last executing test programs:

2m44.591853568s ago: executing program 3 (id=1334):
r0 = memfd_create(0x0, 0x7)
fcntl$addseals(r0, 0x409, 0x2)
r1 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r0, 0x0, 0x0, 0x100000})

2m44.255984548s ago: executing program 3 (id=1336):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000280), 0x6000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000380)={0x800, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x4}, {}, {0xfffffffe}, {}, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x4, 0x8, 0x3, 0x3, 0x41, 0x5, 0x40003, 0x53, 0x0, 0x1, 0xc})
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b})
read$FUSE(r2, &(0x7f0000000580)={0x2020}, 0x2020)

2m35.123488176s ago: executing program 3 (id=1356):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})

2m29.986740891s ago: executing program 3 (id=1367):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpid()
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7e, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020)
read$watch_queue(r2, &(0x7f0000000340)=""/133, 0xc7)

2m26.837842073s ago: executing program 3 (id=1371):
syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x40, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080)
socket(0x10, 0x803, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4})
ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f00000001c0)={0x0, 0x20, 0x2})

2m23.849975675s ago: executing program 3 (id=1374):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r0, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)

2m7.818956462s ago: executing program 32 (id=1374):
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r0, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1)
readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)

16.1622092s ago: executing program 4 (id=1677):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240)={0x0, 0xe, 0x2, "c5d0"}, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="004dea"], 0x0, 0x0})

13.311766705s ago: executing program 5 (id=1692):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r3, &(0x7f0000001c00), 0x40000000000017a, 0x40840)

13.11397307s ago: executing program 4 (id=1695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
r1 = dup(r0)
setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f00000000c0)=0x100000001, 0x4)

12.22994918s ago: executing program 5 (id=1696):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r2, 0x8b2c, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x41, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r3, 0x0, 0x0, 0x1001f0)
r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00')
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0, 0x27}], 0x2, 0x0, 0x5)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
linkat(r3, 0x0, r3, &(0x7f0000000400)='./bus\x00', 0x1400)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
recvmmsg(0xffffffffffffffff, 0x0, 0xffffffa6, 0x0, 0x0)
io_uring_setup(0x85a, 0x0)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r8 = dup3(r7, 0xffffffffffffffff, 0x0)
ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180))
close_range(r6, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
r10 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041)

12.162605223s ago: executing program 4 (id=1697):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
close_range(r1, 0xffffffffffffffff, 0x2)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
creat(&(0x7f0000000080)='./file0\x00', 0x248)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x189082)
close(0x3)

12.122675461s ago: executing program 1 (id=1698):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue0\x00'})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x3}, 0x1000d023})

10.903571404s ago: executing program 1 (id=1700):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000840}, 0x24044010)

10.857737036s ago: executing program 4 (id=1701):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x83, 0x2, 'f]'}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000600)={0x40, 0x0, 0x2, "b01a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.189531947s ago: executing program 1 (id=1702):
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c9"], 0x16)
sync()
shutdown(0xffffffffffffffff, 0x1)

10.121973822s ago: executing program 6 (id=1703):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

9.901941365s ago: executing program 2 (id=1704):
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

9.268988748s ago: executing program 2 (id=1705):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(r1, 0x0, 0x0)

8.793953343s ago: executing program 2 (id=1706):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close_range(0xffffffffffffffff, r1, 0x2)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x248)
close(r2)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r3, 0x40043d0d, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4])

8.793743693s ago: executing program 1 (id=1707):
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)

8.400636022s ago: executing program 0 (id=1708):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r3, &(0x7f0000001c00), 0x40000000000017a, 0x40840)

8.377651832s ago: executing program 1 (id=1709):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x1b, "00000000000000000000ffff00"})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020)

5.876032438s ago: executing program 0 (id=1710):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10f1}, 0x94)
memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
socket$rxrpc(0x21, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffff7, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000500)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000800000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)

5.785279465s ago: executing program 2 (id=1711):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000001})
read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8)

5.687126196s ago: executing program 1 (id=1712):
mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file1\x00', 0x249)
r0 = io_uring_setup(0x1115f, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x2, 0x113})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/connector\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000180))
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x80000000}}, 0x50)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000)

5.651312031s ago: executing program 4 (id=1713):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1b00000020000103000000000000000002000000000000001c80000014001100626f6e643000000000000000000000009408b851fcb4f010aec81c95d673ec2d47d14e6e887813c0e29e2d2114ac004f34f04b7660bc365b96c5347d2dfb697bcfb07390366502f6cfb9831e95a6b8ed5a652ce08201ad84d83b89"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000200)=0x6, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fchdir(0xffffffffffffffff)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x77359400}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020)

5.58606862s ago: executing program 2 (id=1714):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000840}, 0x24044010)

4.702278327s ago: executing program 5 (id=1715):
syz_80211_inject_frame(0x0, 0x0, 0x32)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0)

4.684996399s ago: executing program 6 (id=1716):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48)

4.581872352s ago: executing program 6 (id=1717):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101)
write$tcp_congestion(r4, &(0x7f0000000240)='yeah\x00', 0x5)
dup2(r4, r0)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x8})

4.509387131s ago: executing program 0 (id=1718):
r0 = syz_open_dev$vbi(0x0, 0x1, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
write(0xffffffffffffffff, &(0x7f0000000000)="09000000010000", 0x7)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x0, 0x80, "1adad9", 0x9, 0xb2})
waitid(0x2, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500))
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0xc081, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x5d, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x20000824}, 0x20004000)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000})
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x200000000000000)

4.490843719s ago: executing program 2 (id=1719):
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x17)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0)
ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0)

4.448722771s ago: executing program 6 (id=1720):
syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x1, 0x5, 0x5c, 0x65, 0x0, 0x87, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0x5}]}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0xff, 0x2, 0x1, 0x1, 0x0, 0x7}, 0x1, {0x3b}}}, {0x8, 0x22eb, 0x0, {{0x5, 0x2, 0x8, 0x3, 0x1, 0x2, 0x7}, 0x2, {0x0, 0x4, 0x1, 0x13, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0)

3.464608882s ago: executing program 0 (id=1721):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x61}, 0x4010004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.391680641s ago: executing program 5 (id=1722):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4)
sendmmsg(r3, &(0x7f0000001c00), 0x40000000000017a, 0x40840)

3.337111916s ago: executing program 6 (id=1723):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x1088, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x102f, 0x1, {{'sha512-neon\x00'}, 0x7f38, "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"}}]}, 0x1088}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
gettid()
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0xfffe, 0xd, 0x3d7a, 0x3})
recvmmsg(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x28, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x44}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

2.327162338s ago: executing program 5 (id=1724):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"})
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020)

1.203115295s ago: executing program 0 (id=1725):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010)

1.149849156s ago: executing program 5 (id=1726):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x40040c0)
setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x4c}}, 0x0)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
ptrace$setregset(0x4205, r5, 0x1, &(0x7f00000001c0)={0x0})
socket$key(0xf, 0x3, 0x2)

1.100647957s ago: executing program 6 (id=1727):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r2, 0x8b2c, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x41, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r3, 0x0, 0x0, 0x1001f0)
r4 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00')
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/95, 0x5f}, {0x0, 0x27}], 0x2, 0x0, 0x5)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
linkat(r3, 0x0, r3, &(0x7f0000000400)='./bus\x00', 0x1400)
connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
recvmmsg(0xffffffffffffffff, 0x0, 0xffffffa6, 0x0, 0x0)
io_uring_setup(0x85a, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
socket$alg(0x26, 0x5, 0x0)
r8 = dup3(0xffffffffffffffff, r7, 0x0)
ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180))
close_range(r6, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
r10 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, 0x0}, 0x3000c041)

788.724557ms ago: executing program 4 (id=1728):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fsetxattr(r0, &(0x7f0000000180)=@known='security.selinux\x00', &(0x7f0000019400)='\x00', 0x1, 0x1)

0s ago: executing program 0 (id=1729):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

kernel console output (not intermixed with test programs):

646][ T7113] Bluetooth: hci1: command 0x0406 tx timeout
[  221.642198][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  221.657091][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  221.677186][ T5964] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  221.686166][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  221.697365][ T5964] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  221.709608][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  221.721296][ T5964] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  221.722110][ T7138] netlink: 96 bytes leftover after parsing attributes in process `syz.2.390'.
[  221.762622][ T5964] usb 6-1: string descriptor 0 read error: -22
[  221.774102][ T5964] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  221.788234][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.829384][ T5964] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  222.769419][ T7149] Invalid ELF header type: 3 != 1
[  224.741360][ T5990] usb 6-1: USB disconnect, device number 5
[  224.899274][ T7158] block nbd0: shutting down sockets
[  225.172203][ T7163] binfmt_misc: register: failed to install interpreter file ./file0
[  225.199731][ T7160] netlink: 'syz.4.397': attribute type 12 has an invalid length.
[  226.007122][ T7173] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  227.406141][ T7189] sch_fq: defrate 0 ignored.
[  228.262094][ T7206] netlink: 'syz.4.413': attribute type 12 has an invalid length.
[  228.396025][ T7207] netlink: 'syz.2.414': attribute type 10 has an invalid length.
[  228.504513][ T7207] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  228.575380][ T7212] netlink: 'syz.5.416': attribute type 11 has an invalid length.
[  228.658930][ T7185] loop1: detected capacity change from 0 to 40427
[  228.678552][ T7185] F2FS-fs: heap/no_heap options were deprecated
[  228.690730][ T7185] F2FS-fs (loop1): build fault injection rate: 19
[  228.697615][ T7185] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  228.896717][ T7185] F2FS-fs (loop1): invalid crc value
[  228.941761][ T7185] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  230.307044][ T7185] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  230.931552][ T7185] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  231.336273][ T7185] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  235.164872][ T7250] loop4: detected capacity change from 0 to 65536
[  235.361046][ T7250] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  235.587794][ T7250] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop4": -EINTR
[  235.589087][ T7250] XFS (loop4): log mount failed
[  236.054844][ T7292] sch_fq: defrate 0 ignored.
[  236.825608][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  236.985983][   T10] usb 5-1: Using ep0 maxpacket: 32
[  237.017155][   T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  237.049184][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.106745][   T10] usb 5-1: Product: syz
[  237.149603][   T10] usb 5-1: Manufacturer: syz
[  237.173659][   T10] usb 5-1: SerialNumber: syz
[  237.265058][   T10] usb 5-1: config 0 descriptor??
[  237.886649][ T7291] loop3: detected capacity change from 0 to 40427
[  237.934049][   T10] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  237.990981][ T7291] F2FS-fs: heap/no_heap options were deprecated
[  238.005305][ T7291] F2FS-fs (loop3): build fault injection rate: 19
[  238.012019][ T7291] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  238.019145][   T10] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71
[  238.086395][ T7291] F2FS-fs (loop3): invalid crc value
[  238.132304][   T10] usb 5-1: USB disconnect, device number 7
[  238.155616][ T5889] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  238.171794][ T7291] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  238.322530][ T5889] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  238.358393][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.427100][ T5889] usb 6-1: Product: syz
[  238.431338][ T5889] usb 6-1: Manufacturer: syz
[  238.450150][ T5889] usb 6-1: SerialNumber: syz
[  238.486558][ T5889] usb 6-1: config 0 descriptor??
[  238.616756][ T7291] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  238.762066][ T7291] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  238.771151][ T5889] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  238.811129][ T7323] binfmt_misc: register: failed to install interpreter file ./file0
[  238.852906][ T7291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  240.423372][ T5889] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  240.502227][ T5889] usb 6-1: USB disconnect, device number 6
[  240.747535][ T5964] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  241.002564][ T5964] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  241.763191][ T5964] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  241.783430][ T5964] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  241.855787][ T5964] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  241.949246][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  242.035023][ T5964] usb 5-1: Product: syz
[  242.038725][   T30] audit: type=1326 audit(1762134074.322:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.3.453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f591e38efc9 code=0x0
[  242.067574][ T5964] usb 5-1: Manufacturer: syz
[  242.091974][ T5964] usb 5-1: SerialNumber: syz
[  243.346573][ T7359] Invalid ELF header magic: != ELF
[  243.866169][ T5964] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  243.936342][ T5964] usb 5-1: USB disconnect, device number 8
[  243.971761][ T5964] usblp0: removed
[  243.978873][ T7363] binfmt_misc: register: failed to install interpreter file ./file0
[  246.856404][ T5964] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  247.764409][ T7399] Invalid ELF header magic: != ELF
[  248.149210][ T5964] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  248.160888][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.171180][ T5964] usb 3-1: Product: syz
[  248.223216][ T5964] usb 3-1: Manufacturer: syz
[  248.345631][ T5964] usb 3-1: SerialNumber: syz
[  248.380257][ T7401] pim6reg: entered allmulticast mode
[  248.411628][ T5964] usb 3-1: config 0 descriptor??
[  248.649928][ T5964] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  248.745875][ T7408] binfmt_misc: register: failed to install interpreter file ./file0
[  250.406510][ T7406] loop3: detected capacity change from 0 to 32768
[  250.439632][ T5964] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  250.459462][ T7406] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.481 (7406)
[  250.492323][ T5964] usb 3-1: USB disconnect, device number 4
[  250.581249][ T7406] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.623501][ T7410] loop4: detected capacity change from 0 to 32768
[  250.640428][ T7406] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  250.736657][ T5814] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  250.778684][ T7410] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.925707][ T5814] usb 2-1: Using ep0 maxpacket: 32
[  251.248117][ T5814] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  251.327887][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.375239][ T5814] usb 2-1: Product: syz
[  251.424894][ T5814] usb 2-1: Manufacturer: syz
[  251.452984][ T5814] usb 2-1: SerialNumber: syz
[  251.525258][ T5814] usb 2-1: config 0 descriptor??
[  251.530660][ T7406] BTRFS info (device loop3): rebuilding free space tree
[  251.591431][ T7410] XFS (loop4): Ending clean mount
[  251.682780][ T7410] XFS (loop4): Quotacheck needed: Please wait.
[  251.727651][ T7406] BTRFS info (device loop3): setting nodatasum
[  251.733882][ T7406] BTRFS info (device loop3): setting nodatacow
[  251.797625][ T7406] BTRFS info (device loop3): enabling ssd optimizations
[  251.818966][ T7460] netlink: 'syz.0.493': attribute type 12 has an invalid length.
[  251.832113][ T7406] BTRFS info (device loop3): turning off barriers
[  251.841828][ T7410] XFS (loop4): Quotacheck: Done.
[  251.848491][ T7406] BTRFS info (device loop3): turning on flush-on-commit
[  252.011389][ T7406] BTRFS info (device loop3): enabling free space tree
[  252.056530][ T7406] BTRFS info (device loop3): force clearing of disk cache
[  252.757976][ T5814] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71
[  252.796124][ T5814] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71)
[  252.867418][ T5829] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.932946][ T5828] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  252.980146][ T5814] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[  253.074400][ T5814] usb 2-1: USB disconnect, device number 5
[  253.702128][ T7473] Invalid ELF header magic: != ELF
[  255.255766][ T7485] Invalid ELF header type: 3 != 1
[  256.642646][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.505'.
[  257.476406][ T7505] netlink: 'syz.0.508': attribute type 12 has an invalid length.
[  258.146690][ T5933] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  258.340195][ T5933] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  258.355551][ T5933] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  258.520458][ T7520] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  259.313802][ T5933] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  259.330276][ T5933] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  259.339820][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  259.348000][ T5933] usb 6-1: Product: syz
[  259.352754][ T5933] usb 6-1: Manufacturer: syz
[  259.358111][ T5933] usb 6-1: SerialNumber: syz
[  259.589712][ T7525] netlink: 'syz.3.516': attribute type 1 has an invalid length.
[  259.622786][ T5933] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  259.699964][ T7525] 8021q: adding VLAN 0 to HW filter on device bond1
[  259.880885][ T7512] loop1: detected capacity change from 0 to 32768
[  259.904111][   T10] usb 6-1: USB disconnect, device number 7
[  259.914647][   T10] usblp0: removed
[  259.932714][ T7512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.509 (7512)
[  260.240284][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  260.262832][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  260.532915][ T7528] bond1: (slave veth3): Enslaving as an active interface with a down link
[  260.700662][ T7512] BTRFS error (device loop1): open_ctree failed: -4
[  260.736232][ T7535] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'.
[  261.162878][ T7517] loop2: detected capacity change from 0 to 32768
[  261.786803][ T7517] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  261.787686][ T7517] (syz.2.512,7517,0):ocfs2_initialize_super:2229 ERROR: status = -12
[  261.840946][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'.
[  261.895794][ T7545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.521'.
[  261.916419][ T7517] (syz.2.512,7517,0):ocfs2_fill_super:1177 ERROR: status = -12
[  262.129258][ T7553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.242840][ T7555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.955943][ T7567] Invalid ELF header magic: != ELF
[  263.663071][ T7570] loop1: detected capacity change from 0 to 512
[  263.728366][ T7570] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  263.739092][ T7574] loop3: detected capacity change from 0 to 512
[  263.761993][ T7574] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  263.789844][ T7570] EXT4-fs (loop1): orphan cleanup on readonly fs
[  263.806077][ T7570] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.530: inode has both inline data and extents flags
[  263.918904][ T7570] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.530: couldn't read orphan inode 15 (err -117)
[  263.975242][ T7570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  264.036306][ T7583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.534'.
[  264.345987][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.524506][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.5.534'.
[  265.710234][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'.
[  265.811342][ T7601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.538'.
[  266.181597][ T7575] loop2: detected capacity change from 0 to 32768
[  266.265753][ T7575] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.532 (7575)
[  266.568716][ T7575] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.593808][ T7575] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  266.700832][ T7575] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  266.706694][ T7575] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  266.732916][ T7575] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  266.970992][ T7575] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  266.988096][ T7575] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  268.455788][ T7575] BTRFS error (device loop2): open_ctree failed: -12
[  269.201691][ T7640] wlan0 speed is unknown, defaulting to 1000
[  269.207989][ T7640] wlan0 speed is unknown, defaulting to 1000
[  269.216510][ T7640] wlan0 speed is unknown, defaulting to 1000
[  269.228200][ T7640] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  269.245516][ T7640] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  269.329127][ T7640] wlan0 speed is unknown, defaulting to 1000
[  269.338432][ T7640] wlan0 speed is unknown, defaulting to 1000
[  269.346514][ T7640] wlan0 speed is unknown, defaulting to 1000
[  269.354620][ T7640] wlan0 speed is unknown, defaulting to 1000
[  269.362859][ T7640] wlan0 speed is unknown, defaulting to 1000
[  269.371129][ T7640] wlan0 speed is unknown, defaulting to 1000
[  270.558074][ T7650] netlink: 96 bytes leftover after parsing attributes in process `syz.4.550'.
[  272.260331][ T5933] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  272.398725][ T7655] loop1: detected capacity change from 0 to 40427
[  272.433497][ T5990] IPVS: starting estimator thread 0...
[  272.442441][ T7655] F2FS-fs (loop1): invalid crc value
[  272.476178][ T5933] usb 5-1: Using ep0 maxpacket: 8
[  272.483655][ T7651] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  272.542442][ T5933] usb 5-1: config 0 has no interfaces?
[  272.568354][ T7682] IPVS: using max 21 ests per chain, 50400 per kthread
[  272.576307][ T5933] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  272.615907][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.666638][ T5933] usb 5-1: config 0 descriptor??
[  272.995875][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  273.641589][ T7655] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  273.750249][ T7655] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  273.763120][ T5889] usb 5-1: USB disconnect, device number 9
[  274.972999][ T7700] netlink: 96 bytes leftover after parsing attributes in process `syz.5.566'.
[  275.947205][ T7711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.569'.
[  276.411906][ T7691] loop0: detected capacity change from 0 to 32768
[  277.182812][ T7691] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.562 (7691)
[  277.367744][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.569'.
[  278.208950][   T10] usb 4-1: device descriptor read/64, error -110
[  278.490636][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  280.581578][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  281.305606][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  281.347443][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  281.375815][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  281.414069][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  281.444464][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  281.479734][   T10] usb 1-1: Product: syz
[  281.513075][   T10] usb 1-1: Manufacturer: syz
[  281.540272][   T10] usb 1-1: SerialNumber: syz
[  282.348715][   T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  282.509818][ T5990] usb 1-1: USB disconnect, device number 3
[  282.527638][ T5990] usblp0: removed
[  284.405922][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  284.650913][ T7771] Invalid ELF header type: 3 != 1
[  286.265568][   T10] usb 5-1: Using ep0 maxpacket: 8
[  286.430985][   T10] usb 5-1: device descriptor read/all, error -71
[  289.316892][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  291.879855][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  291.891107][   T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  291.901891][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  291.928915][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  291.929225][ T7815] Invalid ELF header type: 3 != 1
[  292.308734][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  292.317693][   T10] usb 6-1: Product: syz
[  292.321966][   T10] usb 6-1: Manufacturer: syz
[  292.327650][   T10] usb 6-1: SerialNumber: syz
[  292.408014][   T10] usb 6-1: can't set config #1, error -71
[  293.320129][   T10] usb 6-1: USB disconnect, device number 8
[  294.225598][   T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  295.169549][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  295.200082][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  295.239502][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  295.326042][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  295.347507][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  295.375540][   T10] usb 3-1: Product: syz
[  295.395834][   T10] usb 3-1: Manufacturer: syz
[  295.408569][   T10] usb 3-1: SerialNumber: syz
[  295.932520][   T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  296.179509][   T10] usb 3-1: USB disconnect, device number 5
[  296.209358][   T10] usblp0: removed
[  297.874834][ T7860] i2c i2c-0: Invalid block write size 252
[  298.040508][ T7862] capability: warning: `syz.1.612' uses 32-bit capabilities (legacy support in use)
[  298.569540][ T7866] Bluetooth: MGMT ver 1.23
[  300.605567][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  300.755895][   T10] usb 2-1: Using ep0 maxpacket: 16
[  300.767887][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  300.938699][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'.
[  300.956889][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  301.075980][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  301.129003][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.146209][ T7884] netlink: 44 bytes leftover after parsing attributes in process `syz.0.622'.
[  301.754141][   T10] usb 2-1: Product: syz
[  301.759535][   T10] usb 2-1: Manufacturer: syz
[  301.764256][   T10] usb 2-1: SerialNumber: syz
[  301.800926][   T10] usb 2-1: config 0 descriptor??
[  301.842391][   T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  301.856977][   T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  302.134731][ T7889] serio: Serial port ttyS3
[  302.893646][   T10] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  302.921545][   T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  303.036840][   T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  303.084920][   T10] em28xx 2-1:0.0: No AC97 audio processor
[  303.121810][   T10] usb 2-1: USB disconnect, device number 6
[  303.139180][   T10] em28xx 2-1:0.0: Disconnecting em28xx
[  303.164063][   T10] em28xx 2-1:0.0: Freeing device
[  303.416088][ T7905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.802046][ T7907] dvmrp0: entered allmulticast mode
[  303.868490][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'.
[  306.699939][ T7920] netlink: 32 bytes leftover after parsing attributes in process `syz.2.633'.
[  308.332722][ T7940] netlink: 'syz.3.641': attribute type 10 has an invalid length.
[  308.751422][ T7948] Invalid ELF header magic: != ELF
[  309.190286][ T7951] loop2: detected capacity change from 0 to 512
[  309.459032][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'.
[  309.723457][ T5990] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  309.875331][ T7951] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  310.061538][ T7951] EXT4-fs (loop2): orphan cleanup on readonly fs
[  310.080865][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  310.083880][ T7951] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.646: inode has both inline data and extents flags
[  310.138347][ T7951] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.646: couldn't read orphan inode 15 (err -117)
[  310.476697][ T7951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  310.699037][ T5990] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  310.775766][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.783939][ T5990] usb 1-1: Product: syz
[  310.799077][ T5990] usb 1-1: Manufacturer: syz
[  310.803777][ T5990] usb 1-1: SerialNumber: syz
[  310.841737][ T5990] usb 1-1: config 0 descriptor??
[  311.103494][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.273545][ T5990] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  311.575847][ T5917] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  311.822940][ T5917] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  311.847817][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.895102][ T5917] usb 3-1: Product: syz
[  311.899510][ T5917] usb 3-1: Manufacturer: syz
[  311.904119][ T5917] usb 3-1: SerialNumber: syz
[  311.922390][ T5917] usb 3-1: config 0 descriptor??
[  313.022619][ T5917] usb 3-1: ignoring: not an USB2CAN converter
[  313.090366][   T52] Bluetooth: hci4: unexpected event for opcode 0x1009
[  313.235327][ T5917] usb 3-1: USB disconnect, device number 6
[  313.977323][ T5990] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  314.087148][ T5990] usb 1-1: USB disconnect, device number 4
[  315.537886][   T52] Bluetooth: Unexpected continuation frame (len 52)
[  316.015548][ T5917] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  316.253945][ T7999] loop5: detected capacity change from 0 to 40427
[  316.266823][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  316.275955][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  316.293817][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  316.311370][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  316.321067][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.342508][ T5917] usb 2-1: Product: syz
[  316.353371][ T5917] usb 2-1: Manufacturer: syz
[  316.359021][ T7999] F2FS-fs (loop5): invalid crc value
[  316.377274][ T5917] usb 2-1: SerialNumber: syz
[  316.383768][ T7996] bridge0: entered promiscuous mode
[  316.428481][ T7996] bridge0: entered allmulticast mode
[  316.458453][ T5917] usb 2-1: config 0 descriptor??
[  316.576439][ T5917] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  316.585776][ T5917] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  317.043791][ T7999] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  317.064525][ T7999] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  317.133746][ T5917] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  317.140660][ T5917] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  317.161033][ T5917] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  317.178352][ T5917] em28xx 2-1:0.0: No AC97 audio processor
[  317.215759][ T5917] usb 2-1: USB disconnect, device number 7
[  317.271982][ T5917] em28xx 2-1:0.0: Disconnecting em28xx
[  317.290326][ T5917] em28xx 2-1:0.0: Freeing device
[  317.299673][ T5839] syz-executor: attempt to access beyond end of device
[  317.299673][ T5839] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  317.355759][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  317.355795][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  317.355812][ T5839] Call Trace:
[  317.355822][ T5839]  <TASK>
[  317.355833][ T5839]  dump_stack_lvl+0x189/0x250
[  317.355881][ T5839]  ? __pfx_dump_stack_lvl+0x10/0x10
[  317.355919][ T5839]  ? __pfx_queue_work_on+0x10/0x10
[  317.355948][ T5839]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  317.355983][ T5839]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  317.356033][ T5839]  f2fs_handle_critical_error+0x37c/0x540
[  317.356082][ T5839]  f2fs_write_end_io+0x886/0xb60
[  317.356132][ T5839]  __submit_merged_bio+0x27a/0x6a0
[  317.356180][ T5839]  __submit_merged_write_cond+0x255/0x530
[  317.356228][ T5839]  f2fs_write_data_pages+0x261d/0x3000
[  317.356297][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  317.356377][ T5839]  ? __mod_zone_page_state+0xd7/0x140
[  317.356427][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.356457][ T5839]  ? folios_put_refs+0x58b/0x670
[  317.356501][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.356530][ T5839]  ? __lock_acquire+0xab9/0xd20
[  317.356567][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.356596][ T5839]  ? do_raw_spin_lock+0x121/0x290
[  317.356639][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.356673][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.356702][ T5839]  ? do_raw_spin_unlock+0x122/0x240
[  317.356745][ T5839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  317.356774][ T5839]  do_writepages+0x32e/0x550
[  317.356815][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.356850][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.356880][ T5839]  ? do_raw_spin_unlock+0x122/0x240
[  317.356923][ T5839]  filemap_fdatawrite+0x199/0x240
[  317.356960][ T5839]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  317.357048][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.357083][ T5839]  ? do_raw_spin_unlock+0x122/0x240
[  317.357126][ T5839]  f2fs_sync_dirty_inodes+0x31f/0x830
[  317.357173][ T5839]  f2fs_write_checkpoint+0x93e/0x2440
[  317.357201][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.357230][ T5839]  ? __lock_acquire+0xab9/0xd20
[  317.357291][ T5839]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  317.357390][ T5839]  kill_f2fs_super+0x2cc/0x6d0
[  317.357417][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.357453][ T5839]  ? __pfx_kill_f2fs_super+0x10/0x10
[  317.357502][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.357531][ T5839]  ? shrinker_free+0x2ce/0x3e0
[  317.357565][ T5839]  deactivate_locked_super+0xbc/0x130
[  317.357603][ T5839]  cleanup_mnt+0x425/0x4c0
[  317.357634][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.357662][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.357701][ T5839]  task_work_run+0x1d4/0x260
[  317.357753][ T5839]  ? __pfx_task_work_run+0x10/0x10
[  317.357788][ T5839]  ? __x64_sys_umount+0x122/0x160
[  317.357832][ T5839]  ? exit_to_user_mode_loop+0x40/0x130
[  317.357863][ T5839]  exit_to_user_mode_loop+0xe9/0x130
[  317.357890][ T5839]  do_syscall_64+0x2bd/0xfa0
[  317.357926][ T5839]  ? lockdep_hardirqs_on+0x9c/0x150
[  317.357961][ T5839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.357986][ T5839]  ? srso_alias_return_thunk+0x5/0xfbef5
[  317.358016][ T5839]  ? exc_page_fault+0xab/0x100
[  317.358054][ T5839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.358079][ T5839] RIP: 0033:0x7fdad4b902f7
[  317.358103][ T5839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  317.358124][ T5839] RSP: 002b:00007ffef0ab2848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  317.358152][ T5839] RAX: 0000000000000000 RBX: 00007fdad4c11d7d RCX: 00007fdad4b902f7
[  317.358170][ T5839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef0ab2900
[  317.358187][ T5839] RBP: 00007ffef0ab2900 R08: 0000000000000000 R09: 0000000000000000
[  317.358203][ T5839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef0ab3990
[  317.358221][ T5839] R13: 00007fdad4c11d7d R14: 000000000004d6d4 R15: 00007ffef0ab39d0
[  317.358266][ T5839]  </TASK>
[  317.358277][ T5839] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  318.211238][ T8039] syzkaller0: entered promiscuous mode
[  318.225478][ T8039] syzkaller0: entered allmulticast mode
[  318.317642][ T5917] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  318.511137][ T5917] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  318.520562][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.555529][ T5917] usb 3-1: Product: syz
[  318.565994][ T5917] usb 3-1: Manufacturer: syz
[  318.581258][ T5917] usb 3-1: SerialNumber: syz
[  319.037568][ T5917] usb 3-1: config 0 descriptor??
[  319.073205][ T8030] loop0: detected capacity change from 0 to 32768
[  319.153971][ T8030] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  319.227719][ T8030] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  319.330055][ T5917] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  319.581710][ T8030] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  319.587954][ T8030] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  320.346477][ T8030] BTRFS error (device loop0): open_ctree failed: -12
[  320.622763][ T8072] ubi31: attaching mtd0
[  320.659124][ T8072] ubi31: scanning is finished
[  320.663863][ T8072] ubi31: empty MTD device detected
[  320.815659][ T5990] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  320.945780][ T5990] usb 6-1: device descriptor read/64, error -71
[  321.049251][ T8072] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  321.064561][ T8072] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  321.075029][ T8072] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  321.755781][ T8072] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  321.763365][ T8072] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  321.766330][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  321.771735][ T8072] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  321.786408][ T8072] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1470048703
[  321.796657][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  321.803684][ T8072] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  321.839181][ T8081] ubi31: background thread "ubi_bgt31d" started, PID 8081
[  322.048318][ T5917] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  322.105604][ T5990] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  322.126386][ T5917] usb 3-1: USB disconnect, device number 7
[  322.255505][ T5990] usb 6-1: device descriptor read/64, error -71
[  322.383433][ T5990] usb usb6-port1: attempt power cycle
[  322.855670][ T5990] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  322.916555][ T5990] usb 6-1: device descriptor read/8, error -71
[  322.926537][ T5933] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  323.139684][ T5933] usb 5-1: Using ep0 maxpacket: 16
[  323.175720][ T5990] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  323.791592][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  323.805550][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  323.821658][ T5933] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  323.831244][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.845243][ T5933] usb 5-1: Product: syz
[  323.853893][ T5933] usb 5-1: Manufacturer: syz
[  324.663590][ T5933] usb 5-1: SerialNumber: syz
[  324.715153][ T5990] usb 6-1: device descriptor read/8, error -71
[  324.722800][ T5933] usb 5-1: config 0 descriptor??
[  324.740545][ T5933] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  324.789195][ T5933] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  324.855856][ T5990] usb usb6-port1: unable to enumerate USB device
[  326.250989][ T5933] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  326.278295][ T5933] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  326.308012][ T5933] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  326.315333][ T5933] em28xx 5-1:0.0: No AC97 audio processor
[  326.330276][ T5933] usb 5-1: USB disconnect, device number 12
[  326.438888][ T5933] em28xx 5-1:0.0: Disconnecting em28xx
[  327.241657][ T8123] netlink: 'syz.0.694': attribute type 10 has an invalid length.
[  327.249765][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.694'.
[  327.369624][ T5933] em28xx 5-1:0.0: Freeing device
[  327.527348][ T8131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  327.562913][ T8113] loop1: detected capacity change from 0 to 32768
[  327.593162][ T8113] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.691 (8113)
[  327.625723][ T8113] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  327.641776][ T8113] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  327.707185][ T8113] BTRFS info (device loop1): rebuilding free space tree
[  327.727376][ T8151] Cannot find del_set index 65534 as target
[  327.742420][ T8113] BTRFS info (device loop1): setting nodatasum
[  327.782278][ T8113] BTRFS info (device loop1): setting nodatacow
[  327.815574][ T8113] BTRFS info (device loop1): enabling ssd optimizations
[  327.822950][ T8113] BTRFS info (device loop1): turning off barriers
[  327.830377][ T8113] BTRFS info (device loop1): turning on flush-on-commit
[  327.838223][ T8113] BTRFS info (device loop1): enabling free space tree
[  327.845100][ T8113] BTRFS info (device loop1): force clearing of disk cache
[  327.938432][ T5831] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  328.912878][ T8159] fuse: Bad value for 'fd'
[  329.345639][ T5933] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  329.479050][ T8123] team0: entered promiscuous mode
[  329.484124][ T8123] team_slave_0: entered promiscuous mode
[  329.495582][ T5814] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  329.625744][ T8173] netlink: 220 bytes leftover after parsing attributes in process `syz.2.705'.
[  330.673533][ T8123] team_slave_1: entered promiscuous mode
[  330.708839][ T8123] team0: entered allmulticast mode
[  330.718768][ T8123] team_slave_0: entered allmulticast mode
[  330.741803][ T8123] team_slave_1: entered allmulticast mode
[  330.752970][ T8123] bridge0: port 3(team0) entered blocking state
[  330.784122][ T8123] bridge0: port 3(team0) entered disabled state
[  330.811947][ T8123] bridge0: port 3(team0) entered blocking state
[  330.818542][ T8123] bridge0: port 3(team0) entered forwarding state
[  330.827065][ T5933] usb 5-1: device descriptor read/64, error -71
[  330.867714][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  330.897333][ T5814] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  330.915029][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.934302][ T5814] usb 2-1: Product: syz
[  330.945663][ T5814] usb 2-1: Manufacturer: syz
[  330.950305][ T5814] usb 2-1: SerialNumber: syz
[  331.125671][ T5896] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  331.165484][ T5814] usb 2-1: config 0 descriptor??
[  331.179946][ T5814] powermate 2-1:0.0: probe with driver powermate failed with error -5
[  331.216466][ T5933] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  331.350584][ T5896] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  331.979474][ T5896] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  331.990468][ T5917] usb 2-1: USB disconnect, device number 8
[  332.019423][ T5896] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  332.038289][ T5896] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  332.048337][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  332.065149][ T5896] usb 6-1: Product: syz
[  332.104291][ T5896] usb 6-1: Manufacturer: syz
[  332.114028][ T5896] usb 6-1: SerialNumber: syz
[  332.654954][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  332.968571][ T5896] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  333.173459][ T5896] usb 6-1: USB disconnect, device number 13
[  333.183677][ T5896] usblp0: removed
[  333.316134][ T8214] netlink: 'syz.4.723': attribute type 10 has an invalid length.
[  333.368840][ T8214] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  335.716514][ T5896] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  336.547534][ T5896] usb 6-1: device descriptor read/64, error -71
[  337.016547][ T5896] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  337.698311][ T5896] usb 6-1: device descriptor read/64, error -71
[  337.836006][ T5896] usb usb6-port1: attempt power cycle
[  337.912262][ T8255] netlink: 168 bytes leftover after parsing attributes in process `syz.2.735'.
[  338.057910][   T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  338.294164][ T8266] i2c i2c-0: Invalid block write size 252
[  338.384689][ T5896] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  338.442234][ T5896] usb 6-1: device descriptor read/8, error -71
[  338.576004][ T5933] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  338.947272][ T8268] vivid-001: kernel_thread() failed
[  339.185332][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  339.225517][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  339.272272][   T10] usb 5-1: config 1 has an invalid interface number: 138 but max is 0
[  339.300513][   T10] usb 5-1: config 1 has no interface number 0
[  339.315568][   T10] usb 5-1: config 1 interface 138 has no altsetting 0
[  339.323400][ T5933] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  339.336245][   T10] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  339.356931][ T5933] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  339.366494][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.374622][   T10] usb 5-1: Product: syz
[  339.409101][   T10] usb 5-1: Manufacturer: syz
[  339.413773][   T10] usb 5-1: SerialNumber: syz
[  339.469414][ T5933] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  339.498546][ T5933] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  339.516258][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  339.535068][ T5933] usb 2-1: Product: syz
[  339.539758][ T5933] usb 2-1: Manufacturer: syz
[  340.666100][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  340.755039][ T5933] usb 2-1: SerialNumber: syz
[  341.444522][   T10] usb 5-1: USB disconnect, device number 15
[  341.733152][ T5933] usb 2-1: can't set config #1, error -71
[  341.765687][ T5933] usb 2-1: USB disconnect, device number 9
[  343.314623][ T8301] Invalid ELF header type: 3 != 1
[  345.925550][   T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  346.075919][ T8333] loop3: detected capacity change from 0 to 512
[  346.085475][ T8333] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  346.110033][   T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  346.128588][ T8333] EXT4-fs (loop3): orphan cleanup on readonly fs
[  346.130861][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.138726][ T8333] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.758: inode has both inline data and extents flags
[  346.148698][   T10] usb 2-1: Product: syz
[  346.158306][ T8333] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.758: couldn't read orphan inode 15 (err -117)
[  346.162743][   T10] usb 2-1: Manufacturer: syz
[  346.182790][   T10] usb 2-1: SerialNumber: syz
[  346.186053][ T8333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  346.188710][ T5917] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  346.415573][ T5990] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  346.668337][ T5917] usb 6-1: device descriptor read/64, error -71
[  346.720694][ T5990] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  346.726539][   T10] usb 2-1: config 0 descriptor??
[  346.732502][ T5990] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  346.765269][ T5990] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  346.846624][ T5990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  346.849047][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.866725][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  346.875673][ T5990] usb 3-1: Product: syz
[  346.880002][ T5990] usb 3-1: Manufacturer: syz
[  346.885120][ T5990] usb 3-1: SerialNumber: syz
[  347.017298][ T5917] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  347.035801][   T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  347.176872][ T5917] usb 6-1: device descriptor read/64, error -71
[  347.327207][ T5917] usb usb6-port1: attempt power cycle
[  347.765739][ T5917] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  347.814964][ T5990] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  347.858556][ T5917] usb 6-1: device descriptor read/8, error -71
[  347.906856][ T5990] usb 3-1: USB disconnect, device number 8
[  347.916329][ T5990] usblp0: removed
[  348.135789][ T5917] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  349.090128][ T5917] usb 6-1: device descriptor read/8, error -71
[  349.103243][   T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  349.117468][   T10] usb 2-1: USB disconnect, device number 10
[  349.219651][ T5917] usb usb6-port1: unable to enumerate USB device
[  350.936695][ T8372] netlink: 'syz.4.770': attribute type 10 has an invalid length.
[  351.288312][ T8381] netlink: 68 bytes leftover after parsing attributes in process `syz.4.774'.
[  351.309852][ T5917] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  351.520369][ T5917] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  351.562301][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  351.581953][ T5917] usb 2-1: Product: syz
[  351.591925][ T5917] usb 2-1: Manufacturer: syz
[  351.615788][ T5917] usb 2-1: SerialNumber: syz
[  351.625705][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  351.655213][ T5917] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  351.655775][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.777'.
[  351.693675][ T8387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.809145][   T10] usb 3-1: Using ep0 maxpacket: 32
[  351.854918][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  351.922220][ T5917] vp7045: USB control message 'out' went wrong.
[  351.935759][ T5917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  351.948910][   T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  351.958640][ T5917] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  351.968088][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.977913][   T10] usb 3-1: Product: syz
[  351.996405][ T5917] usb 2-1: USB disconnect, device number 11
[  352.002464][   T10] usb 3-1: Manufacturer: syz
[  352.018487][   T10] usb 3-1: SerialNumber: syz
[  352.046142][   T10] usb 3-1: config 0 descriptor??
[  352.466931][   T10] gs_usb 3-1:0.0: Configuring for 235 interfaces
[  353.479342][   T10] gs_usb 3-1:0.0: Disabling termination support for channel 1 (-EPROTO)
[  353.509748][   T10] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO)
[  353.615600][ T5896] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  353.690121][ T8375] loop5: detected capacity change from 0 to 65536
[  353.709149][ T8410] Bluetooth: MGMT ver 1.23
[  353.929435][ T5896] usb 1-1: device descriptor read/64, error -71
[  354.245721][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  354.546506][   T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[  354.554709][ T8375] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  354.588086][ T8375] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop5": -EINTR
[  354.589106][ T8375] XFS (loop5): log mount failed
[  354.610507][   T10] usb 3-1: USB disconnect, device number 9
[  354.744882][ T5896] usb 1-1: device descriptor read/64, error -71
[  354.855957][ T5896] usb usb1-port1: attempt power cycle
[  355.025565][ T5990] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  355.198075][ T5990] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  355.205656][ T5896] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  355.225855][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.246495][ T5896] usb 1-1: device descriptor read/8, error -71
[  355.475651][ T5990] usb 2-1: config 0 descriptor??
[  355.855506][ T5896] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  355.928850][ T5896] usb 1-1: device descriptor read/8, error -71
[  356.065847][ T5896] usb usb1-port1: unable to enumerate USB device
[  356.620720][ T5990] usb 2-1: Cannot set autoneg
[  356.909095][ T5990] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[  356.936379][ T5990] usb 2-1: USB disconnect, device number 12
[  361.521926][ T8465] loop4: detected capacity change from 0 to 256
[  361.644744][ T8465] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  362.079123][ T8465] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  362.273051][ T8473] netlink: 'syz.2.804': attribute type 10 has an invalid length.
[  363.953755][ T8492] Invalid ELF header type: 3 != 1
[  364.842826][ T8499] netlink: 108 bytes leftover after parsing attributes in process `syz.3.811'.
[  364.851943][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.811'.
[  365.565489][ T5990] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  365.603841][ T8496] netlink: 48 bytes leftover after parsing attributes in process `syz.0.814'.
[  366.007789][ T5990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  366.431338][ T8515] netlink: 220 bytes leftover after parsing attributes in process `syz.5.817'.
[  367.065513][ T5990] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  367.086496][ T5990] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  367.104127][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  367.146636][ T5990] usb 5-1: SerialNumber: syz
[  367.189661][ T8517] loop5: detected capacity change from 0 to 256
[  367.246338][ T8517] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  367.520090][ T5990] usb 5-1: 0:2 : does not exist
[  367.535737][ T8517] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff)
[  367.725010][ T5990] usb 5-1: USB disconnect, device number 16
[  367.738236][ T8528] i2c i2c-0: Invalid block write size 252
[  368.589102][ T8545] syzkaller0: entered promiscuous mode
[  368.594636][ T8545] syzkaller0: entered allmulticast mode
[  369.605869][ T8556] i2c i2c-0: Invalid block write size 252
[  369.647310][ T8560] netlink: 'syz.4.830': attribute type 14 has an invalid length.
[  370.964798][ T8580] i2c i2c-0: Invalid block write size 252
[  374.954241][ T8604] dvmrp0: entered allmulticast mode
[  375.006354][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'.
[  375.410721][ T8606] i2c i2c-0: Invalid block write size 252
[  375.833657][ T5990] IPVS: starting estimator thread 0...
[  376.075651][ T8612] IPVS: using max 21 ests per chain, 50400 per kthread
[  376.855833][   T52] Bluetooth: Frame is too long (len 52, expected len 4)
[  380.400243][ T8655] netlink: 220 bytes leftover after parsing attributes in process `syz.0.860'.
[  381.309699][ T8657] i2c i2c-0: Invalid block write size 252
[  381.386685][ T8659] random: crng reseeded on system resumption
[  382.478690][ T8665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.655522][ T5896] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  382.810606][ T5896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  382.830842][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.186304][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  383.192724][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  383.675048][ T5896] usb 1-1: Product: syz
[  383.790675][ T5896] usb 1-1: Manufacturer: syz
[  383.795929][ T5896] usb 1-1: SerialNumber: syz
[  383.853670][ T5896] usb 1-1: config 0 descriptor??
[  384.204922][ T5896] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  385.604869][ T5896] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  386.332267][ T8690] wlan0 speed is unknown, defaulting to 1000
[  386.937782][   T10] usb 1-1: USB disconnect, device number 9
[  387.075499][ T5896] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  387.327973][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  387.505518][ T5896] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  387.561945][ T5896] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  387.581427][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  387.594273][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  387.605652][ T5896] usb 4-1: Product: syz
[  387.609824][ T5896] usb 4-1: Manufacturer: syz
[  387.614414][ T5896] usb 4-1: SerialNumber: syz
[  387.870966][ T5896] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  387.905142][ T5896] usb 4-1: USB disconnect, device number 7
[  387.943323][ T5896] usblp0: removed
[  388.313590][ T8718] process 'syz.5.878' launched './file0' with NULL argv: empty string added
[  388.433064][ T8718] IPv6: sit1: Disabled Multicast RS
[  388.450140][ T8718] sit1: entered allmulticast mode
[  390.071048][ T8730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.070823][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'.
[  396.611898][ T8757] block device autoloading is deprecated and will be removed.
[  397.981884][ T8786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  398.029890][ T8790] Invalid ELF header magic: != ELF
[  399.581885][ T8801] i2c i2c-0: Invalid block write size 252
[  400.698245][ T8809] Invalid ELF header type: 3 != 1
[  403.143811][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'.
[  407.639656][ T8847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  407.760826][ T5142] Bluetooth: hci5: command 0x0406 tx timeout
[  410.720683][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'.
[  412.088482][ T8882] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  412.114857][ T8882] CIFS mount error: No usable UNC path provided in device string!
[  412.114857][ T8882] 
[  412.125389][ T8882] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  415.197996][ T8909] netlink: 'syz.5.940': attribute type 14 has an invalid length.
[  416.098448][ T5990] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  416.277027][ T5990] usb 3-1: device descriptor read/64, error -71
[  416.363156][ T8907] loop4: detected capacity change from 0 to 32768
[  416.392079][ T8928] IPv6: sit1: Disabled Multicast RS
[  416.402244][ T8907] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.938 (8907)
[  416.416549][ T8928] sit1: entered allmulticast mode
[  416.464829][ T8907] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  416.482105][ T8907] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  416.486250][ T5933] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  416.558731][ T5990] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  416.648711][ T5814] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  416.717614][ T5933] usb 1-1: config 0 has an invalid interface number: 49 but max is 0
[  416.729858][ T5933] usb 1-1: config 0 has no interface number 0
[  416.746667][ T5990] usb 3-1: device descriptor read/64, error -71
[  416.780930][ T5933] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  416.824310][ T5933] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  416.936986][ T5990] usb usb3-port1: attempt power cycle
[  416.938635][ T8907] BTRFS info (device loop4): rebuilding free space tree
[  416.943253][ T5933] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  416.980079][ T5814] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  417.021432][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.038452][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.046748][ T5814] usb 4-1: Product: syz
[  417.051207][ T5814] usb 4-1: Manufacturer: syz
[  417.056668][ T5933] usb 1-1: Product: syz
[  417.061313][ T5814] usb 4-1: SerialNumber: syz
[  417.066172][ T5933] usb 1-1: Manufacturer: syz
[  417.067346][ T8907] BTRFS info (device loop4): setting nodatasum
[  417.070890][ T5933] usb 1-1: SerialNumber: syz
[  417.186962][ T5814] usb 4-1: config 0 descriptor??
[  417.257574][ T5933] usb 1-1: config 0 descriptor??
[  417.265547][ T8907] BTRFS info (device loop4): setting nodatacow
[  417.271735][ T8907] BTRFS info (device loop4): enabling ssd optimizations
[  417.284467][ T8907] BTRFS info (device loop4): turning off barriers
[  417.292942][ T8907] BTRFS info (device loop4): turning on flush-on-commit
[  417.309515][ T8907] BTRFS info (device loop4): enabling free space tree
[  417.325600][ T8907] BTRFS info (device loop4): force clearing of disk cache
[  417.365533][ T5990] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  417.384172][   T30] audit: type=1800 audit(1762134249.682:7): pid=8907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.938" name="file1" dev="loop4" ino=260 res=0 errno=0
[  417.396630][ T5990] usb 3-1: device descriptor read/8, error -71
[  417.450320][ T5814] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  417.884596][ T8958] netlink: 220 bytes leftover after parsing attributes in process `syz.5.950'.
[  418.506629][ T5933] usb 1-1: USB disconnect, device number 10
[  418.672725][ T5990] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  418.943101][ T8955] loop4: detected capacity change from 32768 to 64
[  418.969667][ T8907] syz.4.938: attempt to access beyond end of device
[  418.969667][ T8907] loop4: rw=14337, sector=128, nr_sectors = 8 limit=64
[  418.996764][ T5990] usb 3-1: device descriptor read/8, error -71
[  419.042980][ T8907] BTRFS warning (device loop4): lost super block write due to IO error on /dev/loop4 (-5)
[  419.053311][ T8907] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  419.063706][ T8907] BTRFS error (device loop4): 1 errors while writing supers
[  419.071037][ T8907] BTRFS: error (device loop4) in write_all_supers:4088: errno=-5 IO failure (1 errors while writing supers)
[  419.083824][ T8907] BTRFS info (device loop4 state E): forced readonly
[  419.090659][ T8907] BTRFS error (device loop4 state EA): Transaction aborted (error -5)
[  419.099935][ T8907] BTRFS: error (device loop4 state EA) in btrfs_sync_log:3575: errno=-5 IO failure
[  419.204079][ T5990] usb usb3-port1: unable to enumerate USB device
[  419.305060][ T5829] BTRFS info (device loop4 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  419.383630][ T8972] netlink: 'syz.0.955': attribute type 14 has an invalid length.
[  419.505443][ T5990] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  419.604037][ T5814] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  419.799194][ T5814] usb 4-1: USB disconnect, device number 8
[  419.896141][ T5990] usb 3-1: Using ep0 maxpacket: 8
[  420.082042][ T5990] usb 3-1: config 162 has an invalid interface number: 143 but max is 0
[  420.147458][ T5990] usb 3-1: config 162 has no interface number 0
[  420.217007][ T5990] usb 3-1: config 162 interface 143 has no altsetting 0
[  420.363612][ T5990] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7
[  420.512370][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.611261][ T5990] usb 3-1: Product: syz
[  420.644981][ T5990] usb 3-1: Manufacturer: syz
[  420.673830][ T5990] usb 3-1: SerialNumber: syz
[  421.855712][ T5990] usb 3-1: USB disconnect, device number 14
[  423.352706][ T9005] netlink: 220 bytes leftover after parsing attributes in process `syz.1.964'.
[  424.064422][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.966'.
[  424.375658][ T5936] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  424.498230][ T5990] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  425.083393][ T5936] usb 4-1: device descriptor read/64, error -71
[  425.270494][ T9019] netlink: 'syz.0.970': attribute type 14 has an invalid length.
[  425.287438][ T5990] usb 2-1: config 0 has an invalid interface number: 49 but max is 0
[  425.315582][ T5990] usb 2-1: config 0 has no interface number 0
[  425.321833][ T5990] usb 2-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  425.345763][ T5936] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  425.364429][ T5990] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  425.387750][ T5990] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  425.405477][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.426353][ T5990] usb 2-1: Product: syz
[  425.430572][ T5990] usb 2-1: Manufacturer: syz
[  425.445934][ T5990] usb 2-1: SerialNumber: syz
[  425.461861][ T5990] usb 2-1: config 0 descriptor??
[  425.485520][ T5936] usb 4-1: device descriptor read/64, error -71
[  425.606184][ T5936] usb usb4-port1: attempt power cycle
[  426.427173][ T5990] usb 2-1: USB disconnect, device number 13
[  426.728662][ T5936] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  426.747359][ T9037] fuse: Bad value for 'fd'
[  426.794180][ T5936] usb 4-1: device descriptor read/8, error -71
[  426.814248][ T6694] Bluetooth: hci6: Frame reassembly failed (-84)
[  427.085699][ T5936] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  427.129035][ T5936] usb 4-1: device descriptor read/8, error -71
[  427.246705][ T5936] usb usb4-port1: unable to enumerate USB device
[  427.988570][ T9049] IPv6: sit1: Disabled Multicast RS
[  427.994802][ T9049] sit1: entered allmulticast mode
[  428.838305][ T9062] netlink: 220 bytes leftover after parsing attributes in process `syz.1.980'.
[  429.315122][ T5142] Bluetooth: hci6: command 0x1003 tx timeout
[  429.350809][   T52] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  430.223704][ T9076] netlink: 'syz.4.986': attribute type 14 has an invalid length.
[  430.302149][ T9079] i2c i2c-0: Invalid block write size 252
[  430.897128][ T9085] fuse: Bad value for 'fd'
[  431.374202][ T9087] loop1: detected capacity change from 0 to 512
[  431.408710][ T9087] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  432.295571][ T5896] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  432.465540][ T5896] usb 2-1: device descriptor read/64, error -71
[  432.845596][   T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  432.865505][ T5896] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  433.854428][ T5896] usb 2-1: device descriptor read/64, error -71
[  433.876150][   T10] usb 5-1: Using ep0 maxpacket: 32
[  433.991127][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  434.001430][   T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  434.035912][ T5896] usb usb2-port1: attempt power cycle
[  434.044638][   T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  434.099999][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.255243][   T10] usb 5-1: Product: syz
[  434.260834][   T10] usb 5-1: Manufacturer: syz
[  434.274581][   T10] usb 5-1: SerialNumber: syz
[  434.303629][   T10] usb 5-1: config 0 descriptor??
[  434.479071][ T5896] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  434.493639][ T9092] loop5: detected capacity change from 0 to 32768
[  434.520223][ T5896] usb 2-1: device descriptor read/8, error -71
[  434.533878][ T9120] netlink: 'syz.3.1001': attribute type 14 has an invalid length.
[  434.542325][ T9124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.568917][ T9092] JBD2: Ignoring recovery information on journal
[  434.835405][ T5896] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  435.127648][ T5896] usb 2-1: device descriptor read/8, error -71
[  435.266260][ T5896] usb usb2-port1: unable to enumerate USB device
[  435.448369][ T9092] JBD2: journal reset failed
[  435.460172][ T9092] (syz.5.993,9092,1):ocfs2_journal_load:1167 ERROR: Failed to load journal!
[  435.479889][ T9092] (syz.5.993,9092,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4
[  435.533285][ T9133] loop3: detected capacity change from 0 to 512
[  435.549760][ T9133] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  435.605009][ T5936] usb 5-1: USB disconnect, device number 17
[  435.702039][ T9139] i2c i2c-0: Invalid block write size 252
[  435.925715][ T5933] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  436.278737][ T5933] usb 2-1: Using ep0 maxpacket: 16
[  436.423022][ T5933] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  436.724692][ T9146] netlink: 'syz.0.1010': attribute type 10 has an invalid length.
[  436.732858][ T9146] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1010'.
[  436.767600][ T5933] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  436.824574][ T5933] usb 2-1: config 0 interface 0 has no altsetting 0
[  436.844846][ T5933] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  436.855479][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.887841][ T5933] usb 2-1: config 0 descriptor??
[  437.355498][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.363039][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_0
[  437.749543][ T9158] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.757165][ T9158] batman_adv: batadv0: Removing interface: batadv_slave_1
[  437.817785][ T5933] hid (null): unknown global tag 0xc
[  437.823141][ T5933] hid (null): unknown global tag 0xd
[  437.985699][ T5933] usb 2-1: USB disconnect, device number 18
[  438.529970][ T9168] netlink: 'syz.4.1016': attribute type 14 has an invalid length.
[  438.565445][ T9169] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1014'.
[  439.898743][ T9177] netlink: 'syz.4.1017': attribute type 10 has an invalid length.
[  439.935413][ T5896] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  439.958897][ T9177] 8021q: adding VLAN 0 to HW filter on device team0
[  439.969678][ T9177] bond0: (slave team0): Enslaving as an active interface with an up link
[  440.195384][ T5896] usb 1-1: device descriptor read/64, error -71
[  440.275111][ T9184] loop1: detected capacity change from 0 to 512
[  440.287595][ T9184] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  440.436391][ T5896] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  440.609254][ T9187] Invalid ELF header magic: != ELF
[  440.721850][ T5896] usb 1-1: device descriptor read/64, error -71
[  440.926239][ T5896] usb usb1-port1: attempt power cycle
[  441.204246][ T9191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  441.495670][ T5896] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  441.903854][ T5896] usb 1-1: device descriptor read/8, error -71
[  442.535654][ T5896] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  442.580662][ T5896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  442.595475][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.638993][ T5896] usb 1-1: Product: syz
[  442.658068][ T5896] usb 1-1: Manufacturer: syz
[  442.677759][ T5896] usb 1-1: SerialNumber: syz
[  443.069597][ T9182] loop2: detected capacity change from 0 to 32768
[  443.143301][ T9203] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  443.376453][ T5896] usb 1-1: config 0 descriptor??
[  443.425244][ T9207] netlink: 'syz.3.1029': attribute type 14 has an invalid length.
[  443.587955][ T5896] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  444.561039][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  444.734285][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  445.485030][   T30] audit: type=1326 audit(1762134277.762:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9219 comm="syz.4.1033" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f56f578efc9 code=0x0
[  445.827062][ T9225] loop3: detected capacity change from 0 to 512
[  445.840526][ T5896] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  445.857188][ T5896] usb 1-1: USB disconnect, device number 14
[  445.868937][ T9225] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  445.916479][ T9228] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  446.177063][ T9232] netlink: 'syz.5.1035': attribute type 10 has an invalid length.
[  446.220012][ T9232] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  448.580636][ T9253] netlink: 'syz.0.1042': attribute type 10 has an invalid length.
[  448.588765][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1042'.
[  448.854506][ T9258] IPVS: sh: FWM 3 0x00000003 - no destination available
[  448.895653][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  448.907193][ T9259] netlink: 'syz.4.1044': attribute type 14 has an invalid length.
[  450.329398][ T5936] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  451.145390][ T5936] usb 5-1: Using ep0 maxpacket: 32
[  451.177849][ T5936] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  451.187904][ T5936] usb 5-1: config 0 has no interface number 0
[  451.198007][ T5936] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  451.215541][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.223686][ T5936] usb 5-1: Product: syz
[  451.228735][ T5936] usb 5-1: Manufacturer: syz
[  451.233517][ T5936] usb 5-1: SerialNumber: syz
[  451.241288][ T5936] usb 5-1: config 0 descriptor??
[  451.252100][ T5936] smsc95xx v2.0.0
[  451.739259][ T9284] netlink: 'syz.3.1050': attribute type 10 has an invalid length.
[  451.955533][ T5896] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  452.096380][ T5936] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  452.155655][ T5896] usb 3-1: Using ep0 maxpacket: 32
[  452.218549][ T5896] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  452.255665][ T5896] usb 3-1: config 0 has no interface number 0
[  452.279701][ T5896] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  452.296862][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.307716][ T5936] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  452.326671][ T5896] usb 3-1: Product: syz
[  452.345422][ T5896] usb 3-1: Manufacturer: syz
[  452.352808][ T5936] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  452.417915][ T5896] usb 3-1: SerialNumber: syz
[  452.432624][ T5936] usb 5-1: USB disconnect, device number 18
[  452.434976][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'.
[  452.458244][ T5896] usb 3-1: config 0 descriptor??
[  452.471065][ T5896] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  452.485442][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1054'.
[  452.677157][ T5896] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  452.781159][ T5896] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  454.027305][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  454.031935][ T5933] usb 3-1: USB disconnect, device number 15
[  454.205813][ T5933] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  454.226475][ T5933] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  454.239014][ T5933] quatech2 3-1:0.51: device disconnected
[  454.565422][ T9305] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  455.311315][ T9305] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  457.006971][ T9327] Invalid ELF header magic: != ELF
[  457.640489][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'.
[  457.690743][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'.
[  457.825446][ T5917] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  458.033400][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  459.261127][ T9354] netlink: 'syz.1.1073': attribute type 10 has an invalid length.
[  459.284071][ T9354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1073'.
[  459.296449][ T9354] team0: entered promiscuous mode
[  459.302080][ T9354] team_slave_0: entered promiscuous mode
[  459.309005][ T9354] team_slave_1: entered promiscuous mode
[  459.319170][ T5917] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  459.338014][ T9354] team0: entered allmulticast mode
[  459.343508][ T9354] team_slave_0: entered allmulticast mode
[  459.351046][ T9354] team_slave_1: entered allmulticast mode
[  459.363355][ T9354] bridge0: port 3(team0) entered blocking state
[  459.374699][ T9354] bridge0: port 3(team0) entered disabled state
[  459.406158][ T9354] bridge0: port 3(team0) entered blocking state
[  459.413055][ T9354] bridge0: port 3(team0) entered forwarding state
[  459.685966][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.760970][ T5917] usb 4-1: Product: syz
[  459.801549][ T5917] usb 4-1: Manufacturer: syz
[  459.815445][ T5917] usb 4-1: SerialNumber: syz
[  459.966809][ T5917] usb 4-1: config 0 descriptor??
[  460.189857][ T5917] powermate 4-1:0.0: probe with driver powermate failed with error -22
[  460.413756][   T10] usb 4-1: USB disconnect, device number 13
[  461.726165][ T9370] syzkaller0: entered promiscuous mode
[  461.731902][ T9370] syzkaller0: entered allmulticast mode
[  468.779009][ T9424] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  473.943478][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1085'.
[  473.953226][ T9399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1085'.
[  475.200547][ T5917] wlan0 speed is unknown, defaulting to 1000
[  475.305756][ T5917] syz1: Port: 1 Link DOWN
[  478.284518][ T5933] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  479.465427][ T5936] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  479.549567][ T5933] usb 1-1: config 0 has no interfaces?
[  479.595085][ T5933] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  479.625482][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  479.633738][ T5933] usb 1-1: Product: syz
[  479.674444][ T5933] usb 1-1: Manufacturer: syz
[  479.688929][ T5933] usb 1-1: SerialNumber: syz
[  479.697751][ T9513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'.
[  479.720030][ T5933] usb 1-1: config 0 descriptor??
[  479.727755][ T9513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1118'.
[  479.737261][ T5936] usb 2-1: Using ep0 maxpacket: 16
[  480.496986][ T5933] usb 1-1: USB disconnect, device number 15
[  480.861807][ T5936] usb 2-1: unable to get BOS descriptor or descriptor too short
[  480.887835][ T5936] usb 2-1: unable to read config index 0 descriptor/start: -71
[  480.903527][ T5936] usb 2-1: can't read configurations, error -71
[  486.554550][ T9578] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1138'.
[  489.212784][ T9609] IPv6: sit1: Disabled Multicast RS
[  489.219721][ T9609] sit1: entered allmulticast mode
[  495.044367][ T9662] syzkaller0: entered promiscuous mode
[  495.050898][ T9662] syzkaller0: entered allmulticast mode
[  495.165877][ T5936] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  495.454725][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  496.245358][ T5936] usb 2-1: config 0 has no interfaces?
[  496.256839][ T5936] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  496.275608][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  496.285423][ T5936] usb 2-1: Product: syz
[  496.289629][ T5936] usb 2-1: Manufacturer: syz
[  496.294245][ T5936] usb 2-1: SerialNumber: syz
[  496.309172][ T5936] usb 2-1: config 0 descriptor??
[  496.660930][ T9665] syzkaller0: entered promiscuous mode
[  496.756642][ T9665] syzkaller0: entered allmulticast mode
[  496.930050][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  497.135508][   T10] usb 5-1: Using ep0 maxpacket: 8
[  497.340661][   T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  497.393862][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.440291][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  497.467649][   T10] pvrusb2: **********
[  497.480292][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  497.505774][   T10] pvrusb2: Important functionality might not be entirely working.
[  497.531845][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  497.571977][   T10] pvrusb2: **********
[  497.666399][ T2340] pvrusb2: Invalid write control endpoint
[  497.781437][ T2340] pvrusb2: Invalid write control endpoint
[  497.810406][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  497.829680][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  497.878833][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  497.899648][ T2340] pvrusb2: Device being rendered inoperable
[  497.949430][ T9681] pvrusb2: Attempted to execute control transfer when device not ok
[  497.982721][ T5917] usb 5-1: USB disconnect, device number 19
[  498.001949][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  498.015643][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  498.042483][ T5936] usb 2-1: USB disconnect, device number 21
[  498.064365][ T2340] pvrusb2: Attached sub-driver cx25840
[  498.082064][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  498.124953][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  505.245716][ T5917] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  505.436094][ T5917] usb 2-1: Using ep0 maxpacket: 8
[  505.497485][ T5917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  505.506822][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.527480][ T5917] pvrusb2: Hardware description: Terratec Grabster AV400
[  505.534562][ T5917] pvrusb2: **********
[  505.575317][ T5917] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  505.615439][ T5917] pvrusb2: Important functionality might not be entirely working.
[  505.641968][ T5917] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  505.679497][ T5917] pvrusb2: **********
[  505.736143][ T2340] pvrusb2: Invalid write control endpoint
[  505.841801][ T2340] pvrusb2: Invalid write control endpoint
[  505.847962][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  505.858088][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  506.001322][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  506.009667][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  506.019283][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  506.029523][ T2340] pvrusb2: Device being rendered inoperable
[  506.045477][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  506.052638][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  506.060390][ T9761] pvrusb2: Attempted to execute control transfer when device not ok
[  506.076121][ T2340] pvrusb2: Attached sub-driver cx25840
[  506.077649][ T5917] usb 2-1: USB disconnect, device number 22
[  506.081631][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  506.081671][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  507.071284][ T9727] pim6reg: entered allmulticast mode
[  507.078236][ T9729] pim6reg: left allmulticast mode
[  509.505414][ T5917] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  509.797883][ T5917] usb 3-1: config 6 has an invalid interface number: 2 but max is 0
[  509.825516][ T5917] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  509.844672][ T5917] usb 3-1: config 6 has no interface number 0
[  509.863259][ T5917] usb 3-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  509.934277][ T5917] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  509.996072][ T5917] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  510.126645][ T5917] usb 3-1: Product: syz
[  510.170341][ T5917] usb 3-1: Manufacturer: syz
[  510.231366][ T5917] usb 3-1: SerialNumber: syz
[  510.263195][ T5917] hso 3-1:6.2: Failed to find INT IN ep
[  510.468327][ T5917] usb 3-1: USB disconnect, device number 16
[  514.585354][ T5936] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  514.765387][ T5936] usb 3-1: Using ep0 maxpacket: 16
[  514.794860][ T5936] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  514.845469][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.876394][ T5936] usb 3-1: Product: syz
[  514.895575][ T5936] usb 3-1: Manufacturer: syz
[  514.904505][ T5936] usb 3-1: SerialNumber: syz
[  514.923049][ T5936] usb 3-1: config 0 descriptor??
[  515.141194][ T5936] speedtch 3-1:0.0: speedtch_bind: data interface not found!
[  515.773456][ T5936] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  515.852479][ T5936] usb 3-1: USB disconnect, device number 17
[  517.344424][ T9882] fuse: Bad value for 'fd'
[  521.185638][   T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  521.506502][   T10] usb 6-1: Using ep0 maxpacket: 8
[  521.545954][   T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  521.580221][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.605544][   T10] usb 6-1: Product: syz
[  521.617375][   T10] usb 6-1: Manufacturer: syz
[  521.664107][   T10] usb 6-1: SerialNumber: syz
[  521.728326][   T10] usb 6-1: config 0 descriptor??
[  522.002634][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  523.385452][ T5896] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  523.545831][ T5896] usb 1-1: Using ep0 maxpacket: 32
[  523.572097][ T5896] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  523.594522][ T5896] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  523.634100][ T5896] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  523.660007][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  523.706833][ T5896] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  523.748194][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[  523.795372][ T5896] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  523.806290][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  523.822102][ T5896] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  523.864708][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.897490][ T5896] usb 1-1: config 0 descriptor??
[  523.916999][ T9927] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  524.148511][ T5896] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  524.593852][   T10] gspca_sonixj: reg_w err -71
[  524.605636][   T10] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  525.266055][   T10] usb 6-1: USB disconnect, device number 22
[  525.385037][ T5936] usb 1-1: USB disconnect, device number 16
[  525.411673][ T5936] usblp0: removed
[  527.271703][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  527.765394][   T10] usb 5-1: Using ep0 maxpacket: 32
[  527.825050][ T9968] netlink: 'syz.1.1241': attribute type 10 has an invalid length.
[  527.833410][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1241'.
[  527.957527][   T10] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  527.975782][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.985488][   T10] usb 5-1: Product: syz
[  527.995383][   T10] usb 5-1: Manufacturer: syz
[  528.005396][   T10] usb 5-1: SerialNumber: syz
[  528.013315][   T10] usb 5-1: config 0 descriptor??
[  528.567361][   T10] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-32
[  528.705415][   T10] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32)
[  529.046067][   T10] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -32
[  529.219480][   T10] usb 5-1: USB disconnect, device number 20
[  529.777546][T10007] input: syz0 as /devices/virtual/input/input8
[  531.131135][   T52] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  531.143188][   T52] CPU: 0 UID: 0 PID: 52 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  531.143219][   T52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  531.143234][   T52] Workqueue: hci3 hci_rx_work
[  531.143262][   T52] Call Trace:
[  531.143271][   T52]  <TASK>
[  531.143280][   T52]  dump_stack_lvl+0x189/0x250
[  531.143314][   T52]  ? __pfx_dump_stack_lvl+0x10/0x10
[  531.143343][   T52]  ? __pfx__printk+0x10/0x10
[  531.143370][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.143394][   T52]  ? kernfs_path_from_node+0x250/0x290
[  531.143420][   T52]  ? kernfs_path_from_node+0x2f/0x290
[  531.143450][   T52]  sysfs_create_dir_ns+0x259/0x280
[  531.143478][   T52]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  531.143505][   T52]  ? do_raw_spin_unlock+0x122/0x240
[  531.143539][   T52]  kobject_add_internal+0x59f/0xb40
[  531.143587][   T52]  kobject_add+0x155/0x220
[  531.143616][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.143645][   T52]  ? __pfx_kobject_add+0x10/0x10
[  531.143676][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.143699][   T52]  ? _raw_spin_unlock+0x28/0x50
[  531.143722][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.143749][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.143771][   T52]  ? get_device_parent+0x366/0x3a0
[  531.143801][   T52]  device_add+0x408/0xb50
[  531.143832][   T52]  hci_conn_add_sysfs+0xd5/0x1e0
[  531.143859][   T52]  le_conn_complete_evt+0xf39/0x1500
[  531.143903][   T52]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  531.143934][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.143957][   T52]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  531.143985][   T52]  ? __asan_memcpy+0x40/0x70
[  531.144018][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.144041][   T52]  ? skb_pull_data+0xfb/0x200
[  531.144072][   T52]  hci_le_conn_complete_evt+0x187/0x450
[  531.144109][   T52]  hci_event_packet+0x78f/0x1200
[  531.144137][   T52]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  531.144169][   T52]  ? __pfx_hci_event_packet+0x10/0x10
[  531.144195][   T52]  ? kcov_remote_start+0x4d3/0x7f0
[  531.144214][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.144237][   T52]  ? local_clock_noinstr+0xe0/0xe0
[  531.144267][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.144290][   T52]  ? hci_send_to_monitor+0xe2/0x570
[  531.144325][   T52]  hci_rx_work+0x46a/0xe80
[  531.144358][   T52]  ? process_scheduled_works+0x9ef/0x17b0
[  531.144384][   T52]  process_scheduled_works+0xae1/0x17b0
[  531.144436][   T52]  ? __pfx_process_scheduled_works+0x10/0x10
[  531.144467][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.144499][   T52]  worker_thread+0x8a0/0xda0
[  531.144550][   T52]  kthread+0x711/0x8a0
[  531.144586][   T52]  ? __pfx_worker_thread+0x10/0x10
[  531.144608][   T52]  ? __pfx_kthread+0x10/0x10
[  531.144633][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.144660][   T52]  ? _raw_spin_unlock_irq+0x23/0x50
[  531.144685][   T52]  ? srso_alias_return_thunk+0x5/0xfbef5
[  531.144708][   T52]  ? lockdep_hardirqs_on+0x9c/0x150
[  531.144733][   T52]  ? __pfx_kthread+0x10/0x10
[  531.144762][   T52]  ret_from_fork+0x4bc/0x870
[  531.144787][   T52]  ? __pfx_ret_from_fork+0x10/0x10
[  531.144817][   T52]  ? __switch_to_asm+0x39/0x70
[  531.144836][   T52]  ? __switch_to_asm+0x33/0x70
[  531.144852][   T52]  ? __pfx_kthread+0x10/0x10
[  531.144881][   T52]  ret_from_fork_asm+0x1a/0x30
[  531.144917][   T52]  </TASK>
[  531.145076][   T52] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  531.484591][   T52] Bluetooth: hci3: failed to register connection device
[  537.393275][T10065] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1269'.
[  537.595446][T10022] Bluetooth: hci3: command 0x0406 tx timeout
[  539.318456][T10083] netlink: 'syz.3.1275': attribute type 10 has an invalid length.
[  542.050792][T10022] Bluetooth: hci2: unexpected event for opcode 0x200f
[  544.822368][T10131] netlink: 'syz.5.1291': attribute type 10 has an invalid length.
[  556.335297][ T5896] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  556.426950][T10232] loop2: detected capacity change from 0 to 7
[  556.445484][ T5825] Dev loop2: unable to read RDB block 7
[  556.451871][ T5825]  loop2: unable to read partition table
[  556.475754][ T5825] loop2: partition table beyond EOD, truncated
[  556.678916][T10232] Dev loop2: unable to read RDB block 7
[  556.738663][T10232]  loop2: unable to read partition table
[  556.753079][ T5896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  556.766230][T10232] loop2: partition table beyond EOD, truncated
[  557.511857][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.519767][T10232] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  557.571502][ T5896] usb 1-1: Product: syz
[  557.581634][ T5896] usb 1-1: Manufacturer: syz
[  557.622226][ T5896] usb 1-1: SerialNumber: syz
[  557.649480][ T5896] usb 1-1: config 0 descriptor??
[  558.020455][ T5896] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  559.295805][ T5896] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  560.360398][ T5896] usb 1-1: USB disconnect, device number 17
[  564.560169][T10290] No control pipe specified
[  567.448659][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  567.455259][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  570.505427][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  570.789828][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  571.255526][T10333] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  571.285520][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  571.349027][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  571.433218][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  571.527229][   T10] usb 4-1: Product: syz
[  571.531458][   T10] usb 4-1: Manufacturer: syz
[  571.605277][   T10] usb 4-1: SerialNumber: syz
[  572.118250][T10346] IPv6: sit1: Disabled Multicast RS
[  572.133282][T10346] sit1: entered allmulticast mode
[  573.854764][   T10] usb 4-1: USB disconnect, device number 14
[  578.908479][T10390] tipc: Started in network mode
[  578.956339][T10390] tipc: Node identity 1e97572265fa, cluster identity 4711
[  578.992808][T10390] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  579.036275][T10391] syzkaller0: entered promiscuous mode
[  579.041788][T10391] syzkaller0: entered allmulticast mode
[  579.181734][T10390] tipc: Resetting bearer <eth:syzkaller0>
[  579.284899][T10389] tipc: Resetting bearer <eth:syzkaller0>
[  579.361551][T10389] tipc: Disabling bearer <eth:syzkaller0>
[  580.489544][T10404] netlink: 'syz.2.1375': attribute type 10 has an invalid length.
[  580.500440][T10404] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1375'.
[  580.510578][T10404] team0: entered promiscuous mode
[  580.516078][T10404] team_slave_0: entered promiscuous mode
[  580.530298][T10404] team_slave_1: entered promiscuous mode
[  580.548627][T10404] team0: entered allmulticast mode
[  580.554326][T10404] team_slave_0: entered allmulticast mode
[  580.561679][T10404] team_slave_1: entered allmulticast mode
[  580.601323][T10404] bridge0: port 3(team0) entered blocking state
[  580.611528][T10404] bridge0: port 3(team0) entered disabled state
[  580.722798][T10404] bridge0: port 3(team0) entered blocking state
[  580.729595][T10404] bridge0: port 3(team0) entered forwarding state
[  580.886004][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  581.618068][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  581.665279][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  581.728523][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  581.740714][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  581.752273][   T10] usb 2-1: Product: syz
[  581.765370][   T10] usb 2-1: Manufacturer: syz
[  581.777710][   T10] usb 2-1: SerialNumber: syz
[  585.427206][ T5917] usb 2-1: USB disconnect, device number 23
[  585.537091][T10440] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1385'.
[  587.301388][T10452] tipc: Started in network mode
[  587.365319][T10452] tipc: Node identity 56eab459aede, cluster identity 4711
[  587.423558][T10452] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  587.521889][T10454] syzkaller0: entered promiscuous mode
[  587.579474][T10454] syzkaller0: entered allmulticast mode
[  587.662758][T10454] tipc: Resetting bearer <eth:syzkaller0>
[  587.735167][T10451] tipc: Resetting bearer <eth:syzkaller0>
[  588.201401][T10451] tipc: Disabling bearer <eth:syzkaller0>
[  588.756958][T10464] netlink: 'syz.5.1394': attribute type 10 has an invalid length.
[  588.764921][T10464] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1394'.
[  588.774626][T10464] team0: entered promiscuous mode
[  588.779950][T10464] team_slave_0: entered promiscuous mode
[  588.794809][T10464] team_slave_1: entered promiscuous mode
[  588.808444][T10464] team0: entered allmulticast mode
[  588.813805][T10464] team_slave_0: entered allmulticast mode
[  588.819845][T10464] team_slave_1: entered allmulticast mode
[  588.865333][T10464] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  590.535366][ T5917] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  591.307939][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  591.402527][ T5917] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  591.446997][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  591.465707][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  591.480579][ T5917] usb 1-1: Product: syz
[  591.485062][ T5917] usb 1-1: Manufacturer: syz
[  591.490255][ T5917] usb 1-1: SerialNumber: syz
[  593.420055][T10500] Invalid ELF header type: 3 != 1
[  593.604156][ T5933] usb 1-1: USB disconnect, device number 18
[  598.404138][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  598.415308][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  598.425469][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  598.443653][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  598.452512][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  598.848079][T10542] wlan0 speed is unknown, defaulting to 1000
[  599.145608][   T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  599.407887][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  599.434495][   T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  599.854506][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  599.895939][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  599.910202][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  599.939255][   T10] usb 6-1: Product: syz
[  599.950570][   T10] usb 6-1: Manufacturer: syz
[  600.173974][   T10] usb 6-1: SerialNumber: syz
[  600.223512][T10542] chnl_net:caif_netlink_parms(): no params data found
[  600.409224][   T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  600.475495][ T5142] Bluetooth: hci6: command tx timeout
[  600.620388][   T10] usb 6-1: USB disconnect, device number 23
[  600.868356][   T10] usblp0: removed
[  601.690249][T10542] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.745470][T10542] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.772627][T10542] bridge_slave_0: entered allmulticast mode
[  601.792404][T10542] bridge_slave_0: entered promiscuous mode
[  602.255033][T10542] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.285726][T10542] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.293282][T10542] bridge_slave_1: entered allmulticast mode
[  602.310665][T10542] bridge_slave_1: entered promiscuous mode
[  602.492508][T10542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.555850][ T5142] Bluetooth: hci6: command tx timeout
[  602.675524][ T5933] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  602.689687][T10542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.895760][ T5933] usb 2-1: Using ep0 maxpacket: 32
[  602.950843][T10542] team0: Port device team_slave_0 added
[  602.973786][T10542] team0: Port device team_slave_1 added
[  602.983340][T10590] Invalid ELF header type: 3 != 1
[  603.003378][ T5933] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  603.033783][ T5933] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  603.071122][ T5933] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  603.107352][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  603.178044][T10542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.182319][ T5933] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  603.216725][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.226970][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[  603.294152][ T5933] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  603.335426][T10542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.345302][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  603.358145][T10542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.386213][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.475563][T10542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.477323][ T5933] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  603.514897][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.687502][T10542] hsr_slave_0: entered promiscuous mode
[  603.715253][T10542] hsr_slave_1: entered promiscuous mode
[  603.722345][ T5933] usb 2-1: config 0 descriptor??
[  603.736281][T10542] debugfs: 'hsr0' already exists in 'hsr'
[  603.749421][T10542] Cannot create hsr debugfs directory
[  603.807614][T10580] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  604.025824][ T5933] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  604.108105][ T5933] usb 2-1: USB disconnect, device number 24
[  604.160110][ T5933] usblp0: removed
[  604.636409][ T5142] Bluetooth: hci6: command tx timeout
[  604.860639][T10542] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  604.956269][T10542] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  605.638988][T10542] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  605.691981][T10542] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  607.267554][ T5142] Bluetooth: hci6: command tx timeout
[  607.353195][T10542] 8021q: adding VLAN 0 to HW filter on device bond0
[  607.374666][T10542] 8021q: adding VLAN 0 to HW filter on device team0
[  607.411691][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.419072][ T6695] bridge0: port 1(bridge_slave_0) entered forwarding state
[  607.656142][T10621] No control pipe specified
[  607.698349][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.705603][ T6695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  608.852256][T10542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  609.377256][ T5896] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  609.567710][ T5896] usb 2-1: Using ep0 maxpacket: 16
[  609.587870][T10640] Invalid ELF header type: 3 != 1
[  609.628271][ T5896] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  609.787444][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  609.831488][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  609.866617][ T5896] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  609.881626][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.914201][ T5896] usb 2-1: Product: syz
[  609.926688][ T5896] usb 2-1: Manufacturer: syz
[  609.956130][ T5896] usb 2-1: SerialNumber: syz
[  610.061166][T10542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  610.472723][ T5896] usb 2-1: 0:2 : does not exist
[  610.482819][ T5896] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1)
[  610.553592][ T5896] usb 2-1: USB disconnect, device number 25
[  611.383353][T10661] loop1: detected capacity change from 0 to 512
[  611.410970][T10542] veth0_vlan: entered promiscuous mode
[  611.422072][T10661] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  611.452472][T10542] veth1_vlan: entered promiscuous mode
[  611.879223][T10542] veth0_macvtap: entered promiscuous mode
[  611.890276][T10542] veth1_macvtap: entered promiscuous mode
[  612.115757][T10542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.139464][T10542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.889086][ T6694] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.911059][ T6694] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.978132][ T6694] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.012547][ T6694] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.278104][ T6695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.288361][ T6695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.770319][T10676] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  613.779574][T10676] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  613.820111][T10676] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  613.879364][ T6694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.950129][ T6694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.350126][T10698] i2c i2c-0: Invalid block write size 252
[  617.095582][T10705] loop2: detected capacity change from 0 to 512
[  617.137609][T10705] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  620.271343][T10731] No control pipe specified
[  620.726273][T10740] i2c i2c-0: Invalid block write size 252
[  620.822886][T10738] Invalid ELF header type: 3 != 1
[  622.930895][T10755] loop5: detected capacity change from 0 to 512
[  623.010617][T10755] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  623.451010][T10762] IPv6: sit1: Disabled Multicast RS
[  623.457223][T10762] sit1: entered allmulticast mode
[  625.007065][T10781] No control pipe specified
[  625.535345][T10675] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  625.552984][T10785] i2c i2c-0: Invalid block write size 252
[  625.793069][T10675] usb 3-1: config 0 has an invalid interface number: 49 but max is 0
[  625.825236][T10675] usb 3-1: config 0 has no interface number 0
[  626.271206][T10675] usb 3-1: config 0 interface 49 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  626.294997][T10675] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  626.304364][T10675] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.314491][T10675] usb 3-1: Product: syz
[  626.340358][T10675] usb 3-1: Manufacturer: syz
[  626.355590][T10675] usb 3-1: SerialNumber: syz
[  626.372192][T10675] usb 3-1: config 0 descriptor??
[  626.475871][T10783] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  626.831035][T10675] qmi_wwan 3-1:0.49: probe with driver qmi_wwan failed with error -22
[  626.870382][T10675] usb 3-1: USB disconnect, device number 18
[  628.855313][ T5889] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  628.882886][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  628.889313][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  629.165646][ T5889] usb 3-1: Using ep0 maxpacket: 8
[  630.322708][ T5889] usb 3-1: no configurations
[  631.345271][ T5889] usb 3-1: can't read configurations, error -22
[  631.665410][ T5889] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  634.499152][T10830] No control pipe specified
[  637.945635][ T5889] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  638.145248][ T5889] usb 5-1: Using ep0 maxpacket: 8
[  638.157757][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  638.185423][ T5889] usb 5-1: config 0 has no interfaces?
[  638.191908][ T5889] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  638.224179][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.256990][ T5889] usb 5-1: config 0 descriptor??
[  639.825113][T10870] pim6reg: entered allmulticast mode
[  641.283471][ T5936] usb 5-1: USB disconnect, device number 21
[  641.431445][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1520'.
[  643.632195][T10904] Invalid ELF header type: 3 != 1
[  648.445324][ T5990] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  649.041747][ T5990] usb 2-1: Using ep0 maxpacket: 8
[  649.060916][ T5990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  649.076068][ T5990] usb 2-1: config 0 has no interfaces?
[  649.109090][ T5990] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  649.169607][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.208199][ T5990] usb 2-1: config 0 descriptor??
[  649.599733][T10949] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  649.814871][T10949] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  649.840737][T10949] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  649.940375][T10953] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  650.999035][T10957] i2c i2c-0: Invalid block write size 99
[  652.433732][ T5936] usb 2-1: USB disconnect, device number 26
[  654.789965][ T5142] Bluetooth: hci0: unexpected cc 0x2007 length: 9 > 2
[  654.798370][ T5142] Bluetooth: hci0: unexpected event for opcode 0x2007
[  654.966732][ T5142] Bluetooth: hci6: link tx timeout
[  654.972271][ T5142] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  654.992437][T10022] Bluetooth: hci6: link tx timeout
[  654.997893][T10022] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  657.035294][T10022] Bluetooth: hci6: command 0x0406 tx timeout
[  657.141467][T11009] i2c i2c-0: Invalid block write size 252
[  657.365811][ T5936] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  657.795210][ T5936] usb 1-1: Using ep0 maxpacket: 8
[  658.080138][ T5936] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  658.095313][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.103509][ T5936] usb 1-1: Product: syz
[  658.107978][ T5936] usb 1-1: Manufacturer: syz
[  658.113745][ T5936] usb 1-1: SerialNumber: syz
[  658.412874][ T5936] usb 1-1: config 0 descriptor??
[  658.429458][ T5936] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  659.455443][ T5936] gspca_sonixj: reg_r err -110
[  659.460380][ T5936] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  660.073502][T11024] pim6reg: entered allmulticast mode
[  661.253225][T11037] netlink: 'syz.4.1567': attribute type 10 has an invalid length.
[  661.261289][T11037] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1567'.
[  661.270496][T11037] team0: entered promiscuous mode
[  661.275645][T11037] team_slave_0: entered promiscuous mode
[  661.281448][T11037] team_slave_1: entered promiscuous mode
[  661.287618][T11037] team0: entered allmulticast mode
[  661.292757][T11037] team_slave_0: entered allmulticast mode
[  661.298593][T11037] team_slave_1: entered allmulticast mode
[  661.310922][T11037] bond0: (slave team0): Releasing backup interface
[  661.338001][T11037] bridge0: port 3(team0) entered blocking state
[  661.344387][T11037] bridge0: port 3(team0) entered disabled state
[  661.500069][ T5990] usb 1-1: USB disconnect, device number 19
[  661.609032][T11045] Invalid ELF header magic: != ELF
[  665.244001][T11066] i2c i2c-0: Invalid block write size 252
[  667.844953][T11091] evm: overlay not supported
[  667.936965][T11079] syzkaller0: entered promiscuous mode
[  667.950164][T11079] syzkaller0: entered allmulticast mode
[  668.095529][ T5990] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  668.295244][ T5990] usb 2-1: Using ep0 maxpacket: 8
[  668.537217][ T5990] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  668.647336][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.657827][T11097] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1585'.
[  668.711877][ T5990] usb 2-1: Product: syz
[  668.722195][ T5990] usb 2-1: Manufacturer: syz
[  668.745218][ T5990] usb 2-1: SerialNumber: syz
[  668.767694][ T5990] usb 2-1: config 0 descriptor??
[  668.798118][ T5990] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  671.226016][ T5990] gspca_sonixj: reg_r err -32
[  671.231316][ T5990] sonixj 2-1:0.0: probe with driver sonixj failed with error -32
[  672.353069][ T5990] usb 2-1: USB disconnect, device number 27
[  672.868628][T11119] tipc: Started in network mode
[  672.902022][T11119] tipc: Node identity 7af224cdb176, cluster identity 4711
[  672.915646][T11119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  672.951015][T11118] tipc: Resetting bearer <eth:syzkaller0>
[  673.022770][T11120] syzkaller0: entered promiscuous mode
[  673.033580][T11120] syzkaller0: entered allmulticast mode
[  673.066477][T11115] tipc: Resetting bearer <eth:syzkaller0>
[  673.947988][ T5814] tipc: Node number set to 3414435021
[  673.965795][T11115] tipc: Disabling bearer <eth:syzkaller0>
[  675.725284][ T5889] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  676.435214][ T5889] usb 2-1: Using ep0 maxpacket: 32
[  676.525293][ T5889] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  676.541950][ T5889] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  676.562511][ T5889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  676.581997][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  676.612394][ T5889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  676.635015][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[  676.665539][ T5889] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  676.677992][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  676.727945][ T5889] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  676.737981][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.754255][ T5889] usb 2-1: config 0 descriptor??
[  676.775706][T11144] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  676.805241][ T5814] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  677.025250][ T5814] usb 3-1: Using ep0 maxpacket: 8
[  677.034791][ T5814] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  677.071987][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.095282][ T5889] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  677.116961][ T5814] usb 3-1: Product: syz
[  677.121199][ T5814] usb 3-1: Manufacturer: syz
[  677.146901][ T5814] usb 3-1: SerialNumber: syz
[  677.176594][ T5814] usb 3-1: config 0 descriptor??
[  677.235457][ T5814] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  677.288430][ T5936] usb 2-1: USB disconnect, device number 28
[  677.536185][ T5936] usblp0: removed
[  678.245475][ T5814] gspca_sonixj: reg_w1 err -110
[  678.250500][ T5814] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[  678.557214][T11172] syzkaller0: entered promiscuous mode
[  678.562832][T11172] syzkaller0: entered allmulticast mode
[  679.727946][T10675] usb 3-1: USB disconnect, device number 21
[  685.829739][T11195] IPv6: sit1: Disabled Multicast RS
[  685.836232][T11195] sit1: entered allmulticast mode
[  686.551469][T11236] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22
[  687.082143][T11236] netdevsim netdevsim6: Direct firmware load for . failed with error -22
[  687.180985][T11236] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[  690.000969][T11260] fuse: Bad value for 'fd'
[  690.326992][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  690.333517][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  691.081915][T11268] netlink: 'syz.0.1634': attribute type 10 has an invalid length.
[  691.089870][T11268] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1634'.
[  692.862728][T11283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1637'.
[  698.528410][T11322] IPv6: sit1: Disabled Multicast RS
[  698.534605][T11322] sit1: entered allmulticast mode
[  706.237865][ T5936] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  706.539112][ T5936] usb 1-1: device descriptor read/64, error -71
[  706.861449][ T5936] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  707.065685][ T5936] usb 1-1: device descriptor read/64, error -71
[  707.255821][ T5936] usb usb1-port1: attempt power cycle
[  707.655298][ T5936] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  707.711794][ T5936] usb 1-1: device descriptor read/8, error -71
[  707.759706][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1675'.
[  707.836793][T11398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  707.975260][ T5936] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  708.035616][ T5936] usb 1-1: device descriptor read/8, error -71
[  708.145317][T10675] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  708.145736][ T5936] usb usb1-port1: unable to enumerate USB device
[  708.336246][T10675] usb 5-1: unable to get BOS descriptor or descriptor too short
[  708.365033][T10675] usb 5-1: not running at top speed; connect to a high speed hub
[  708.388129][T10675] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  708.425232][T10675] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  708.492963][T10675] usb 5-1: string descriptor 0 read error: -22
[  708.505267][T10675] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  708.524814][T10675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.550714][T10675] usb 5-1: 0:2 : does not exist
[  709.714673][ T5142] Bluetooth: hci5: unexpected cc 0x2007 length: 9 > 2
[  709.722200][ T5142] Bluetooth: hci5: unexpected event for opcode 0x2007
[  710.175873][T10675] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  710.211210][T10675] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  710.242184][T10675] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  710.281176][T10675] usb 5-1: USB disconnect, device number 22
[  710.321026][T11428] fuse: Bad value for 'fd'
[  711.437960][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1694'.
[  711.890395][T11440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  713.825237][ T5889] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  714.015196][ T5889] usb 5-1: device descriptor read/64, error -71
[  714.077294][ T5142] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  714.087386][ T5142] CPU: 0 UID: 0 PID: 5142 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  714.087410][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  714.087422][ T5142] Workqueue: hci4 hci_rx_work
[  714.087448][ T5142] Call Trace:
[  714.087455][ T5142]  <TASK>
[  714.087463][ T5142]  dump_stack_lvl+0x189/0x250
[  714.087494][ T5142]  ? __pfx_dump_stack_lvl+0x10/0x10
[  714.087520][ T5142]  ? __pfx__printk+0x10/0x10
[  714.087544][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.087565][ T5142]  ? kernfs_path_from_node+0x250/0x290
[  714.087588][ T5142]  ? kernfs_path_from_node+0x2f/0x290
[  714.087615][ T5142]  sysfs_create_dir_ns+0x259/0x280
[  714.087640][ T5142]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  714.087671][ T5142]  ? do_raw_spin_unlock+0x122/0x240
[  714.087702][ T5142]  kobject_add_internal+0x59f/0xb40
[  714.087738][ T5142]  kobject_add+0x155/0x220
[  714.087764][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.087789][ T5142]  ? __pfx_kobject_add+0x10/0x10
[  714.087817][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.087837][ T5142]  ? _raw_spin_unlock+0x28/0x50
[  714.087858][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.087882][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.087902][ T5142]  ? get_device_parent+0x366/0x3a0
[  714.087930][ T5142]  device_add+0x408/0xb50
[  714.087955][ T5142]  hci_conn_add_sysfs+0xd5/0x1e0
[  714.087979][ T5142]  le_conn_complete_evt+0xf39/0x1500
[  714.088017][ T5142]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  714.088044][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.088064][ T5142]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  714.088089][ T5142]  ? __asan_memcpy+0x40/0x70
[  714.088119][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.088138][ T5142]  ? skb_pull_data+0xfb/0x200
[  714.088166][ T5142]  hci_le_conn_complete_evt+0x187/0x450
[  714.088198][ T5142]  hci_event_packet+0x78f/0x1200
[  714.088223][ T5142]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  714.088251][ T5142]  ? __pfx_hci_event_packet+0x10/0x10
[  714.088274][ T5142]  ? kcov_remote_start+0x4d3/0x7f0
[  714.088291][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.088312][ T5142]  ? local_clock_noinstr+0xe0/0xe0
[  714.088338][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.088358][ T5142]  ? hci_send_to_monitor+0xe2/0x570
[  714.088389][ T5142]  hci_rx_work+0x46a/0xe80
[  714.088417][ T5142]  ? process_scheduled_works+0x9ef/0x17b0
[  714.088440][ T5142]  process_scheduled_works+0xae1/0x17b0
[  714.088485][ T5142]  ? __pfx_process_scheduled_works+0x10/0x10
[  714.088512][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.088541][ T5142]  worker_thread+0x8a0/0xda0
[  714.088584][ T5142]  kthread+0x711/0x8a0
[  714.088612][ T5142]  ? __pfx_worker_thread+0x10/0x10
[  714.088632][ T5142]  ? __pfx_kthread+0x10/0x10
[  714.088659][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.088683][ T5142]  ? _raw_spin_unlock_irq+0x23/0x50
[  714.088704][ T5142]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.088725][ T5142]  ? lockdep_hardirqs_on+0x9c/0x150
[  714.088747][ T5142]  ? __pfx_kthread+0x10/0x10
[  714.088773][ T5142]  ret_from_fork+0x4bc/0x870
[  714.088795][ T5142]  ? __pfx_ret_from_fork+0x10/0x10
[  714.088821][ T5142]  ? __switch_to_asm+0x39/0x70
[  714.088835][ T5142]  ? __switch_to_asm+0x33/0x70
[  714.088850][ T5142]  ? __pfx_kthread+0x10/0x10
[  714.088875][ T5142]  ret_from_fork_asm+0x1a/0x30
[  714.088907][ T5142]  </TASK>
[  714.088930][ T5142] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  714.435244][ T5142] Bluetooth: hci4: failed to register connection device
[  714.568616][ T5889] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  714.763079][ T5889] usb 5-1: device descriptor read/64, error -71
[  714.935751][ T5889] usb usb5-port1: attempt power cycle
[  715.315244][ T5889] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  715.366076][ T5889] usb 5-1: device descriptor read/8, error -71
[  715.787450][ T5889] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  716.959872][ T5142] Bluetooth: hci4: command 0x0406 tx timeout
[  718.186320][ T5889] usb 5-1: device descriptor read/8, error -71
[  718.303999][ T5889] usb usb5-port1: unable to enumerate USB device
[  719.386910][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1715'.
[  719.419727][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  720.439567][T11533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  720.457321][T11533] syzkaller0: entered promiscuous mode
[  720.467909][T11533] syzkaller0: entered allmulticast mode
[  720.563582][T11533] tipc: Resetting bearer <eth:syzkaller0>
[  720.791843][T11532] tipc: Resetting bearer <eth:syzkaller0>
[  721.537613][T10675] tipc: Node number set to 2070763298
[  721.602814][T11532] tipc: Disabling bearer <eth:syzkaller0>
[  724.235860][   T31] INFO: task syz.3.1374:10407 blocked for more than 143 seconds.
[  724.243704][   T31]       Not tainted syzkaller #0
[  724.306741][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  724.325475][   T31] task:syz.3.1374      state:D stack:28296 pid:10407 tgid:10396 ppid:5828   task_flags:0x400040 flags:0x00080002
[  724.373790][   T31] Call Trace:
[  724.383014][   T31]  <TASK>
[  724.393579][   T31]  __schedule+0x1798/0x4cc0
[  724.409102][   T31]  ? __pfx___schedule+0x10/0x10
[  724.441463][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  724.472621][   T31]  ? schedule+0x91/0x360
[  724.499110][   T31]  schedule+0x165/0x360
[  724.532353][   T31]  futex_hash_allocate+0x754/0xe60
[  724.585453][   T31]  ? __pfx_futex_hash_allocate+0x10/0x10
[  724.598556][   T31]  ? __pfx_var_wake_function+0x10/0x10
[  724.614262][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  724.637488][   T31]  ? static_key_count+0x41/0x70
[  724.661710][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  724.689709][   T31]  ? security_task_prctl+0x163/0x190
[  724.725366][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  724.754590][   T31]  __se_sys_prctl+0x9f1/0x1830
[  724.781180][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  724.821813][   T31]  ? __pfx___se_sys_prctl+0x10/0x10
[  724.845346][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  724.863326][   T31]  ? __x64_sys_prctl+0x20/0xc0
[  724.875063][   T31]  do_syscall_64+0xfa/0xfa0
[  724.893076][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.912551][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  724.953519][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.993585][   T31] RIP: 0033:0x7f591e38efc9
[  725.014996][   T31] RSP: 002b:00007f591f1a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  725.058789][   T31] RAX: ffffffffffffffda RBX: 00007f591e5e6180 RCX: 00007f591e38efc9
[  725.115845][   T31] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e
[  725.145397][   T31] RBP: 00007f591e411f91 R08: 0000000000000000 R09: 0000000000000000
[  725.165320][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.197151][   T31] R13: 00007f591e5e6218 R14: 00007f591e5e6180 R15: 00007ffee4b67b98
[  725.239784][   T31]  </TASK>
[  725.244629][   T31] 
[  725.244629][   T31] Showing all locks held in the system:
[  725.264349][   T31] 1 lock held by khungtaskd/31:
[  725.312516][   T31]  #0: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  725.376146][   T31] 2 locks held by getty/5583:
[  725.412183][   T31]  #0: ffff88814dc750a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  725.459724][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  725.473030][   T31] 2 locks held by syz-executor/5839:
[  725.478820][   T31] 1 lock held by syz.6.1727/11551:
[  725.485495][   T31] 1 lock held by syz.0.1729/11558:
[  725.492340][   T31]  #0: ffff888078654d20 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0
[  725.503202][   T31] 4 locks held by syz.0.1729/11561:
[  725.509007][   T31] 
[  725.511432][   T31] =============================================
[  725.511432][   T31] 
[  725.522071][   T31] NMI backtrace for cpu 1
[  725.522099][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  725.522128][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  725.522145][   T31] Call Trace:
[  725.522156][   T31]  <TASK>
[  725.522167][   T31]  dump_stack_lvl+0x189/0x250
[  725.522223][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  725.522260][   T31]  ? __pfx__printk+0x10/0x10
[  725.522303][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  725.522338][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  725.522369][   T31]  ? __pfx__printk+0x10/0x10
[  725.522394][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.522430][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  725.522482][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  725.522513][   T31]  watchdog+0xf60/0xfa0
[  725.522548][   T31]  ? watchdog+0x1e2/0xfa0
[  725.522603][   T31]  kthread+0x711/0x8a0
[  725.522646][   T31]  ? __pfx_watchdog+0x10/0x10
[  725.522671][   T31]  ? __pfx_kthread+0x10/0x10
[  725.522710][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.522743][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  725.522777][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.522805][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  725.522839][   T31]  ? __pfx_kthread+0x10/0x10
[  725.522874][   T31]  ret_from_fork+0x4bc/0x870
[  725.522903][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  725.522937][   T31]  ? __switch_to_asm+0x39/0x70
[  725.522956][   T31]  ? __switch_to_asm+0x33/0x70
[  725.522974][   T31]  ? __pfx_kthread+0x10/0x10
[  725.523000][   T31]  ret_from_fork_asm+0x1a/0x30
[  725.523032][   T31]  </TASK>
[  725.523039][   T31] Sending NMI from CPU 1 to CPUs 0:
[  725.687086][    C0] NMI backtrace for cpu 0
[  725.687119][    C0] CPU: 0 UID: 0 PID: 5181 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) 
[  725.687146][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  725.687161][    C0] RIP: 0010:sock_def_readable+0x4/0x550
[  725.687205][    C0] Code: b2 54 ff ff e8 dd 1d a1 f8 5b 41 5c 41 5e 41 5f e9 4c 58 f1 f7 cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 55 41 54 53 50 48 89 fb 49 bd 00 00 00 00 00 fc
[  725.687223][    C0] RSP: 0018:ffffc90003e1fa98 EFLAGS: 00000246
[  725.687246][    C0] RAX: 1ffff1100473d8b1 RBX: 0000000000000058 RCX: 0000000000000000
[  725.687262][    C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880239ec400
[  725.687277][    C0] RBP: ffffc90003e1fc70 R08: ffff8880239ecac3 R09: 1ffff1100473d958
[  725.687294][    C0] R10: dffffc0000000000 R11: ffffffff891ee8d0 R12: ffff8880239ec400
[  725.687310][    C0] R13: ffff888078c233c0 R14: dffffc0000000000 R15: 1ffff920007c3f74
[  725.687330][    C0] FS:  00007f12a62f0c80(0000) GS:ffff88812613d000(0000) knlGS:0000000000000000
[  725.687349][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  725.687364][    C0] CR2: 0000200000208030 CR3: 0000000030e5d000 CR4: 0000000000350ef0
[  725.687382][    C0] Call Trace:
[  725.687394][    C0]  <TASK>
[  725.687403][    C0]  unix_dgram_sendmsg+0xe08/0x1850
[  725.687438][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.687468][    C0]  ? __lock_acquire+0xab9/0xd20
[  725.687512][    C0]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  725.687539][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.687569][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.687595][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.687620][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.687645][    C0]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  725.687681][    C0]  __sock_sendmsg+0x21c/0x270
[  725.687715][    C0]  __sys_sendto+0x3bd/0x520
[  725.687739][    C0]  ? __pfx___sys_sendto+0x10/0x10
[  725.687757][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.687791][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.687816][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  725.687841][    C0]  ? clockevents_program_event+0x24d/0x360
[  725.687898][    C0]  __x64_sys_sendto+0xde/0x100
[  725.687920][    C0]  do_syscall_64+0xfa/0xfa0
[  725.687956][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.687977][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  725.688004][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.688027][    C0] RIP: 0033:0x7f12a6440407
[  725.688046][    C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  725.688066][    C0] RSP: 002b:00007ffcc769b2d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[  725.688088][    C0] RAX: ffffffffffffffda RBX: 00007f12a62f0c80 RCX: 00007f12a6440407
[  725.688105][    C0] RDX: 0000000000000058 RSI: 00007ffcc769b410 RDI: 0000000000000003
[  725.688119][    C0] RBP: 00007ffcc769b840 R08: 0000000000000000 R09: 0000000000000000
[  725.688134][    C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffcc769b858
[  725.688149][    C0] R13: 00007ffcc769b410 R14: 000000000000003d R15: 00007ffcc769b410
[  725.688177][    C0]  </TASK>