last executing test programs:

16m10.514512852s ago: executing program 2 (id=133):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
ioctl$TCSETS(r1, 0x5402, 0x0)
gettid()
timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x204080, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB="000000000200"/19], 0x48)
memfd_create(&(0x7f0000000000)=',}*\x00', 0x3)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x18, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0)

16m8.948366397s ago: executing program 2 (id=139):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4073, 0xfe9}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000580)=""/176, 0xb0}], 0x5}, 0x0)

16m8.639775972s ago: executing program 2 (id=142):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x6}}, 0x0, 0x0, 0x9, 0x0, "f2f5752a41c9fb15d3b0447186b78c228f6d77b204ef1334aab4d5cc1654084b3806abacc530b5d2946c7cb666054664ec6b422ae3610be6ac0a2474bb1868d90f85d38095815028f41b55c815d378ff"}, 0xd8)
sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}}], 0x1, 0x20080058)

16m7.987899532s ago: executing program 2 (id=143):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

16m6.648320804s ago: executing program 2 (id=146):
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_open_dev$vim2m(0x0, 0x1, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

16m5.052778829s ago: executing program 2 (id=155):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00'}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r9, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7)
sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, r10, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @local, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c000)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

16m4.531580908s ago: executing program 32 (id=155):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00'}, 0x10)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60303, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
recvfrom(r1, 0x0, 0x0, 0x100, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r9, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7)
sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x60, r10, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @local, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c000)
r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

15m29.398424699s ago: executing program 5 (id=157):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

15m27.289723373s ago: executing program 5 (id=237):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
keyctl$clear(0x5, 0xffffffffffffffff)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
syz_usb_connect(0x6, 0x75, 0x0, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
prlimit64(r2, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f)
syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x100}})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

15m24.119590393s ago: executing program 5 (id=245):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000100)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
unlink(&(0x7f0000000240)='./file1\x00')
openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

15m21.671568443s ago: executing program 33 (id=245):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file1\x00', 0x0, &(0x7f0000000100)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
unlink(&(0x7f0000000240)='./file1\x00')
openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)

11m50.113857974s ago: executing program 6 (id=738):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r1, &(0x7f0000004980), 0x0, 0x2404c0c0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000100)={0x5b, 0xa, 0x0, "93bba551042af768810fa32fa3ccbaf1121823a6dc898168d8b3c3945d8636cf"})

11m48.899731294s ago: executing program 6 (id=740):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)

11m48.687568457s ago: executing program 6 (id=743):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1)

11m46.080656159s ago: executing program 6 (id=749):
syz_open_dev$usbfs(&(0x7f0000000080), 0x474a, 0x7092c1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

11m45.020416566s ago: executing program 6 (id=753):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40000, 0x0)
ioctl$TCSETS(r1, 0x5402, 0x0)
gettid()
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x204080, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYRES32, @ANYBLOB="000000000200"/19], 0x48)
memfd_create(&(0x7f0000000000)=',}*\x00', 0x3)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x18, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0)

11m44.286756927s ago: executing program 6 (id=755):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x4, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0x401, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x5, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0xd, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0xffffffff], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x8, 0x0, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x3, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x10000, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x10001, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x1000003, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4ecf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

11m29.224930788s ago: executing program 34 (id=755):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x4, 0xf3, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0x401, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x6, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x5, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x985, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0xd, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0xffffffff], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x8, 0x0, 0xff, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x47, 0x3, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0x10000, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x10001, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0xe47, 0x3, 0x1000003, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x800, 0x409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x8, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4ecf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

13.197185739s ago: executing program 4 (id=2641):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prlimit64(0x0, 0x7, &(0x7f0000001040)={0x3, 0x10}, 0x0)
socket$inet6(0xa, 0x1, 0x0)

9.387230119s ago: executing program 4 (id=2656):
syz_open_dev$usbfs(0x0, 0x474a, 0x7092c1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

8.171704429s ago: executing program 7 (id=2658):
r0 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "2e8aab9d", "5ce7cf31", ["1af0b58700", "bef6fd43cdafcbdc3b827f04", "33af343c60abc64f2fdc9ddf", "9f3842fc63849f62b6eb1c3c"]})
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1})
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000040)={0x2, 0xbe, 0x3, 0x9, 0x7fff, 0x3, "28398fb2dc13f8d8cbf3feb0854beb6e", 0xa, 0x8, 0x4, 0x2, 0x8, 0x2, 0x8})
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]})

6.85260306s ago: executing program 4 (id=2666):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prlimit64(0x0, 0x7, &(0x7f0000001040)={0x3, 0x10}, 0x0)
socket$inet6(0xa, 0x1, 0x0)

6.464679636s ago: executing program 7 (id=2669):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)

3.839800388s ago: executing program 3 (id=2675):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000), 0x0)

3.73042621s ago: executing program 3 (id=2677):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040))
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe0000000069108400000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
r5 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000006c0)={0x0, 0x0, '\x00', @raw_data=[0xf, 0x9, 0xfff, 0x9, 0x1e1, 0x9, 0x3, 0xe47, 0x1, 0x9, 0x1000, 0x3, 0x6, 0x7f, 0x4, 0x9, 0x2, 0xd, 0x6, 0x6, 0x4, 0x3cde, 0x7fffffff, 0x6, 0x5, 0xffffffff, 0x6, 0x8, 0x1eb, 0x7, 0x5, 0x9]})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

3.649477951s ago: executing program 0 (id=2678):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)

3.587022992s ago: executing program 3 (id=2679):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80)

3.443824745s ago: executing program 1 (id=2680):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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")
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000080)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@grpjquota}, {@norecovery}, {@noacl}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000006c0)={0x12000000000, 0x1013, 0x8, 0x2, 0x0, 0x8, 0xffffffffffffffff, 0x800003, 0x4040c405})

3.443249905s ago: executing program 0 (id=2681):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x1f, 0x0, 0xfd}}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x48010)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.158775619s ago: executing program 1 (id=2682):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
unshare(0x2040400)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x10)

3.09587009s ago: executing program 0 (id=2683):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x58f}], 0x1}}], 0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

2.966674912s ago: executing program 7 (id=2684):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xcf487000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x100)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000002080)=ANY=[@ANYBLOB='\v\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syz0\x00'/225], 0x143)
write$UHID_INPUT2(r3, &(0x7f0000000400), 0x6)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0xc001)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000200)="099af93975d137c0242d8090", 0xc}], 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@private2, 0x0, r6})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES64], 0x6c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)

2.899846994s ago: executing program 1 (id=2685):
syz_open_dev$usbfs(0x0, 0x474a, 0x7092c1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

2.271784703s ago: executing program 4 (id=2686):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket(0x1, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
io_uring_setup(0x6ece, &(0x7f00000001c0)={0x0, 0x8fff, 0x800, 0x1, 0x16e})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_io_uring_setup(0x17af, &(0x7f0000000380)={0x0, 0x0, 0x80}, 0x0, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20440, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f0000000700), &(0x7f0000000340)=@tcp=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x2e, &(0x7f0000000a80)=ANY=[], 0x0)

2.229272324s ago: executing program 3 (id=2687):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38)
r4 = socket$caif_seqpacket(0x25, 0x5, 0x5)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x40000, 0x0, 0xfffffffc, 0x238}, &(0x7f0000000380)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r4, 0x0})
io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0)
r8 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xdff9, 0x800, 0x1000}, &(0x7f0000000000)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2.071963587s ago: executing program 0 (id=2688):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204846, &(0x7f0000000040)=ANY=[@ANYBLOB='map=off,hide\x00iocharset=isn@0x000000000000005f,hide,sbsector=0x0000000000000007Asbsector=0x0000000000012000,iocharset=iso8859-2,session=0x0000000000000058,nojoliet,mode=0xfffffffffffffffe,utf8,cruft,mode=0x0000000000000002,check=relaxed,fscontext=system_u,fsname=s`sector,\x00'/286], 0xfa, 0x6bb, &(0x7f0000001f80)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0xffffffff000)

1.994461558s ago: executing program 7 (id=2689):
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101840, 0x0)
ioctl$RTC_AIE_ON(r1, 0x7001)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc47"], 0x398}}, 0x0)

1.597708334s ago: executing program 1 (id=2690):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040))
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe0000000069108400000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
r5 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2)
ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000006c0)={0x0, 0x0, '\x00', @raw_data=[0xf, 0x9, 0xfff, 0x9, 0x1e1, 0x9, 0x3, 0xe47, 0x1, 0x9, 0x1000, 0x3, 0x6, 0x7f, 0x4, 0x9, 0x2, 0xd, 0x6, 0x6, 0x4, 0x3cde, 0x7fffffff, 0x6, 0x5, 0xffffffff, 0x6, 0x8, 0x1eb, 0x7, 0x5, 0x9]})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x7a)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, 0x0, 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1.286963089s ago: executing program 0 (id=2691):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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", @ANYRES16=r4], 0x21c}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xf, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x4}, @printk={@x}, @exit]}, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x3e, &(0x7f0000000340)=""/62, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000900)=[r2, 0xffffffffffffffff, r4, r5], &(0x7f0000000940)=[{0x5, 0x2, 0xe, 0x3}, {0x4, 0x4, 0x10, 0x1}, {0x1, 0x4, 0xb, 0x9}, {0x1, 0x3, 0x8, 0x63733dbf9d6934db}, {0x1, 0x2, 0x3, 0x7}, {0x5, 0x3, 0x2, 0x2}], 0x10, 0x2}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.152677022s ago: executing program 3 (id=2692):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x2d)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x68, 0x0, 0x0, 0x19, 0x4, "faf98317e5b4140989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0091a7bdd8a0f3500", "32ffff26f7d31a74df2cfc06c89f3d9e234b30c50997d3bed109ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fc99a", "675237ff0700f1ff000000d81a8ca55a0f39c0180ec4dae4162e43ac61b7ad33", [0x2, 0xfffffffffffffffb]}})
sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52", 0x1e}], 0x1}, 0x24040050)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0109000000"])
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.136897872s ago: executing program 1 (id=2693):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=")
mkdir(0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x1000, 0x208000, 0x7a34})
r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r5, &(0x7f0000000300)=""/200, 0xc8)
r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_GET_TSC(0x43, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000340)=@mmap={0xfffffffe, 0x2, 0x4, 0x86048, 0x7, {0x77359400}, {0x1, 0x8, 0x4, 0x0, 0x7, 0x10, "06fbd3cd"}, 0x1f6, 0x1, {}, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x34324142}})

1.136514402s ago: executing program 7 (id=2694):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x90)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/4\x00')
fdatasync(r0)

1.061585193s ago: executing program 4 (id=2695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

915.818185ms ago: executing program 0 (id=2696):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prlimit64(0x0, 0x7, &(0x7f0000001040)={0x3, 0x10}, 0x0)
socket$inet6(0xa, 0x1, 0x0)

825.116907ms ago: executing program 3 (id=2697):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80)

799.307147ms ago: executing program 7 (id=2698):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)

461.931743ms ago: executing program 4 (id=2699):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)

0s ago: executing program 1 (id=2700):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x5, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xf, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x4}, @printk={@x}, @exit]}, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xc, 0x7, 0x43e64c37}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff], &(0x7f0000000940)=[{0x5, 0x2, 0xe, 0x3}, {0x4, 0x4, 0x10, 0x1}, {0x1, 0x4, 0xb, 0x9}, {0x1, 0x3, 0x8, 0x63733dbf9d6934db}, {0x1, 0x2, 0x3, 0x7}, {0x5, 0x3, 0x2, 0x2}], 0x10, 0x2}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
writev(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000a80)="7ebf080b7909dd0f60cbb6ab6b0e9d9ad12c06", 0x13}, {&(0x7f0000001400)="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", 0xc49}, {&(0x7f0000000b80)="01a061a7c7359332ffffbf785e17d4eb037799da8440059669aeb25dedebbaea6e5cca9f81eea26429b1009435f66f762c759e3d79b04dc4857fcb8a52010fc3f75cdeb7b6d5e9f97be5f637c383a8e97b943808b5bcc8151e412a27748b7c010288be15311fad8784f559b0fba7214b760404a4282a09a8241135720c180900dcbb2386da5d49c806a97069b7290c094efd62a33e35fe4259cc17285268", 0x9e}], 0x3)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

kernel console output (not intermixed with test programs):

ut
[  505.818486][ T4800] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  505.925002][ T9036] loop3: detected capacity change from 0 to 4096
[  505.983685][ T9036] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  506.020115][ T4800] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[  506.031423][ T9036] ntfs3: loop3: Failed to load $Extend.
[  506.044484][ T4800] usb 2-1: config 0 has no interface number 1
[  506.064615][ T4800] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  506.098483][ T4800] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  506.235999][ T4800] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  506.273602][ T4800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  506.294233][ T4800] usb 2-1: SerialNumber: syz
[  506.401821][ T4800] usb 2-1: config 0 descriptor??
[  507.201333][ T4800] usb 2-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  507.208883][ T4800] usb 2-1: No valid video chain found.
[  507.222621][ T4800] usb 2-1: USB disconnect, device number 8
[  507.708753][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'.
[  509.895424][ T9070] befs: (nullb0): invalid magic header
[  512.555274][ T9083] loop1: detected capacity change from 0 to 4096
[  512.611170][ T9087] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  512.640117][   T26] audit: type=1800 audit(1752842367.159:22): pid=9083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1091" name="file1" dev="loop1" ino=15 res=0 errno=0
[  512.775367][   T26] audit: type=1800 audit(1752842367.289:23): pid=9088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1091" name="file1" dev="loop1" ino=15 res=0 errno=0
[  513.342518][ T9094] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  515.698585][ T9112] loop1: detected capacity change from 0 to 16
[  515.727349][ T9118] loop7: detected capacity change from 0 to 16
[  515.728551][ T9112] erofs: (device loop1): mounted with root inode @ nid 36.
[  515.744295][ T9118] erofs: (device loop7): mounted with root inode @ nid 36.
[  516.830197][ T9116] loop4: detected capacity change from 0 to 262144
[  516.904319][ T9124] siw: device registration error -23
[  516.922433][ T9116] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.1101 (9116)
[  516.982977][ T9116] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  516.994884][ T9116] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  517.004406][ T9116] BTRFS info (device loop4): using free space tree
[  518.735890][ T9116] BTRFS error (device loop4): open_ctree failed: -22
[  518.940113][ T9149] bridge0: port 3(team0) entered blocking state
[  518.946403][ T9149] bridge0: port 3(team0) entered disabled state
[  518.953570][ T9149] device team0 entered promiscuous mode
[  518.959154][ T9149] device team_slave_0 entered promiscuous mode
[  518.965409][ T9149] device team_slave_1 entered promiscuous mode
[  518.971903][ T9149] bridge0: port 3(team0) entered blocking state
[  518.978171][ T9149] bridge0: port 3(team0) entered forwarding state
[  519.700081][ T9157] befs: (nullb0): invalid magic header
[  519.730368][ T8061] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 46
[  519.782942][ T8061] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  519.848024][ T8061] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  519.873157][ T4576] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by udevd (4576)
[  521.316593][ T9177] loop3: detected capacity change from 0 to 16
[  521.435185][ T9178] siw: device registration error -23
[  523.003740][ T9177] erofs: (device loop3): mounted with root inode @ nid 36.
[  523.808501][ T5008] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  523.814183][ T9187] loop3: detected capacity change from 0 to 512
[  523.832220][ T9187] ext4: Unknown parameter 'func'
[  523.989974][ T9191] loop7: detected capacity change from 0 to 16
[  524.119700][ T9191] erofs: (device loop7): mounted with root inode @ nid 36.
[  524.238444][ T5008] usb 2-1: Using ep0 maxpacket: 16
[  524.252034][ T5008] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  524.298388][ T5008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.316960][ T5008] usb 2-1: Product: syz
[  524.332105][ T5008] usb 2-1: Manufacturer: syz
[  524.340998][ T5008] usb 2-1: SerialNumber: syz
[  524.372193][ T5008] r8152-cfgselector 2-1: config 0 descriptor??
[  524.807731][ T5008] r8152-cfgselector 2-1: Unknown version 0x0000
[  524.819545][ T5008] r8152-cfgselector 2-1: bad CDC descriptors
[  524.862869][ T5008] r8152-cfgselector 2-1: Unknown version 0x0000
[  524.921981][ T5008] r8152-cfgselector 2-1: USB disconnect, device number 9
[  526.185467][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'.
[  527.195279][ T9230] siw: device registration error -23
[  527.587846][ T8061] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 46
[  527.879239][ T8061] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  527.959015][ T8061] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  528.276961][ T9242] loop4: detected capacity change from 0 to 512
[  528.330237][ T9242] ext4: Unknown parameter 'func'
[  530.249974][ T9261] befs: (nullb0): invalid magic header
[  532.152621][ T9281] siw: device registration error -23
[  534.159815][ T4285] Bluetooth: hci3: command 0x0406 tx timeout
[  534.443070][ T9290] loop4: detected capacity change from 0 to 256
[  535.524072][ T4377] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  536.197076][ T9302] befs: (nullb0): invalid magic header
[  536.737351][ T9316] loop7: detected capacity change from 0 to 16
[  536.852639][ T9316] erofs: (device loop7): mounted with root inode @ nid 36.
[  537.114267][ T9328] ubi31: detaching mtd0
[  537.943230][ T9328] ubi31: mtd0 is detached
[  538.091764][ T9324] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 46
[  538.175280][ T9332] siw: device registration error -23
[  542.021806][ T9359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1170'.
[  544.366849][ T9374] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  548.958112][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1185'.
[  556.158502][ T5008] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  557.249236][ T5008] usb 8-1: Using ep0 maxpacket: 8
[  557.283328][ T5008] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  557.420714][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'.
[  557.437594][ T5008] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  557.447179][ T5008] usb 8-1: New USB device found, idVendor=056a, idProduct=0002, bcdDevice= 0.00
[  557.457876][ T5008] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.521480][ T5008] usb 8-1: config 0 descriptor??
[  558.431599][ T9492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.459125][ T9492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.037630][ T9508] misc userio: The device must be registered before sending interrupts
[  560.853702][ T5882] usb 8-1: USB disconnect, device number 2
[  561.355144][ T9522] ubi31: attaching mtd0
[  561.360004][ T9522] ubi31: scanning is finished
[  561.378135][ T9522] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  561.386021][ T9522] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  561.393390][ T9522] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  561.400829][ T9522] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  561.408280][ T9522] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  561.415207][ T9522] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  561.423426][ T9522] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 382584535
[  561.433466][ T9522] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  561.448442][ T9524] ubi31: background thread "ubi_bgt31d" started, PID 9524
[  561.598555][ T5882] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  561.797001][ T5882] usb 8-1: config 0 has an invalid interface number: 199 but max is 1
[  561.818388][ T5882] usb 8-1: config 0 has no interface number 1
[  561.825234][ T5882] usb 8-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  561.908499][ T5882] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  562.025544][ T5882] usb 8-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  562.035100][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  562.043551][ T5882] usb 8-1: SerialNumber: syz
[  562.054355][ T5882] usb 8-1: config 0 descriptor??
[  562.067118][ T5882] usb 8-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  562.074505][ T5882] usb 8-1: No valid video chain found.
[  562.266720][ T4381] usb 8-1: USB disconnect, device number 3
[  562.382002][ T9538] loop4: detected capacity change from 0 to 16
[  562.456148][ T9538] erofs: (device loop4): mounted with root inode @ nid 36.
[  562.677367][ T4265] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  562.704131][ T4265] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  562.726266][ T9540] bond5 (unregistering): Released all slaves
[  562.733832][ T4265] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  562.802386][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  562.808925][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  563.027758][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'.
[  564.872863][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1236'.
[  565.243684][ T9576] loop3: detected capacity change from 0 to 40427
[  565.254743][ T9576] F2FS-fs (loop3): invalid crc value
[  565.302384][ T9576] F2FS-fs (loop3): Found nat_bits in checkpoint
[  565.326422][ T9576] F2FS-fs (loop3): Start checkpoint disabled!
[  565.344031][ T9576] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  566.391356][ T9591] loop1: detected capacity change from 0 to 16
[  566.500166][ T9591] erofs: (device loop1): mounted with root inode @ nid 36.
[  566.515627][ T4483] kworker/u4:13: attempt to access beyond end of device
[  566.515627][ T4483] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  566.723104][ T9598] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  567.203101][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'.
[  567.652560][ T9606] loop1: detected capacity change from 0 to 512
[  567.674731][ T9606] ext4: Unknown parameter 'func'
[  571.700070][ T9639] loop1: detected capacity change from 0 to 4096
[  571.837338][ T9639] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  571.898719][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1260'.
[  572.267749][ T9639] ntfs3: loop1: Failed to load $Extend.
[  572.300247][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'.
[  572.736343][ T9657] befs: (nullb0): invalid magic header
[  576.462153][ T9693] loop1: detected capacity change from 0 to 512
[  576.550378][ T9693] ext4: Unknown parameter 'func'
[  576.559410][ T9687] loop7: detected capacity change from 0 to 4096
[  576.612379][ T4377] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  577.040783][ T9702] loop4: detected capacity change from 0 to 512
[  577.055475][ T9687] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  577.067397][ T9702] ext4: Unknown parameter 'func'
[  577.643290][ T9687] ntfs3: loop7: Failed to load $Extend.
[  577.678835][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'.
[  577.715922][ T9707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1281'.
[  580.078734][ T4311] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  580.188286][ T9746] loop3: detected capacity change from 0 to 512
[  580.235069][ T9746] ext4: Unknown parameter 'func'
[  580.318462][ T4311] usb 2-1: Using ep0 maxpacket: 32
[  580.345644][ T4311] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  580.398906][ T4311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.407015][ T4311] usb 2-1: Product: syz
[  580.417291][ T4311] usb 2-1: Manufacturer: syz
[  580.427510][ T4311] usb 2-1: SerialNumber: syz
[  580.557952][ T4311] usb 2-1: config 0 descriptor??
[  582.071404][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'.
[  582.799176][ T4311] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate
[  582.858472][ T4311] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -110
[  583.518026][ T4311] usb 2-1: USB disconnect, device number 10
[  584.551532][ T9787] loop3: detected capacity change from 0 to 512
[  584.655770][ T9787] ext4: Unknown parameter 'func'
[  584.698547][    T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  584.988428][    T7] usb 2-1: Using ep0 maxpacket: 16
[  584.989236][ T9796] loop4: detected capacity change from 0 to 256
[  584.998043][    T7] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  585.029546][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.038094][    T7] usb 2-1: Product: syz
[  585.042690][    T7] usb 2-1: Manufacturer: syz
[  585.047617][    T7] usb 2-1: SerialNumber: syz
[  585.058809][    T7] r8152-cfgselector 2-1: config 0 descriptor??
[  585.170198][ T4576] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  585.909195][    T7] r8152-cfgselector 2-1: Unknown version 0x0000
[  585.920951][    T7] r8152-cfgselector 2-1: bad CDC descriptors
[  585.947924][    T7] r8152-cfgselector 2-1: Unknown version 0x0000
[  586.054181][ T9807] loop4: detected capacity change from 0 to 128
[  586.069135][ T9807] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  586.938104][    T7] r8152-cfgselector 2-1: USB disconnect, device number 11
[  590.250597][ T9847] loop1: detected capacity change from 0 to 512
[  591.831652][ T9847] ext4: Unknown parameter 'func'
[  591.989688][ T4377] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  592.778688][ T4800] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  593.008516][ T4800] usb 4-1: Using ep0 maxpacket: 16
[  593.023789][ T4800] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  593.053087][ T4800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.072116][ T4800] usb 4-1: Product: syz
[  593.079969][ T4800] usb 4-1: Manufacturer: syz
[  593.091890][ T4800] usb 4-1: SerialNumber: syz
[  593.106274][ T4800] r8152-cfgselector 4-1: config 0 descriptor??
[  593.534691][ T4800] r8152-cfgselector 4-1: Unknown version 0x0000
[  595.129409][ T4800] r8152-cfgselector 4-1: bad CDC descriptors
[  595.291040][ T4800] r8152-cfgselector 4-1: Unknown version 0x0000
[  595.303424][ T4800] r8152-cfgselector 4-1: USB disconnect, device number 6
[  597.933879][ T9926] loop1: detected capacity change from 0 to 2048
[  598.039455][ T9926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  599.207649][ T9946] loop7: detected capacity change from 0 to 16
[  599.239690][ T9946] erofs: (device loop7): mounted with root inode @ nid 36.
[  599.239977][ T4266] EXT4-fs (loop1): unmounting filesystem.
[  600.393517][ T8061] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 46
[  600.651598][ T9963] loop4: detected capacity change from 0 to 16
[  600.739179][ T8061] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  600.748036][ T9963] erofs: (device loop4): mounted with root inode @ nid 36.
[  600.758873][ T8061] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  600.955010][ T9966] loop1: detected capacity change from 0 to 256
[  601.706537][ T9963] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  601.716782][ T4576] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  604.950803][T10022] loop7: detected capacity change from 0 to 256
[  606.344739][T10046] ubi: mtd0 is already attached to ubi31
[  606.408567][ T4801] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  607.208539][ T4801] usb 1-1: Using ep0 maxpacket: 32
[  607.232223][ T4801] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  607.264885][ T4801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.280226][ T4801] usb 1-1: Product: syz
[  607.284437][ T4801] usb 1-1: Manufacturer: syz
[  607.296573][ T4801] usb 1-1: SerialNumber: syz
[  607.320405][ T4801] usb 1-1: config 0 descriptor??
[  609.234086][ T4801] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  609.257380][ T4801] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71
[  609.293484][ T4801] usb 1-1: USB disconnect, device number 8
[  609.616294][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'.
[  609.901896][T10080] loop7: detected capacity change from 0 to 256
[  610.187924][ T4377] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  612.038396][ T5008] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  612.041566][T10105] loop4: detected capacity change from 0 to 512
[  612.074637][T10105] EXT4-fs: Ignoring removed orlov option
[  612.100306][T10105] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  612.166170][T10105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  612.194286][T10105] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1397: corrupted in-inode xattr
[  612.218592][ T5008] usb 2-1: Using ep0 maxpacket: 16
[  612.229455][ T5008] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  612.267676][T10105] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1397: couldn't read orphan inode 15 (err -117)
[  612.298865][ T5008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.328513][ T5008] usb 2-1: Product: syz
[  612.332304][T10115] loop3: detected capacity change from 0 to 512
[  612.340069][T10105] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  612.348143][ T5008] usb 2-1: Manufacturer: syz
[  612.360992][ T5008] usb 2-1: SerialNumber: syz
[  612.369614][T10115] ext4: Unknown parameter 'func'
[  612.395659][ T5008] r8152-cfgselector 2-1: config 0 descriptor??
[  612.451478][ T4377] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  612.653622][ T5008] r8152-cfgselector 2-1: Unknown version 0x0000
[  612.667428][ T5008] r8152-cfgselector 2-1: Unknown version 0x0000
[  612.695529][ T5008] r8152-cfgselector 2-1: bad CDC descriptors
[  612.753863][ T5008] r8152-cfgselector 2-1: Unknown version 0x0000
[  612.791675][ T5008] r8152-cfgselector 2-1: USB disconnect, device number 12
[  614.430980][T10138] loop3: detected capacity change from 0 to 4096
[  614.511927][T10138] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  614.615637][T10138] ntfs3: loop3: Failed to load $Extend.
[  616.598555][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  616.682168][T10166] loop1: detected capacity change from 0 to 512
[  616.738050][T10166] ext4: Unknown parameter 'func'
[  617.219731][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1414'.
[  620.241299][T10199] loop4: detected capacity change from 0 to 512
[  620.261559][T10199] EXT4-fs: Ignoring removed orlov option
[  620.268137][T10199] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  620.287926][T10199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  620.328202][T10199] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.1422: corrupted in-inode xattr
[  620.355404][T10199] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1422: couldn't read orphan inode 15 (err -117)
[  620.372802][T10199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  624.241489][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  624.247895][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  624.274066][ T4311] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  624.618613][ T4311] usb 8-1: Using ep0 maxpacket: 16
[  624.628759][ T4311] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  624.646233][ T4311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.654884][ T4311] usb 8-1: Product: syz
[  624.660418][ T4311] usb 8-1: Manufacturer: syz
[  624.665452][ T4311] usb 8-1: SerialNumber: syz
[  624.689873][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  624.700509][ T4311] r8152-cfgselector 8-1: config 0 descriptor??
[  624.912181][ T4311] r8152-cfgselector 8-1: Unknown version 0x0000
[  624.918485][ T4800] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  624.931427][T10239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'.
[  624.945273][ T4311] r8152-cfgselector 8-1: Unknown version 0x0000
[  624.955010][ T4311] r8152-cfgselector 8-1: bad CDC descriptors
[  624.974531][ T4311] r8152-cfgselector 8-1: Unknown version 0x0000
[  625.000726][ T4311] r8152-cfgselector 8-1: USB disconnect, device number 4
[  625.068421][ T4800] usb 2-1: device descriptor read/64, error -71
[  625.368406][ T4800] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  625.436714][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1436'.
[  625.528464][ T4800] usb 2-1: device descriptor read/64, error -71
[  625.658510][ T4800] usb usb2-port1: attempt power cycle
[  626.078604][ T4800] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  626.119967][ T4800] usb 2-1: device descriptor read/8, error -71
[  626.398661][ T4800] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  626.440967][ T4800] usb 2-1: device descriptor read/8, error -71
[  626.489255][T10262] loop3: detected capacity change from 0 to 256
[  626.532932][ T4377] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  626.644811][ T4800] usb usb2-port1: unable to enumerate USB device
[  627.935038][T10283] bond5 (unregistering): Released all slaves
[  627.978471][ T5002] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  628.948429][ T5002] usb 4-1: Using ep0 maxpacket: 16
[  628.959000][ T5002] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  628.983689][ T5002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.001319][ T5002] usb 4-1: Product: syz
[  629.018480][ T5002] usb 4-1: Manufacturer: syz
[  629.055069][ T5002] usb 4-1: SerialNumber: syz
[  629.196851][ T5002] r8152-cfgselector 4-1: config 0 descriptor??
[  629.426828][ T5002] r8152-cfgselector 4-1: Unknown version 0x0000
[  629.447065][ T5002] r8152-cfgselector 4-1: Unknown version 0x0000
[  629.472052][ T5002] r8152-cfgselector 4-1: bad CDC descriptors
[  629.572430][ T5002] r8152-cfgselector 4-1: Unknown version 0x0000
[  629.626657][ T5002] r8152-cfgselector 4-1: USB disconnect, device number 7
[  630.676786][T10312] loop3: detected capacity change from 0 to 256
[  630.834733][ T4377] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  632.349086][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1467'.
[  633.881094][T10349] loop4: detected capacity change from 0 to 16
[  633.927695][T10355] loop7: detected capacity change from 0 to 256
[  633.948903][T10349] erofs: (device loop4): mounted with root inode @ nid 36.
[  634.175319][T10351] loop1: detected capacity change from 0 to 40427
[  634.209187][T10351] F2FS-fs (loop1): invalid crc value
[  634.227593][T10351] F2FS-fs (loop1): Found nat_bits in checkpoint
[  634.265305][T10351] F2FS-fs (loop1): Start checkpoint disabled!
[  634.633570][T10351] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  635.186552][ T4265] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  635.272983][ T4265] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  635.319581][ T4265] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  635.599066][ T4464] kworker/u4:12: attempt to access beyond end of device
[  635.599066][ T4464] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  635.975033][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'.
[  637.591907][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1489'.
[  637.896175][T10397] loop4: detected capacity change from 0 to 2048
[  640.595512][T10436] befs: (nullb0): invalid magic header
[  641.236384][T10445] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1504'.
[  642.458934][T10447] loop7: detected capacity change from 0 to 40427
[  642.510064][T10447] F2FS-fs (loop7): invalid crc value
[  642.519548][T10447] F2FS-fs (loop7): Found nat_bits in checkpoint
[  642.557693][T10447] F2FS-fs (loop7): Start checkpoint disabled!
[  642.565316][T10447] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  643.492841][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1507'.
[  643.535029][ T4464] kworker/u4:12: attempt to access beyond end of device
[  643.535029][ T4464] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  645.404969][T10478] loop1: detected capacity change from 0 to 16
[  645.458152][T10478] erofs: (device loop1): mounted with root inode @ nid 36.
[  645.532283][T10478] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  647.017618][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'.
[  652.043171][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1534'.
[  652.146043][T10535] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  652.225758][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1534'.
[  653.685036][T10557] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  654.743759][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'.
[  655.208555][ T5008] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  655.424723][ T5008] usb 5-1: config 0 has an invalid interface number: 199 but max is 1
[  655.434044][ T5008] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  655.444537][ T5008] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  655.459666][ T5008] usb 5-1: config 0 has no interface number 0
[  655.466201][ T5008] usb 5-1: config 0 interface 199 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  655.514360][ T5008] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  655.558377][ T5008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  655.577222][ T5008] usb 5-1: SerialNumber: syz
[  655.594969][ T5008] usb 5-1: config 0 descriptor??
[  656.088081][ T5008] usb 5-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  656.095386][ T5008] usb 5-1: No valid video chain found.
[  656.108942][ T5008] usb 5-1: USB disconnect, device number 7
[  658.088438][ T5008] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  658.378586][ T5008] usb 8-1: Using ep0 maxpacket: 32
[  658.416742][ T5008] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  658.456986][ T5008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.470245][ T5008] usb 8-1: Product: syz
[  658.490464][ T5008] usb 8-1: Manufacturer: syz
[  658.506817][ T5008] usb 8-1: SerialNumber: syz
[  658.538867][ T5008] usb 8-1: config 0 descriptor??
[  660.293763][T10628] befs: (nullb0): invalid magic header
[  660.338569][ T4800] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  660.529929][ T4800] usb 1-1: config 0 has an invalid interface number: 199 but max is 1
[  660.550130][ T4800] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  660.603752][ T4800] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  660.633442][ T4800] usb 1-1: config 0 has no interface number 0
[  660.651293][ T4800] usb 1-1: config 0 interface 199 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  660.662655][ T5008] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: failure sending bit rate
[  660.677563][ T4800] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  660.679541][ T5008] RobotFuzz Open Source InterFace, OSIF: probe of 8-1:0.0 failed with error -110
[  660.695968][ T4800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  660.695993][ T4800] usb 1-1: SerialNumber: syz
[  660.715785][ T4800] usb 1-1: config 0 descriptor??
[  661.193752][ T4800] usb 1-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  661.201651][ T4800] usb 1-1: No valid video chain found.
[  661.306079][ T5006] usb 8-1: USB disconnect, device number 5
[  661.396119][ T4800] usb 1-1: USB disconnect, device number 9
[  665.488593][ T4800] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  665.680350][ T4800] usb 2-1: Using ep0 maxpacket: 32
[  665.693625][ T4800] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  665.704837][ T4800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.716760][ T4800] usb 2-1: Product: syz
[  665.722016][ T4800] usb 2-1: Manufacturer: syz
[  665.726782][ T4800] usb 2-1: SerialNumber: syz
[  665.852499][ T4800] usb 2-1: config 0 descriptor??
[  668.489055][ T4800] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate
[  668.546193][ T4800] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -110
[  668.738599][ T4800] usb 2-1: USB disconnect, device number 17
[  669.290831][T10699] befs: (nullb0): invalid magic header
[  669.947044][T10694] loop3: detected capacity change from 0 to 40427
[  669.982317][T10694] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  669.994110][T10694] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  670.009569][T10694] F2FS-fs (loop3): invalid crc value
[  670.036152][T10694] F2FS-fs (loop3): Found nat_bits in checkpoint
[  670.141588][T10694] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  670.158495][T10694] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  672.953889][T10741] loop4: detected capacity change from 0 to 128
[  672.966780][T10741] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  674.328456][ T5006] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  674.415095][T10754] loop4: detected capacity change from 0 to 256
[  674.578414][ T5006] usb 1-1: Using ep0 maxpacket: 16
[  674.587285][ T5006] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  674.596656][ T5006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.606565][ T5006] usb 1-1: Product: syz
[  674.625680][ T5006] usb 1-1: Manufacturer: syz
[  674.643484][ T5006] usb 1-1: SerialNumber: syz
[  674.668769][ T5006] r8152-cfgselector 1-1: config 0 descriptor??
[  674.894984][ T5006] r8152-cfgselector 1-1: Unknown version 0x0000
[  675.095789][ T5006] r8152-cfgselector 1-1: Unknown version 0x0000
[  675.110489][ T5006] r8152-cfgselector 1-1: bad CDC descriptors
[  675.138437][ T5006] r8152-cfgselector 1-1: Unknown version 0x0000
[  675.198180][ T5006] r8152-cfgselector 1-1: USB disconnect, device number 10
[  675.498126][T10761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1606'.
[  675.619855][T10765] loop1: detected capacity change from 0 to 256
[  677.534313][T10792] loop3: detected capacity change from 0 to 512
[  677.582221][T10792] EXT4-fs: Ignoring removed orlov option
[  677.647452][T10792] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  677.690275][T10792] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  677.731214][T10792] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1618: corrupted in-inode xattr
[  677.882153][T10792] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1618: couldn't read orphan inode 15 (err -117)
[  677.895368][T10792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  678.552548][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  680.999591][ T5008] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  681.530207][ T5008] usb 1-1: config 0 has an invalid interface number: 199 but max is 1
[  681.544095][ T5008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  681.554492][ T5008] usb 1-1: config 0 has no interface number 1
[  681.566887][ T5008] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  681.584897][ T5008] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  681.594223][ T5008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  681.622667][ T5008] usb 1-1: SerialNumber: syz
[  681.698509][ T5008] usb 1-1: config 0 descriptor??
[  681.769363][ T5008] usb 1-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  681.776481][ T5008] usb 1-1: No valid video chain found.
[  682.078637][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1633'.
[  682.095512][ T4801] usb 1-1: USB disconnect, device number 11
[  682.232098][T10844] loop7: detected capacity change from 0 to 256
[  685.083436][ T4800] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  685.187336][T10847] loop3: detected capacity change from 0 to 32768
[  685.293816][T10847] read_mapping_page failed!
[  685.308587][ T4800] usb 2-1: Using ep0 maxpacket: 16
[  685.320588][ T4800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  685.348576][T10847] jfs_mount: diMount failed w/rc = -5
[  685.365473][T10847] Mount JFS Failure: -5
[  685.371793][ T4800] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  685.415157][ T4800] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  685.472669][ T4800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.535460][ T4800] usb 2-1: config 0 descriptor??
[  685.711998][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  686.022722][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  686.262203][ T4800] hid (null): invalid report_size 19609
[  686.453990][ T4800] usb 2-1: string descriptor 0 read error: -71
[  686.518536][ T4800] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  686.543875][ T4800] letsketch: probe of 0003:6161:4D15.0001 failed with error -32
[  686.660074][ T4800] usb 2-1: USB disconnect, device number 18
[  686.904622][T10890] loop3: detected capacity change from 0 to 512
[  686.980006][T10890] EXT4-fs: Ignoring removed orlov option
[  687.028378][T10890] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  687.141800][T10890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  687.165924][T10890] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1649: corrupted in-inode xattr
[  687.179490][T10890] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1649: couldn't read orphan inode 15 (err -117)
[  687.197214][T10890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  688.110571][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  688.390642][T10914] befs: (nullb0): invalid magic header
[  689.563888][T10920] autofs4:pid:10920:autofs_fill_super: called with bogus options
[  689.766609][T10927] bond11 (unregistering): Released all slaves
[  692.174913][T10950] loop4: detected capacity change from 0 to 512
[  692.209907][T10950] ext4: Unknown parameter 'func'
[  694.139966][T10972] autofs4:pid:10972:autofs_fill_super: called with bogus options
[  694.939232][T10988] befs: (nullb0): invalid magic header
[  696.224989][ T5006] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  696.867244][ T5006] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[  696.909413][T11000] bad cache= option: no%e
[  696.909413][T11000] 
[  696.916009][T11000] CIFS: VFS: bad cache= option: no%e
[  696.930792][ T4311] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  696.958269][ T5006] usb 4-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config
[  697.160811][ T4311] usb 1-1: Using ep0 maxpacket: 16
[  697.191764][ T5006] usb 4-1: config 0 has no interface number 1
[  697.207013][ T4311] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  697.335552][ T5006] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  697.469712][ T4311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  697.484018][ T5006] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  697.605667][ T5006] usb 4-1: string descriptor 0 read error: -71
[  697.612319][ T5006] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  697.621536][ T5006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  697.630072][ T4311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  697.641661][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.667561][ T5006] usb 4-1: config 0 descriptor??
[  697.676787][ T4311] usb 1-1: Product: syz
[  697.681384][ T5006] usb 4-1: can't set config #0, error -71
[  697.690889][ T4311] usb 1-1: Manufacturer: syz
[  697.710427][ T5006] usb 4-1: USB disconnect, device number 8
[  697.720310][ T4311] usb 1-1: SerialNumber: syz
[  698.264206][ T4311] usb 1-1: 0:2 : does not exist
[  698.284348][ T4311] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  698.388945][ T4311] usb 1-1: USB disconnect, device number 12
[  698.426133][T11013] autofs4:pid:11013:autofs_fill_super: called with bogus options
[  698.620290][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  699.151066][T11026] befs: (nullb0): invalid magic header
[  701.618559][ T4311] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  701.840970][ T4311] usb 8-1: config 0 has an invalid interface number: 199 but max is 1
[  701.850082][ T4311] usb 8-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config
[  701.861175][ T4311] usb 8-1: config 0 has no interface number 1
[  701.868427][ T4311] usb 8-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  701.878832][ T4311] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  701.904933][ T4311] usb 8-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  701.914972][ T4311] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  701.946239][ T4311] usb 8-1: SerialNumber: syz
[  701.953910][ T4311] usb 8-1: config 0 descriptor??
[  701.962286][ T4311] usb 8-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  701.969825][ T4311] usb 8-1: No valid video chain found.
[  702.083597][T11053] loop4: detected capacity change from 0 to 256
[  702.165661][    T7] usb 8-1: USB disconnect, device number 6
[  702.384607][T11056] autofs4:pid:11056:autofs_fill_super: called with bogus options
[  704.696141][T11075] loop7: detected capacity change from 0 to 2048
[  704.811594][T11071] befs: (nullb0): invalid magic header
[  705.628095][T11088] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1704'.
[  708.358460][    T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  708.552050][    T7] usb 1-1: config 0 has an invalid interface number: 199 but max is 1
[  708.574714][    T7] usb 1-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config
[  710.208765][    T7] usb 1-1: config 0 has no interface number 1
[  710.258397][    T7] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  710.377500][    T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  710.489198][    T7] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  710.516566][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  710.543879][    T7] usb 1-1: SerialNumber: syz
[  710.576199][    T7] usb 1-1: config 0 descriptor??
[  710.592250][    T7] usb 1-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  710.622254][    T7] usb 1-1: No valid video chain found.
[  710.855205][    T7] usb 1-1: USB disconnect, device number 13
[  712.525022][T11134] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1718'.
[  717.689001][    T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  718.234971][    T7] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[  718.269851][    T7] usb 2-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config
[  718.286944][T11174] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1732'.
[  718.322095][    T7] usb 2-1: config 0 has no interface number 1
[  718.343336][    T7] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  718.376731][    T7] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  718.422167][    T7] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  718.471983][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  718.523855][    T7] usb 2-1: SerialNumber: syz
[  718.548459][    T7] usb 2-1: config 0 descriptor??
[  718.584542][    T7] usb 2-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  718.608400][    T7] usb 2-1: No valid video chain found.
[  718.785724][    T7] usb 2-1: USB disconnect, device number 19
[  720.898023][T11201] loop3: detected capacity change from 0 to 128
[  720.910305][T11201] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  721.272630][T11203] rdma_op ffff88807e12b9f0 conn xmit_rdma 0000000000000000
[  724.342666][T11229] loop3: detected capacity change from 0 to 256
[  727.048693][ T5006] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  727.248466][ T5006] usb 8-1: Using ep0 maxpacket: 32
[  727.279643][ T5006] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  727.348524][ T5006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.364614][ T5006] usb 8-1: Product: syz
[  727.368978][ T5006] usb 8-1: Manufacturer: syz
[  727.373596][ T5006] usb 8-1: SerialNumber: syz
[  727.438476][ T5006] usb 8-1: config 0 descriptor??
[  729.654992][ T5006] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: failure sending bit rate
[  729.737435][ T5006] RobotFuzz Open Source InterFace, OSIF: probe of 8-1:0.0 failed with error -110
[  729.863124][ T5006] usb 8-1: USB disconnect, device number 7
[  732.583602][T11295] loop3: detected capacity change from 0 to 128
[  732.593189][T11295] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  734.825098][T11302] loop7: detected capacity change from 0 to 512
[  734.831666][ T4800] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  734.849423][T11302] ext4: Unknown parameter 'func'
[  734.885784][ T4377] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  735.048431][ T4800] usb 5-1: Using ep0 maxpacket: 16
[  735.060062][ T4800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  735.228552][ T4800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  735.238896][ T4800] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  735.249253][ T4800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.262370][ T4800] usb 5-1: config 0 descriptor??
[  735.855907][ T4800] usbhid 5-1:0.0: can't add hid device: -71
[  735.865685][ T4800] usbhid: probe of 5-1:0.0 failed with error -71
[  735.906289][ T4800] usb 5-1: USB disconnect, device number 8
[  736.238627][ T5006] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  737.048415][ T5006] usb 8-1: Using ep0 maxpacket: 32
[  737.286880][ T5006] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  737.305694][ T5006] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.502574][ T5006] usb 8-1: Product: syz
[  737.506946][ T5006] usb 8-1: Manufacturer: syz
[  737.514360][ T5006] usb 8-1: SerialNumber: syz
[  737.539923][ T5006] usb 8-1: config 0 descriptor??
[  738.728681][T11347] autofs4:pid:11347:autofs_fill_super: called with bogus options
[  739.426394][T11352] loop1: detected capacity change from 0 to 512
[  739.505373][T11352] ext4: Unknown parameter 'func'
[  739.608811][ T5006] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: failure sending bit rate
[  739.645121][ T5006] RobotFuzz Open Source InterFace, OSIF: probe of 8-1:0.0 failed with error -110
[  739.755925][ T5006] usb 8-1: USB disconnect, device number 8
[  740.551279][T11362] siw: device registration error -23
[  740.602741][ T4311] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  740.827669][ T4311] usb 8-1: Using ep0 maxpacket: 16
[  740.851310][ T4311] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  740.953403][ T4311] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  741.160578][ T4311] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  741.214024][ T4311] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.286668][ T4311] usb 8-1: config 0 descriptor??
[  742.574308][ T4311] usbhid 8-1:0.0: can't add hid device: -71
[  742.602122][ T4311] usbhid: probe of 8-1:0.0 failed with error -71
[  742.645083][ T4311] usb 8-1: USB disconnect, device number 9
[  743.576995][T11398] ubi: mtd0 is already attached to ubi31
[  744.837962][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'.
[  745.571597][T11406] siw: device registration error -23
[  746.661198][T11403] loop1: detected capacity change from 0 to 512
[  746.668051][T11403] ext4: Unknown parameter 'func'
[  747.196952][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  747.203375][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  747.565736][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'.
[  748.990334][T11439] ubi: mtd0 is already attached to ubi31
[  749.025069][ T5006] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  749.598509][ T5006] usb 4-1: Using ep0 maxpacket: 16
[  749.609875][ T5006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  749.655261][ T5006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  750.504299][ T5006] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  750.513708][ T5006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.532657][ T5006] usb 4-1: config 0 descriptor??
[  750.703018][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1815'.
[  751.014005][ T5006] usbhid 4-1:0.0: can't add hid device: -71
[  751.031315][ T5006] usbhid: probe of 4-1:0.0 failed with error -71
[  751.059117][ T5006] usb 4-1: USB disconnect, device number 9
[  751.167052][T11445] loop1: detected capacity change from 0 to 2048
[  751.236480][ T4577] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  751.969637][T11466] loop1: detected capacity change from 0 to 512
[  751.992620][T11466] ext4: Unknown parameter 'func'
[  753.809358][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1827'.
[  758.218603][ T4800] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  758.262700][T11509] loop3: detected capacity change from 0 to 2048
[  758.428645][ T4800] usb 1-1: Using ep0 maxpacket: 16
[  758.441799][ T4800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  758.507965][ T4800] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  758.579932][ T4800] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  758.594833][ T4800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.612267][ T4800] usb 1-1: config 0 descriptor??
[  758.888501][    T7] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  759.755609][ T4800] usb 1-1: string descriptor 0 read error: -71
[  759.769660][    T7] usb 8-1: Using ep0 maxpacket: 16
[  759.781256][    T7] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  759.791921][    T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.890742][ T4800] usb 1-1: Max retries (5) exceeded reading string descriptor 200
[  759.898709][    T7] usb 8-1: Product: syz
[  759.902900][    T7] usb 8-1: Manufacturer: syz
[  759.907508][    T7] usb 8-1: SerialNumber: syz
[  759.922897][ T4800] letsketch: probe of 0003:6161:4D15.0002 failed with error -32
[  759.978280][ T4800] usb 1-1: USB disconnect, device number 14
[  759.999908][    T7] r8152-cfgselector 8-1: config 0 descriptor??
[  760.847952][    T7] r8152-cfgselector 8-1: Unknown version 0x0000
[  761.057633][    T7] r8152-cfgselector 8-1: Unknown version 0x0000
[  761.101964][    T7] r8152-cfgselector 8-1: bad CDC descriptors
[  762.754736][    T7] r8152-cfgselector 8-1: Unknown version 0x0000
[  762.922361][    T7] r8152-cfgselector 8-1: USB disconnect, device number 10
[  762.936656][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'.
[  763.102960][T11542] loop7: detected capacity change from 0 to 512
[  763.183421][T11542] ext4: Unknown parameter 'func'
[  763.699942][T11553] loop1: detected capacity change from 0 to 16
[  763.960471][ T4377] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  763.997410][T11553] erofs: (device loop1): mounted with root inode @ nid 36.
[  764.562789][T11560] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  766.138444][    T7] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  766.338428][    T7] usb 8-1: Using ep0 maxpacket: 32
[  766.347919][    T7] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  766.371667][    T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.395490][    T7] usb 8-1: Product: syz
[  766.414592][    T7] usb 8-1: Manufacturer: syz
[  766.431668][    T7] usb 8-1: SerialNumber: syz
[  766.438622][ T4311] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  766.465397][    T7] usb 8-1: config 0 descriptor??
[  766.638503][ T4311] usb 5-1: Using ep0 maxpacket: 16
[  766.646044][ T4311] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  766.657477][ T4311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  766.677114][ T4311] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  767.345655][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.358494][ T4311] usb 5-1: Product: syz
[  767.367864][ T4311] usb 5-1: Manufacturer: syz
[  767.378459][ T4311] usb 5-1: SerialNumber: syz
[  767.609342][ T4311] usb 5-1: 0:2 : does not exist
[  767.619975][ T4311] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  767.644302][ T4311] usb 5-1: USB disconnect, device number 9
[  767.892239][ T4576] udevd[4576]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  768.558672][    T7] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: failure sending bit rate
[  769.348509][    T7] RobotFuzz Open Source InterFace, OSIF: probe of 8-1:0.0 failed with error -110
[  769.757040][ T4801] usb 8-1: USB disconnect, device number 11
[  769.882323][T11611] loop7: detected capacity change from 0 to 512
[  769.909448][T11611] EXT4-fs: Ignoring removed orlov option
[  769.928989][T11611] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  770.020802][T11609] loop3: detected capacity change from 0 to 2048
[  770.039345][T11611] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  770.329149][T11611] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.1864: corrupted in-inode xattr
[  770.391348][T11611] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1864: couldn't read orphan inode 15 (err -117)
[  770.455521][T11611] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  771.248651][ T8061] EXT4-fs (loop7): unmounting filesystem.
[  772.151825][T11632] loop7: detected capacity change from 0 to 16
[  772.209725][T11632] erofs: (device loop7): mounted with root inode @ nid 36.
[  774.118471][ T5008] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  774.328490][ T5008] usb 8-1: Using ep0 maxpacket: 32
[  774.353528][ T5008] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  775.312354][T11662] befs: (nullb0): invalid magic header
[  775.472521][ T5008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.480812][ T5008] usb 8-1: Product: syz
[  775.485339][ T5008] usb 8-1: Manufacturer: syz
[  775.500135][ T5008] usb 8-1: SerialNumber: syz
[  775.585665][ T5008] usb 8-1: config 0 descriptor??
[  777.223140][T11682] autofs4:pid:11682:autofs_fill_super: called with bogus options
[  777.808660][ T5008] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: failure sending bit rate
[  777.843638][ T5008] RobotFuzz Open Source InterFace, OSIF: probe of 8-1:0.0 failed with error -71
[  777.871156][ T5008] usb 8-1: USB disconnect, device number 12
[  779.454541][T11708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1887'.
[  780.008420][ T4311] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  780.718595][ T4311] usb 1-1: Using ep0 maxpacket: 16
[  780.741266][ T4311] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  780.752077][ T4311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  780.777443][ T4311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  780.789569][ T4311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.800305][ T4311] usb 1-1: Product: syz
[  780.804551][ T4311] usb 1-1: Manufacturer: syz
[  780.812128][ T4311] usb 1-1: SerialNumber: syz
[  781.131193][ T4311] usb 1-1: 0:2 : does not exist
[  781.139765][ T4311] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  781.267699][ T4311] usb 1-1: USB disconnect, device number 15
[  781.562268][T11732] autofs4:pid:11732:autofs_fill_super: called with bogus options
[  781.630699][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  781.738643][ T3597] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  783.133818][T11748] loop1: detected capacity change from 0 to 256
[  783.158510][ T3597] usb 5-1: Using ep0 maxpacket: 32
[  783.177695][T11747] loop3: detected capacity change from 0 to 2048
[  783.183338][ T3597] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  783.213888][ T3597] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  783.227926][ T3597] usb 5-1: Product: syz
[  783.232783][ T3597] usb 5-1: Manufacturer: syz
[  783.237728][ T3597] usb 5-1: SerialNumber: syz
[  783.252408][ T4377] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  783.253665][ T4576] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  783.419346][ T3597] usb 5-1: config 0 descriptor??
[  785.448569][ T3597] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate
[  785.499243][ T3597] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -110
[  785.787129][    T7] usb 5-1: USB disconnect, device number 10
[  786.568442][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'.
[  786.813468][T11783] loop3: detected capacity change from 0 to 128
[  786.823456][T11783] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  789.729279][T11803] loop7: detected capacity change from 0 to 256
[  792.458247][T11826] bond5 (unregistering): Released all slaves
[  793.050169][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1922'.
[  794.428628][T11845] befs: (nullb0): invalid magic header
[  796.131052][T11868] siw: device registration error -23
[  798.696270][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1935'.
[  799.343854][T11880] 8021q: adding VLAN 0 to HW filter on device bond12
[  799.354156][T11880] bond11: (slave bond12): Enslaving as an active interface with an up link
[  800.951662][T11910] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  801.165463][T11914] loop1: detected capacity change from 0 to 128
[  801.174780][T11914] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  808.560034][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  808.567003][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  810.595895][T11963] siw: device registration error -23
[  813.313002][    T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  813.885207][T11990] loop7: detected capacity change from 0 to 512
[  813.899513][T11990] ext4: Unknown parameter 'func'
[  813.998530][    T7] usb 5-1: Using ep0 maxpacket: 16
[  814.161950][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  814.349045][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  814.445405][    T7] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  814.505589][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.024592][    T7] usb 5-1: config 0 descriptor??
[  816.384453][    T7] usb 5-1: can't set config #0, error -71
[  816.392404][    T7] usb 5-1: USB disconnect, device number 11
[  816.595859][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1967'.
[  817.940638][T12009] bond13 (unregistering): Released all slaves
[  817.950524][T12019] siw: device registration error -23
[  821.092073][T12036] loop4: detected capacity change from 0 to 512
[  821.107549][T12036] ext4: Unknown parameter 'func'
[  821.913065][ T4377] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  822.593991][ T5006] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  823.388461][ T5006] usb 8-1: Using ep0 maxpacket: 16
[  823.395190][ T5006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  823.457293][ T5006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  823.511300][ T5006] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  823.675311][ T5006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.705872][ T5006] usb 8-1: config 0 descriptor??
[  824.698922][T12071] siw: device registration error -23
[  826.383940][ T5006] usbhid 8-1:0.0: can't add hid device: -71
[  826.398846][ T5006] usbhid: probe of 8-1:0.0 failed with error -71
[  826.413633][ T5006] usb 8-1: USB disconnect, device number 13
[  827.366750][T12083] ubi: mtd0 is already attached to ubi31
[  827.998444][ T4381] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  828.028058][T12102] loop1: detected capacity change from 0 to 128
[  828.037458][T12102] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  829.018679][ T4381] usb 1-1: Using ep0 maxpacket: 16
[  829.046180][ T4381] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  829.219726][ T4381] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  829.385361][ T4381] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  829.517179][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.694362][ T4381] usb 1-1: Product: syz
[  829.766203][ T4381] usb 1-1: Manufacturer: syz
[  829.933724][ T4381] usb 1-1: SerialNumber: syz
[  831.039955][ T4381] usb 1-1: can't set config #1, error -71
[  831.046850][ T4381] usb 1-1: USB disconnect, device number 16
[  831.478533][ T4798] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  831.684228][ T4798] usb 4-1: Using ep0 maxpacket: 32
[  831.932474][ T4798] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  832.007903][ T4798] usb 4-1: config 0 has no interface number 0
[  832.071931][ T4798] usb 4-1: config 0 interface 184 has no altsetting 0
[  832.283973][ T5006] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  832.336019][ T4798] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  832.391770][ T4798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.405807][T12135] loop4: detected capacity change from 0 to 256
[  832.420214][ T4798] usb 4-1: Product: syz
[  832.427548][ T4798] usb 4-1: Manufacturer: syz
[  832.460360][ T4798] usb 4-1: SerialNumber: syz
[  832.508488][ T5006] usb 8-1: Using ep0 maxpacket: 16
[  832.508626][ T4798] usb 4-1: config 0 descriptor??
[  832.515392][ T5006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  832.551145][ T4798] smsc75xx v1.0.0
[  832.557224][ T4798] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  832.587573][ T5006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  832.613891][ T4798] smsc75xx: probe of 4-1:0.184 failed with error -22
[  832.638290][ T5006] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  832.686860][ T5006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.727810][T12139] loop1: detected capacity change from 0 to 128
[  832.737616][T12139] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  834.287406][ T5006] usb 8-1: config 0 descriptor??
[  834.482627][ T5006] usb 8-1: can't set config #0, error -71
[  834.489800][ T5006] usb 8-1: USB disconnect, device number 14
[  834.543379][T12151] loop7: detected capacity change from 0 to 512
[  834.908207][T12151] ext4: Unknown parameter 'func'
[  837.185277][ T4801] usb 4-1: USB disconnect, device number 10
[  837.448575][ T4311] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  837.648485][ T4311] usb 8-1: Using ep0 maxpacket: 16
[  837.657547][ T4311] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  837.721851][ T4311] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  837.774542][ T4311] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  837.821835][ T4311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.880191][ T4311] usb 8-1: Product: syz
[  837.885318][ T4311] usb 8-1: Manufacturer: syz
[  837.893013][ T4311] usb 8-1: SerialNumber: syz
[  838.154344][ T4311] usb 8-1: 0:2 : does not exist
[  838.231468][ T4311] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  838.291782][ T4311] usb 8-1: USB disconnect, device number 15
[  839.433071][T12189] loop1: detected capacity change from 0 to 512
[  839.440503][T12189] ext4: Unknown parameter 'func'
[  839.448721][ T3597] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  839.483179][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  840.529015][ T3597] usb 5-1: Using ep0 maxpacket: 16
[  840.544373][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  840.555864][ T3597] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  840.566711][ T3597] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  840.576048][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.585969][ T3597] usb 5-1: config 0 descriptor??
[  840.973647][T12203] loop3: detected capacity change from 0 to 256
[  841.021068][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  841.028557][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  841.036894][ T3597] usbhid 5-1:0.0: can't add hid device: -71
[  841.043115][ T3597] usbhid: probe of 5-1:0.0 failed with error -71
[  841.355320][ T3597] usb 5-1: USB disconnect, device number 12
[  842.230075][T12223] befs: (nullb0): invalid magic header
[  843.259835][ T4798] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  843.294285][T12230] loop1: detected capacity change from 0 to 512
[  843.319782][T12230] ext4: Unknown parameter 'func'
[  843.778502][ T4798] usb 5-1: Using ep0 maxpacket: 32
[  843.791319][ T4798] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  843.891707][ T4798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.899902][ T4798] usb 5-1: Product: syz
[  843.904454][ T4798] usb 5-1: Manufacturer: syz
[  843.909312][ T4798] usb 5-1: SerialNumber: syz
[  843.916034][ T4798] usb 5-1: config 0 descriptor??
[  845.993979][ T4798] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: failure sending bit rate
[  846.004663][ T4798] RobotFuzz Open Source InterFace, OSIF: probe of 5-1:0.0 failed with error -71
[  846.022107][ T4798] usb 5-1: USB disconnect, device number 13
[  849.209977][T12284] loop4: detected capacity change from 0 to 512
[  849.219243][T12284] ext4: Unknown parameter 'func'
[  849.737439][T12294] loop3: detected capacity change from 0 to 128
[  849.747631][T12294] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  851.834425][T12301] loop4: detected capacity change from 0 to 512
[  851.866498][T12301] ext4: Unknown parameter 'func'
[  852.405054][T12310] siw: device registration error -23
[  852.558877][ T3597] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  854.128550][ T3597] usb 1-1: Using ep0 maxpacket: 32
[  854.138214][ T3597] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  854.192445][ T3597] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.076001][ T3597] usb 1-1: Product: syz
[  855.082441][ T3597] usb 1-1: Manufacturer: syz
[  855.087160][ T3597] usb 1-1: SerialNumber: syz
[  855.097332][ T3597] usb 1-1: config 0 descriptor??
[  855.416961][ T3597] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  855.431926][ T3597] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71
[  855.634918][ T3597] usb 1-1: USB disconnect, device number 17
[  856.527256][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'.
[  857.636329][T12343] capability: warning: `syz.7.2058' uses deprecated v2 capabilities in a way that may be insecure
[  860.219152][ T3597] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  860.458425][ T3597] usb 2-1: Using ep0 maxpacket: 32
[  860.467663][ T3597] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  860.517166][ T3597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.555135][   T26] audit: type=1326 audit(1752842715.069:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.0.2063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f801478e9a9 code=0x0
[  860.598953][ T3597] usb 2-1: Product: syz
[  860.603164][ T3597] usb 2-1: Manufacturer: syz
[  860.630839][ T3597] usb 2-1: SerialNumber: syz
[  860.656053][ T3597] usb 2-1: config 0 descriptor??
[  861.017821][ T3597] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate
[  861.036880][ T3597] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71
[  861.072839][ T3597] usb 2-1: USB disconnect, device number 20
[  861.078821][ T5006] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  861.371995][ T5006] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  861.413052][ T5006] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  862.059030][ T5006] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  862.068055][ T5006] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  862.194418][ T5006] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024
[  862.218556][ T5006] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  862.220042][T12382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2070'.
[  862.227611][ T5006] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  862.227635][ T5006] usb 4-1: Product: syz
[  862.227648][ T5006] usb 4-1: Manufacturer: syz
[  862.278126][T12369] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  862.296422][ T5006] cdc_wdm 4-1:1.0: skipping garbage
[  862.304311][ T5006] cdc_wdm 4-1:1.0: skipping garbage
[  862.372092][ T5006] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  862.386227][ T5006] cdc_wdm 4-1:1.0: Unknown control protocol
[  862.516269][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  862.523150][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  862.531082][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  862.537715][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  862.559115][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  862.565790][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  862.576110][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  862.582752][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  862.589713][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  862.596348][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  862.604741][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  862.611374][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  862.643418][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  862.650076][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  862.661424][ T4801] usb 4-1: USB disconnect, device number 11
[  864.996742][T12408] befs: (nullb0): invalid magic header
[  867.398601][ T4798] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  867.586948][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2082'.
[  867.688437][ T4798] usb 2-1: Using ep0 maxpacket: 32
[  868.049813][ T4798] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  868.087873][ T4798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.098276][T12432] loop4: detected capacity change from 0 to 512
[  868.106170][ T4798] usb 2-1: Product: syz
[  868.111777][ T4798] usb 2-1: Manufacturer: syz
[  868.116464][ T4798] usb 2-1: SerialNumber: syz
[  868.128624][ T4798] usb 2-1: config 0 descriptor??
[  868.139394][T12432] EXT4-fs: Ignoring removed orlov option
[  868.173482][T12432] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  868.220309][T12432] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  868.254409][T12432] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.2083: corrupted in-inode xattr
[  868.724923][T12432] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.2083: couldn't read orphan inode 15 (err -117)
[  868.869130][T12432] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  868.934991][ T4798] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate
[  868.985901][ T4798] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -71
[  869.007889][ T4798] usb 2-1: USB disconnect, device number 21
[  869.301573][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2086'.
[  870.063763][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  870.084263][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  871.404622][T12465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2090'.
[  871.812610][T12463] loop3: detected capacity change from 0 to 512
[  871.964682][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  872.144153][T12463] ext4: Unknown parameter 'func'
[  873.268678][ T3597] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  873.670062][ T3597] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  873.756205][ T3597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.777282][ T3597] usb 2-1: config 0 descriptor??
[  874.272151][ T5006] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  874.283191][ T3597] [drm:udl_init] *ERROR* Selecting channel failed
[  874.315122][ T3597] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  874.322698][ T3597] [drm] Initialized udl on minor 2
[  874.333702][ T3597] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  875.070987][ T3597] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  875.082410][ T3597] usb 2-1: USB disconnect, device number 22
[  875.099298][ T5002] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  875.110997][ T5002] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  875.127183][ T5002] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  875.158424][ T5006] usb 1-1: Using ep0 maxpacket: 32
[  875.168163][ T5006] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  875.211503][ T5006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.262691][ T5006] usb 1-1: Product: syz
[  875.267090][ T5006] usb 1-1: Manufacturer: syz
[  875.277822][ T5006] usb 1-1: SerialNumber: syz
[  875.300164][ T5006] usb 1-1: config 0 descriptor??
[  875.368374][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2099'.
[  875.735948][ T5006] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  875.745114][ T5006] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71
[  875.792359][ T5006] usb 1-1: USB disconnect, device number 18
[  878.304258][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2106'.
[  880.301181][T12547] siw: device registration error -23
[  884.713375][ T4381] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  886.418500][ T4381] usb 2-1: Using ep0 maxpacket: 16
[  886.429107][ T4381] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  886.464340][ T4381] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  886.503384][ T4381] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  886.529406][ T4381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  886.547777][ T4381] usb 2-1: Product: syz
[  886.580017][T12584] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2122'.
[  886.594292][ T4381] usb 2-1: Manufacturer: syz
[  886.601358][ T4381] usb 2-1: SerialNumber: syz
[  886.660494][T12584] bond3 (unregistering): Released all slaves
[  886.834615][ T4381] usb 2-1: 0:2 : does not exist
[  886.899388][ T4381] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  887.394769][ T4381] usb 2-1: USB disconnect, device number 23
[  887.716500][T12595] siw: device registration error -23
[  887.757639][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  889.788092][T12601] IPVS: length: 139 != 8
[  894.470460][T12643] siw: device registration error -23
[  900.423053][T12673] loop3: detected capacity change from 0 to 256
[  900.513350][ T4377] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  901.970357][T12687] loop7: detected capacity change from 0 to 128
[  901.983535][T12687] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[  902.063507][ T4377] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  907.462109][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'.
[  907.919851][ T4801] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  908.258617][ T4801] usb 5-1: Using ep0 maxpacket: 8
[  908.270141][ T4801] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  909.002646][ T4801] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  909.080608][ T4801] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  909.121407][ T4801] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  909.147835][ T4801] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  909.959865][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2163'.
[  909.970223][ T4801] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  909.979797][ T4801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.178113][ T4801] usb 5-1: can't set config #16, error -71
[  910.201844][ T4801] usb 5-1: USB disconnect, device number 14
[  911.808654][ T3597] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  911.836801][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2169'.
[  912.133315][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2169'.
[  912.148459][T12764] netlink: 'syz.7.2169': attribute type 14 has an invalid length.
[  912.156469][T12764] netlink: 'syz.7.2169': attribute type 12 has an invalid length.
[  912.238687][ T3597] usb 2-1: Using ep0 maxpacket: 32
[  912.255025][ T3597] usb 2-1: config 0 has an invalid interface number: 74 but max is 1
[  912.333647][ T3597] usb 2-1: config 0 has no interface number 1
[  913.226259][ T3597] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  913.276843][ T3597] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.291631][ T3597] usb 2-1: Product: syz
[  913.324097][ T3597] usb 2-1: Manufacturer: syz
[  913.334834][ T3597] usb 2-1: SerialNumber: syz
[  913.384405][ T3597] usb 2-1: config 0 descriptor??
[  913.498313][T12778] loop7: detected capacity change from 0 to 256
[  913.614685][ T4576] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  913.995859][ T3597] snd-usb-audio: probe of 2-1:0.74 failed with error -22
[  914.074753][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  914.102506][ T3597] usb 2-1: USB disconnect, device number 24
[  917.602377][T12818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2181'.
[  918.447353][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2185'.
[  918.565933][T12825] bond5 (unregistering): Released all slaves
[  919.616751][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'.
[  922.049337][T12839] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2189'.
[  925.690276][T12878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2199'.
[  926.941845][T12891] loop1: detected capacity change from 0 to 16
[  926.963330][T12891] erofs: (device loop1): mounted with root inode @ nid 36.
[  927.057582][T12891] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  927.134366][T12895] xt_hashlimit: max too large, truncated to 1048576
[  927.768596][T12903] fuse: Unknown parameter '00000000000000000000'
[  929.898398][ T3597] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  929.990336][    C1] raw-gadget.1 gadget.7: ignoring, device is not running
[  930.061303][ T4798] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  930.148892][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'.
[  930.158533][ T3597] usb 8-1: device descriptor read/64, error -32
[  930.428599][ T3597] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  930.588721][ T4798] usb 2-1: Using ep0 maxpacket: 16
[  930.605427][ T4798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  930.619196][ T4798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  930.626503][ T3597] usb 8-1: Using ep0 maxpacket: 8
[  930.635384][ T4798] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  930.656236][ T4798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.669337][ T3597] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  930.673881][ T4798] usb 2-1: config 0 descriptor??
[  930.688047][ T3597] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.713436][ T3597] usb 8-1: config 0 descriptor??
[  931.298949][ T4798] usbhid 2-1:0.0: can't add hid device: -71
[  931.340730][ T4798] usbhid: probe of 2-1:0.0 failed with error -71
[  931.438157][ T4798] usb 2-1: USB disconnect, device number 25
[  931.440292][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  931.446498][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  931.595273][ T3597] usb 8-1: USB disconnect, device number 17
[  933.259747][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'.
[  933.998272][T12969] loop4: detected capacity change from 0 to 128
[  934.107661][T12969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  934.119364][T12969] ext4 filesystem being mounted at /474/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  935.145806][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  935.458483][ T5006] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  935.494474][T12997] loop4: detected capacity change from 0 to 2048
[  935.531245][T13004] loop7: detected capacity change from 0 to 256
[  935.567090][T12997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  935.620834][ T4576] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  935.648581][ T5006] usb 4-1: Using ep0 maxpacket: 16
[  935.656030][ T5006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  935.678768][ T5006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  935.688836][ T5006] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  935.698030][ T5006] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  935.869142][ T5006] usb 4-1: config 0 descriptor??
[  936.929212][T13013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2240'.
[  937.332859][ T5006] usbhid 4-1:0.0: can't add hid device: -71
[  937.339815][ T5006] usbhid: probe of 4-1:0.0 failed with error -71
[  937.383619][ T5006] usb 4-1: USB disconnect, device number 12
[  937.508527][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  940.328914][T13046] loop4: detected capacity change from 0 to 16
[  940.437367][T13046] erofs: (device loop4): mounted with root inode @ nid 36.
[  940.511284][T13054] loop7: detected capacity change from 0 to 2048
[  940.639654][T13056] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  941.093781][T13054] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  941.406480][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'.
[  942.150905][ T8061] EXT4-fs (loop7): unmounting filesystem.
[  943.285434][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  944.879716][T13076] batman_adv: batadv0: Removing interface: batadv_slave_0
[  944.899369][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  944.918840][T13076] batman_adv: batadv0: Removing interface: batadv_slave_1
[  945.947071][T13094] loop4: detected capacity change from 0 to 256
[  947.305672][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2266'.
[  947.689103][T13110] loop7: detected capacity change from 0 to 16
[  947.726976][T13110] erofs: (device loop7): mounted with root inode @ nid 36.
[  947.958889][ T5002] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  948.078842][T13115] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 46
[  948.169354][ T5002] usb 1-1: Using ep0 maxpacket: 32
[  948.345645][ T5002] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  948.365093][ T5002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.359360][ T5002] usb 1-1: Product: syz
[  949.363667][ T5002] usb 1-1: Manufacturer: syz
[  949.368483][ T5002] usb 1-1: SerialNumber: syz
[  949.378724][ T5002] usb 1-1: config 0 descriptor??
[  951.747620][ T5002] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate
[  951.760392][ T5002] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -110
[  953.926261][T13146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'.
[  955.257520][T13167] loop3: detected capacity change from 0 to 16
[  956.191149][T13167] erofs: (device loop3): mounted with root inode @ nid 36.
[  956.218433][T12931] usb 1-1: USB disconnect, device number 19
[  956.400764][T13170] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46
[  959.133810][T13189] loop3: detected capacity change from 0 to 512
[  959.141101][T13189] ext4: Unknown parameter 'func'
[  959.218490][ T4800] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  959.319832][ T4377] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  959.505361][ T4800] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  960.018405][ T4800] usb 1-1: config 0 interface 0 has no altsetting 0
[  960.036375][ T4800] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  960.047753][ T4800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.134084][ T4800] usb 1-1: config 0 descriptor??
[  961.251146][ T4800] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0
[  961.278607][ T4800] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0
[  961.306376][ T4800] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0
[  961.428425][ T4800] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0
[  961.448919][T13205] loop1: detected capacity change from 0 to 256
[  961.469534][ T4800] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0
[  961.910700][ T4800] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0
[  962.057369][ T4800] magicmouse 0003:05AC:0269.0003: unknown main item tag 0x0
[  962.268565][ T4800] magicmouse 0003:05AC:0269.0003: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0
[  962.344286][ T4800] usb 1-1: USB disconnect, device number 20
[  962.400817][T13212] loop4: detected capacity change from 0 to 16
[  962.950024][T13212] erofs: (device loop4): mounted with root inode @ nid 36.
[  963.783060][T13217] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  965.028540][T13216] fido_id[13216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  965.461684][ T5002] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  965.748477][ T5002] usb 5-1: Using ep0 maxpacket: 16
[  965.756487][ T5002] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  965.767400][ T5002] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  966.571081][ T5002] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  966.607962][ T5002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.643390][ T5002] usb 5-1: Product: syz
[  966.661593][T13253] loop7: detected capacity change from 0 to 512
[  966.686034][T13253] ext4: Unknown parameter 'func'
[  966.771207][ T5002] usb 5-1: Manufacturer: syz
[  966.781853][ T5002] usb 5-1: SerialNumber: syz
[  966.830115][ T4377] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  967.105187][ T5002] usb 5-1: 0:2 : does not exist
[  967.125393][ T5002] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  967.171462][ T5002] usb 5-1: USB disconnect, device number 15
[  967.409721][ T4576] udevd[4576]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  967.563916][T13258] loop1: detected capacity change from 0 to 16
[  967.606805][T13258] erofs: (device loop1): mounted with root inode @ nid 36.
[  967.849152][T13261] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  968.863242][T13266] loop4: detected capacity change from 0 to 2048
[  968.962630][T13266] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  969.323061][T13273] befs: (nullb0): invalid magic header
[  970.112132][T13282] loop3: detected capacity change from 0 to 256
[  970.510745][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  973.639386][T13303] loop1: detected capacity change from 0 to 512
[  973.650721][T13303] ext4: Unknown parameter 'func'
[  975.157347][T13341] befs: (nullb0): invalid magic header
[  975.474748][T13346] loop1: detected capacity change from 0 to 256
[  976.512960][T13356] loop3: detected capacity change from 0 to 64
[  977.825499][T13369] loop3: detected capacity change from 0 to 512
[  977.869864][T13369] ext4: Unknown parameter 'func'
[  978.253953][T13373] loop4: detected capacity change from 0 to 16
[  978.298608][T13373] erofs: (device loop4): mounted with root inode @ nid 36.
[  978.522826][T13375] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  979.338431][ T4800] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  980.588457][ T4800] usb 4-1: Using ep0 maxpacket: 16
[  980.626122][ T4800] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  980.727188][ T4800] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  980.755112][ T4800] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  980.782687][ T4800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.797481][ T4800] usb 4-1: Product: syz
[  981.522085][ T4800] usb 4-1: Manufacturer: syz
[  981.526744][ T4800] usb 4-1: SerialNumber: syz
[  982.614675][ T4800] usb 4-1: 0:2 : does not exist
[  983.001748][ T4800] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  983.158642][ T4800] usb 4-1: USB disconnect, device number 13
[  985.836109][T13438] loop7: detected capacity change from 0 to 8192
[  987.040588][T13457] ubi: mtd0 is already attached to ubi31
[  987.858499][T12931] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  988.408568][T12931] usb 2-1: Using ep0 maxpacket: 16
[  988.415829][T12931] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  988.522627][T12931] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  988.574256][T12931] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  988.608155][T12931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.646752][T12931] usb 2-1: Product: syz
[  988.716225][T12931] usb 2-1: Manufacturer: syz
[  988.863988][T12931] usb 2-1: SerialNumber: syz
[  989.339320][T12931] usb 2-1: 0:2 : does not exist
[  989.352511][T12931] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  989.394168][T13485] loop3: detected capacity change from 0 to 512
[  989.478520][T13485] ext4: Unknown parameter 'func'
[  989.738624][T12931] usb 2-1: USB disconnect, device number 26
[  990.549978][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  992.873261][T13528] loop4: detected capacity change from 0 to 512
[  992.882389][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  992.882434][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  993.930756][T13528] ext4: Unknown parameter 'func'
[  994.027802][ T4377] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  997.071902][T13548] loop4: detected capacity change from 0 to 2048
[  997.146765][T13548] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  997.942583][ T4265] EXT4-fs (loop4): unmounting filesystem.
[  998.507203][T13568] ubi: mtd0 is already attached to ubi31
[  998.603497][T13571] loop1: detected capacity change from 0 to 512
[  998.782389][T13571] ext4: Unknown parameter 'func'
[ 1001.712108][T13611] loop7: detected capacity change from 0 to 2048
[ 1002.557819][T13611] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1003.812630][ T8061] EXT4-fs (loop7): unmounting filesystem.
[ 1004.052570][T13632] loop7: detected capacity change from 0 to 512
[ 1004.099155][T13632] ext4: Unknown parameter 'func'
[ 1004.172306][ T4377] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1004.932876][T13642] device syz_tun entered promiscuous mode
[ 1005.037122][T13644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1005.044789][T13644] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1005.067579][T13644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1005.079088][T13644] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1005.333109][T13653] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1005.765414][T13641] device syz_tun left promiscuous mode
[ 1006.132818][T13661] netlink: 892 bytes leftover after parsing attributes in process `syz.0.2416'.
[ 1006.354785][T13665] ubi: mtd0 is already attached to ubi31
[ 1008.816968][T13704] netlink: 892 bytes leftover after parsing attributes in process `syz.0.2427'.
[ 1008.873881][T13706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1008.915011][T13706] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1008.953019][T13706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1008.981492][T13706] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1009.903617][   T26] audit: type=1326 audit(1752842864.419:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.0.2429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f801478e9a9 code=0x0
[ 1010.997969][T13729] loop4: detected capacity change from 0 to 512
[ 1011.031342][T13729] ext4: Unknown parameter 'func'
[ 1011.052133][T13727] loop1: detected capacity change from 0 to 2048
[ 1011.163270][T13727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1012.213282][ T4266] EXT4-fs (loop1): unmounting filesystem.
[ 1012.322896][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'.
[ 1014.013975][T13756] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1014.040260][T13758] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2439'.
[ 1014.154616][T13760] netlink: 'syz.7.2437': attribute type 11 has an invalid length.
[ 1014.999861][T13762] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1015.014187][T13762] bond14: (slave bond15): Enslaving as an active interface with an up link
[ 1017.736734][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2450'.
[ 1021.397481][T13834] befs: (nullb0): invalid magic header
[ 1021.466164][T13836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1021.553245][T13836] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1022.019069][T13836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1022.039921][T13836] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1022.790594][T13857] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1022.926644][T13864] loop7: detected capacity change from 0 to 1024
[ 1023.103399][T13864] EXT4-fs: Ignoring removed orlov option
[ 1023.405025][T13864] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 1023.548309][T13864] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2748: inode #2: comm syz.7.2465: corrupted in-inode xattr
[ 1023.575852][T13864] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2818: Unable to expand inode 2. Delete some EAs or run e2fsck.
[ 1023.966629][ T8061] EXT4-fs (loop7): unmounting filesystem.
[ 1025.655663][ T4311] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 1026.186860][T13902] loop3: detected capacity change from 0 to 512
[ 1026.211206][T13902] EXT4-fs: Ignoring removed orlov option
[ 1026.220625][T13902] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[ 1026.270292][ T4311] usb 8-1: config 0 has an invalid interface number: 98 but max is 0
[ 1026.289138][T13902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[ 1026.314993][ T4311] usb 8-1: config 0 has no interface number 0
[ 1026.327683][ T4311] usb 8-1: config 0 interface 98 has no altsetting 0
[ 1026.337549][T13902] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.2473: corrupted in-inode xattr
[ 1026.363774][ T4311] usb 8-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[ 1026.364788][T13902] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2473: couldn't read orphan inode 15 (err -117)
[ 1026.393189][T13902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[ 1026.397721][ T4311] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.424497][ T4311] usb 8-1: Product: syz
[ 1026.946587][ T4311] usb 8-1: Manufacturer: syz
[ 1026.951895][ T4311] usb 8-1: SerialNumber: syz
[ 1026.979425][ T4311] usb 8-1: config 0 descriptor??
[ 1027.687940][ T4311] usb 8-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[ 1027.689688][ T4264] EXT4-fs (loop3): unmounting filesystem.
[ 1027.842292][T13926] siw: device registration error -23
[ 1028.637800][ T4311] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1028.661205][ T4311] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[ 1028.688861][ T5006] usb 8-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[ 1028.712059][ T5006] usb 8-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[ 1028.726905][ T4311] usb 8-1: USB disconnect, device number 18
[ 1030.629706][T13953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2485'.
[ 1031.296547][T13971] loop4: detected capacity change from 0 to 128
[ 1031.305413][T13971] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[ 1031.349430][ T4377] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1031.858596][ T3597] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[ 1032.060134][ T3597] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1032.082763][ T3597] usb 8-1: config 0 has no interfaces?
[ 1032.098312][ T3597] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1032.144337][ T3597] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.165357][ T3597] usb 8-1: Product: syz
[ 1032.198252][ T3597] usb 8-1: Manufacturer: syz
[ 1032.210051][ T3597] usb 8-1: SerialNumber: syz
[ 1032.224094][ T3597] usb 8-1: config 0 descriptor??
[ 1034.100240][T14006] loop4: detected capacity change from 0 to 256
[ 1034.291851][ T4798] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[ 1034.917745][T14010] befs: (nullb0): invalid magic header
[ 1035.148626][T12931] usb 8-1: USB disconnect, device number 19
[ 1035.242417][ T4798] usb 4-1: config 0 has no interfaces?
[ 1035.248042][ T4798] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[ 1035.564654][ T4798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1035.582768][ T4798] usb 4-1: config 0 descriptor??
[ 1035.637707][T14016] netlink: 'syz.7.2501': attribute type 1 has an invalid length.
[ 1035.745297][T14016] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1035.842729][T14018] bond3: (slave veth0_to_bond): making interface the new active one
[ 1035.871033][T14018] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1035.902190][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready
[ 1036.218749][T12931] usb 4-1: USB disconnect, device number 14
[ 1036.647417][T14024] loop7: detected capacity change from 0 to 512
[ 1036.679653][T14024] ext4: Unknown parameter 'func'
[ 1037.113461][    C0] vxcan1: j1939_simple_recv: Received already invalidated message
[ 1038.452447][T14051] ubi: mtd0 is already attached to ubi31
[ 1038.687107][T14057] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1038.878769][    T7] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1039.626474][    T7] usb 2-1: Using ep0 maxpacket: 32
[ 1039.735353][    T7] usb 2-1: config 0 has an invalid interface number: 74 but max is 1
[ 1039.796693][    T7] usb 2-1: config 0 has no interface number 1
[ 1040.251363][    T7] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[ 1040.275560][T14067] loop7: detected capacity change from 0 to 1024
[ 1040.280975][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.291176][    T7] usb 2-1: Product: syz
[ 1040.295563][    T7] usb 2-1: Manufacturer: syz
[ 1040.302507][    T7] usb 2-1: SerialNumber: syz
[ 1040.310389][    T7] usb 2-1: config 0 descriptor??
[ 1040.345179][    T7] snd-usb-audio: probe of 2-1:0.74 failed with error -22
[ 1040.410930][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1040.686631][ T5008] usb 2-1: USB disconnect, device number 27
[ 1041.328878][T14076] befs: (nullb0): invalid magic header
[ 1041.388491][    T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1041.498942][T13999] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[ 1041.608526][    T7] usb 4-1: Using ep0 maxpacket: 16
[ 1041.622830][    T7] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1041.701631][T13999] usb 8-1: config 2 has an invalid interface number: 219 but max is 0
[ 1041.708412][    T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1041.710296][T13999] usb 8-1: config 2 has no interface number 0
[ 1041.832240][T13999] usb 8-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76
[ 1041.833643][    T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1041.841683][T13999] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.873293][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1041.894303][    T7] usb 4-1: Product: syz
[ 1041.904617][    T7] usb 4-1: Manufacturer: syz
[ 1041.914955][    T7] usb 4-1: SerialNumber: syz
[ 1042.027832][T13999] gspca_main: pac7311-2.14.0 probing 093a:2601
[ 1042.155855][    T7] usb 4-1: 0:2 : does not exist
[ 1042.956410][    T7] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[ 1042.984597][T13999] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110
[ 1043.006118][T13999] pac7311: probe of 8-1:2.219 failed with error -110
[ 1043.186062][    T7] usb 4-1: USB disconnect, device number 15
[ 1043.365728][T14090] loop3: detected capacity change from 0 to 512
[ 1043.419786][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1043.465575][T14090] ext4: Unknown parameter 'func'
[ 1044.264591][T13999] usb 8-1: USB disconnect, device number 20
[ 1044.328678][ T4442] hfsplus: b-tree write err: -5, ino 4
[ 1044.864966][T14126] ubi: mtd0 is already attached to ubi31
[ 1046.704394][T14146] loop1: detected capacity change from 0 to 512
[ 1046.716682][T14146] ext4: Unknown parameter 'func'
[ 1047.905344][T14170] netlink: 'syz.0.2543': attribute type 1 has an invalid length.
[ 1047.927166][T14174] loop4: detected capacity change from 0 to 128
[ 1047.934299][T14174] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[ 1048.003491][ T4377] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1048.229696][T14176] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1048.325702][ T4442] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1049.109285][T14170] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1049.149167][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready
[ 1049.255805][ T4464] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1049.297650][T14184] device veth3 entered promiscuous mode
[ 1050.084291][T14187] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2546'.
[ 1050.277087][T14196] 8021q: VLANs not supported on ipvlan1
[ 1050.404258][T14195] [U] 
[ 1050.461190][ T5002] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1050.469045][T14202] ubi: mtd0 is already attached to ubi31
[ 1051.208504][ T5002] usb 5-1: Using ep0 maxpacket: 8
[ 1051.215122][ T5002] usb 5-1: config 0 has too many interfaces: 42, using maximum allowed: 32
[ 1051.225826][ T5002] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1051.236318][ T5002] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 42
[ 1051.247865][ T5002] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=70.57
[ 1051.257302][ T5002] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.284535][ T5002] usb 5-1: config 0 descriptor??
[ 1051.324912][ T5002] kobil_sct 5-1:0.0: required endpoints missing
[ 1051.526641][ T4798] usb 5-1: USB disconnect, device number 16
[ 1054.319952][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.326316][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.593402][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2567'.
[ 1054.708506][ T5008] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1054.900285][ T5008] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.912134][ T5008] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1054.932365][ T5008] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1054.942241][ T5008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1054.955182][ T5008] usb 2-1: SerialNumber: syz
[ 1055.018485][ T5002] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[ 1055.184339][ T5008] usb 2-1: 0:2 : does not exist
[ 1055.197214][ T5008] usb 2-1: unit 255 not found!
[ 1055.210038][ T5002] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1055.231045][ T5002] usb 4-1: config 0 has no interfaces?
[ 1055.241463][ T5008] usb 2-1: 5:0: cannot get min/max values for control 1 (id 5)
[ 1055.250372][ T5002] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1055.264026][ T5002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1055.274666][ T5002] usb 4-1: Product: syz
[ 1055.283427][ T5008] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1055.298256][ T5002] usb 4-1: Manufacturer: syz
[ 1055.314750][ T5008] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1055.329774][ T5002] usb 4-1: SerialNumber: syz
[ 1055.354213][ T5002] usb 4-1: config 0 descriptor??
[ 1055.449908][ T5008] usb 2-1: USB disconnect, device number 28
[ 1055.720986][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1055.778508][ T5002] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 1055.988454][ T5002] usb 8-1: Using ep0 maxpacket: 32
[ 1056.056345][ T5002] usb 8-1: config 0 has an invalid interface number: 74 but max is 1
[ 1056.174667][ T5002] usb 8-1: config 0 has no interface number 1
[ 1056.295237][ T5002] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[ 1056.614977][ T5002] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.624009][ T5002] usb 8-1: Product: syz
[ 1056.628561][ T5002] usb 8-1: Manufacturer: syz
[ 1056.633192][ T5002] usb 8-1: SerialNumber: syz
[ 1056.641960][ T5002] usb 8-1: config 0 descriptor??
[ 1056.767952][ T5002] snd-usb-audio: probe of 8-1:0.74 failed with error -22
[ 1057.206911][ T5002] usb 8-1: USB disconnect, device number 21
[ 1057.692795][ T5539] block nbd1: Attempted send on invalid socket
[ 1057.698044][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2578'.
[ 1057.700248][ T5539] I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[ 1057.876306][ T5539] gfs2: error 10 reading superblock
[ 1057.885585][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1057.903557][T14276] loop4: detected capacity change from 0 to 128
[ 1057.910545][T14276] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[ 1057.960492][ T4576] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1057.965889][    T7] usb 4-1: USB disconnect, device number 16
[ 1059.294858][T14298] netlink: 'syz.0.2586': attribute type 1 has an invalid length.
[ 1059.345173][T14298] device veth3 entered promiscuous mode
[ 1059.356860][T14298] bond6: (slave veth3): Enslaving as a backup interface with a down link
[ 1059.478623][    T7] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[ 1059.638475][T14308] loop1: detected capacity change from 0 to 512
[ 1059.651613][T14308] ext4: Unknown parameter 'func'
[ 1059.668568][    T7] usb 8-1: Using ep0 maxpacket: 16
[ 1059.794289][    T7] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1060.208580][    T7] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1060.248741][    T7] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1060.259872][    T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.268439][    T7] usb 8-1: Product: syz
[ 1060.274213][    T7] usb 8-1: Manufacturer: syz
[ 1060.299825][    T7] usb 8-1: SerialNumber: syz
[ 1060.829199][    T7] usb 8-1: 0:2 : does not exist
[ 1060.861861][    T7] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1060.910577][    T7] usb 8-1: USB disconnect, device number 22
[ 1061.098432][ T5002] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1061.169830][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1061.362448][ T5002] usb 2-1: Using ep0 maxpacket: 32
[ 1061.378727][ T5002] usb 2-1: config 0 has an invalid interface number: 74 but max is 1
[ 1061.386851][ T5002] usb 2-1: config 0 has no interface number 1
[ 1061.421743][ T5002] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[ 1061.461923][ T5002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.512325][T14318] loop3: detected capacity change from 0 to 256
[ 1061.553442][ T5002] usb 2-1: Product: syz
[ 1061.557648][ T5002] usb 2-1: Manufacturer: syz
[ 1061.580532][ T5002] usb 2-1: SerialNumber: syz
[ 1061.682499][ T5002] usb 2-1: config 0 descriptor??
[ 1061.946764][T14318] FAT-fs (loop3): Directory bread(block 64) failed
[ 1062.593902][T14318] FAT-fs (loop3): Directory bread(block 65) failed
[ 1062.600910][T14318] FAT-fs (loop3): Directory bread(block 66) failed
[ 1062.607665][T14318] FAT-fs (loop3): Directory bread(block 67) failed
[ 1062.614833][T14318] FAT-fs (loop3): Directory bread(block 68) failed
[ 1062.635095][T14318] FAT-fs (loop3): Directory bread(block 69) failed
[ 1062.645113][ T5002] snd-usb-audio: probe of 2-1:0.74 failed with error -22
[ 1062.698791][ T5002] usb 2-1: USB disconnect, device number 29
[ 1062.707530][ T4576] udevd[4576]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1062.738979][T14318] FAT-fs (loop3): Directory bread(block 70) failed
[ 1062.745571][T14318] FAT-fs (loop3): Directory bread(block 71) failed
[ 1062.780081][T14318] FAT-fs (loop3): Directory bread(block 72) failed
[ 1062.786660][T14318] FAT-fs (loop3): Directory bread(block 73) failed
[ 1062.906582][T14339] loop7: detected capacity change from 0 to 2048
[ 1062.939375][ T5008] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1062.977352][T14339] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1063.193057][T14347] loop3: detected capacity change from 0 to 512
[ 1063.200425][T14347] ext4: Unknown parameter 'func'
[ 1063.388547][ T5008] usb 1-1: Using ep0 maxpacket: 8
[ 1063.397248][ T5008] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[ 1063.405546][T14355] loop4: detected capacity change from 0 to 2048
[ 1063.647814][ T5008] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1063.659763][ T5008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1063.670802][ T5008] usb 1-1: Product: syz
[ 1063.675505][ T5008] usb 1-1: Manufacturer: syz
[ 1063.681030][ T5008] usb 1-1: SerialNumber: syz
[ 1063.686523][T14355] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1063.689039][ T5008] usb 1-1: config 0 descriptor??
[ 1063.913512][ T5008] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1063.913570][ T8061] EXT4-fs (loop7): unmounting filesystem.
[ 1063.922293][ T5008] usb 1-1: setting power ON
[ 1063.946289][ T5008] dvb-usb: bulk message failed: -22 (2/0)
[ 1064.340721][T14333] dvb-usb: bulk message failed: -22 (3/0)
[ 1064.346482][ T5008] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1064.346958][T14333] dvb-usb: bulk message failed: -22 (37/0)
[ 1064.382368][T14333] dvb-usb: bulk message failed: -22 (3/0)
[ 1064.429283][ T5008] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1064.451430][ T5008] usb 1-1: media controller created
[ 1064.741308][T14372] befs: (nullb0): invalid magic header
[ 1064.871324][ T5008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1064.902826][ T4265] EXT4-fs (loop4): unmounting filesystem.
[ 1064.942709][ T5008] usb 1-1: selecting invalid altsetting 6
[ 1064.958058][ T5008] usb 1-1: digital interface selection failed (-22)
[ 1064.982628][ T5008] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1065.032119][ T5008] usb 1-1: setting power OFF
[ 1065.048827][ T5008] dvb-usb: bulk message failed: -22 (2/0)
[ 1065.067836][ T5008] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1065.080399][ T5008] (NULL device *): no alternate interface
[ 1065.146990][ T5008] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1065.269652][ T5008] usb 1-1: USB disconnect, device number 21
[ 1065.871125][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2610'.
[ 1065.999542][T14385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2610'.
[ 1068.138745][ T4798] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1068.257605][T14404] loop1: detected capacity change from 0 to 16
[ 1068.305632][T14404] erofs: (device loop1): mounted with root inode @ nid 36.
[ 1068.329314][ T4798] usb 4-1: Using ep0 maxpacket: 32
[ 1068.336509][ T4798] usb 4-1: config 0 has an invalid interface number: 74 but max is 1
[ 1068.373925][ T4798] usb 4-1: config 0 has no interface number 1
[ 1068.482376][T14406] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[ 1068.846612][ T4798] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[ 1068.891110][ T4798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.933779][ T4798] usb 4-1: Product: syz
[ 1068.954190][ T4798] usb 4-1: Manufacturer: syz
[ 1068.980305][ T4798] usb 4-1: SerialNumber: syz
[ 1069.011284][ T4798] usb 4-1: config 0 descriptor??
[ 1069.083924][T14409] loop1: detected capacity change from 0 to 512
[ 1069.099480][T14409] ext4: Unknown parameter 'func'
[ 1069.114744][ T4798] snd-usb-audio: probe of 4-1:0.74 failed with error -22
[ 1069.166562][ T4576] udevd[4576]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1069.301357][ T4798] usb 4-1: USB disconnect, device number 17
[ 1070.413364][T14424] siw: device registration error -23
[ 1070.657223][T14430] befs: (nullb0): invalid magic header
[ 1071.043395][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2623'.
[ 1072.266533][T14449] device wireguard0 entered promiscuous mode
[ 1072.702611][T14460] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1072.810633][T14459] device syz_tun entered promiscuous mode
[ 1072.822927][T14458] device syz_tun left promiscuous mode
[ 1073.290690][ T4800] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1073.508414][ T4800] usb 4-1: Using ep0 maxpacket: 32
[ 1073.612282][ T4800] usb 4-1: config 0 has an invalid interface number: 74 but max is 1
[ 1073.936779][ T4800] usb 4-1: config 0 has no interface number 1
[ 1074.124966][ T4800] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[ 1074.141413][T14462] loop4: detected capacity change from 0 to 40427
[ 1074.161701][ T4800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.176323][ T4800] usb 4-1: Product: syz
[ 1074.181845][ T4800] usb 4-1: Manufacturer: syz
[ 1074.187607][ T4800] usb 4-1: SerialNumber: syz
[ 1074.187624][T14462] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(512)
[ 1074.205377][ T4800] usb 4-1: config 0 descriptor??
[ 1074.266146][ T4800] snd-usb-audio: probe of 4-1:0.74 failed with error -22
[ 1074.273619][T14462] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1074.300132][T14462] F2FS-fs (loop4): invalid crc value
[ 1074.490721][T14479] loop1: detected capacity change from 0 to 32768
[ 1074.516420][T14479] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1074.525634][T14479] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1074.527970][ T4798] usb 4-1: USB disconnect, device number 18
[ 1074.544691][T14479] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[ 1074.695595][T14479] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 1074.720459][ T4576] udevd[4576]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1074.966827][T14487] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2636'.
[ 1076.170054][T14462] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4)
[ 1077.600936][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2638'.
[ 1078.249234][T14516] netlink: 'syz.1.2647': attribute type 21 has an invalid length.
[ 1078.268823][T14516] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2647'.
[ 1078.340704][ T4798] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[ 1078.531927][ T4798] usb 8-1: Using ep0 maxpacket: 16
[ 1078.580131][ T4798] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1078.601167][ T4798] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1078.635878][ T4798] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1078.663320][ T4798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.421226][T14526] tty tty3: ldisc open failed (-12), clearing slot 2
[ 1079.608107][ T4798] usb 8-1: Product: syz
[ 1079.971201][ T4798] usb 8-1: Manufacturer: syz
[ 1080.001038][ T4798] usb 8-1: SerialNumber: syz
[ 1080.013386][T14532] netlink: 'syz.1.2651': attribute type 1 has an invalid length.
[ 1080.061536][T14534] loop3: detected capacity change from 0 to 512
[ 1080.110545][T14532] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1080.129464][T14534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 1080.140788][T14534] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1080.178810][T14532] device veth3 entered promiscuous mode
[ 1080.225198][T14534] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1080.243132][T14534] Quota error (device loop3): write_blk: dquota write failed
[ 1080.251176][T14534] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[ 1080.261722][T14534] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.2652: Failed to acquire dquot type 1
[ 1080.279612][ T4798] usb 8-1: 0:2 : does not exist
[ 1080.292863][T14532] bond8: (slave veth3): Enslaving as a backup interface with a down link
[ 1080.311722][ T4798] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1080.352977][ T4798] usb 8-1: USB disconnect, device number 23
[ 1080.378327][ T4264] EXT4-fs (loop3): unmounting filesystem.
[ 1080.383026][T14542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2653'.
[ 1080.610691][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1081.789500][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'.
[ 1082.719188][T14577] befs: (nullb0): invalid magic header
[ 1083.452651][T14586] loop1: detected capacity change from 0 to 512
[ 1083.679436][T14588] loop3: detected capacity change from 0 to 128
[ 1083.690651][T14588] UDF-fs: bad mount option "��������������8[��=70߳=��.��$�>?�TC�t�B��%~�#��Y���@8�c;<��{��2�^�Xs'<��j��w�����l���
l�;�;ũ���" or missing value
[ 1083.709549][T14586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1083.718535][T14586] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1083.810000][ T4576] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1084.055462][ T4266] EXT4-fs (loop1): unmounting filesystem.
[ 1086.614027][T14632] loop1: detected capacity change from 0 to 512
[ 1086.654231][T14632] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[ 1086.663298][T14632] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1086.842749][ T4266] EXT4-fs (loop1): unmounting filesystem.
[ 1088.717604][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2689'.
[ 1088.954860][T14673] loop1: detected capacity change from 0 to 512
[ 1088.979783][T14673] EXT4-fs: Ignoring removed orlov option
[ 1089.020440][T14673] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[ 1089.020762][T14676] netlink: 'syz.4.2695': attribute type 1 has an invalid length.
[ 1089.096673][   T26] audit: type=1804 audit(1752842943.599:26): pid=14672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2694" name="/newroot/336/file0/file1" dev="overlay" ino=1774 res=1 errno=0
[ 1089.129219][T14673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[ 1089.139296][T14673] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.2693: corrupted in-inode xattr
[ 1089.165063][T14679] bond16: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1089.182700][T14673] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2693: couldn't read orphan inode 15 (err -117)
[ 1089.278983][T14673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[ 1089.382846][T14684] device veth3 entered promiscuous mode
[ 1089.414933][T14684] bond16: (slave veth3): Enslaving as a backup interface with a down link
[ 1089.998035][ T4266] EXT4-fs (loop1): unmounting filesystem.
[ 1090.148556][ T4798] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[ 1090.158523][ T5006] ------------[ cut here ]------------
[ 1090.164725][ T5006] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw'
[ 1090.378517][ T4798] usb 8-1: Using ep0 maxpacket: 32
[ 1090.403393][ T4798] usb 8-1: config 0 has an invalid interface number: 74 but max is 1
[ 1090.509365][ T4798] usb 8-1: config 0 has no interface number 1
[ 1090.594245][ T4798] usb 8-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[ 1090.682675][ T4798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.718077][ T5006] WARNING: CPU: 1 PID: 5006 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x290
[ 1090.727640][ T5006] Modules linked in:
[ 1090.731611][ T5006] CPU: 1 PID: 5006 Comm: kworker/1:14 Not tainted 6.1.146-syzkaller #0
[ 1090.739863][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1090.749929][ T5006] Workqueue: events request_firmware_work_func
[ 1090.756195][ T5006] RIP: 0010:sysfs_remove_group+0x174/0x290
[ 1090.762059][ T5006] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 ce 02 cc ff 49 8b 17 48 c7 c7 e0 6a 9c 8a 48 89 de e8 8c 08 48 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e6 e6 7b ff
[ 1090.781724][ T5006] RSP: 0018:ffffc9000dd0f880 EFLAGS: 00010246
[ 1090.787815][ T5006] RAX: 1b3fbf06108e6600 RBX: ffffffff8b02f800 RCX: ffff888055bf0000
[ 1090.795846][ T5006] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 1090.804001][ T5006] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffff52001ba1ea1
[ 1090.812395][ T5006] R10: fffff52001ba1ea1 R11: 1ffff92001ba1ea0 R12: 1ffffffff1605f04
[ 1090.820604][ T5006] R13: dffffc0000000000 R14: ffff88808ab541d0 R15: ffff888055930008
[ 1090.828620][ T5006] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1090.837629][ T5006] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1090.844253][ T5006] CR2: 00007efe522b2990 CR3: 0000000087f98000 CR4: 00000000003506e0
[ 1090.852289][ T5006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1090.860340][ T5006] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1090.868323][ T5006] Call Trace:
[ 1090.871665][ T5006]  <TASK>
[ 1090.874585][ T5006]  ? sysfs_unmerge_group+0x109/0x130
[ 1090.879921][ T5006]  device_del+0x2ae/0xa70
[ 1090.884360][ T5006]  ? kill_device+0x160/0x160
[ 1090.889001][ T5006]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1090.895000][ T5006]  ? _raw_spin_unlock+0x40/0x40
[ 1090.899899][ T5006]  ? complete_all+0x29/0x1d0
[ 1090.904566][ T5006]  ? __fw_load_abort+0x87/0x190
[ 1090.909465][ T5006]  firmware_fallback_sysfs+0x67e/0x930
[ 1090.914956][ T5006]  _request_firmware+0xcad/0x1290
[ 1090.920072][ T5006]  ? request_firmware+0x50/0x50
[ 1090.924953][ T5006]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1090.931025][ T5006]  ? read_lock_is_recursive+0x10/0x10
[ 1090.936408][ T5006]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1090.942369][ T5006]  request_firmware_work_func+0xac/0x1b0
[ 1090.948041][ T5006]  ? process_one_work+0x7a1/0x1160
[ 1090.953307][ T5006]  process_one_work+0x898/0x1160
[ 1090.958257][ T5006]  ? worker_detach_from_pool+0x240/0x240
[ 1090.963923][ T5006]  ? _raw_spin_lock_irq+0xab/0xe0
[ 1090.969236][ T5006]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 1090.974602][ T5006]  ? kthread_data+0x4b/0xc0
[ 1090.979129][ T5006]  worker_thread+0xaa2/0x1250
[ 1090.984248][ T5006]  kthread+0x29d/0x330
[ 1090.988324][ T5006]  ? worker_clr_flags+0x1a0/0x1a0
[ 1090.993405][ T5006]  ? kthread_blkcg+0xd0/0xd0
[ 1090.997982][ T5006]  ret_from_fork+0x1f/0x30
[ 1091.002448][ T5006]  </TASK>
[ 1091.005460][ T5006] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1091.012738][ T5006] CPU: 1 PID: 5006 Comm: kworker/1:14 Not tainted 6.1.146-syzkaller #0
[ 1091.020965][ T5006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1091.031006][ T5006] Workqueue: events request_firmware_work_func
[ 1091.037151][ T5006] Call Trace:
[ 1091.040421][ T5006]  <TASK>
[ 1091.043347][ T5006]  dump_stack_lvl+0x168/0x22e
[ 1091.048034][ T5006]  ? memcpy+0x3c/0x60
[ 1091.052155][ T5006]  ? show_regs_print_info+0x12/0x12
[ 1091.057333][ T5006]  ? load_image+0x3b0/0x3b0
[ 1091.061851][ T5006]  panic+0x2c9/0x710
[ 1091.065861][ T5006]  ? bpf_jit_dump+0xd0/0xd0
[ 1091.070375][ T5006]  ? ret_from_fork+0x1f/0x30
[ 1091.074991][ T5006]  __warn+0x2f8/0x4f0
[ 1091.078960][ T5006]  ? sysfs_remove_group+0x174/0x290
[ 1091.084145][ T5006]  ? sysfs_remove_group+0x174/0x290
[ 1091.089329][ T5006]  report_bug+0x2ba/0x4f0
[ 1091.093730][ T5006]  ? sysfs_remove_group+0x174/0x290
[ 1091.098930][ T5006]  handle_bug+0x3a/0x70
[ 1091.103087][ T5006]  exc_invalid_op+0x16/0x40
[ 1091.107596][ T5006]  asm_exc_invalid_op+0x16/0x20
[ 1091.112442][ T5006] RIP: 0010:sysfs_remove_group+0x174/0x290
[ 1091.118358][ T5006] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 ce 02 cc ff 49 8b 17 48 c7 c7 e0 6a 9c 8a 48 89 de e8 8c 08 48 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e6 e6 7b ff
[ 1091.138062][ T5006] RSP: 0018:ffffc9000dd0f880 EFLAGS: 00010246
[ 1091.144119][ T5006] RAX: 1b3fbf06108e6600 RBX: ffffffff8b02f800 RCX: ffff888055bf0000
[ 1091.152080][ T5006] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 1091.160040][ T5006] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffff52001ba1ea1
[ 1091.168007][ T5006] R10: fffff52001ba1ea1 R11: 1ffff92001ba1ea0 R12: 1ffffffff1605f04
[ 1091.175967][ T5006] R13: dffffc0000000000 R14: ffff88808ab541d0 R15: ffff888055930008
[ 1091.183938][ T5006]  ? sysfs_unmerge_group+0x109/0x130
[ 1091.189221][ T5006]  device_del+0x2ae/0xa70
[ 1091.193579][ T5006]  ? kill_device+0x160/0x160
[ 1091.198152][ T5006]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1091.204043][ T5006]  ? _raw_spin_unlock+0x40/0x40
[ 1091.208892][ T5006]  ? complete_all+0x29/0x1d0
[ 1091.213478][ T5006]  ? __fw_load_abort+0x87/0x190
[ 1091.218595][ T5006]  firmware_fallback_sysfs+0x67e/0x930
[ 1091.224053][ T5006]  _request_firmware+0xcad/0x1290
[ 1091.229074][ T5006]  ? request_firmware+0x50/0x50
[ 1091.233909][ T5006]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 1091.239876][ T5006]  ? read_lock_is_recursive+0x10/0x10
[ 1091.245233][ T5006]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 1091.251115][ T5006]  request_firmware_work_func+0xac/0x1b0
[ 1091.256768][ T5006]  ? process_one_work+0x7a1/0x1160
[ 1091.261864][ T5006]  process_one_work+0x898/0x1160
[ 1091.266798][ T5006]  ? worker_detach_from_pool+0x240/0x240
[ 1091.272456][ T5006]  ? _raw_spin_lock_irq+0xab/0xe0
[ 1091.277472][ T5006]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 1091.282920][ T5006]  ? kthread_data+0x4b/0xc0
[ 1091.287588][ T5006]  worker_thread+0xaa2/0x1250
[ 1091.292265][ T5006]  kthread+0x29d/0x330
[ 1091.296318][ T5006]  ? worker_clr_flags+0x1a0/0x1a0
[ 1091.301323][ T5006]  ? kthread_blkcg+0xd0/0xd0
[ 1091.305902][ T5006]  ret_from_fork+0x1f/0x30
[ 1091.310349][ T5006]  </TASK>
[ 1091.313628][ T5006] Kernel Offset: disabled
[ 1091.318024][ T5006] Rebooting in 86400 seconds..