
[  623.169532][ T9957]  ? __lock_acquire+0x7c50/0x7c50
[  623.174557][ T9957]  ? bpf_jit_dump+0xd0/0xd0
[  623.179058][ T9957]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  623.184951][ T9957]  ? _raw_spin_unlock+0x40/0x40
[  623.189800][ T9957]  check_panic_on_warn+0x80/0xa0
[  623.194765][ T9957]  ? copy_to_urb+0x21f/0x410
[  623.199364][ T9957]  end_report+0x66/0x110
[  623.203605][ T9957]  kasan_report+0x118/0x140
[  623.208104][ T9957]  ? copy_to_urb+0x21f/0x410
[  623.212689][ T9957]  ? copy_to_urb+0x21f/0x410
[  623.217281][ T9957]  kasan_check_range+0x27b/0x290
[  623.222230][ T9957]  memcpy+0x3c/0x60
[  623.226037][ T9957]  copy_to_urb+0x21f/0x410
[  623.230456][ T9957]  prepare_playback_urb+0x912/0x1440
[  623.235748][ T9957]  snd_usb_endpoint_start+0x49c/0x1280
[  623.241205][ T9957]  ? snd_usb_endpoint_get_clock_rate+0x100/0x100
[  623.247550][ T9957]  ? __rwlock_init+0x140/0x140
[  623.252316][ T9957]  start_endpoints+0xa1/0x270
[  623.256998][ T9957]  ? snd_usb_substream_playback_trigger+0x3d9/0x7d0
[  623.263582][ T9957]  snd_usb_substream_playback_trigger+0x3eb/0x7d0
[  623.269989][ T9957]  snd_pcm_action+0xda/0x230
[  623.274585][ T9957]  __snd_pcm_lib_xfer+0x179f/0x1c70
[  623.279797][ T9957]  ? fill_silence+0x240/0x240
[  623.284469][ T9957]  ? __snd_pcm_lib_xfer+0x1c70/0x1c70
[  623.289834][ T9957]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  623.295461][ T9957]  ? resample_expand+0x7e0/0x860
[  623.300390][ T9957]  ? pcm_lib_apply_appl_ptr+0x540/0x540
[  623.305933][ T9957]  snd_pcm_oss_write3+0x1b8/0x310
[  623.310954][ T9957]  snd_pcm_plug_write_transfer+0x2b4/0x4a0
[  623.316757][ T9957]  ? snd_pcm_plug_client_channels_buf+0x600/0x600
[  623.323162][ T9957]  ? snd_pcm_plug_client_channels_buf+0x466/0x600
[  623.329594][ T9957]  snd_pcm_oss_write+0xbae/0x1110
[  623.334617][ T9957]  ? snd_pcm_oss_read+0x8b0/0x8b0
[  623.339632][ T9957]  ? end_current_label_crit_section+0x14b/0x170
[  623.345877][ T9957]  ? common_file_perm+0x171/0x1c0
[  623.350900][ T9957]  ? fsnotify_perm+0x5a/0x550
[  623.355578][ T9957]  ? security_file_permission+0x75/0xa0
[  623.361118][ T9957]  ? snd_pcm_oss_read+0x8b0/0x8b0
[  623.366139][ T9957]  vfs_write+0x2c4/0x960
[  623.370382][ T9957]  ? file_end_write+0x250/0x250
[  623.375230][ T9957]  ? __fget_files+0x28/0x4d0
[  623.379814][ T9957]  ? __fget_files+0x44a/0x4d0
[  623.384486][ T9957]  ? __fdget_pos+0x1d4/0x360
[  623.389089][ T9957]  ? ksys_write+0x71/0x240
[  623.393527][ T9957]  ksys_write+0x143/0x240
[  623.397872][ T9957]  ? __ia32_sys_read+0x80/0x80
[  623.402635][ T9957]  ? lockdep_hardirqs_on+0x94/0x140
[  623.407830][ T9957]  do_syscall_64+0x4c/0xa0
[  623.412236][ T9957]  ? clear_bhb_loop+0x60/0xb0
[  623.416904][ T9957]  ? clear_bhb_loop+0x60/0xb0
[  623.421573][ T9957]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  623.427462][ T9957] RIP: 0033:0x7f52c038f749
[  623.431864][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  623.451481][ T9957] RSP: 002b:00007f52c12ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  623.459978][ T9957] RAX: ffffffffffffffda RBX: 00007f52c05e5fa0 RCX: 00007f52c038f749
[  623.467944][ T9957] RDX: 00000000000005ce RSI: 0000200000000640 RDI: 0000000000000004
[  623.475907][ T9957] RBP: 00007f52c0413f91 R08: 0000000000000000 R09: 0000000000000000
[  623.483868][ T9957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  623.491828][ T9957] R13: 00007f52c05e6038 R14: 00007f52c05e5fa0 R15: 00007ffe4f96c188
[  623.499818][ T9957]  </TASK>
[  623.503190][ T9957] Kernel Offset: disabled
[  623.507522][ T9957] Rebooting in 86400 seconds..